last executing test programs: 41.088761683s ago: executing program 2 (id=10530): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x104, 0x1f, 0x301, 0x0, 0x0, "", [@nested={0xf2, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic="f400a489943cf2", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc06fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a006d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x104}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x98}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), &(0x7f0000000600)=0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe4a, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf2501000000180001801400020076657468305f6d616376746170000000223359b1c46f30644898d86356a23a255d1c"], 0x2c}, 0x1, 0x0, 0x0, 0x4e805}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080001400000000108000240378b5ec30900010073797a300000000050000000060a010400000200000000000100000008000b40000000000900010073797a300000000028000480240001800a0001007175657565000000140002800600034000010000060001400017000014000000110001"], 0xd8}}, 0x0) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r6, &(0x7f0000000480)={&(0x7f0000000200)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x43}, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1400"/24], 0x18}, 0x40) mmap(&(0x7f000039f000/0x1000)=nil, 0x1000, 0x300000a, 0x4010, r2, 0x9cc21000) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xffffffffffffff15, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x4}, 0x1, 0x0, 0x0, 0xc004}, 0x24000004) (async) r8 = openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000080), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendfile(r8, r8, &(0x7f00000000c0)=0x4, 0x12) syz_emit_ethernet(0x3e, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004700003000000000070690780a0101026401010207080476bc4b4c9e00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) r9 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="cd86a8e58245ba6aaecd8fe257f2c2ffbf13d2630d10891cf0c8217c513384b8536012741f439818fa067448222aaea07d32f28b9996b4eecdd89a758e65e16199eff18b7b8732f6a1275b645df31f0e792ca8d0106dd3cf61ae3c1b470de91fa052ff09498a392a89fdd28053cf1f5b807e57ad37568fbdca440c8b3765a299736605cd0f5849d78926973e1f69028c65c2d268", 0x94}], 0x1, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0300000000000000"], 0x24}}, 0x20000800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0x27}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x40080) (async) syz_emit_ethernet(0x15a, &(0x7f0000000a40)=ANY=[@ANYBLOB="ff5300ffffff2059249b379086dd600093bc03724b01000124110000000000000000000000000000000000000000000000000000000000000000016c0d000000000000c2040000000c0401ce06602740c5b02439e074b3f69410bbcf30f3c6b2d9d8ab7d989a7f2cf010d99f75458f2a6bbc29c5badb200b81419573e8072340982b5987afdc6afbf69e7dd1fa981791ff4367293a0d14bf33a832046d953b8db4f3ba977555b70dd9267725937a00000000001d0005416700000032000400013008003a06020a00000000ff020000000000000000000000000001fe880000000000000000000000000001fc020000000000000000000000000001fffe4e220064907802000000000000000200000075462d59cf0d72118137e1d8c01d4641aa2936006171375e0c0d70a00038f8cb85bf05267ec51cdf03bc75bb0000e900850dc4f62eee203833d9c122aabe7075f071ffd6f854a9c51535886ee02e0af93144df8a0abf26d34a79bc6438b43f0e41593346df81b2f4478b2c7d01a111db90119642d455906edfaf97f8207980e5210c4339ac36c6e80947354c329dc8b71e96d8f447f11add88cfc9bae7e29340061d4c774cb4bd411656f74c5ee5ea8c415d3dc8"], 0x0) (async) recvmmsg(r5, &(0x7f000000a040)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000003400)=""/147, 0x93}], 0x1}}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1}, 0x6}], 0x2, 0x0, 0x0) 38.709044011s ago: executing program 2 (id=10533): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socketpair(0x14, 0x8000a, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000080)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000880}, 0x41) 34.003416991s ago: executing program 2 (id=10539): r0 = socket$inet(0x2, 0x4, 0x7fffffff) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200), 0x0) shutdown(r1, 0x1) unshare(0x68040200) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x6}, {0x4, 0x0, 0x3, 0xa159, 0xffe, 0x7}, 0x3, 0x6, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x1000008, 0x1003, 0x0, 0x8ba, 0xa3, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0xa, 0x4, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb97, 0x7, 0x0, 0xffffffff, 0x200, 0x23, 0x3, 0x7c, 0xffffeffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0x5, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x7fffffff, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x9e, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x1, 0x203, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x6, 0x5, 0x6cdf13a3, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x2, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9486, 0x80, 0x2, 0x7ffffffc, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x5, 0x7, 0x1, 0x2, 0x8, 0x6, 0x0, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0x3, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x3d, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0xfffd, 0xcbf, 0x4, 0x101, 0x9, 0xfffffffd, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0x8, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0x11, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0x2, 0x8dc3, 0x20000005, 0x5, 0x7, 0x2, 0xfffff801, 0x0, 0x5, 0x2, 0x7, 0x7, 0x7f, 0x7, 0x2, 0xffffffff, 0xffffffff, 0xdfed, 0xb, 0x77, 0x105, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x7, 0x400, 0xffffffff, 0x1, 0x800, 0x6000, 0xfe000000, 0x7]}]}}]}, 0x45c}}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f00000000c0)={0x1, 'syz_tun\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xff12}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b95bec00c600000000001b0000", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4001) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0xa}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, 0x0, &(0x7f00000001c0)=r9}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'macvtap0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xb, "09cabb20fd22eff403dd5b"}}) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) 31.969122224s ago: executing program 0 (id=10543): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000140), 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}}], 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000002c0)='freezer.parent_freezing\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000280)={0xb, 0x2, 0x4, 0x1}, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="d75b6d4e6d7c69d9acb60fe7f538b818c7b86ab92a721844d14c6e8174ce9f02d91ed742390f6f1475fdd26538ff4fcd708a3306df480e72793da859a96a6811a0ea16ed5b32354158e711db324e3745342637c447351385434257"], 0x20, 0x4006004}, 0xc0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000b, 0x42072, 0xffffffffffffffff, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 27.027369723s ago: executing program 0 (id=10547): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc00000000010103000000000000000102000005100005800a000100512e393331000000c0000e802c000180140100000000000000000000000000031400040000000000000000000000ffffac14140a06000340000100000c000280050001003a00000006000340000300002c0001801400030000000000000000000000ffff000000001400040000000000000000000000ffffac1414bb14000180080001000a010102080002007f000001060003400004000006002a1d8c64ae087005028005000100010000000c00028005000100880000000c0002800500010088000000060012400004000008001a40000000af0600124000020000"], 0xfc}, 0x1, 0x0, 0x0, 0x8010}, 0x40011) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000140)) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000002004e24e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011000000000000000000000000000000000000000000000001000000000000000000000000000021640c01cb0000000000000000000000000000000000000000e8a2b0f7c638"], 0x1fffc) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000104010100000000000000000100000205000100030000005da91049e8c13ae6f2e13876a53782cf63315ff247109d5402774af4561fd95ec6ebbe44810747146b0d29302e4fbe38cd42ab3384b5023feb9a276a60958810adbe88b40f7c5e0621209ec31ffa1dd06dcba80f000000703276891f810000008f7124c80aab2460bfd86dd2f6a15623cc7b843cd77572985472007b63499a02c4bfef59c1668d63f4860daeed3bc747929f339b9575fccb4ef02ec059c8f290"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0017"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 25.829690356s ago: executing program 0 (id=10551): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x4}, 0x1c, 0x0}}], 0x1, 0x4000810) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x1800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) 25.163010536s ago: executing program 0 (id=10554): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xfffffffc) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r6) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000006c0)={'wpan0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={0x24, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4020401}, 0x0) (async) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000d80)=""/4096, &(0x7f0000001d80)=0x1000) (async, rerun: 32) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (rerun: 32) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x1}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x28, 0x0, 0x1, 0x10001}, 0x28) (rerun: 32) 24.641592591s ago: executing program 2 (id=10556): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delneigh={0x44, 0x1a, 0x1, 0x70bd28, 0xfffffffd, {0xa, 0x0, 0x0, 0x0, 0x83, 0x90}, [@NDA_CACHEINFO={0x14, 0x3, {0x2, 0x0, 0xb724}}, @NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg(r2, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)="01", 0x1}, {&(0x7f00000001c0)="708d9836e1fbf4725097e1c8275490793fbf289ac05060b3526342103ea1511b1878b032df154b292278e623d0607d3507aeb15ed88dcceec9a47792a9d5bd079764acb53968dafa7dc5417f581f1cdffceee09c03e9d5ff1a78b9ca00db6007841d679240b907375a6d6bfdffc29c5254aec740992bcc5ebb8ebc3cc8c6dc8fbd822e17922cba99e16eb21a17d9b10a96d9565399129557035e19465a5f68", 0x9f}], 0x2}}], 0x1, 0x8002) r3 = epoll_create(0xb4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x2000001d}) 22.885994665s ago: executing program 4 (id=10557): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffe}, 0x50) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fddbdf25010000000e0001406e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x24000015}, 0x80) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x258, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x258, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x2ba810b9, 0x39, 0x0, 0x0, 0x80000000, 0x3, 0x7}, {0x3}}}, @common=@inet=@dscp={{0x28}, {0x2, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x1, 0x5, 0xfffffffa, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0x3, 0x4, 0x2c7, 0x80000001, 0x1, 0x2, 0x100]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x400) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a001b0c2bbd7000fbdb8ae0fabf000000000014080001"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x24000804) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@mpls_getnetconf={0x1c, 0x52, 0x1, 0x0, 0x0, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8}]}, 0x1c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000580)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 20.152416894s ago: executing program 2 (id=10560): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000180), 0x19) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x2, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x209, 0x4) listen(r1, 0x800) r3 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0x7, @loopback, 0x8}, @in6={0xa, 0x4e22, 0x0, @private2, 0x441}, @in6={0xa, 0x4e24, 0x26a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000}, @in6={0xa, 0x4e20, 0x6, @local, 0x4}, @in6={0xa, 0x4e20, 0x227a, @dev={0xfe, 0x80, '\x00', 0x13}, 0xffffffff}], 0x9c) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e4f5256b1e4344d50a944ff67347cff6127e6ef12", 0x17}], 0x1}], 0x1, 0x40800) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) listen(r0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) shutdown(r5, 0x1) 19.986522723s ago: executing program 0 (id=10561): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001800290200004e53e6cb4e268422c9b4f300000000", @ANYRES32=0x0, @ANYBLOB="a1fcd700"], 0x28}}, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r2 = getpid() write$cgroup_pid(r1, &(0x7f0000000180)=r2, 0x12) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000003900)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0xb, 0xfffff034}, {0x20, 0x81, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) r7 = getpid() sendmmsg$unix(r5, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}], 0x38, 0x8001}}], 0x2, 0x80) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r10, &(0x7f00000000c0), 0x12) close(r10) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f0000000280)={r10, 0x2, 0xb, 0x1}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000160629987e3c8001d000"/25], 0x14}}, 0x0) recvmmsg$unix(r11, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r11, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x17, 0x800, 0x70bd2d, 0x25dfdbfc, {0x16}, [@typed={0x8, 0xf6, 0x0, 0x0, @uid=r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x1) sendmsg$nl_route(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_delroute={0x2c, 0x19, 0x400, 0x70bd2d, 0x25dfdbfe, {0xa, 0x14, 0x80, 0x9, 0xfc, 0x4, 0xfd, 0x0, 0x2400}, [@RTA_EXPIRES={0x8, 0x17, 0xf5ed}, @RTA_UID={0x8, 0x19, r12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44081) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003c80)={0x0, 0x0, 0x0}, &(0x7f0000003cc0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003d00)={0x0}, &(0x7f0000003d40)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003d80)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000003e80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, &(0x7f0000003f00)=0xc) sendmsg$netlink(r0, &(0x7f0000003fc0)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003c00)=[{&(0x7f00000003c0)={0x2504, 0x10, 0x400, 0x70bd28, 0x25dfdbff, "", [@typed={0x8, 0xc7, 0x0, 0x0, @uid}, @nested={0x18, 0x136, 0x0, 0x1, [@typed={0x8, 0x2c, 0x0, 0x0, @u32=0x9}, @typed={0xa, 0x8c, 0x0, 0x0, @str='\xe3/,(+\x00'}]}, @nested={0x107e, 0x96, 0x0, 0x1, [@nested={0x4, 0x136}, @typed={0x8, 0x36, 0x0, 0x0, @ipv4=@remote}, @generic="457522f2043068281cb883db9b4ae341e7816c09d0b7ea62ea96f3a9b21b5b3e45045839c4bf3eeb1172ccff971727617100bbe8d5eb9782b2196a0545fa6fd0ac2c7025bf0a624e598a3580505099e3a94ae4e1971d8172fef5036dacd3f9f0e9a8f625545ddec269bf52c0455a", @generic="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"]}, @nested={0x25e, 0xea, 0x0, 0x1, [@nested={0x4, 0xf2}, @generic="6dfef2df14c13578ee9b37d73670e31d5ccb533fd4f4517eab61523fdc19f2095e78f080cef0d703834d3ea292c8aceaf74d2b49eaf4b68c89d0fedc2960a53ff85f9e176e4ec6af0170300d8b0eeb3ee501eeb5960d173c8c8dbd820863930a65caa74b5f70a8fee57a8beb0790f2", @generic="b350b5f4c0ba8ac3ccfd4e036c721693ef9d1bfa76ede036419d43af3840d2036e977bb06d4bfa4bb1c76f23e082aa564a20e9302565949bd1f14d775030ef7255d9bde613f2976d829109e910fcf2c4c59fe5f6e595b582f2f272ef35dd494c515e68aa0b8e557cce211ac4bebd6d5cff79f92b39df18ca694e8ca6b7cecc6781f6fd486f4b4004da93a733699aa2f732", @nested={0x4, 0x80}, @generic="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", @generic="c5798636a042a4977efe4fe35341925ccf0bd900a6fff6fe4bc1594a38f8e69698a15d8f41a2fc9aefe8c8cfd8b4a19fc2ba8a1a9a0c751ef2a2d1", @typed={0x8, 0xf7, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x4, 0xda}, @typed={0x8, 0x101, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x46, 0x0, 0x0, @u32=0xffff}]}, @nested={0x114d, 0xb6, 0x0, 0x1, [@typed={0x5, 0x122, 0x0, 0x0, @str='\x00'}, @generic="ec16af1cc9d497152df58394d084abe0bccbd9e99d962a65a68cc49f1fae6e90ef1b02eef267a2c4bbcf500b2f53bafb8435c0ba1657bc3a552e4d18ac6ca767b154ea80714c9e1d641500606854aac35db4bce32b184bfafe8b5a57549cd9c9ab3929196c24de0a6bd4d2da6ff4f87ee2d14800d7d3b81d38b83e4cd68539892c", @nested={0x4, 0x120}, @nested={0x4, 0x1c}, @nested={0x4, 0x26}, @generic="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", @nested={0x4, 0x134}, @nested={0x4, 0xab}, @typed={0xac, 0xaf, 0x0, 0x0, @binary="487bf68adfb49df85885117daadaa90c7b30c321366735d7b1a5be0f73685021c0cccfe83482e18a9a1e10c23b75fd5b603dd9d87002652537cc079a371d74533cc233613aed30b30806a86bc892ee9f44c0fc99a11a5c985695b47c5611c39d78bf2ab7c5bf9a0d8bcb9761704b1b2a378d2faae6df36b9808a1cd71eb0fbd1af12df9ed34265663301d11e48075d6deb527dee0af385916251415da78a13d88bbf171646aadd35"}]}, @typed={0x8, 0x7, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x64, 0xf4, 0x0, 0x1, [@nested={0x4, 0x15}, @typed={0x4, 0x76}, @generic, @typed={0x8, 0x5c, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0x119}, @generic="c2f37bc047cb38c2a5ecc8b680ecebcf6d61740a013fbd7846bdd29d09245120a3f6f256f49b5e73ca681972256ed7f04e931cece524acbd2c649e2f95fd8165902186713b3672ef9f0722f4"]}, @generic="5f8536e7f8a50a98ad90c283a482107bee27ef6d5142f9a97e592e84748253d64a329b4b7ef90f95dc7c0bb578472c574876cee50cdd"]}, 0x2504}, {&(0x7f0000002900)={0x20, 0x29, 0x100, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x8, 0x8, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0xd8, 0x0, 0x0, @fd=r0}]}, 0x20}, {&(0x7f00000029c0)={0x578, 0x31, 0x6d19dfbb0b1231ee, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x15e, 0x0, 0x0, @pid}, @nested={0x80, 0x83, 0x0, 0x1, [@nested={0x4, 0x1e}, @generic="a44962d0f882483b16bd82ae5d8f5203e583a52c97b2308fe94161858bb358a15de9a999c86bc6047b68a77d796133d49e2c0057e29bc400d7c76ee9830d47c0349c5ef66fed70221e0c558523fa129d253ae530a7ebfc7d8f6c0923b473569d3eb467a447e323fea11310526d12cf7aee51446a88592bbc"]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}, @typed={0xc, 0xbc, 0x0, 0x0, @u64=0x4}, @generic, @generic="911cbdb668133df6374c8cc0be77296c78347876896fba305282dfd4b516265fd40b8160280fdb8bad79196a3be01a2d1998f1bcf9742f0e7d0f0cffd979fc1293417c972e73be27627e13c60e2f0193f8cb9fba0ffc7636f60d04dd7d0edb95e3108d67f6615e6262cdf7b5b72a970a52948fad3c26946d1b1d355b470d701de15fc9661d9a7c9a53b8468b1334267f176bb04d5ddef3f8981ab0", @nested={0x188, 0x127, 0x0, 0x1, [@nested={0x4, 0x8d}, @generic="3c5ae1b2424dda7afe88f5a747a5b1ec3b3a07b3c7f5527c7aee5e575d969ed7bf5d14de786ce0373d52de9fd887743e5069f297", @generic="9fd858d18374a70e96e40ef5511b9acb747b104f0d3d3443734a461c4356ff39b9386a2611e6c1c380890ef962bdbc4f65d10143124e749e1380f770980496ac5e38581ce16e6fd5a3f08d3ec889235919fdecdebf304cc887cb07a3d9d9f635dd4f7b39d3f1bc36f414db58cd984715aa7d6039b4e99bffe389", @generic="03deeb9335eb59f603b05dc3ae806b645ddcaa1df7f7311101c995db8c32be029c460c2fa332694fae2c07163cfbc89d71e6d58e065e75618213e9c5adf67bc59fa1f82e233b0744864ebc2d2a0b38e31286016f31c42b5158d4ba6b4bf9dd8f10d2a0dd5f822d223ef9d640d67c9b8d3e7b4df4da6397f720c85da35328049257da9fb4d66a533681734b751617d7dc1b00a23bd374b7c8f3611730b4f0647a7415ac699ab6f580b52830c002b6503ff8c956d7f7ecd1ca59c9e5c2219c1f4bcfcf8cca542245ae9ba7a05a48ea", @nested={0x4, 0xc6}]}, @typed={0x8, 0x9f, 0x0, 0x0, @ipv4=@local}, @nested={0x29e, 0x113, 0x0, 0x1, [@generic="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", @nested={0x4, 0xb5}, @generic="5d1c481bf5bb8ae466a761cece32036202a4dfab52133666a3af4f26d7bf75506fc9abeb64acb4982384cc71ef2b7aac6c629f1a6b492453b166f2089807a12d8e3c5e80e446f7a494684f9d229736835e053807cfda7ee2498fc87712f45e6701938bf6d0e729e4e864974d93382e0dc90084ca73f0914cf056f9f08df186f57dd88abcb80a5b9309a2f63eca4736949b709188fffd2139f1f54f1ad161fce1036c76a699831f188b626f17fe27833d3a1be64d0cbb80bee130a62cddf58fe14d6826b378692cf02d1eb29c35fca7ebe89797a992823f1f345d4d64f7be9bf4cc24c8d3735764dd346f6a44918184fc089b189d7a2a9a82be", @generic="80fbbc14f2e51968d1fdd430128093055a1781e2b0ad5b41e44b9381d13871ba97b3f525ff22f0af7adedd8b89e95eeacd7719be3af6f68ffad6307ec3cdc14a3a0c9d244f0d183e3c4bc4e896a5197075481ea1325332e1508f4278f47b75bf20fc8be1004d9bfcd8647cea1f22f2e9d9e26cb87ae8608a4b31b292cfebe4ec244f1752e5594774d5c9b5197fc9a2380aef781e7a24c69cd60d238a0fb508588038"]}]}, 0x578}, {&(0x7f0000002fc0)={0x20, 0x36, 0x300, 0x70bd2c, 0x25dfdbff, "", [@nested={0x10, 0x13e, 0x0, 0x1, [@typed={0x8, 0x77, 0x0, 0x0, @uid}, @nested={0x4, 0x8c}]}]}, 0x20}, {&(0x7f0000003000)={0x398, 0x13, 0x800, 0x70bd25, 0x25dfdbfc, "", [@generic="174e47aa968be2b762a8c5c06fbdb96c6f837cec1ac5918c2a1c58d71567d3b23958155c7bbaa85f82a8f9be4b0794fab368ddfabc707eeea9200e1a72eca5d7990e1dc343c969a9d2a750fae6d7003055427bbd7a6f289dda74a920554943f2235f8e85e0f8ed0f0eca20996f48caa84e32dc8126d4c53700c9d5179b5cd3189ffc83b48474b3bdfa1c667f72d13b3fac1d065bd9a4aae2cdb2b7f35f532bf0b6bb29e93711c630da47300616f67e38f417ec0f29ec2f5a672d68905123d982b06b3a18e372", @nested={0x15d, 0xa5, 0x0, 0x1, [@typed={0x8, 0x136, 0x0, 0x0, @ipv4=@local}, @generic="2237bf7088aebc5dff08b35de7ec25980ccff81b7ab6d6e380332277db1ffc1ee3ea82e5902e8d2fc529d07dbf7b9356f99cb0d049044ce352d5e4720bf2b5135a6b1484c35714cb4a51b6247a5f914d2d2439254e2dffc45fdd69299098157eaf70781259eba9892cdea37e156da093ad0102ddac9b667d03b9d18eec3117b237f32919bc5474305c45e19210e1f7e7495fb0768f73ccec995309f7591541c20d6cd378b6cf9b687e8da3d8e696e0b5c34b90cdc3b0fe82e2b30b99e246845d4d4f5a8dbaf53a2546a633691f73277b97bc768533ea2badc56652f900d060a5ac92d56fb438600df9fc53743e4828990250", @generic="48eed26d2c6e9fd9cb706b7bb6e04990ffa152c50bff11e67cbf03d62241b7c6e412a3d54d871fa17d9c1014aac6578eb7fe560e3a0968c15d7d6c3641923312518f42d56cfac47f95c2d30062098bf4286d8c49ea93a0", @typed={0x8, 0x15d, 0x0, 0x0, @ipv4=@empty}]}, @nested={0x125, 0x135, 0x0, 0x1, [@typed={0x42, 0x12e, 0x0, 0x0, @binary="c5e5aeb39ae408f3f1280371411cdc84eedb57978ebf64fe0e43c4298e4758a09a2f240eeeaa487e9089345b4965c31a4ffca5da6a1eeef575e6589f108b"}, @nested={0x4, 0x132}, @typed={0x4, 0xd3}, @generic, @nested={0x4, 0x109}, @nested={0x4, 0x17}, @generic="5fd69ac3a91e92812db8a935eb382ae21098af4856e7251cb7d5081314420b39ec9f40da19778d72d68f85f373cd5409b96b533cd6327b2cc059537ef6bf5ad3db637e9dda71b3fc23d4b286e81e2cbe9e8b2d41430ee8a74f2404582fa43ce7d10dbb4573f2fd908257331f236368d651788f279cbba38922aaf372005d1d323db506bd0ead982cd2ed720c50f416daa6df7da9fb4921b0679443c87237b91bf98130bdb0327d8b8c28e1930b4850e427373581fd6cfb0543a8d246be13c8e13f59d6a9f611487336ca28981e"]}, @generic="a9a1d2781a1919832ea02da49a191615fd1d51ddf0d5633cf69cea865fa36b8514b0c5d3ba0223861d2a872cf4b0f8", @nested={0x8, 0xd6, 0x0, 0x1, [@nested={0x4, 0x4a}]}]}, 0x398}, {&(0x7f0000003540)={0x388, 0x9, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0xbb, 0x0, 0x0, @pid}, @typed={0x8, 0x14, 0x0, 0x0, @uid}, @nested={0xbf, 0x51, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @ipv4=@loopback}, @typed={0x14, 0x43, 0x0, 0x0, @ipv6=@private0}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x4, 0x160}, @generic="c89bfd024fcf357106ecd164e99d20001042eb3453eb1a6c8c43392dc536bdf3da815ae767b827ceb3fe8c229256a80c5b33f1820c2d35886423a0f4ab2d4b8931b3deb54af4f7c8f0cece9cbb106150f95dd078f3f586bf25b11ad9b416eae8e7e28379af0c3229989d13f18cc94fb817663d7618de31", @nested={0x4, 0x15e}, @nested={0x4, 0x15}, @typed={0x8, 0x101, 0x0, 0x0, @u32=0x5}]}, @nested={0xdc, 0xad, 0x0, 0x1, [@generic="28c2c15c205c8ff8c80f43c3918f523bfe09954bfffe44514443f6bf5c00157fe2df289f353d63cd521f1f586797df770ecd38fb31f50d1ce517a5b064483765a1db1150e4e90f0fcf8847f4d63a959bde33d20374b87d14b537c837406e696ee2b306f038b8a5d9f2df6478ed2f811cdbd606cd5199cc7fbd08de98932e43a0dd9d71837ca4091720bb127c70c4dbad4f293d18e424ff97b95e69f72fe845905482beb2b04ab15037a09a378de2649d50ba26a254e2c1672b51e8bdcfcd2e06666c18908456f2c9264cacc73d419526e366cd15838e5408"]}, @nested={0x1cb, 0xa5, 0x0, 0x1, [@typed={0x8, 0x7b, 0x0, 0x0, @pid}, @typed={0x8, 0xbd, 0x0, 0x0, @fd=r0}, @generic="d611270f2bc50abb0501392caf85aa452b4872397051e788b333b9b29293dba87cc16697b0f5d91d04ca9199f0fd685f5a38da2fe6ef64ef0d3983651467b99392c0d8ad2b1644e8ae280c82eb2de7fb5ee3856c727ee6a1724165e0c55c7971d4a8d494eee45cc8f2ae30931caeb26fca500eafa31c778a835c22e11a6e26098a1a13e1aa276547904dea2b78f9960a08beb9ec4604be475e3ff0bd99aeba86", @generic="6e7adaff4665cd2998fc740a66f672b84fed28b7620c8c2daf488e207fc69fdeb2f62fb6302070a3ee8ac6b37c02e68581b6a43c20aad71f2506c8ba10bb882eb637807c70785117e46000484862ecbe5fa8fa6d31b46da52a86076a0f0e86ab23ace5374f51eb891692e8018ac0410399e19abed878e9eed485c7ce247c8229f446fa925762f6a5ff1275de04e94880c6b806d168760446cb1bc969487e64eb645cf67f180ca97bd26b6c522bf954433146eb5111fe0ab6f3431a47c0fb6a594390c148c625dd144e1579eed65559036adac790b3e66284e8872e02de9bc4396f96649282", @typed={0xc, 0xaa, 0x0, 0x0, @u64=0xc}, @typed={0xc, 0xfc, 0x0, 0x0, @u64=0x200000000000000}, @generic="38e1bac09d752cc4882ea8c747878521bd28d343b1f5", @nested={0x4, 0xe0}]}]}, 0x388}, {&(0x7f0000003940)={0x1f4, 0x40, 0x0, 0x70bd2a, 0x25dfdbfc, "", [@nested={0xff, 0xb, 0x0, 0x1, [@nested={0x4, 0x64}, @generic="97eddd419500569110d01a56c55386a4e61a7e960f17326c125a80a8a2f5b79c78eef8878ce93ef26f00ff220c25861fd56ce225b80fa72a48d2839fe80a86fad3826a8f18b74efaecc0183a2a56d3caff50585fb3960d293d21646ff651a7571237376679ed6072086da3c9957849fcfade8fa7e2f0226a98bbf0b45fb3e4947e77fb75e5f08e5c1776f4205ffa53a0bc8b3e3f5383b72c749b337cc38aa650b159", @typed={0x8, 0x81, 0x0, 0x0, @fd=r0}, @generic="e38faab6639432641020502056", @nested={0x4, 0x162}, @typed={0x8, 0xe4, 0x0, 0x0, @pid=r2}, @typed={0x14, 0x8a, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x4, 0x95}, @typed={0x14, 0x135, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x127, 0x0, 0x0, @u32=0x7fffffff}]}, @nested={0x2f, 0x1e, 0x0, 0x1, [@nested={0x4, 0x136}, @generic="6cc6148e3d6e547d977d059754e8c600e41d9e573a3271f4a236d7b1d137b224659040", @nested={0x4, 0xd5}]}, @typed={0x8, 0x150, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x73, 0x0, 0x0, @fd=r0}, @generic="bbf3fa51aaa5fdb56ac77444fd0e24d8360f1038c8e6c0fb73ff975f13473913f7e9061bf463acac953463b5f8aa7a4a37adaf6db59509341c16a874ea20208ce9b8e04ab06e4eb9b98b816d5141d75337912d7cb0f86417e4247891ff6a36c87c7077659f22327462cf7e2ca089973f11dc2ecc9c974ee3c89f0d2a31359bae3b97b5485b9d245bffc02f2ecb7cf294", @typed={0x8, 0x9e, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0xb, 0xd6, 0x0, 0x0, @str=')(.@+\\\x00'}]}, 0x1f4}, {&(0x7f0000003b40)={0x98, 0x35, 0x800, 0x70bd2c, 0x25dfdbfe, "", [@nested={0xc, 0xe0, 0x0, 0x1, [@nested={0x4, 0xd4}, @typed={0x4, 0x148}]}, @typed={0x7b, 0x4e, 0x0, 0x0, @binary="773e2f158a8f07dae4c0a6fbb612cfb14e0f8ed69526ffe900efb8dde485de8e512aae9325d7aec9c4d539a2b44978e3f8dde8580938e8fa9c32526bf59288731fd5711a9db3c4a7baed284b5f2c09d9e4cb30d7fe4ddb5aedb99e75ccd498aa5aaea836f2bf4d7fd87dde03a896fe3623eee6dadee2f1"}]}, 0x98}], 0x8, &(0x7f0000003f40)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r4]}}, @cred={{0x1c, 0x1, 0x2, {r7, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}], 0x68, 0x24000094}, 0x94) 19.722855458s ago: executing program 4 (id=10563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) (async) syz_emit_ethernet(0x82, &(0x7f0000000040)={@local, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x40, 0x0, [{0x0, 0x10, "9e0cec69d2dae06de9173b3f60c8"}, {0x0, 0x2}, {0x0, 0xb, "3033a70f1c0f9d1bfd"}, {0x0, 0xa, "3aba454f6dc54cc6"}, {0x0, 0x11, "debb67ffffff00000000aee5f2e64d"}, {0x0, 0x2}]}]}}}}}}}, 0x0) 18.894149487s ago: executing program 0 (id=10565): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={'ipvlan1\x00', {0x2, 0x4e20, @broadcast}}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000000)={r3}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="20020000300001002dbd70000000000007"], 0x220}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'caif0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x200}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) recvmsg(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) r10 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000e6a000/0x1000)=nil, 0x1000, 0x400000d, 0x12, r10, 0x180000000) sendmmsg$inet6(r5, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0xb00}], 0x1, 0x0) 18.061762527s ago: executing program 4 (id=10566): syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) accept(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="34100008", @ANYRES16=r2, @ANYBLOB="010029bd7000feffffff0200000008000300", @ANYRES32=r1, @ANYBLOB="0800a00076090000080026006c09000008009f0005000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffaf}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) close(0x3) close(0x4) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000180)='illinois', 0x8) r7 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1080, 0xc, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x9, 0x4, 0x2, 0x762, 0x3, 0x80, 0x3, 0x2b12, 0x100, 0x6, 0x1c04, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x8, 0x79b, 0x2, 0x1, 0x7d, 0x8, 0x2, 0x7, 0xd, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x9, 0xb, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0xfffffffe, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x8005, 0xffffffff, 0xb, 0x2, 0xd9a, 0xb, 0x2a2, 0xfffffffc, 0x2, 0x6, 0x5, 0x1, 0x0, 0x0, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r8, &(0x7f0000000040)={0x1a, 0x309, 0x0, 0x0, 0xe, 0x2a, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) unshare(0x22020600) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 17.965319731s ago: executing program 1 (id=10567): syz_emit_ethernet(0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000a86dd6c0000000019840020010000000000000000000000000000fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) (async) socket$alg(0x26, 0x5, 0x0) 15.432393747s ago: executing program 1 (id=10568): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="91109a000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000300e00000020000000000000000000000000000000000000000000000000000003bbcd68600000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff0f00000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200200000000000000fffffffffffffffffe"], 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}}, 0x2c000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x40, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb08004500001400000000011700000102030405060708"]}, 0x40}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c010000190008000000000001000000fe8800001e00b1ad25891d59d1910101ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4000500ac1414aa0000000000000000000000000000000033000000000000000a01010000000000000000000000000000000000010000000500000000000000400000007f000001000000000000000000000000000000006c00000000000000fc000000000000000000000000000001000000000000000081000000000000000000000000000000000000000000000000000000000004d66c0000000a000000e00000010000000000000000000000000135000005"], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4001) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff0000000000000000100000000000000005000000000000000000000000200000000000000000000000000000000000000100020200000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r6 = socket$kcm(0xf, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x3, {{@in6=@empty, @in6=@local, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x73}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001}, {}, 0x0, 0x200}, [@tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x4d3, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3501, 0x2, 0x0, 0x73, 0x8000, 0x4, 0x7}, {{@in=@multicast2, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff2000ffffff84000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="64010000210001002dbd7000fedbdf25e0000001000000000000000000000000640101000000000000000000000000004e228001000700000a0080803b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b36b6e0001000000e8001100000000000000000000000000000000007f000001000000000000000000000000e0000001000000000000000000000000fc0000000000000000000000000000002b030000ff34000002000a005f5e5fa3df9fec169726a09006c50f5f7f000001000000000000000000000000ac141419000000000000000000000000e000000100000000005fbae2a9000000ac141442000000000000000000000000ff0300000135000005000200ac1414bb000000000000000000000000e0000001000000000000000000000000e00000020000000000000000e5000000fe8000000000000000000000000000aa2b000000ff34000002000a002c001300fe8000000000000000000000000000bbac1414aa0001000000000000000000000000000002000000"], 0x164}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) 13.872433023s ago: executing program 3 (id=10569): r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000130001"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) 7.619379495s ago: executing program 1 (id=10570): unshare(0x20000400) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) socket(0x2, 0xa, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x44081) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x20000400) (async) socket(0x10, 0x803, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket(0x2, 0xa, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r2, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) (async) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) (async) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$nl_route_sched(r0, 0x0, 0x44081) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 7.472001556s ago: executing program 3 (id=10571): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000340)=0x1, 0x12) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 7.14774447s ago: executing program 4 (id=10572): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r0], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x1000009) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000e80)={0x0, 0x2710}, 0x10) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008080}, 0x880) r7 = socket(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x440600, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xd}, {0x0, 0xc}, {0xffff, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40848e1}, 0x4890) r14 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r14, &(0x7f0000000340)="ba07646c72007ced7e1820e375ca962807a1dba93a25d291", 0x18, 0x40, &(0x7f00000000c0)={0x11, 0x8100, r11, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6.206225643s ago: executing program 2 (id=10573): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x33ae, 0x8001, 0x1007fc, 0xffff8080, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x5, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0xe94, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x6, 0x1001, 0xf8, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x7, 0x4, 0x401, 0x4, 0x9, 0x0, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x100004, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x6, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0xb, 0x196, 0x7ff, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0xb, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x7ff, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0xc, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x7, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x4, 0x84d3, 0xffdffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r11, &(0x7f00000000c0)={0x1d, r12}, 0x18) ioctl$AUTOFS_IOC_PROTOSUBVER(r11, 0x80049367, &(0x7f00000002c0)) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100280000000000000002000000200001800d"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) connect$can_j1939(r11, &(0x7f0000000140)={0x1d, r12}, 0x18) writev(r11, &(0x7f0000002840)=[{&(0x7f0000000200)="b4000006004f706a90", 0x9}], 0x1) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r13, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000280)={r13, &(0x7f0000000300)='Dgroup.max.\x05\x00\x00\x00\x00\x00\x00\x00\xfc\xd6\xea\x9b\x7f\xd2\xba\xef\x03\xa3*\x14\xfb\xf6RR\xdf&\x15\xe2\x05L\xe9o', 0x800a00, &(0x7f0000000180)={@_ha_fsid={[0x6, 0x1ff]}, {0x8, 0x6, 0x8, 0x10}}, 0x0, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000240)=0x6}) 5.565412848s ago: executing program 3 (id=10574): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@exit]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 5.524530719s ago: executing program 1 (id=10575): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008000000000000", @ANYRES32, @ANYBLOB="420000aa94fb7f00000000000000000000810000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10049, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) 4.729368257s ago: executing program 3 (id=10576): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000005c0)="e0b900000078da50b9155257d7ad", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.634030357s ago: executing program 32 (id=10565): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={'ipvlan1\x00', {0x2, 0x4e20, @broadcast}}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000000)={r3}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="20020000300001002dbd70000000000007"], 0x220}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'caif0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x200}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) recvmsg(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) r10 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000e6a000/0x1000)=nil, 0x1000, 0x400000d, 0x12, r10, 0x180000000) sendmmsg$inet6(r5, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0xb00}], 0x1, 0x0) 2.604929588s ago: executing program 1 (id=10578): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000005000000030000000300000f00000004080000010000800000000000070000000c000000f7ffffff0900000000000004000000000000302e"], 0x0, 0x4d, 0x0, 0x0, 0x100000}, 0x28) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) 2.529936904s ago: executing program 3 (id=10579): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3ff}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[], 0x7c}}, 0x40014) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008040) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000740)={{r1, &(0x7f0000000300)='cbc(blowfish)\x00', 0x2, &(0x7f0000000340)={@align=0xffffffffffffc711, {0x4, 0x7, 0x6}}, 0x8, &(0x7f0000000540), &(0x7f0000000580)=0x8}, 0x1, &(0x7f0000000700)=[{0x2, 0x9, &(0x7f0000000600)='\x00', &(0x7f00000006c0)="0bb4080192ae0ae07a1466b101621ffff82c6848fe7fe9475ac9f25242ca0f90c143", 0x22, 0xa}]}) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) listen(r1, 0x402) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91104e000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0) 1.938083069s ago: executing program 1 (id=10580): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x68, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004008}, 0x40000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x8}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f00000002c0)=r2, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r5, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r6, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x60}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r6, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)={0x2c, r9, 0x1, 0x70bd26, 0x25dfdbfc, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="1c0045801800018014000300810000023e1506000300090006000500"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000", @ANYRES16=r1, @ANYBLOB="000128bd7000fddbdf2572000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 1.774527201s ago: executing program 4 (id=10581): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001d00)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa3, @loopback, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f00000003c0)="cc0bbd3e", 0x4}, {0x0}], 0x2}}], 0x2, 0x804) unshare(0x20000) shutdown(r0, 0x1) 1.502595696s ago: executing program 3 (id=10582): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0), 0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x4, 0x0, 0xc0, 0x1}, {0x200, 0x80, 0x5, 0x6dae}, {0x43b4, 0x4, 0x6, 0x6}, {0x6, 0x7, 0x8, 0x7f}]}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xff, '\x00', 0x0, r2, 0x0, 0x1}, 0x50) 0s ago: executing program 4 (id=10583): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) write$cgroup_pid(r2, &(0x7f0000000180), 0x7) r6 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000001c850000001f000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x653988b496406357, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): : batadv_slave_0 [ 1154.755177][T12553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1154.893117][T32657] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.907721][T32657] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.953733][T32690] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.968712][T32690] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.169394][T32690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.194299][T12873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9245'. [ 1155.205384][T32690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.232647][T12873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9245'. [ 1155.320888][T32685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.342905][T32685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.590840][ T7169] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1155.653451][T12894] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9249'. [ 1155.775791][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9250'. [ 1155.800719][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9250'. [ 1156.110205][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9255'. [ 1156.128381][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9255'. [ 1156.133770][ T7180] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1156.241634][T12919] dvmrp8: entered allmulticast mode [ 1156.265340][T32720] Bluetooth: hci3: command tx timeout [ 1156.296089][T12924] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1156.720161][T12952] tipc: Enabled bearer , priority 0 [ 1156.796401][T12952] syzkaller0: entered promiscuous mode [ 1156.802046][T12952] syzkaller0: entered allmulticast mode [ 1156.829383][T12951] tipc: Resetting bearer [ 1157.039565][T12966] Bluetooth: MGMT ver 1.23 [ 1159.007434][ T4975] udevd[4975]: worker [387] /devices/virtual/block/nbd0 timeout; kill it [ 1159.024984][ T4975] udevd[4975]: seq 44776 '/devices/virtual/block/nbd0' killed [ 1159.040060][ T4975] udevd[4975]: worker [32654] /devices/virtual/block/nbd1 is taking a long time [ 1159.528181][T12951] tipc: Disabling bearer [ 1159.538711][T12963] tipc: Started in network mode [ 1159.544980][T12963] tipc: Node identity 760679fe8791, cluster identity 4711 [ 1159.552736][T12963] tipc: Enabled bearer , priority 0 [ 1159.589420][T12965] syzkaller0: entered promiscuous mode [ 1159.595515][T12965] syzkaller0: entered allmulticast mode [ 1159.602095][T12965] tipc: Resetting bearer [ 1159.677659][T32674] tipc: Resetting bearer [ 1159.688464][T12955] tipc: Resetting bearer [ 1161.388098][ T1606] block nbd0: Possible stuck request ffff888027f00000: control (read@0,1024B). Runtime 270 seconds [ 1161.399591][ T1606] block nbd0: Possible stuck request ffff888027f001c0: control (read@1024,3072B). Runtime 270 seconds [ 1161.644964][T12955] tipc: Disabling bearer [ 1161.655186][T27664] tipc: Node number set to 59 [ 1161.663928][ T7180] tipc: Node number set to 4053236222 [ 1161.992190][T13007] bridge1: entered promiscuous mode [ 1162.001245][T13007] bridge1: entered allmulticast mode [ 1162.019857][T13007] team0: Port device bridge1 added [ 1162.084493][T13010] __nla_validate_parse: 50 callbacks suppressed [ 1162.084509][T13010] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9282'. [ 1162.106608][T32720] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1162.117717][T32720] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1162.131903][T32720] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1162.141035][T32720] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1162.148761][T32720] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1162.201982][T13010] vlan2: entered allmulticast mode [ 1162.233839][T13010] gretap0: entered allmulticast mode [ 1162.332110][T13021] netlink: 296 bytes leftover after parsing attributes in process `syz.0.9284'. [ 1162.373280][T13022] netlink: 'syz.1.9283': attribute type 4 has an invalid length. [ 1162.785730][T13043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9290'. [ 1163.338095][T13072] netlink: 'syz.1.9295': attribute type 142 has an invalid length. [ 1163.438757][T13008] lo speed is unknown, defaulting to 1000 [ 1163.605005][T13090] netlink: 320 bytes leftover after parsing attributes in process `syz.4.9297'. [ 1163.663616][T13090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9297'. [ 1163.724878][T13090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9297'. [ 1163.750391][T13090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9297'. [ 1164.260516][T32720] Bluetooth: hci0: command tx timeout [ 1164.464656][T13095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.472478][T13095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.580481][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1164.585217][ T1631] block nbd1: Possible stuck request ffff888027f3e000: control (read@0,1024B). Runtime 90 seconds [ 1164.596257][T13095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1164.602222][ T1631] block nbd1: Possible stuck request ffff888027f3e1c0: control (read@1024,1024B). Runtime 90 seconds [ 1164.617128][ T1631] block nbd1: Possible stuck request ffff888027f3e380: control (read@2048,1024B). Runtime 90 seconds [ 1164.629743][ T1631] block nbd1: Possible stuck request ffff888027f3e540: control (read@3072,1024B). Runtime 90 seconds [ 1164.633690][T13095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1164.751684][T13103] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1164.795597][T13113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9305'. [ 1164.823756][T13113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9305'. [ 1164.853369][T13113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9305'. [ 1164.877285][T13122] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1165.023351][T32657] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.058207][T32657] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.408153][T13146] syzkaller0: entered promiscuous mode [ 1165.415865][T13146] syzkaller0: entered allmulticast mode [ 1165.432187][T13008] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.451976][T13008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.464365][T13008] bridge_slave_0: entered allmulticast mode [ 1165.472515][T13008] bridge_slave_0: entered promiscuous mode [ 1165.481932][T13008] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.489790][T13008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.498078][T13008] bridge_slave_1: entered allmulticast mode [ 1165.505687][T13008] bridge_slave_1: entered promiscuous mode [ 1165.575145][T13008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1165.599524][T13008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1165.713965][T13008] team0: Port device team_slave_0 added [ 1165.722938][T13008] team0: Port device team_slave_1 added [ 1165.767058][T13008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1165.774942][T13008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.806440][T13008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1165.824853][T13008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1165.832688][T13008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.858857][T13008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1165.931576][T13008] hsr_slave_0: entered promiscuous mode [ 1165.943970][T13008] hsr_slave_1: entered promiscuous mode [ 1165.953445][T13008] debugfs: 'hsr0' already exists in 'hsr' [ 1165.959301][T13008] Cannot create hsr debugfs directory [ 1166.288589][T13176] netlink: 'syz.0.9320': attribute type 1 has an invalid length. [ 1166.340874][T32720] Bluetooth: hci0: command tx timeout [ 1166.567109][T13178] bridge2: entered promiscuous mode [ 1166.578859][T13178] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 1166.919716][T13199] sctp: [Deprecated]: syz.2.9325 (pid 13199) Use of int in maxseg socket option. [ 1166.919716][T13199] Use struct sctp_assoc_value instead [ 1167.458305][T13228] bridge2: entered promiscuous mode [ 1167.474770][T13228] bridge2: entered allmulticast mode [ 1167.493974][T13228] team0: Port device bridge2 added [ 1167.542669][T13233] bridge0: entered promiscuous mode [ 1167.575911][T13233] bridge0: entered allmulticast mode [ 1167.623945][T13008] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1167.645954][T13008] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1167.665077][T13008] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1167.672667][T13240] netlink: 'syz.2.9338': attribute type 3 has an invalid length. [ 1167.681835][T13240] netlink: 'syz.2.9338': attribute type 16 has an invalid length. [ 1167.689845][T13240] __nla_validate_parse: 55 callbacks suppressed [ 1167.689863][T13240] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9338'. [ 1167.711997][T13240] netlink: 'syz.2.9338': attribute type 11 has an invalid length. [ 1167.724201][T13008] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1167.732292][T13008] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1167.747226][T13008] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1167.764607][T13008] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1167.791331][T13008] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1167.911653][T13253] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9339'. [ 1167.930093][T13253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9339'. [ 1168.039653][T13008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1168.085993][T13008] 8021q: adding VLAN 0 to HW filter on device team0 [ 1168.126968][T32657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.134216][T32657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1168.195874][T32657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.203125][T32657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.421594][T32720] Bluetooth: hci0: command tx timeout [ 1168.974483][T13307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9352'. [ 1169.158797][T13317] ip6tnl1: entered allmulticast mode [ 1169.286666][T13008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1169.345730][T13325] syzkaller0: entered promiscuous mode [ 1169.353616][T13325] syzkaller0: entered allmulticast mode [ 1169.617222][T13008] veth0_vlan: entered promiscuous mode [ 1169.662959][T13330] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1169.706737][T13330] bond1: (slave macvlan3): making interface the new active one [ 1169.721704][T13347] sctp: [Deprecated]: syz.0.9361 (pid 13347) Use of int in max_burst socket option. [ 1169.721704][T13347] Use struct sctp_assoc_value instead [ 1169.745426][T13330] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 1169.762123][ T7180] bond_slave_0: entered promiscuous mode [ 1169.769552][ T7180] bond_slave_1: entered promiscuous mode [ 1169.820106][T32690] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1169.871207][T27664] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1169.879041][T32690] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1169.954115][T13008] veth1_vlan: entered promiscuous mode [ 1170.069020][T13008] veth0_macvtap: entered promiscuous mode [ 1170.098855][T13363] pimreg: tun_chr_ioctl cmd 21731 [ 1170.159976][T13008] veth1_macvtap: entered promiscuous mode [ 1170.245461][T13008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1170.283047][T13008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1170.341176][T13376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9367'. [ 1170.370819][T32657] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.378884][T13376] block nbd4: Unsupported socket: should be TCP or UNIX. [ 1170.398956][T32657] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.460682][T32691] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.469634][T26981] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1170.500406][T32720] Bluetooth: hci0: command tx timeout [ 1170.550841][T32674] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.785931][T13396] netlink: 'syz.0.9370': attribute type 1 has an invalid length. [ 1170.900654][ T5770] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1170.994630][ T1606] block nbd3: Possible stuck request ffff888028025080: control (read@0,1024B). Runtime 60 seconds [ 1171.006861][ T1606] block nbd3: Possible stuck request ffff888028025240: control (read@1024,1024B). Runtime 60 seconds [ 1171.017918][ T1606] block nbd3: Possible stuck request ffff888028025400: control (read@2048,1024B). Runtime 60 seconds [ 1171.029336][ T1606] block nbd3: Possible stuck request ffff8880280255c0: control (read@3072,1024B). Runtime 60 seconds [ 1171.266464][T32669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.295832][T32669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.359346][T32690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.389621][T32690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.119497][T13450] syz_tun: entered allmulticast mode [ 1172.178458][T13451] syzkaller0: entered promiscuous mode [ 1172.193037][T13451] syzkaller0: entered allmulticast mode [ 1172.212935][T13449] syz_tun: left allmulticast mode [ 1172.753067][T13487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9390'. [ 1172.757567][T13485] lo speed is unknown, defaulting to 1000 [ 1172.784105][T13490] tipc: MTU too low for tipc bearer [ 1172.803342][T13487] unsupported nla_type 216 [ 1172.982253][T13500] tipc: Started in network mode [ 1173.008619][T13500] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 1173.033038][T13500] tipc: Enabled bearer , priority 10 [ 1173.486362][T13521] syzkaller1: entered promiscuous mode [ 1173.509455][T13521] syzkaller1: entered allmulticast mode [ 1173.619820][T13536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9401'. [ 1173.649023][T13536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9401'. [ 1173.768978][T13546] Bluetooth: MGMT ver 1.23 [ 1173.848715][T13551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9407'. [ 1174.014554][T13564] bridge3: entered promiscuous mode [ 1174.031148][T13564] bridge3: entered allmulticast mode [ 1174.050643][T13564] team0: Port device bridge3 added [ 1174.150788][T22182] tipc: Node number set to 10463914 [ 1174.233741][T13588] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1174.260665][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1174.685787][T13628] netlink: 'syz.0.9429': attribute type 1 has an invalid length. [ 1174.712833][T13633] netlink: 'syz.3.9431': attribute type 15 has an invalid length. [ 1174.736634][T13628] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1174.749696][T13633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9431'. [ 1174.773952][T13630] netlink: 'syz.1.9430': attribute type 4 has an invalid length. [ 1174.784408][T13635] macvlan2: entered promiscuous mode [ 1174.789729][T13635] macvlan2: entered allmulticast mode [ 1174.796710][T13630] netlink: 'syz.1.9430': attribute type 2 has an invalid length. [ 1174.800200][T13639] sctp: [Deprecated]: syz.2.9432 (pid 13639) Use of int in max_burst socket option deprecated. [ 1174.800200][T13639] Use struct sctp_assoc_value instead [ 1174.810022][T13635] bond4: entered allmulticast mode [ 1174.828732][T13635] bond4: entered promiscuous mode [ 1174.835426][T13639] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9432'. [ 1174.846389][T13635] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1174.858185][T13635] team0: Port device macvlan2 added [ 1174.870108][T13637] bridge2: entered promiscuous mode [ 1174.875739][T13639] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9432'. [ 1174.908751][T13637] bridge2: entered allmulticast mode [ 1174.936649][T13637] team0: Port device bridge2 added [ 1174.977724][T13633] netlink: 'syz.3.9431': attribute type 15 has an invalid length. [ 1175.015694][T13633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9431'. [ 1175.065312][T13628] bond4: (slave ip6gretap1): making interface the new active one [ 1175.093834][T13628] ip6gretap1: entered promiscuous mode [ 1175.108879][T13628] ip6gretap1: entered allmulticast mode [ 1175.139908][T13628] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1175.219881][T13652] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9434'. [ 1175.229717][T32674] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1175.257445][T32674] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1175.330749][T32687] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1175.357310][T13656] bridge_slave_0: left allmulticast mode [ 1175.365614][T13656] bridge_slave_0: left promiscuous mode [ 1175.373172][T13656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.402102][T13656] bridge_slave_1: left allmulticast mode [ 1175.422942][T13656] bridge_slave_1: left promiscuous mode [ 1175.435656][T13656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.469091][T13656] bond0: (slave bond_slave_0): Releasing backup interface [ 1175.497193][T13656] bond0: (slave bond_slave_1): Releasing backup interface [ 1175.591340][T13656] team0: Port device team_slave_0 removed [ 1175.645826][T13656] team0: Port device team_slave_1 removed [ 1175.666705][T13656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1175.686184][T13656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1175.709451][T13656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1175.726181][T13656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1175.749603][T13656] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1175.861281][T32690] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1176.096513][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9446'. [ 1176.238122][T13698] netlink: 'syz.0.9449': attribute type 6 has an invalid length. [ 1176.261032][T13698] netlink: 'syz.0.9449': attribute type 5 has an invalid length. [ 1176.321161][T32685] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1176.342190][T32690] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1176.365266][T32690] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1176.393424][T32690] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1176.506441][T13716] can: request_module (can-proto-3) failed. [ 1176.596895][T13719] bond2: entered allmulticast mode [ 1176.895051][T13747] sctp: [Deprecated]: syz.4.9465 (pid 13747) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1176.895051][T13747] Use struct sctp_sack_info instead [ 1176.941141][T13752] netlink: 'syz.1.9464': attribute type 1 has an invalid length. [ 1176.971818][T13753] netlink: 'syz.1.9464': attribute type 1 has an invalid length. [ 1177.021444][T13753] ipip0: entered allmulticast mode [ 1177.065945][T13753] bond3: (slave veth0_to_bond): making interface the new active one [ 1177.076186][T13753] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1177.322571][T13774] netlink: 'syz.4.9471': attribute type 1 has an invalid length. [ 1177.587150][T13795] xt_recent: Unsupported userspace flags (000000c5) [ 1177.858911][T13815] syz_tun: entered allmulticast mode [ 1177.888762][T13815] __nla_validate_parse: 12 callbacks suppressed [ 1177.888779][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9486'. [ 1177.923667][T13820] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.9488'. [ 1177.934479][T13819] netlink: 46 bytes leftover after parsing attributes in process `syz.2.9488'. [ 1177.993824][T13814] syz_tun: left allmulticast mode [ 1178.148179][T13833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9491'. [ 1178.158568][T13835] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9492'. [ 1178.549221][T13864] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9498'. [ 1178.575264][T13863] netlink: 244 bytes leftover after parsing attributes in process `syz.3.9501'. [ 1178.602054][T13865] syzkaller0: entered promiscuous mode [ 1178.621124][T13865] syzkaller0: entered allmulticast mode [ 1178.985789][T13880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9504'. [ 1179.186960][T13900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9507'. [ 1179.225588][T13895] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9507'. [ 1179.664683][T13923] ipip0: entered promiscuous mode [ 1179.690726][T13924] xt_CT: No such helper "snmp_trap" [ 1180.197901][ T4975] udevd[4975]: worker [10290] /devices/virtual/block/nbd3 is taking a long time [ 1180.330031][T13958] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1180.435049][T13961] team0 (unregistering): Port device team_slave_0 removed [ 1180.464821][T13961] team0 (unregistering): Port device team_slave_1 removed [ 1180.492540][T13961] team0 (unregistering): Port device bridge1 removed [ 1180.526043][T13961] team0 (unregistering): Port device bridge3 removed [ 1180.558664][T13961] bond4: left allmulticast mode [ 1180.576805][T13961] ip6gretap1: left allmulticast mode [ 1180.597819][T13961] bond4: left promiscuous mode [ 1180.630791][T13961] team0 (unregistering): Port device macvlan2 removed [ 1181.031885][T27664] ip6gretap1: left promiscuous mode [ 1181.298836][T13999] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20002 [ 1181.911585][T14028] syzkaller0: entered promiscuous mode [ 1181.929068][T14028] syzkaller0: entered allmulticast mode [ 1181.970021][T14028] validate_nla: 7 callbacks suppressed [ 1181.970039][T14028] netlink: 'syz.2.9536': attribute type 4 has an invalid length. [ 1182.306855][T14041] netlink: 'syz.2.9541': attribute type 12 has an invalid length. [ 1182.804114][T14066] netlink: 'syz.4.9549': attribute type 7 has an invalid length. [ 1182.844410][T14066] netlink: 'syz.4.9549': attribute type 7 has an invalid length. [ 1183.128301][T14075] bridge3: entered promiscuous mode [ 1183.136275][T14075] bridge3: entered allmulticast mode [ 1183.143095][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1183.336768][T14082] __nla_validate_parse: 5 callbacks suppressed [ 1183.336785][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9555'. [ 1183.356819][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9555'. [ 1183.366677][T14082] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9555'. [ 1183.610613][T14096] netlink: 'syz.1.9556': attribute type 4 has an invalid length. [ 1183.618996][ T1112] nci: nci_rx_work: unknown MT 0x6 [ 1183.631306][T14096] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9556'. [ 1183.746794][T14096] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1183.824304][T14102] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9558'. [ 1183.902461][T14106] bridge_slave_0: left allmulticast mode [ 1183.908337][T14106] bridge_slave_0: left promiscuous mode [ 1183.914510][T14106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.925841][T14106] bridge_slave_1: left allmulticast mode [ 1183.932648][T14106] bridge_slave_1: left promiscuous mode [ 1183.938530][T14106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.954468][T14106] bond0: (slave bond_slave_0): Releasing backup interface [ 1183.965770][T14106] bond0: (slave bond_slave_1): Releasing backup interface [ 1183.975384][T14106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1183.983857][T14106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1183.993450][T14106] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1186.478816][T14087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1186.504721][T14131] netlink: 244 bytes leftover after parsing attributes in process `syz.2.9567'. [ 1186.595286][T14134] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9569'. [ 1186.733165][T14139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9569'. [ 1186.781869][T14134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9569'. [ 1186.895677][T14152] bond3: option arp_all_targets: invalid value (3) [ 1186.924528][T14152] bond3 (unregistering): Released all slaves [ 1186.977706][T14163] netlink: 'syz.0.9575': attribute type 1 has an invalid length. [ 1187.014688][T14154] gretap0: left promiscuous mode [ 1187.146595][T14154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1187.160041][T14154] 8021q: adding VLAN 0 to HW filter on device team0 [ 1187.179798][T14154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1187.261290][T14154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1187.292425][T14154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1187.319377][T14154] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1187.352016][T14154] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1187.377894][T14154] veth1_vlan: left promiscuous mode [ 1187.385248][T14154] veth0_vlan: left promiscuous mode [ 1187.391908][T14154] veth0_vlan: entered promiscuous mode [ 1187.399824][T14154] veth1_vlan: entered promiscuous mode [ 1187.411365][T14154] tipc: Resetting bearer [ 1187.423260][T14154] veth1_macvtap: left promiscuous mode [ 1187.432829][T14154] veth0_macvtap: left promiscuous mode [ 1187.440990][T14154] veth0_macvtap: entered promiscuous mode [ 1187.448704][T14154] veth1_macvtap: entered promiscuous mode [ 1187.466993][T14154] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1187.483448][T14154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1187.495320][T14154] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1187.504756][T14154] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1187.527170][T14154] bridge1: left promiscuous mode [ 1187.553670][T14154] bridge2: left promiscuous mode [ 1187.583997][T32657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.591234][T32657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1187.602474][T27664] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1187.632882][T32657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.640050][T32657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1187.671709][ T5770] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1187.710783][T32685] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.792317][T32687] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.804026][T14190] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1187.823185][T32687] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.894278][T32691] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.952920][T14203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9580'. [ 1188.111531][T14200] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.119240][T14200] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.255071][T14200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1188.278004][T14200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1188.464782][T14212] bridge1: entered promiscuous mode [ 1188.480810][T14212] bridge1: entered allmulticast mode [ 1188.531572][T14214] bridge4: entered promiscuous mode [ 1188.536789][T14214] bridge4: entered allmulticast mode [ 1188.590413][T32657] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.632773][T32691] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.666295][T14223] __nla_validate_parse: 1 callbacks suppressed [ 1188.666312][T14223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9587'. [ 1188.702445][T32691] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.712309][T32691] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.729402][T14226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9589'. [ 1189.468916][T14276] bridge3: entered promiscuous mode [ 1189.474292][T14276] bridge3: entered allmulticast mode [ 1189.492455][T14276] team0: Port device bridge3 added [ 1189.594066][T14281] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.601641][T14281] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.682658][T14288] FAULT_INJECTION: forcing a failure. [ 1189.682658][T14288] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.696583][T14288] CPU: 1 UID: 0 PID: 14288 Comm: syz.4.9605 Not tainted syzkaller #0 PREEMPT(full) [ 1189.696607][T14288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1189.696620][T14288] Call Trace: [ 1189.696628][T14288] [ 1189.696637][T14288] dump_stack_lvl+0xe8/0x150 [ 1189.696667][T14288] should_fail_ex+0x40c/0x560 [ 1189.696692][T14288] should_failslab+0xa8/0x100 [ 1189.696721][T14288] __kmalloc_noprof+0xfe/0x720 [ 1189.696748][T14288] ? bpf_test_init+0x9f/0x150 [ 1189.696768][T14288] ? bpf_test_init+0x9f/0x150 [ 1189.696804][T14288] bpf_test_init+0x9f/0x150 [ 1189.696828][T14288] bpf_prog_test_run_skb+0x31e/0x2230 [ 1189.696867][T14288] ? __fget_files+0x3a2/0x420 [ 1189.696890][T14288] ? __fget_files+0x2a/0x420 [ 1189.696916][T14288] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1189.696940][T14288] bpf_prog_test_run+0x2c5/0x340 [ 1189.696966][T14288] __sys_bpf+0xa22/0xd90 [ 1189.696994][T14288] ? __pfx___sys_bpf+0x10/0x10 [ 1189.697033][T14288] ? __fget_files+0x2a/0x420 [ 1189.697069][T14288] ? ksys_write+0x242/0x270 [ 1189.697097][T14288] ? __pfx_ksys_write+0x10/0x10 [ 1189.697126][T14288] __x64_sys_bpf+0xba/0xd0 [ 1189.697144][T14288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.697163][T14288] do_syscall_64+0x174/0x580 [ 1189.697187][T14288] ? trace_irq_disable+0x3b/0x140 [ 1189.697209][T14288] ? clear_bhb_loop+0x70/0xc0 [ 1189.697230][T14288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.697247][T14288] RIP: 0033:0x7f6754d9e0d9 [ 1189.697264][T14288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1189.697280][T14288] RSP: 002b:00007f6752ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1189.697298][T14288] RAX: ffffffffffffffda RBX: 00007f6755025fa0 RCX: 00007f6754d9e0d9 [ 1189.697311][T14288] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1189.697322][T14288] RBP: 00007f6752ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1189.697334][T14288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1189.697344][T14288] R13: 00007f6755026038 R14: 00007f6755025fa0 R15: 00007ffee1694688 [ 1189.697373][T14288] [ 1190.090674][T14295] netlink: 232 bytes leftover after parsing attributes in process `syz.0.9606'. [ 1190.208247][T14308] netlink: NAT attribute has 1 unknown bytes [ 1190.235457][T14308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1190.680043][T14334] x_tables: duplicate underflow at hook 2 [ 1191.491207][ T1606] block nbd0: Possible stuck request ffff888027f00000: control (read@0,1024B). Runtime 300 seconds [ 1191.502069][ T1606] block nbd0: Possible stuck request ffff888027f001c0: control (read@1024,3072B). Runtime 300 seconds [ 1192.014472][T14386] netlink: 'syz.0.9624': attribute type 21 has an invalid length. [ 1192.034258][T14388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9625'. [ 1192.534532][T14415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9634'. [ 1192.543690][T14415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9634'. [ 1192.600040][T14423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9634'. [ 1192.625887][T14423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9634'. [ 1192.695674][T14429] netlink: 'syz.2.9633': attribute type 2 has an invalid length. [ 1192.731976][T14429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9633'. [ 1192.816309][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9633'. [ 1193.072684][T14442] netlink: 'syz.3.9639': attribute type 1 has an invalid length. [ 1193.164895][T14442] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1193.203997][T14448] bond1: (slave gretap1): making interface the new active one [ 1193.216793][T14448] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1193.239847][T14442] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1193.254273][T14442] bond1 (unregistering): Released all slaves [ 1193.353586][T14410] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1193.364560][T32665] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1193.392234][T32665] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1193.503882][T32665] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1193.514108][T32665] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1193.629055][T14466] x_tables: duplicate underflow at hook 3 [ 1193.653322][T14463] netlink: 'syz.0.9645': attribute type 11 has an invalid length. [ 1193.856299][T14476] __nla_validate_parse: 7 callbacks suppressed [ 1193.856318][T14476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9649'. [ 1193.967573][T14488] syzkaller0: entered promiscuous mode [ 1193.977210][T14488] syzkaller0: entered allmulticast mode [ 1194.081974][T14495] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9655'. [ 1194.273731][T14507] bridge1: entered promiscuous mode [ 1194.288231][T14507] bridge1: entered allmulticast mode [ 1194.296774][T14507] team0: Port device bridge1 added [ 1194.379334][T14502] lo speed is unknown, defaulting to 1000 [ 1194.483561][T14516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9663'. [ 1194.521903][T14519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9665'. [ 1194.544310][T14516] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1194.559297][T14516] batman_adv: batadv0: Adding interface: gretap2 [ 1194.570379][T14516] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1194.609175][T14516] batman_adv: batadv0: Interface activated: gretap2 [ 1194.661976][ T1631] block nbd1: Possible stuck request ffff888027f3e000: control (read@0,1024B). Runtime 120 seconds [ 1194.672919][ T1631] block nbd1: Possible stuck request ffff888027f3e1c0: control (read@1024,1024B). Runtime 120 seconds [ 1194.684688][ T1631] block nbd1: Possible stuck request ffff888027f3e380: control (read@2048,1024B). Runtime 120 seconds [ 1194.695837][ T1631] block nbd1: Possible stuck request ffff888027f3e540: control (read@3072,1024B). Runtime 120 seconds [ 1194.854042][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9669'. [ 1195.067246][T14544] netlink: 'syz.2.9674': attribute type 1 has an invalid length. [ 1195.136699][T14544] bond1: (slave bridge4): Enslaving as a backup interface with an up link [ 1195.174555][T14546] macvlan2: entered promiscuous mode [ 1195.180008][T14546] macvlan2: entered allmulticast mode [ 1195.186389][T14546] bond1: entered promiscuous mode [ 1195.192870][T14546] bridge4: entered promiscuous mode [ 1195.198967][T14546] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1195.209347][T14546] bond1: left promiscuous mode [ 1195.214357][T14546] bridge4: left promiscuous mode [ 1195.374805][T14561] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9678'. [ 1195.726381][T14585] syzkaller0: entered promiscuous mode [ 1195.734592][T14585] syzkaller0: entered allmulticast mode [ 1195.745624][T14585] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9684'. [ 1195.818562][T14592] bridge2: entered promiscuous mode [ 1195.827491][T14592] bridge2: entered allmulticast mode [ 1195.837602][T14592] team0: Port device bridge2 added [ 1195.934885][T14598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9689'. [ 1195.946518][T14598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9689'. [ 1196.028880][T14603] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9691'. [ 1196.045162][T14605] veth0: entered promiscuous mode [ 1196.073389][T14605] veth0: left promiscuous mode [ 1196.273619][T14615] bond2: entered promiscuous mode [ 1196.492899][T14640] netlink: 'syz.1.9701': attribute type 6 has an invalid length. [ 1196.590954][T14640] veth0_to_bridge: entered promiscuous mode [ 1196.617909][T14640] macsec1: entered allmulticast mode [ 1196.641716][T14640] veth0_to_bridge: entered allmulticast mode [ 1196.654956][T14640] veth0_to_bridge: left allmulticast mode [ 1196.668528][T14640] veth0_to_bridge: left promiscuous mode [ 1196.781287][T14641] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 1196.833354][T14634] lo speed is unknown, defaulting to 1000 [ 1196.953051][T14664] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1196.967374][T14660] syzkaller0: entered promiscuous mode [ 1196.981897][T14660] syzkaller0: entered allmulticast mode [ 1197.617881][T14682] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.804412][T14682] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.034939][T14682] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.083466][T14708] bridge_slave_1: left allmulticast mode [ 1198.097684][T14708] bridge_slave_1: left promiscuous mode [ 1198.114134][T14708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.129599][T14708] bridge_slave_0: left allmulticast mode [ 1198.136984][T14708] bridge_slave_0: left promiscuous mode [ 1198.143021][T14708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.296409][T14682] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.348597][T14726] syzkaller0: entered promiscuous mode [ 1198.355003][T14726] syzkaller0: entered allmulticast mode [ 1198.512542][T32685] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.582244][T32657] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.605444][T14742] FAULT_INJECTION: forcing a failure. [ 1198.605444][T14742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1198.630192][T14736] syzkaller1: entered promiscuous mode [ 1198.639779][T14742] CPU: 0 UID: 0 PID: 14742 Comm: syz.0.9735 Not tainted syzkaller #0 PREEMPT(full) [ 1198.639805][T14742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1198.639817][T14742] Call Trace: [ 1198.639825][T14742] [ 1198.639834][T14742] dump_stack_lvl+0xe8/0x150 [ 1198.639869][T14742] should_fail_ex+0x40c/0x560 [ 1198.639897][T14742] _copy_to_user+0x31/0xb0 [ 1198.639932][T14742] bpf_test_finish+0x52e/0x690 [ 1198.639967][T14742] ? __pfx_bpf_test_finish+0x10/0x10 [ 1198.640005][T14742] bpf_prog_test_run_skb+0x11fe/0x2230 [ 1198.640052][T14742] ? __fget_files+0x3a2/0x420 [ 1198.640080][T14742] ? __fget_files+0x2a/0x420 [ 1198.640112][T14742] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1198.640138][T14742] bpf_prog_test_run+0x2c5/0x340 [ 1198.640170][T14742] __sys_bpf+0xa22/0xd90 [ 1198.640205][T14742] ? __pfx___sys_bpf+0x10/0x10 [ 1198.640243][T14742] ? __fget_files+0x2a/0x420 [ 1198.640288][T14742] ? ksys_write+0x242/0x270 [ 1198.640321][T14742] ? __pfx_ksys_write+0x10/0x10 [ 1198.640365][T14742] __x64_sys_bpf+0xba/0xd0 [ 1198.640390][T14742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.640414][T14742] do_syscall_64+0x174/0x580 [ 1198.640444][T14742] ? trace_irq_disable+0x3b/0x140 [ 1198.640469][T14742] ? clear_bhb_loop+0x70/0xc0 [ 1198.640506][T14742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.640527][T14742] RIP: 0033:0x7fc19cd9e0d9 [ 1198.640556][T14742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1198.640573][T14742] RSP: 002b:00007fc19dd51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1198.640592][T14742] RAX: ffffffffffffffda RBX: 00007fc19d025fa0 RCX: 00007fc19cd9e0d9 [ 1198.640606][T14742] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1198.640619][T14742] RBP: 00007fc19dd51090 R08: 0000000000000000 R09: 0000000000000000 [ 1198.640630][T14742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1198.640641][T14742] R13: 00007fc19d026038 R14: 00007fc19d025fa0 R15: 00007ffee8637ce8 [ 1198.640672][T14742] [ 1198.844590][T14736] syzkaller1: entered allmulticast mode [ 1198.930920][T32657] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.945916][T14746] __nla_validate_parse: 5 callbacks suppressed [ 1198.945936][T14746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9736'. [ 1198.999616][T14748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9739'. [ 1199.042647][T14748] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9739'. [ 1199.062930][T14751] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9739'. [ 1199.115555][T32657] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.214859][T14756] team0 (unregistering): Port device bridge1 removed [ 1199.240769][T14756] team0 (unregistering): Port device bridge2 removed [ 1199.254447][T14763] netlink: 'syz.2.9741': attribute type 1 has an invalid length. [ 1199.349086][T14763] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1199.393010][T14766] bridge2: entered promiscuous mode [ 1199.398289][T14766] bridge2: entered allmulticast mode [ 1199.472841][T14778] FAULT_INJECTION: forcing a failure. [ 1199.472841][T14778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1199.486394][T14778] CPU: 0 UID: 0 PID: 14778 Comm: syz.4.9747 Not tainted syzkaller #0 PREEMPT(full) [ 1199.486419][T14778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1199.486430][T14778] Call Trace: [ 1199.486440][T14778] [ 1199.486448][T14778] dump_stack_lvl+0xe8/0x150 [ 1199.486480][T14778] should_fail_ex+0x40c/0x560 [ 1199.486506][T14778] _copy_to_user+0x31/0xb0 [ 1199.486536][T14778] simple_read_from_buffer+0xe1/0x170 [ 1199.486567][T14778] proc_fail_nth_read+0x1bb/0x230 [ 1199.486597][T14778] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1199.486637][T14778] ? rw_verify_area+0x24a/0x4c0 [ 1199.486665][T14778] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1199.486690][T14778] vfs_read+0x213/0xa80 [ 1199.486721][T14778] ? __pfx___mutex_lock+0x10/0x10 [ 1199.486747][T14778] ? __pfx_vfs_read+0x10/0x10 [ 1199.486775][T14778] ? __fget_files+0x2a/0x420 [ 1199.486802][T14778] ? __fget_files+0x3a2/0x420 [ 1199.486824][T14778] ? __fget_files+0x2a/0x420 [ 1199.486855][T14778] ksys_read+0x150/0x270 [ 1199.486883][T14778] ? __pfx_ksys_read+0x10/0x10 [ 1199.486917][T14778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.486937][T14778] do_syscall_64+0x174/0x580 [ 1199.486962][T14778] ? trace_irq_disable+0x3b/0x140 [ 1199.486985][T14778] ? clear_bhb_loop+0x70/0xc0 [ 1199.487007][T14778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.487026][T14778] RIP: 0033:0x7f6754d5e90e [ 1199.487043][T14778] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1199.487059][T14778] RSP: 002b:00007f6752ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1199.487078][T14778] RAX: ffffffffffffffda RBX: 00007f6752ff66c0 RCX: 00007f6754d5e90e [ 1199.487091][T14778] RDX: 000000000000000f RSI: 00007f6752ff60a0 RDI: 0000000000000004 [ 1199.487102][T14778] RBP: 00007f6752ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1199.487113][T14778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1199.487124][T14778] R13: 00007f6755026038 R14: 00007f6755025fa0 R15: 00007ffee1694688 [ 1199.487153][T14778] [ 1199.790650][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1200.748854][T14812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9758'. [ 1200.969565][T14820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9761'. [ 1201.078634][ T1606] block nbd3: Possible stuck request ffff888028025080: control (read@0,1024B). Runtime 90 seconds [ 1201.090543][ T1606] block nbd3: Possible stuck request ffff888028025240: control (read@1024,1024B). Runtime 90 seconds [ 1201.103102][ T1606] block nbd3: Possible stuck request ffff888028025400: control (read@2048,1024B). Runtime 90 seconds [ 1201.114699][ T1606] block nbd3: Possible stuck request ffff8880280255c0: control (read@3072,1024B). Runtime 90 seconds [ 1201.126476][T14830] vlan0: entered promiscuous mode [ 1201.652583][T14854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9768'. [ 1201.675182][T14854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9768'. [ 1201.761059][T14870] erspan0: entered promiscuous mode [ 1202.017865][T14886] team0 (unregistering): Port device team_slave_0 removed [ 1202.047674][T14886] team0 (unregistering): Port device team_slave_1 removed [ 1202.072629][T14886] team0 (unregistering): Port device bridge1 removed [ 1202.094104][T14886] team0 (unregistering): Port device bridge2 removed [ 1202.123436][T14886] team0 (unregistering): Port device bridge3 removed [ 1202.171450][T14893] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9778'. [ 1202.203395][T14895] netlink: 'syz.3.9779': attribute type 2 has an invalid length. [ 1202.216848][T14893] ipip0: entered promiscuous mode [ 1202.232332][T14895] netlink: 'syz.3.9779': attribute type 8 has an invalid length. [ 1202.247886][T14895] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9779'. [ 1202.477778][T14908] syzkaller0: entered promiscuous mode [ 1202.492519][T14908] syzkaller0: entered allmulticast mode [ 1205.267558][T14898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1205.459511][T14942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9791'. [ 1205.616245][T14954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9794'. [ 1205.877386][T14969] mac80211_hwsim hwsim121 syzkaller0: entered promiscuous mode [ 1205.892870][T14969] mac80211_hwsim hwsim121 syzkaller0: entered allmulticast mode [ 1206.038332][T14985] netlink: 'syz.1.9805': attribute type 5 has an invalid length. [ 1206.188922][T14997] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1206.568472][T15011] xt_CT: No such helper "netbios-ns" [ 1206.620922][T15014] xt_CT: No such helper "netbios-ns" [ 1206.738919][T15024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9814'. [ 1207.036811][T32720] Bluetooth: hci3: link tx timeout [ 1207.048006][T32720] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1207.067217][T32720] Bluetooth: hci3: link tx timeout [ 1207.073233][T32720] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1207.083916][T32720] Bluetooth: hci3: link tx timeout [ 1207.090407][T32720] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1207.098822][T32720] Bluetooth: hci3: link tx timeout [ 1207.105517][T32720] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1207.113361][T32720] Bluetooth: hci3: link tx timeout [ 1207.118854][T32720] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1207.126807][T32720] Bluetooth: hci3: link tx timeout [ 1207.133347][T32720] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1207.142597][T32720] Bluetooth: hci3: link tx timeout [ 1207.147864][T32720] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1207.155804][T32720] Bluetooth: hci3: link tx timeout [ 1207.162090][T32720] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1207.406567][T15054] bridge4: entered promiscuous mode [ 1207.412366][T15054] bridge4: entered allmulticast mode [ 1209.140404][T32720] Bluetooth: hci3: command 0x0406 tx timeout [ 1209.494383][T15006] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1209.872177][T15077] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1209.903903][T15078] netlink: 'syz.1.9826': attribute type 8 has an invalid length. [ 1209.932487][T15078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9826'. [ 1209.985530][T15078] veth1_to_team: entered promiscuous mode [ 1210.016521][T15078] gretap0: entered promiscuous mode [ 1210.052139][T15078] veth1_to_team: left promiscuous mode [ 1210.081717][T15078] gretap0: left promiscuous mode [ 1210.109028][T15088] netlink: 'syz.4.9831': attribute type 2 has an invalid length. [ 1210.167993][T15095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9830'. [ 1210.247007][T15102] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9834'. [ 1210.378697][T15106] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9834'. [ 1210.431295][T15106] nbd: nbd64 already in use [ 1210.639752][T15118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9838'. [ 1210.649338][T15118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9838'. [ 1210.681039][T15121] netlink: 'syz.3.9839': attribute type 12 has an invalid length. [ 1210.951821][T15133] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9843'. [ 1211.012150][T15135] netlink: 'syz.3.9844': attribute type 1 has an invalid length. [ 1211.023541][T15135] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9844'. [ 1211.225626][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9848'. [ 1211.353535][T15158] netlink: 'syz.2.9850': attribute type 1 has an invalid length. [ 1211.418361][T15155] bond6 (unregistering): Released all slaves [ 1211.516212][T15163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9852'. [ 1211.627258][T15167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9852'. [ 1211.742425][T15172] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9854'. [ 1211.766718][T15174] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9854'. [ 1211.798998][T15173] lo speed is unknown, defaulting to 1000 [ 1211.916538][T15180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9856'. [ 1212.277788][T15189] No such timeout policy "syz1" [ 1212.339474][ T30] audit: type=1800 audit(1786126482.232:36): pid=15189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9859" name="blkio.bfq.time_recursive" dev="tmpfs" ino=809 res=0 errno=0 [ 1212.623649][T15199] syzkaller0: entered promiscuous mode [ 1212.634422][T15199] syzkaller0: entered allmulticast mode [ 1212.985034][T15205] syzkaller1: entered promiscuous mode [ 1212.991313][T15205] syzkaller1: entered allmulticast mode [ 1213.955788][T15269] netlink: 'syz.0.9880': attribute type 1 has an invalid length. [ 1214.055920][T15269] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1214.171168][T15278] netlink: 'syz.2.9883': attribute type 1 has an invalid length. [ 1214.218036][T15278] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1214.945021][T15319] netlink: 'syz.3.9894': attribute type 21 has an invalid length. [ 1214.971802][T15319] netlink: 'syz.3.9894': attribute type 22 has an invalid length. [ 1215.011858][T15319] netlink: 'syz.3.9894': attribute type 23 has an invalid length. [ 1215.057090][T15319] netlink: 'syz.3.9894': attribute type 25 has an invalid length. [ 1215.082705][T15319] netlink: 'syz.3.9894': attribute type 26 has an invalid length. [ 1215.852467][T15367] __nla_validate_parse: 9 callbacks suppressed [ 1215.852485][T15367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9909'. [ 1216.219025][T15387] netlink: 'syz.3.9911': attribute type 1 has an invalid length. [ 1216.233919][T15387] netlink: 'syz.3.9911': attribute type 2 has an invalid length. [ 1216.434423][T15393] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1217.266035][T15438] validate_nla: 1 callbacks suppressed [ 1217.266052][T15438] netlink: 'syz.4.9927': attribute type 7 has an invalid length. [ 1217.325590][T15438] netlink: 'syz.4.9927': attribute type 8 has an invalid length. [ 1217.342662][T15438] netlink: 'syz.4.9927': attribute type 13 has an invalid length. [ 1218.237222][T15493] Bluetooth: MGMT ver 1.23 [ 1218.557684][T15507] syzkaller1: entered allmulticast mode [ 1218.759923][T15527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9947'. [ 1219.084259][T15543] FAULT_INJECTION: forcing a failure. [ 1219.084259][T15543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1219.134647][T15543] CPU: 0 UID: 0 PID: 15543 Comm: syz.2.9950 Not tainted syzkaller #0 PREEMPT(full) [ 1219.134674][T15543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1219.134686][T15543] Call Trace: [ 1219.134693][T15543] [ 1219.134702][T15543] dump_stack_lvl+0xe8/0x150 [ 1219.134741][T15543] should_fail_ex+0x40c/0x560 [ 1219.134766][T15543] _copy_from_user+0x2d/0xb0 [ 1219.134791][T15543] kstrtouint_from_user+0xd6/0x180 [ 1219.134814][T15543] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1219.134851][T15543] proc_fail_nth_write+0x8e/0x210 [ 1219.134877][T15543] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1219.134910][T15543] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1219.134935][T15543] vfs_write+0x296/0xba0 [ 1219.134970][T15543] ? __pfx_vfs_write+0x10/0x10 [ 1219.134999][T15543] ? __fget_files+0x2a/0x420 [ 1219.135026][T15543] ? __fget_files+0x3a2/0x420 [ 1219.135048][T15543] ? __fget_files+0x2a/0x420 [ 1219.135079][T15543] ksys_write+0x150/0x270 [ 1219.135112][T15543] ? __pfx_ksys_write+0x10/0x10 [ 1219.135147][T15543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.135168][T15543] do_syscall_64+0x174/0x580 [ 1219.135192][T15543] ? trace_irq_disable+0x3b/0x140 [ 1219.135215][T15543] ? clear_bhb_loop+0x70/0xc0 [ 1219.135238][T15543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.135256][T15543] RIP: 0033:0x7fafaf35e90e [ 1219.135273][T15543] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1219.135289][T15543] RSP: 002b:00007fafb02e9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1219.135309][T15543] RAX: ffffffffffffffda RBX: 00007fafb02ea6c0 RCX: 00007fafaf35e90e [ 1219.135322][T15543] RDX: 0000000000000001 RSI: 00007fafb02ea0a0 RDI: 0000000000000003 [ 1219.135333][T15543] RBP: 00007fafb02ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1219.135344][T15543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1219.135356][T15543] R13: 00007fafaf626038 R14: 00007fafaf625fa0 R15: 00007ffe30af09c8 [ 1219.135385][T15543] [ 1220.242593][T15585] bond8: entered promiscuous mode [ 1220.251197][T15585] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1220.379101][T15587] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 1220.600664][T15607] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 1221.322126][T15648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9968'. [ 1221.383331][T15651] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1221.405758][T15651] bond5 (unregistering): Released all slaves [ 1221.412289][T15656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9969'. [ 1221.436136][T15656] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9969'. [ 1221.493115][T15648] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1221.541082][ T1606] block nbd0: Possible stuck request ffff888027f00000: control (read@0,1024B). Runtime 330 seconds [ 1221.553928][ T1606] block nbd0: Possible stuck request ffff888027f001c0: control (read@1024,3072B). Runtime 330 seconds [ 1221.573441][T15662] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9972'. [ 1221.592968][T15662] tc_dump_action: action bad kind [ 1221.624101][T15662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9972'. [ 1221.648374][T15662] netlink: 'syz.4.9972': attribute type 30 has an invalid length. [ 1221.809845][T15677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9977'. [ 1221.819126][T15676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9977'. [ 1221.863253][T15680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9977'. [ 1221.925295][T15680] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 1221.966972][T15677] ipvlan1: entered promiscuous mode [ 1221.976088][T15677] ipvlan1: entered allmulticast mode [ 1221.982636][T15677] veth0_vlan: entered allmulticast mode [ 1221.991475][T15676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9977'. [ 1222.042767][T15641] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1223.466634][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1224.310711][T15697] netlink: 200 bytes leftover after parsing attributes in process `syz.0.9982'. [ 1224.544141][T15710] hsr_slave_1 (unregistering): left promiscuous mode [ 1224.750025][ T1631] block nbd1: Possible stuck request ffff888027f3e000: control (read@0,1024B). Runtime 150 seconds [ 1224.761691][ T1631] block nbd1: Possible stuck request ffff888027f3e1c0: control (read@1024,1024B). Runtime 150 seconds [ 1224.774628][ T1631] block nbd1: Possible stuck request ffff888027f3e380: control (read@2048,1024B). Runtime 150 seconds [ 1224.785704][ T1631] block nbd1: Possible stuck request ffff888027f3e540: control (read@3072,1024B). Runtime 150 seconds [ 1224.950078][T15728] xt_CT: No such helper "pptp" [ 1227.513764][T15777] __nla_validate_parse: 1 callbacks suppressed [ 1227.513784][T15777] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10006'. [ 1227.551396][T15770] block nbd4: server does not support multiple connections per device. [ 1227.599513][T15770] block nbd4: shutting down sockets [ 1227.775619][T15786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10012'. [ 1227.793173][T15788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10012'. [ 1227.815474][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888057b8ac00: connection exists (fe ff). last cmd: 20 [ 1227.827137][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888057b89800: connection exists (fe ff). last cmd: 20 [ 1227.838779][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88808266a800: connection exists (fe ff). last cmd: 20 [ 1227.843516][T15786] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1227.850521][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888082669800: connection exists (fe ff). last cmd: 20 [ 1227.870557][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88808266a000: connection exists (fe ff). last cmd: 20 [ 1227.882206][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888037706c00: connection exists (fe ff). last cmd: 20 [ 1227.887242][T15788] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1227.893795][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888037707000: connection exists (fe ff). last cmd: 20 [ 1227.913848][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888037706400: connection exists (fe ff). last cmd: 20 [ 1227.925476][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888037706800: connection exists (fe ff). last cmd: 20 [ 1227.937113][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888034cca800: connection exists (fe ff). last cmd: 20 [ 1227.948727][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888034ccb400: connection exists (fe ff). last cmd: 20 [ 1227.960553][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88807521b000: connection exists (fe ff). last cmd: 20 [ 1227.972167][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88807521a800: connection exists (fe ff). last cmd: 20 [ 1227.983917][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888075219c00: connection exists (fe ff). last cmd: 20 [ 1227.995542][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88807521b800: connection exists (fe ff). last cmd: 20 [ 1228.007184][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888075218000: connection exists (fe ff). last cmd: 20 [ 1228.018802][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888026fbcc00: connection exists (fe ff). last cmd: 20 [ 1228.030600][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888026fbec00: connection exists (fe ff). last cmd: 20 [ 1228.042300][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888057fe3400: connection exists (fe ff). last cmd: 20 [ 1228.053927][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888057fe0800: connection exists (fe ff). last cmd: 20 [ 1228.065602][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888057fe2c00: connection exists (fe ff). last cmd: 20 [ 1228.077210][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88808bbe1800: connection exists (fe ff). last cmd: 20 [ 1228.088834][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88808bbe2800: connection exists (fe ff). last cmd: 20 [ 1228.100603][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888035c99400: connection exists (fe ff). last cmd: 20 [ 1228.112203][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88809375f400: connection exists (fe ff). last cmd: 20 [ 1228.123903][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88809375d800: connection exists (fe ff). last cmd: 20 [ 1228.135546][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88809375cc00: connection exists (fe ff). last cmd: 20 [ 1228.147159][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88809375f800: connection exists (fe ff). last cmd: 20 [ 1228.158621][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88809375d000: connection exists (fe ff). last cmd: 20 [ 1228.170403][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88809375f000: connection exists (fe ff). last cmd: 20 [ 1228.182024][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88809375c400: connection exists (fe ff). last cmd: 20 [ 1228.198384][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88809375e400: connection exists (fe ff). last cmd: 20 [ 1228.210142][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88809375d400: connection exists (fe ff). last cmd: 20 [ 1228.221693][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88809375c000: connection exists (fe ff). last cmd: 20 [ 1228.233196][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88809375ec00: connection exists (fe ff). last cmd: 20 [ 1228.244736][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88803a084000: connection exists (fe ff). last cmd: 20 [ 1228.256289][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88803a086c00: connection exists (fe ff). last cmd: 20 [ 1228.267814][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88803a085c00: connection exists (fe ff). last cmd: 20 [ 1228.279400][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88803a085800: connection exists (fe ff). last cmd: 20 [ 1228.291009][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888023295400: connection exists (fe ff). last cmd: 20 [ 1228.302532][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88808ce1d400: connection exists (fe ff). last cmd: 20 [ 1228.314031][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88808ce1fc00: connection exists (fe ff). last cmd: 20 [ 1228.325545][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88808ce1f400: connection exists (fe ff). last cmd: 20 [ 1228.337033][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88808ce1d800: connection exists (fe ff). last cmd: 20 [ 1228.348547][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88808ce1dc00: connection exists (fe ff). last cmd: 20 [ 1228.359983][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88808ce1c000: connection exists (fe ff). last cmd: 20 [ 1228.373863][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888057b89000: rx timeout, send abort [ 1228.504002][T15806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10018'. [ 1228.670948][T15814] netlink: zone id is out of range [ 1228.682180][T15814] netlink: zone id is out of range [ 1228.697519][T15814] netlink: zone id is out of range [ 1228.708481][T15814] netlink: zone id is out of range [ 1228.719493][T15814] netlink: zone id is out of range [ 1228.740075][T15814] netlink: zone id is out of range [ 1228.752540][T15814] netlink: zone id is out of range [ 1228.764967][T15814] netlink: zone id is out of range [ 1228.776754][T15814] netlink: zone id is out of range [ 1228.788315][T15814] netlink: zone id is out of range [ 1228.893115][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888057b89000: abort rx timeout. Force session deactivation [ 1229.735245][T15832] tipc: Enabling of bearer rejected, failed to enable media [ 1229.751166][T15836] netlink: 'syz.3.10024': attribute type 1 has an invalid length. [ 1229.937370][T15832] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1229.952505][T15832] bond1: (slave bond2): making interface the new active one [ 1229.969951][T15832] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1230.041843][T15852] FAULT_INJECTION: forcing a failure. [ 1230.041843][T15852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1230.087705][T15852] CPU: 0 UID: 0 PID: 15852 Comm: syz.1.10029 Not tainted syzkaller #0 PREEMPT(full) [ 1230.087730][T15852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1230.087742][T15852] Call Trace: [ 1230.087749][T15852] [ 1230.087757][T15852] dump_stack_lvl+0xe8/0x150 [ 1230.087787][T15852] should_fail_ex+0x40c/0x560 [ 1230.087811][T15852] _copy_from_user+0x2d/0xb0 [ 1230.087837][T15852] __sys_bind+0x1c6/0x410 [ 1230.087864][T15852] ? __pfx___sys_bind+0x10/0x10 [ 1230.087901][T15852] ? __pfx_ksys_write+0x10/0x10 [ 1230.087932][T15852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.087952][T15852] __x64_sys_bind+0x7a/0x90 [ 1230.087979][T15852] do_syscall_64+0x174/0x580 [ 1230.088003][T15852] ? trace_irq_disable+0x3b/0x140 [ 1230.088025][T15852] ? clear_bhb_loop+0x70/0xc0 [ 1230.088051][T15852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.088069][T15852] RIP: 0033:0x7fc16679e0d9 [ 1230.088085][T15852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1230.088101][T15852] RSP: 002b:00007fc1675af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1230.088120][T15852] RAX: ffffffffffffffda RBX: 00007fc166a25fa0 RCX: 00007fc16679e0d9 [ 1230.088133][T15852] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000004 [ 1230.088145][T15852] RBP: 00007fc1675af090 R08: 0000000000000000 R09: 0000000000000000 [ 1230.088157][T15852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1230.088168][T15852] R13: 00007fc166a26038 R14: 00007fc166a25fa0 R15: 00007fff56ee04d8 [ 1230.088197][T15852] [ 1230.306178][T15839] team0 (unregistering): Port device team_slave_0 removed [ 1230.404432][T15839] team0 (unregistering): Port device team_slave_1 removed [ 1230.458907][T15839] team0 (unregistering): Port device bridge1 removed [ 1230.491892][T15839] team0 (unregistering): Port device bridge2 removed [ 1230.769615][T15880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10037'. [ 1230.989535][T15887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10037'. [ 1231.013051][T15887] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10037'. [ 1231.087446][T15892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10037'. [ 1231.175664][ T1606] block nbd3: Possible stuck request ffff888028025080: control (read@0,1024B). Runtime 120 seconds [ 1231.189489][T15899] FAULT_INJECTION: forcing a failure. [ 1231.189489][T15899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1231.189540][T15899] CPU: 0 UID: 0 PID: 15899 Comm: syz.3.10042 Not tainted syzkaller #0 PREEMPT(full) [ 1231.189564][T15899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1231.189577][T15899] Call Trace: [ 1231.189585][T15899] [ 1231.189594][T15899] dump_stack_lvl+0xe8/0x150 [ 1231.189628][T15899] should_fail_ex+0x40c/0x560 [ 1231.189656][T15899] _copy_to_user+0x31/0xb0 [ 1231.189687][T15899] simple_read_from_buffer+0xe1/0x170 [ 1231.189721][T15899] proc_fail_nth_read+0x1bb/0x230 [ 1231.189759][T15899] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1231.189792][T15899] ? rw_verify_area+0x24a/0x4c0 [ 1231.189827][T15899] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1231.189855][T15899] vfs_read+0x213/0xa80 [ 1231.189891][T15899] ? __pfx___mutex_lock+0x10/0x10 [ 1231.189922][T15899] ? __pfx_vfs_read+0x10/0x10 [ 1231.189955][T15899] ? __fget_files+0x2a/0x420 [ 1231.189996][T15899] ? __fget_files+0x3a2/0x420 [ 1231.190022][T15899] ? __fget_files+0x2a/0x420 [ 1231.190058][T15899] ksys_read+0x150/0x270 [ 1231.190092][T15899] ? __pfx_ksys_read+0x10/0x10 [ 1231.190133][T15899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.190157][T15899] do_syscall_64+0x174/0x580 [ 1231.190185][T15899] ? trace_irq_disable+0x3b/0x140 [ 1231.190211][T15899] ? clear_bhb_loop+0x70/0xc0 [ 1231.190237][T15899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.190258][T15899] RIP: 0033:0x7f22e095e90e [ 1231.190286][T15899] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1231.190305][T15899] RSP: 002b:00007f22e188ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1231.190327][T15899] RAX: ffffffffffffffda RBX: 00007f22e18906c0 RCX: 00007f22e095e90e [ 1231.190342][T15899] RDX: 000000000000000f RSI: 00007f22e18900a0 RDI: 0000000000000005 [ 1231.190356][T15899] RBP: 00007f22e1890090 R08: 0000000000000000 R09: 0000000000000000 [ 1231.190369][T15899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1231.190382][T15899] R13: 00007f22e0c26038 R14: 00007f22e0c25fa0 R15: 00007ffeafcb4388 [ 1231.190416][T15899] [ 1231.193155][T15883] syzkaller0: entered promiscuous mode [ 1231.193175][T15883] syzkaller0: entered allmulticast mode [ 1231.215496][T15880] netlink: 'syz.4.10037': attribute type 5 has an invalid length. [ 1231.215518][T15880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10037'. [ 1231.743526][ T1606] block nbd3: Possible stuck request ffff888028025240: control (read@1024,1024B). Runtime 120 seconds [ 1231.765174][ T1606] block nbd3: Possible stuck request ffff888028025400: control (read@2048,1024B). Runtime 120 seconds [ 1231.785701][ T1606] block nbd3: Possible stuck request ffff8880280255c0: control (read@3072,1024B). Runtime 120 seconds [ 1233.703124][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1235.183014][T15887] geneve3: entered promiscuous mode [ 1235.188397][T15887] geneve3: entered allmulticast mode [ 1235.198222][T15900] batman_adv: batadv0: Adding interface: veth0 [ 1235.204955][T15900] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.232489][T15900] batman_adv: batadv0: Interface activated: veth0 [ 1235.239820][T15901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1235.267418][T15901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1235.290034][T15901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1235.311406][T15901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1235.354822][T15901] batman_adv: batadv0: Interface deactivated: veth0 [ 1235.371605][T15901] batman_adv: batadv0: Removing interface: veth0 [ 1235.384298][T15919] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10046'. [ 1235.420738][T15919] netlink: 'syz.2.10046': attribute type 2 has an invalid length. [ 1235.441675][T32657] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.470747][T32657] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.496683][T15919] netlink: 'syz.2.10046': attribute type 1 has an invalid length. [ 1235.530679][T32657] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.563700][T32657] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.575870][T15919] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10046'. [ 1235.698649][T15921] syzkaller1: entered promiscuous mode [ 1235.728264][T15921] syzkaller1: entered allmulticast mode [ 1235.885340][T15919] net_ratelimit: 9 callbacks suppressed [ 1235.885396][T15919] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1236.158990][T15946] netlink: 'syz.3.10054': attribute type 9 has an invalid length. [ 1236.359486][T15953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10053'. [ 1236.399233][T15929] lo speed is unknown, defaulting to 1000 [ 1236.656002][T15960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10057'. [ 1236.854348][T15963] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10058'. [ 1236.873249][T15963] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10058'. [ 1237.179307][T15978] netlink: 'syz.1.10060': attribute type 32 has an invalid length. [ 1237.214092][T15978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10060'. [ 1237.352854][T15978] bond4: Setting coupled_control to off (0) [ 1237.473589][T15992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10062'. [ 1237.713085][T15999] FAULT_INJECTION: forcing a failure. [ 1237.713085][T15999] name failslab, interval 1, probability 0, space 0, times 0 [ 1237.763856][T15998] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10064'. [ 1237.799905][T15999] CPU: 0 UID: 0 PID: 15999 Comm: syz.4.10065 Not tainted syzkaller #0 PREEMPT(full) [ 1237.799932][T15999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1237.799946][T15999] Call Trace: [ 1237.799955][T15999] [ 1237.799965][T15999] dump_stack_lvl+0xe8/0x150 [ 1237.800000][T15999] should_fail_ex+0x40c/0x560 [ 1237.800029][T15999] should_failslab+0xa8/0x100 [ 1237.800061][T15999] __kmalloc_noprof+0xfe/0x720 [ 1237.800087][T15999] ? rcu_is_watching+0x15/0xb0 [ 1237.800117][T15999] ? tomoyo_realpath_from_path+0xef/0x640 [ 1237.800150][T15999] ? tomoyo_realpath_from_path+0xef/0x640 [ 1237.800190][T15999] tomoyo_realpath_from_path+0xef/0x640 [ 1237.800237][T15999] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1237.800267][T15999] tomoyo_path_number_perm+0x246/0x5f0 [ 1237.800299][T15999] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1237.800326][T15999] ? __lock_acquire+0x683/0x2cf0 [ 1237.800371][T15999] ? hook_file_ioctl+0x1f0/0x5f0 [ 1237.800423][T15999] ? __fget_files+0x2a/0x420 [ 1237.800454][T15999] ? __fget_files+0x2a/0x420 [ 1237.800479][T15999] ? __fget_files+0x3a2/0x420 [ 1237.800505][T15999] ? __fget_files+0x2a/0x420 [ 1237.800546][T15999] security_file_ioctl+0xc3/0x2a0 [ 1237.800571][T15999] __se_sys_ioctl+0x47/0x170 [ 1237.800599][T15999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.800619][T15999] do_syscall_64+0x174/0x580 [ 1237.800642][T15999] ? trace_irq_disable+0x3b/0x140 [ 1237.800665][T15999] ? clear_bhb_loop+0x70/0xc0 [ 1237.800687][T15999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.800707][T15999] RIP: 0033:0x7f6754d9e0d9 [ 1237.800724][T15999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1237.800746][T15999] RSP: 002b:00007f6752ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1237.800766][T15999] RAX: ffffffffffffffda RBX: 00007f6755025fa0 RCX: 00007f6754d9e0d9 [ 1237.800780][T15999] RDX: 0000200000000100 RSI: 0000000000008993 RDI: 0000000000000003 [ 1237.800791][T15999] RBP: 00007f6752ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1237.800802][T15999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1237.800813][T15999] R13: 00007f6755026038 R14: 00007f6755025fa0 R15: 00007ffee1694688 [ 1237.800843][T15999] [ 1238.139514][T15999] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1238.454611][T16016] bridge3: entered promiscuous mode [ 1238.538578][T16016] bridge3: entered allmulticast mode [ 1239.286347][T16042] vlan2: entered allmulticast mode [ 1239.355099][T16042] bond0: entered allmulticast mode [ 1239.592081][T16050] bond0: (slave bond_slave_1): Releasing backup interface [ 1239.611999][T16052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10077'. [ 1239.785573][T16059] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1239.917377][T16062] FAULT_INJECTION: forcing a failure. [ 1239.917377][T16062] name failslab, interval 1, probability 0, space 0, times 0 [ 1240.011560][T16062] CPU: 0 UID: 0 PID: 16062 Comm: syz.2.10080 Not tainted syzkaller #0 PREEMPT(full) [ 1240.011585][T16062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1240.011596][T16062] Call Trace: [ 1240.011604][T16062] [ 1240.011612][T16062] dump_stack_lvl+0xe8/0x150 [ 1240.011643][T16062] should_fail_ex+0x40c/0x560 [ 1240.011666][T16062] should_failslab+0xa8/0x100 [ 1240.011694][T16062] __kmalloc_noprof+0xfe/0x720 [ 1240.011719][T16062] ? tomoyo_encode+0x2ad/0x570 [ 1240.011744][T16062] ? tomoyo_encode+0x2ad/0x570 [ 1240.011777][T16062] tomoyo_encode+0x2ad/0x570 [ 1240.011810][T16062] tomoyo_realpath_from_path+0x5fa/0x640 [ 1240.011847][T16062] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1240.011871][T16062] tomoyo_path_number_perm+0x246/0x5f0 [ 1240.011898][T16062] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1240.011921][T16062] ? __lock_acquire+0x683/0x2cf0 [ 1240.011958][T16062] ? hook_file_ioctl+0x1f0/0x5f0 [ 1240.012001][T16062] ? __fget_files+0x2a/0x420 [ 1240.012027][T16062] ? __fget_files+0x2a/0x420 [ 1240.012049][T16062] ? __fget_files+0x3a2/0x420 [ 1240.012083][T16062] ? __fget_files+0x2a/0x420 [ 1240.012129][T16062] security_file_ioctl+0xc3/0x2a0 [ 1240.012158][T16062] __se_sys_ioctl+0x47/0x170 [ 1240.012190][T16062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.012214][T16062] do_syscall_64+0x174/0x580 [ 1240.012243][T16062] ? trace_irq_disable+0x3b/0x140 [ 1240.012274][T16062] ? clear_bhb_loop+0x70/0xc0 [ 1240.012302][T16062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.012323][T16062] RIP: 0033:0x7fafaf39e0d9 [ 1240.012343][T16062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1240.012360][T16062] RSP: 002b:00007fafb02ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1240.012383][T16062] RAX: ffffffffffffffda RBX: 00007fafaf625fa0 RCX: 00007fafaf39e0d9 [ 1240.012398][T16062] RDX: 0000200000000100 RSI: 0000000000008993 RDI: 0000000000000003 [ 1240.012412][T16062] RBP: 00007fafb02ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1240.012425][T16062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1240.012438][T16062] R13: 00007fafaf626038 R14: 00007fafaf625fa0 R15: 00007ffe30af09c8 [ 1240.012473][T16062] [ 1240.012501][T16062] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1240.989695][T32720] Bluetooth: hci4: command 0x0406 tx timeout [ 1241.303747][T16076] bridge4: entered promiscuous mode [ 1241.309091][T16076] bridge4: entered allmulticast mode [ 1241.652725][T16089] syzkaller1: entered promiscuous mode [ 1241.671984][T16089] syzkaller1: entered allmulticast mode [ 1241.687403][T16092] netlink: 'syz.3.10087': attribute type 1 has an invalid length. [ 1241.725410][T16094] netlink: 'syz.3.10087': attribute type 1 has an invalid length. [ 1241.757050][T16087] syzkaller0: entered promiscuous mode [ 1241.794390][T16087] syzkaller0: entered allmulticast mode [ 1241.908795][T16110] netlink: 4412 bytes leftover after parsing attributes in process `syz.0.10092'. [ 1242.085866][T16092] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1242.475675][T16117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10094'. [ 1242.884399][T16136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10096'. [ 1242.906336][T16136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10096'. [ 1242.952536][T16137] xt_cgroup: invalid path, errno=-2 [ 1243.237274][T16144] bridge4: entered promiscuous mode [ 1243.277795][T16144] bridge4: entered allmulticast mode [ 1243.858979][T16177] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10108'. [ 1244.484961][T16182] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10110'. [ 1244.501329][T16180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10109'. [ 1245.265419][T16189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1245.285222][T16189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.384776][T16189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1245.394885][T16189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1245.409507][T16189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1245.421491][T16189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1245.455632][T16189] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1245.590542][T32669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.597817][T32669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1245.674358][T32669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.681620][T32669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1245.920113][T16217] bridge4: entered promiscuous mode [ 1245.955831][T16217] bridge4: entered allmulticast mode [ 1246.096054][T16224] tipc: Enabling of bearer rejected, failed to enable media [ 1246.292780][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10124'. [ 1246.352000][T16230] netlink: 'syz.3.10124': attribute type 30 has an invalid length. [ 1246.402592][T16230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10124'. [ 1246.798602][T16240] netlink: zone id is out of range [ 1246.834576][T16240] netlink: zone id is out of range [ 1246.852238][T16240] netlink: zone id is out of range [ 1246.857651][T16240] netlink: zone id is out of range [ 1246.864657][T16240] netlink: zone id is out of range [ 1246.869976][T16240] netlink: zone id is out of range [ 1246.875560][T16240] netlink: zone id is out of range [ 1246.883904][T16248] netlink: 'syz.3.10128': attribute type 1 has an invalid length. [ 1246.892408][T16240] netlink: zone id is out of range [ 1246.903119][T16240] netlink: zone id is out of range [ 1247.379751][T16260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10134'. [ 1247.416381][T16260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10134'. [ 1247.427562][T16261] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10133'. [ 1247.594487][T16257] ipip1: entered promiscuous mode [ 1247.972798][T16277] netlink: 'syz.3.10135': attribute type 28 has an invalid length. [ 1250.277427][T16303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10147'. [ 1250.504282][T16310] net_ratelimit: 490 callbacks suppressed [ 1250.504298][T16310] ip_tables: iptables: counters copy to user failed while replacing table [ 1250.593409][T16308] netlink: Unknown conntrack attr (type=16383, max=9) [ 1250.688226][T16308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1250.774570][T16303] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1250.972955][T16303] macsec1: entered promiscuous mode [ 1251.001102][T16303] dummy0: entered promiscuous mode [ 1251.018421][T16303] macsec1: entered allmulticast mode [ 1251.042839][T16303] dummy0: entered allmulticast mode [ 1251.068805][T16303] dummy0: left allmulticast mode [ 1251.089927][T16322] netlink: 'syz.4.10151': attribute type 1 has an invalid length. [ 1251.145521][T22183] dummy0: left promiscuous mode [ 1251.704381][ T1606] block nbd0: Possible stuck request ffff888027f00000: control (read@0,1024B). Runtime 360 seconds [ 1251.744008][ T1606] block nbd0: Possible stuck request ffff888027f001c0: control (read@1024,3072B). Runtime 360 seconds [ 1252.293540][T16353] bond0: (slave ip6gretap0): Releasing backup interface [ 1252.302598][T16355] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10156'. [ 1252.455805][T16363] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1252.483098][T16353] bond0: (slave bond_slave_0): Releasing backup interface [ 1252.595342][T16353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1252.623300][T16353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1253.098650][T16353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1253.107403][T16353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1253.149564][T16353] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1253.267050][T16376] netlink: 268 bytes leftover after parsing attributes in process `syz.0.10157'. [ 1253.324333][T16376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10157'. [ 1253.664120][T16399] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10165'. [ 1253.735281][T16402] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 4, id = 0 [ 1253.747238][T16399] ªªªªªª: renamed from vlan0 (while UP) [ 1253.772850][T16403] IPVS: set_ctl: invalid protocol: 20 16.0.1.0:0 [ 1253.786217][T28179] IPVS: starting estimator thread 0... [ 1254.021483][T16407] IPVS: using max 35 ests per chain, 84000 per kthread [ 1254.076140][T16421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10169'. [ 1254.122903][T16421] netlink: 'syz.0.10169': attribute type 1 has an invalid length. [ 1254.264280][T16426] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10169'. [ 1254.517049][T16421] bond9: entered promiscuous mode [ 1254.591708][T16421] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1254.639724][T16426] bond9: entered allmulticast mode [ 1254.792934][T16428] bond9: (slave bridge5): making interface the new active one [ 1254.852086][T16428] bridge5: entered promiscuous mode [ 1254.877508][T16428] bridge5: entered allmulticast mode [ 1254.884859][ T1631] block nbd1: Possible stuck request ffff888027f3e000: control (read@0,1024B). Runtime 180 seconds [ 1254.895775][ T1631] block nbd1: Possible stuck request ffff888027f3e1c0: control (read@1024,1024B). Runtime 180 seconds [ 1254.907116][ T1631] block nbd1: Possible stuck request ffff888027f3e380: control (read@2048,1024B). Runtime 180 seconds [ 1254.918263][ T1631] block nbd1: Possible stuck request ffff888027f3e540: control (read@3072,1024B). Runtime 180 seconds [ 1254.997202][T16428] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 1255.984745][ T30] audit: type=1800 audit(1786126525.862:37): pid=16463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10183" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072636F6E6E6563742061613A61613A61613A61613A61613A31302030 dev="tmpfs" ino=1063 res=0 errno=0 [ 1256.092047][T16467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10184'. [ 1256.112272][T16467] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1256.365339][T16474] IPVS: set_ctl: invalid protocol: 46 100.1.1.1:20002 [ 1256.490927][T16478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10187'. [ 1257.707449][T16507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10195'. [ 1257.895338][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10197'. [ 1257.995449][T16516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1258.310756][ T4975] udevd[4975]: worker [32654] /devices/virtual/block/nbd1 timeout; kill it [ 1258.339180][ T4975] udevd[4975]: seq 50119 '/devices/virtual/block/nbd1' killed [ 1258.432580][T16528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10202'. [ 1261.118301][T16556] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10208'. [ 1261.140210][T16563] netlink: 'syz.3.10210': attribute type 4 has an invalid length. [ 1261.202196][T16566] netlink: 'syz.3.10210': attribute type 4 has an invalid length. [ 1261.414361][T16574] syzkaller0: entered promiscuous mode [ 1261.427087][T16574] syzkaller0: entered allmulticast mode [ 1261.891474][ T1606] block nbd3: Possible stuck request ffff888028025080: control (read@0,1024B). Runtime 150 seconds [ 1261.924925][ T1606] block nbd3: Possible stuck request ffff888028025240: control (read@1024,1024B). Runtime 150 seconds [ 1261.947744][ T1606] block nbd3: Possible stuck request ffff888028025400: control (read@2048,1024B). Runtime 150 seconds [ 1261.968285][ T1606] block nbd3: Possible stuck request ffff8880280255c0: control (read@3072,1024B). Runtime 150 seconds [ 1263.398669][T16594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10220'. [ 1263.476362][T16595] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10218'. [ 1263.513304][T16595] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10218'. [ 1263.718265][T16609] netlink: 'syz.1.10223': attribute type 3 has an invalid length. [ 1263.774960][T16609] netlink: 'syz.1.10223': attribute type 3 has an invalid length. [ 1264.642583][T16635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10230'. [ 1264.699957][T16637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10230'. [ 1264.773045][T16644] netlink: 'syz.1.10230': attribute type 25 has an invalid length. [ 1264.885081][T16635] team0: entered promiscuous mode [ 1264.900212][T16635] team0: entered allmulticast mode [ 1264.924464][T16635] 8021q: adding VLAN 0 to HW filter on device team0 [ 1264.986640][T16637] team1: entered promiscuous mode [ 1265.004934][T16637] team1: entered allmulticast mode [ 1265.017675][T16637] 8021q: adding VLAN 0 to HW filter on device team1 [ 1266.501926][T12191] Bluetooth: hci5: command 0x0406 tx timeout [ 1267.612909][T16638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1267.902899][T16673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10238'. [ 1267.914025][T16671] syzkaller0: entered promiscuous mode [ 1267.929015][T16671] syzkaller0: entered allmulticast mode [ 1269.421332][T16714] bridge0: entered allmulticast mode [ 1269.486545][T16704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1269.612386][T16723] netlink: 'syz.4.10249': attribute type 2 has an invalid length. [ 1270.084692][T16736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10252'. [ 1270.108505][T16738] bridge6: entered promiscuous mode [ 1270.131568][T16740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10254'. [ 1270.140882][T16738] bridge6: entered allmulticast mode [ 1270.371900][T16747] xt_l2tp: invalid flags combination: 8 [ 1271.198163][T16769] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10260'. [ 1271.260390][T16769] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10260'. [ 1271.288451][T16769] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10260'. [ 1271.438379][T16769] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10260'. [ 1271.465689][T16769] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10260'. [ 1271.498777][T16769] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10260'. [ 1271.828061][T16769] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10260'. [ 1271.877868][T16769] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10260'. [ 1272.140545][T16794] netlink: 'syz.3.10265': attribute type 39 has an invalid length. [ 1272.784930][T16797] bridge5: entered promiscuous mode [ 1272.825712][T16797] bridge5: entered allmulticast mode [ 1274.369772][T16863] netlink: zone id is out of range [ 1274.405289][T16863] netlink: zone id is out of range [ 1274.502763][T16863] netlink: zone id is out of range [ 1274.531997][T16878] xt_hashlimit: size too large, truncated to 1048576 [ 1274.551316][T16863] netlink: zone id is out of range [ 1274.559237][T16863] netlink: zone id is out of range [ 1274.572595][T16880] netlink: 'syz.0.10284': attribute type 1 has an invalid length. [ 1274.583668][T16863] netlink: zone id is out of range [ 1274.606668][T16863] netlink: zone id is out of range [ 1274.628042][T16863] netlink: zone id is out of range [ 1274.650341][T16863] netlink: zone id is out of range [ 1274.687613][T16863] netlink: zone id is out of range [ 1274.778255][T16865] bridge3: entered promiscuous mode [ 1274.803256][T16865] bridge3: entered allmulticast mode [ 1275.537902][T16905] netlink: 'syz.0.10293': attribute type 83 has an invalid length. [ 1275.641424][T16912] __nla_validate_parse: 9 callbacks suppressed [ 1275.641441][T16912] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10293'. [ 1276.493263][T16945] netlink: 204 bytes leftover after parsing attributes in process `syz.2.10305'. [ 1276.608544][T16947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10303'. [ 1276.753849][T32720] Bluetooth: hci2: command 0x0406 tx timeout [ 1277.164530][T16972] FAULT_INJECTION: forcing a failure. [ 1277.164530][T16972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1277.218696][T16972] CPU: 0 UID: 0 PID: 16972 Comm: syz.2.10310 Not tainted syzkaller #0 PREEMPT(full) [ 1277.218723][T16972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1277.218735][T16972] Call Trace: [ 1277.218743][T16972] [ 1277.218751][T16972] dump_stack_lvl+0xe8/0x150 [ 1277.218781][T16972] should_fail_ex+0x40c/0x560 [ 1277.218804][T16972] _copy_from_iter+0x1d3/0x1660 [ 1277.218825][T16972] ? kmem_cache_alloc_node_noprof+0x1c1/0x610 [ 1277.218848][T16972] ? rcu_is_watching+0x15/0xb0 [ 1277.218892][T16972] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1277.218915][T16972] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1277.218954][T16972] ? __pfx__copy_from_iter+0x10/0x10 [ 1277.218976][T16972] ? __alloc_skb+0x276/0x7a0 [ 1277.219003][T16972] ? __alloc_skb+0x276/0x7a0 [ 1277.219037][T16972] ? netlink_sendmsg+0x650/0xb40 [ 1277.219059][T16972] ? skb_put+0x112/0x210 [ 1277.219080][T16972] netlink_sendmsg+0x6c0/0xb40 [ 1277.219111][T16972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1277.219138][T16972] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1277.219173][T16972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1277.219194][T16972] sock_sendmsg_nosec+0x13a/0x180 [ 1277.219223][T16972] ____sys_sendmsg+0x54e/0x850 [ 1277.219253][T16972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1277.219282][T16972] ? import_iovec+0x73/0xa0 [ 1277.219315][T16972] ___sys_sendmsg+0x2a5/0x360 [ 1277.219336][T16972] ? __lock_acquire+0x683/0x2cf0 [ 1277.219385][T16972] ? __pfx____sys_sendmsg+0x10/0x10 [ 1277.219447][T16972] ? __fget_files+0x2a/0x420 [ 1277.219473][T16972] ? __fget_files+0x3a2/0x420 [ 1277.219511][T16972] __x64_sys_sendmsg+0x1b1/0x290 [ 1277.219538][T16972] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1277.219581][T16972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.219605][T16972] do_syscall_64+0x174/0x580 [ 1277.219640][T16972] ? trace_irq_disable+0x3b/0x140 [ 1277.219665][T16972] ? clear_bhb_loop+0x70/0xc0 [ 1277.219692][T16972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.219714][T16972] RIP: 0033:0x7fafaf39e0d9 [ 1277.219733][T16972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1277.219752][T16972] RSP: 002b:00007fafb02a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1277.219775][T16972] RAX: ffffffffffffffda RBX: 00007fafaf626180 RCX: 00007fafaf39e0d9 [ 1277.219791][T16972] RDX: 0000000000044084 RSI: 0000200000004bc0 RDI: 0000000000000006 [ 1277.219805][T16972] RBP: 00007fafb02a8090 R08: 0000000000000000 R09: 0000000000000000 [ 1277.219818][T16972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1277.219831][T16972] R13: 00007fafaf626218 R14: 00007fafaf626180 R15: 00007ffe30af09c8 [ 1277.219865][T16972] [ 1278.118033][T16996] mac80211_hwsim hwsim112 syzkaller0: entered promiscuous mode [ 1278.128260][T16996] mac80211_hwsim hwsim112 syzkaller0: entered allmulticast mode [ 1278.344174][T17012] netlink: 'syz.1.10322': attribute type 1 has an invalid length. [ 1278.643113][T17022] tc_dump_action: action bad kind [ 1278.709526][T17023] netlink: 'syz.1.10327': attribute type 1 has an invalid length. [ 1278.741379][T17029] FAULT_INJECTION: forcing a failure. [ 1278.741379][T17029] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.765306][T17023] netlink: 232 bytes leftover after parsing attributes in process `syz.1.10327'. [ 1278.799753][T17029] CPU: 0 UID: 0 PID: 17029 Comm: syz.3.10328 Not tainted syzkaller #0 PREEMPT(full) [ 1278.799781][T17029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1278.799794][T17029] Call Trace: [ 1278.799802][T17029] [ 1278.799812][T17029] dump_stack_lvl+0xe8/0x150 [ 1278.799846][T17029] should_fail_ex+0x40c/0x560 [ 1278.799875][T17029] should_failslab+0xa8/0x100 [ 1278.799907][T17029] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1278.799933][T17029] ? skb_clone+0x212/0x3a0 [ 1278.799956][T17029] ? skb_clone+0x212/0x3a0 [ 1278.799987][T17029] skb_clone+0x212/0x3a0 [ 1278.800024][T17029] __netlink_deliver_tap+0x413/0x860 [ 1278.800063][T17029] ? netlink_deliver_tap+0x2e/0x1b0 [ 1278.800089][T17029] netlink_deliver_tap+0x19c/0x1b0 [ 1278.800115][T17029] netlink_unicast+0x77f/0x940 [ 1278.800166][T17029] netlink_sendmsg+0x813/0xb40 [ 1278.800202][T17029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1278.800234][T17029] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1278.800273][T17029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1278.800296][T17029] sock_sendmsg_nosec+0x13a/0x180 [ 1278.800329][T17029] ____sys_sendmsg+0x54e/0x850 [ 1278.800359][T17029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1278.800393][T17029] ? import_iovec+0x73/0xa0 [ 1278.800426][T17029] ___sys_sendmsg+0x2a5/0x360 [ 1278.800449][T17029] ? __lock_acquire+0x683/0x2cf0 [ 1278.800481][T17029] ? __pfx____sys_sendmsg+0x10/0x10 [ 1278.800544][T17029] ? __fget_files+0x2a/0x420 [ 1278.800572][T17029] ? __fget_files+0x3a2/0x420 [ 1278.800610][T17029] __x64_sys_sendmsg+0x1b1/0x290 [ 1278.800637][T17029] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1278.800682][T17029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.800706][T17029] do_syscall_64+0x174/0x580 [ 1278.800734][T17029] ? trace_irq_disable+0x3b/0x140 [ 1278.800760][T17029] ? clear_bhb_loop+0x70/0xc0 [ 1278.800787][T17029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.800809][T17029] RIP: 0033:0x7f22e099e0d9 [ 1278.800829][T17029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1278.800846][T17029] RSP: 002b:00007f22e186f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1278.800868][T17029] RAX: ffffffffffffffda RBX: 00007f22e0c26090 RCX: 00007f22e099e0d9 [ 1278.800884][T17029] RDX: 0000000000044084 RSI: 0000200000004bc0 RDI: 0000000000000006 [ 1278.800897][T17029] RBP: 00007f22e186f090 R08: 0000000000000000 R09: 0000000000000000 [ 1278.800911][T17029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1278.800923][T17029] R13: 00007f22e0c26128 R14: 00007f22e0c26090 R15: 00007ffeafcb4388 [ 1278.800957][T17029] [ 1278.848703][T17027] bond0: entered promiscuous mode [ 1278.912223][T17023] netlink: 'syz.1.10327': attribute type 1 has an invalid length. [ 1278.940795][T17024] netlink: 'syz.1.10327': attribute type 1 has an invalid length. [ 1278.940819][T17024] netlink: 232 bytes leftover after parsing attributes in process `syz.1.10327'. [ 1278.940837][T17024] netlink: 'syz.1.10327': attribute type 1 has an invalid length. [ 1279.184543][T17044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10331'. [ 1279.737854][T17060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10333'. [ 1279.797501][T17046] bond6 (unregistering): Released all slaves [ 1280.252559][T17074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10337'. [ 1280.295878][T28177] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1280.338076][T28177] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1280.382301][T17079] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10337'. [ 1280.410476][T28177] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1280.638414][T17074] net_ratelimit: 55 callbacks suppressed [ 1280.638437][T17074] netlink: NAT attribute has 1 unknown bytes [ 1280.676567][T17074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1280.702756][T28179] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1280.863357][T17093] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10341'. [ 1280.918075][T17095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10342'. [ 1281.058142][T17104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10344'. [ 1281.183637][T17104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10344'. [ 1281.341337][T17086] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1281.668941][T17121] block nbd0: reconnected socket [ 1281.689971][T17121] nbd: socks must be embedded in a SOCK_ITEM attr [ 1282.016185][T17130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10346'. [ 1282.228780][T32720] block nbd0: Receive control failed (result -32) [ 1282.372346][ T1606] block nbd0: Possible stuck request ffff888027f00000: control (read@0,1024B). Runtime 390 seconds [ 1282.433215][T17140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10352'. [ 1282.446164][T15910] block nbd0: Dead connection, failed to find a fallback [ 1282.471135][T17145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10351'. [ 1282.480946][ T1606] block nbd0: Possible stuck request ffff888027f001c0: control (read@1024,3072B). Runtime 390 seconds [ 1282.508879][T17149] FAULT_INJECTION: forcing a failure. [ 1282.508879][T17149] name failslab, interval 1, probability 0, space 0, times 0 [ 1282.527500][T17140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10352'. [ 1282.538105][T15910] block nbd0: shutting down sockets [ 1282.553183][T15910] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1282.575754][T15910] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1282.577715][T17149] CPU: 0 UID: 0 PID: 17149 Comm: syz.4.10354 Not tainted syzkaller #0 PREEMPT(full) [ 1282.577770][T17149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1282.577797][T17149] Call Trace: [ 1282.577815][T17149] [ 1282.577839][T17149] dump_stack_lvl+0xe8/0x150 [ 1282.577911][T17149] should_fail_ex+0x40c/0x560 [ 1282.577967][T17149] should_failslab+0xa8/0x100 [ 1282.578035][T17149] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1282.578088][T17149] ? local_lock_release+0x9c/0x160 [ 1282.578158][T17149] ? __alloc_skb+0x1d7/0x7a0 [ 1282.578229][T17149] ? __alloc_skb+0x1d7/0x7a0 [ 1282.578309][T17149] __alloc_skb+0x1d7/0x7a0 [ 1282.578397][T17149] netlink_ack+0x136/0xb30 [ 1282.578441][T17149] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1282.578555][T17149] ? __pfx_ref_tracker_free+0x10/0x10 [ 1282.578636][T17149] netlink_rcv_skb+0x2a4/0x4a0 [ 1282.578680][T17149] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1282.578758][T17149] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1282.578867][T17149] ? down_read+0x2be/0x330 [ 1282.578944][T17149] genl_rcv+0x28/0x40 [ 1282.579008][T17149] netlink_unicast+0x7bb/0x940 [ 1282.579077][T17149] netlink_sendmsg+0x813/0xb40 [ 1282.579157][T17149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1282.579223][T17149] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1282.579316][T17149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1282.579389][T17149] sock_sendmsg_nosec+0x13a/0x180 [ 1282.579465][T17149] ____sys_sendmsg+0x54e/0x850 [ 1282.579538][T17149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1282.579623][T17149] ? import_iovec+0x73/0xa0 [ 1282.579706][T17149] ___sys_sendmsg+0x2a5/0x360 [ 1282.579772][T17149] ? __lock_acquire+0x683/0x2cf0 [ 1282.579847][T17149] ? __pfx____sys_sendmsg+0x10/0x10 [ 1282.580001][T17149] ? __fget_files+0x2a/0x420 [ 1282.580092][T17149] ? __fget_files+0x3a2/0x420 [ 1282.580206][T17149] __x64_sys_sendmsg+0x1b1/0x290 [ 1282.580280][T17149] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1282.580393][T17149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.580456][T17149] do_syscall_64+0x174/0x580 [ 1282.580529][T17149] ? trace_irq_disable+0x3b/0x140 [ 1282.580600][T17149] ? clear_bhb_loop+0x70/0xc0 [ 1282.580654][T17149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.580699][T17149] RIP: 0033:0x7f6754d9e0d9 [ 1282.580739][T17149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1282.580774][T17149] RSP: 002b:00007f6752fd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1282.580822][T17149] RAX: ffffffffffffffda RBX: 00007f6755026090 RCX: 00007f6754d9e0d9 [ 1282.580852][T17149] RDX: 0000000000044084 RSI: 0000200000004bc0 RDI: 0000000000000006 [ 1282.580881][T17149] RBP: 00007f6752fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1282.580909][T17149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1282.580934][T17149] R13: 00007f6755026128 R14: 00007f6755026090 R15: 00007ffee1694688 [ 1282.580999][T17149] [ 1282.590782][T32720] Bluetooth: hci3: command 0x0406 tx timeout [ 1282.906621][T17158] netlink: 'syz.1.10356': attribute type 49 has an invalid length. [ 1283.013345][T17161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10357'. [ 1283.283703][T15910] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 1283.303407][T15910] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1283.320132][T15910] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1283.337687][T15910] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1283.359027][T15910] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1283.386432][T15910] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1283.403967][T15910] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1283.419319][T15910] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1283.436205][T15910] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1283.535318][T15910] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1283.554412][T15910] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1283.570572][T15910] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1283.582585][ T1631] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1283.594731][ T1631] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1283.607334][ T1631] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1283.617992][ T1631] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1283.632380][ T1631] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1283.642354][ T1631] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1283.667840][ T387] ldm_validate_partition_table(): Disk read failed. [ 1283.726952][ T387] Dev nbd0: unable to read RDB block 0 [ 1283.754291][T17158] ip6gretap0: entered promiscuous mode [ 1283.795891][T17158] ip6gretap0: entered allmulticast mode [ 1283.831893][ T387] nbd0: unable to read partition table [ 1283.951427][ T4975] udevd[4975]: worker [387] terminated by signal 9 (Killed) [ 1283.977385][ T4975] udevd[4975]: worker [387] failed while handling '/devices/virtual/block/nbd0' [ 1283.991903][T17171] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1284.002144][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10358'. [ 1284.207395][T17165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.769982][T17210] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1284.903287][ T1631] block nbd1: Possible stuck request ffff888027f3e000: control (read@0,1024B). Runtime 210 seconds [ 1284.914168][ T1631] block nbd1: Possible stuck request ffff888027f3e1c0: control (read@1024,1024B). Runtime 210 seconds [ 1284.944425][ T1631] block nbd1: Possible stuck request ffff888027f3e380: control (read@2048,1024B). Runtime 210 seconds [ 1284.956103][ T1631] block nbd1: Possible stuck request ffff888027f3e540: control (read@3072,1024B). Runtime 210 seconds [ 1285.334057][T17226] bridge3: entered promiscuous mode [ 1285.371973][T17226] bridge3: entered allmulticast mode [ 1285.683243][T17226] team0: Port device bridge3 added [ 1285.787762][T17234] tipc: Enabling of bearer rejected, failed to enable media [ 1286.496375][T17268] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1286.555195][T17268] __nla_validate_parse: 3 callbacks suppressed [ 1286.555213][T17268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10381'. [ 1286.608353][T17272] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10382'. [ 1286.794515][T17275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10383'. [ 1289.299892][T17292] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10388'. [ 1289.313796][T17294] bridge3: entered promiscuous mode [ 1289.319036][T17294] bridge3: entered allmulticast mode [ 1289.392918][T17297] netlink: 9 bytes leftover after parsing attributes in process `syz.4.10390'. [ 1289.445529][T17303] netlink: 5 bytes leftover after parsing attributes in process `syz.4.10390'. [ 1289.533838][T17297] gretap0: entered promiscuous mode [ 1289.589825][T17303] 0ªî{X¹¦: renamed from gretap0 [ 1289.668997][T17303] 0ªî{X¹¦: left promiscuous mode [ 1289.888878][T17311] netlink: 'syz.3.10393': attribute type 2 has an invalid length. [ 1289.902671][T17303] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1290.415029][T17316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1290.725363][T17330] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1290.793499][T17330] Cannot find map_set index 2 as target [ 1291.241755][ T4975] udevd[4975]: worker [10290] /devices/virtual/block/nbd3 timeout; kill it [ 1291.266566][ T4975] udevd[4975]: seq 52074 '/devices/virtual/block/nbd3' killed [ 1291.697949][T17356] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10406'. [ 1291.733158][T17356] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1291.752478][T17356] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1291.790484][T17356] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1291.856101][T17356] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1291.917924][T17356] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1291.938355][T17363] syzkaller1: entered promiscuous mode [ 1291.955869][T17356] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1291.964037][T17363] syzkaller1: entered allmulticast mode [ 1291.988441][T17356] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1292.006381][T17356] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1292.023961][T17356] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1292.096870][T15910] block nbd3: Possible stuck request ffff888028025080: control (read@0,1024B). Runtime 180 seconds [ 1292.120412][T15910] block nbd3: Possible stuck request ffff888028025240: control (read@1024,1024B). Runtime 180 seconds [ 1292.144391][T15910] block nbd3: Possible stuck request ffff888028025400: control (read@2048,1024B). Runtime 180 seconds [ 1292.199785][T15910] block nbd3: Possible stuck request ffff8880280255c0: control (read@3072,1024B). Runtime 180 seconds [ 1292.594922][T17372] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 1293.032855][T17381] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10414'. [ 1293.101970][T17381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10414'. [ 1293.257947][T17395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10416'. [ 1293.522478][T17405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10419'. [ 1293.631935][T17402] lo speed is unknown, defaulting to 1000 [ 1293.788667][T17417] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1294.788410][T17429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10424'. [ 1295.527288][T17479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10434'. [ 1295.649762][T17479] batadv0: entered promiscuous mode [ 1295.730631][T17485] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10434'. [ 1295.790400][T17479] macsec0: entered promiscuous mode [ 1295.808985][T17479] macsec0: entered allmulticast mode [ 1295.841180][T17479] batadv0: entered allmulticast mode [ 1295.870167][T17479] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 1295.904582][T17479] batadv0: left allmulticast mode [ 1295.910010][T17479] batadv0: left promiscuous mode [ 1297.157657][T17524] x_tables: duplicate underflow at hook 1 [ 1297.296494][T17532] netlink: 144 bytes leftover after parsing attributes in process `syz.2.10444'. [ 1297.508900][T17538] netlink: 'syz.0.10445': attribute type 21 has an invalid length. [ 1297.612821][T17543] netlink: 80 bytes leftover after parsing attributes in process `syz.3.10446'. [ 1298.017019][T17563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10451'. [ 1298.037470][T17549] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10447'. [ 1298.067464][T17555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10448'. [ 1298.130629][T17555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10448'. [ 1298.168092][T17556] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10447'. [ 1299.209843][T17603] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10460'. [ 1299.548861][T17613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10462'. [ 1300.389808][T17636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10470'. [ 1301.142939][T17641] syzkaller0: entered promiscuous mode [ 1301.182573][T17641] syzkaller0: entered allmulticast mode [ 1303.434000][T17699] __nla_validate_parse: 2 callbacks suppressed [ 1303.434019][T17699] netlink: 124 bytes leftover after parsing attributes in process `syz.0.10480'. [ 1305.385321][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1306.817408][T17670] lo speed is unknown, defaulting to 1000 [ 1307.047752][T17718] veth1_to_bond: entered allmulticast mode [ 1307.137853][T17718] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10485'. [ 1307.231743][T17718] veth1_to_bond: entered promiscuous mode [ 1307.252434][T17718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10485'. [ 1307.343411][T17718] veth1_to_bond (unregistering): left allmulticast mode [ 1307.384892][T17718] veth1_to_bond (unregistering): left promiscuous mode [ 1308.703963][T17758] netlink: 'syz.1.10496': attribute type 13 has an invalid length. [ 1308.746040][T17758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10496'. [ 1308.777785][T17765] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10497'. [ 1308.816722][T17766] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1309.054762][T17778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1309.876226][T17791] bond3: (slave veth1_virt_wifi): Device is not bonding slave [ 1309.909487][T17791] bond3: option active_slave: invalid value (veth1_virt_wifi) [ 1309.971728][T17791] bond3 (unregistering): Released all slaves [ 1310.030468][T17799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10502'. [ 1310.083214][T17799] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10502'. [ 1310.156562][T17804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1310.225839][T17810] bond0: invalid NS target ff00:0:0:f9:: specified for addition [ 1310.255888][T17810] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 1310.585626][T17824] bridge5: entered promiscuous mode [ 1310.609283][T17826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1310.640364][T17824] bridge5: entered allmulticast mode [ 1310.725597][T17831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1310.803227][T17826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1310.855701][T17834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10512'. [ 1310.916010][T17834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10512'. [ 1311.049172][T17839] netlink: 763 bytes leftover after parsing attributes in process `syz.2.10513'. [ 1311.104518][T17840] netlink: 112 bytes leftover after parsing attributes in process `syz.4.10514'. [ 1311.218026][T17844] netlink: 'syz.4.10514': attribute type 2 has an invalid length. [ 1311.247090][T17844] netlink: 'syz.4.10514': attribute type 2 has an invalid length. [ 1311.455054][T17853] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10518'. [ 1311.567971][T17851] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.600824][T17855] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10518'. [ 1311.757643][T17851] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.944841][T17851] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.139551][T17869] bond5: option min_links: invalid value (18446744073709551612) [ 1312.147659][T17869] bond5: option min_links: allowed values 0 - 2147483647 [ 1312.235752][T17869] bond5 (unregistering): Released all slaves [ 1312.393364][T17851] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.764300][T32691] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.201387][T32657] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.402697][T32685] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.560916][T32690] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.101134][T17919] netlink: 'syz.0.10531': attribute type 1 has an invalid length. [ 1315.172217][ T1631] block nbd1: Possible stuck request ffff888027f3e000: control (read@0,1024B). Runtime 240 seconds [ 1315.183136][ T1631] block nbd1: Possible stuck request ffff888027f3e1c0: control (read@1024,1024B). Runtime 240 seconds [ 1315.194317][ T1631] block nbd1: Possible stuck request ffff888027f3e380: control (read@2048,1024B). Runtime 240 seconds [ 1315.205684][ T1631] block nbd1: Possible stuck request ffff888027f3e540: control (read@3072,1024B). Runtime 240 seconds [ 1318.197033][T17919] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1318.395657][T17928] netlink: 'syz.1.10535': attribute type 1 has an invalid length. [ 1319.025764][T17928] netlink: 'syz.1.10535': attribute type 7 has an invalid length. [ 1322.958673][T17947] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1322.965042][T15910] block nbd3: Possible stuck request ffff888028025080: control (read@0,1024B). Runtime 210 seconds [ 1322.986678][T15910] block nbd3: Possible stuck request ffff888028025240: control (read@1024,1024B). Runtime 210 seconds [ 1323.007230][T15910] block nbd3: Possible stuck request ffff888028025400: control (read@2048,1024B). Runtime 210 seconds [ 1323.027603][T15910] block nbd3: Possible stuck request ffff8880280255c0: control (read@3072,1024B). Runtime 210 seconds [ 1323.354338][T17946] lo speed is unknown, defaulting to 1000 [ 1327.010055][T17965] bridge4: entered promiscuous mode [ 1327.058748][T17965] bridge4: entered allmulticast mode [ 1328.833583][T17980] openvswitch: netlink: Message has 8 unknown bytes. [ 1328.932765][T17980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1329.171687][T17984] netlink: 'syz.3.10549': attribute type 1 has an invalid length. [ 1329.260138][T17989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1329.274450][T17984] __nla_validate_parse: 3 callbacks suppressed [ 1329.274465][T17984] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10549'. [ 1329.395609][T17984] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10549'. [ 1330.584453][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10554'. [ 1332.551339][T18019] netlink: 'syz.2.10556': attribute type 3 has an invalid length. [ 1333.736138][T18022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10557'. [ 1336.225743][T18050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10564'. [ 1341.222808][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1341.466193][T18069] netlink: 524 bytes leftover after parsing attributes in process `syz.0.10565'. [ 1343.333677][T32720] Bluetooth: hci3: command 0x0406 tx timeout [ 1345.707183][ T1631] block nbd1: Possible stuck request ffff888027f3e000: control (read@0,1024B). Runtime 270 seconds [ 1345.718564][ T1631] block nbd1: Possible stuck request ffff888027f3e1c0: control (read@1024,1024B). Runtime 270 seconds [ 1345.894078][ T1631] block nbd1: Possible stuck request ffff888027f3e380: control (read@2048,1024B). Runtime 270 seconds [ 1345.905293][ T1631] block nbd1: Possible stuck request ffff888027f3e540: control (read@3072,1024B). Runtime 270 seconds [ 1349.829600][T18110] 0ªî{X¹¦: entered promiscuous mode [ 1350.535721][T18123] bridge5: entered promiscuous mode [ 1350.704028][T18123] bridge5: entered allmulticast mode [ 1352.004113][T18123] team0: Port device bridge5 added [ 1352.828519][T18124] syzkaller0: entered promiscuous mode [ 1352.898151][T18124] syzkaller0: entered allmulticast mode [ 1353.419593][T15910] block nbd3: Possible stuck request ffff888028025080: control (read@0,1024B). Runtime 240 seconds [ 1353.439279][T15910] block nbd3: Possible stuck request ffff888028025240: control (read@1024,1024B). Runtime 240 seconds [ 1353.460128][T15910] block nbd3: Possible stuck request ffff888028025400: control (read@2048,1024B). Runtime 240 seconds [ 1353.479930][T15910] block nbd3: Possible stuck request ffff8880280255c0: control (read@3072,1024B). Runtime 240 seconds [ 1356.676651][T32720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1356.690609][T32720] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1356.698768][T32720] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1356.843587][T32720] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1356.853738][T32720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1356.879062][T12191] [ 1356.881418][T12191] ====================================================== [ 1356.888441][T12191] WARNING: possible circular locking dependency detected [ 1356.895485][T12191] syzkaller #0 Not tainted [ 1356.899913][T12191] ------------------------------------------------------ [ 1356.906950][T12191] kworker/u9:0/12191 is trying to acquire lock: [ 1356.913211][T12191] ffff88801c295210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 1356.923687][T12191] [ 1356.923687][T12191] but task is already holding lock: [ 1356.931068][T12191] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 1356.940497][T12191] [ 1356.940497][T12191] which lock already depends on the new lock. [ 1356.940497][T12191] [ 1356.950919][T12191] [ 1356.950919][T12191] the existing dependency chain (in reverse order) is: [ 1356.960034][T12191] [ 1356.960034][T12191] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 1356.968063][T12191] down_write+0x96/0x200 [ 1356.972875][T12191] kernfs_add_one+0x41/0x5e0 [ 1356.978019][T12191] kernfs_create_dir_ns+0x1a1/0x230 [ 1356.983758][T12191] internal_create_group+0x440/0x1180 [ 1356.989673][T12191] cpuhp_invoke_callback+0x434/0x810 [ 1356.995504][T12191] cpuhp_issue_call+0x3f0/0x750 [ 1357.000890][T12191] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 1357.007497][T12191] __cpuhp_setup_state+0x3f/0x60 [ 1357.012985][T12191] do_one_initcall+0x250/0x870 [ 1357.018300][T12191] do_initcall_level+0x10a/0x1a0 [ 1357.023784][T12191] do_initcalls+0x59/0xa0 [ 1357.028649][T12191] kernel_init_freeable+0x29d/0x3e0 [ 1357.034386][T12191] kernel_init+0x1d/0x1d0 [ 1357.039248][T12191] ret_from_fork+0x514/0xb70 [ 1357.044390][T12191] ret_from_fork_asm+0x1a/0x30 [ 1357.049712][T12191] [ 1357.049712][T12191] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1357.057567][T12191] [ 1357.057567][T12191] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1357.065317][T12191] cpus_read_lock+0x42/0x160 [ 1357.070451][T12191] static_key_slow_inc+0x12/0x30 [ 1357.075947][T12191] nbd_genl_reconfigure+0x1301/0x1e80 [ 1357.081866][T12191] genl_family_rcv_msg_doit+0x233/0x340 [ 1357.087956][T12191] genl_rcv_msg+0x614/0x7a0 [ 1357.093005][T12191] netlink_rcv_skb+0x226/0x4a0 [ 1357.098310][T12191] genl_rcv+0x28/0x40 [ 1357.102836][T12191] netlink_unicast+0x7bb/0x940 [ 1357.108135][T12191] netlink_sendmsg+0x813/0xb40 [ 1357.113433][T12191] sock_sendmsg_nosec+0x13a/0x180 [ 1357.119004][T12191] ____sys_sendmsg+0x54e/0x850 [ 1357.124306][T12191] ___sys_sendmsg+0x2a5/0x360 [ 1357.129530][T12191] __x64_sys_sendmsg+0x1b1/0x290 [ 1357.135026][T12191] do_syscall_64+0x174/0x580 [ 1357.140193][T12191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.146634][T12191] [ 1357.146634][T12191] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1357.154304][T12191] __mutex_lock+0x19d/0x1550 [ 1357.159482][T12191] nbd_queue_rq+0x373/0x1150 [ 1357.164625][T12191] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1357.170711][T12191] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1357.177591][T12191] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1357.184114][T12191] blk_mq_run_work_fn+0x16c/0x300 [ 1357.189684][T12191] process_scheduled_works+0xa8e/0x14e0 [ 1357.195779][T12191] worker_thread+0xa47/0xfb0 [ 1357.200909][T12191] kthread+0x388/0x470 [ 1357.205533][T12191] ret_from_fork+0x514/0xb70 [ 1357.210662][T12191] ret_from_fork_asm+0x1a/0x30 [ 1357.216057][T12191] [ 1357.216057][T12191] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1357.223292][T12191] __mutex_lock+0x19d/0x1550 [ 1357.228426][T12191] nbd_queue_rq+0xc1/0x1150 [ 1357.233474][T12191] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1357.239562][T12191] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1357.246440][T12191] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1357.252959][T12191] blk_mq_run_work_fn+0x16c/0x300 [ 1357.258538][T12191] process_scheduled_works+0xa8e/0x14e0 [ 1357.264617][T12191] worker_thread+0xa47/0xfb0 [ 1357.269750][T12191] kthread+0x388/0x470 [ 1357.274367][T12191] ret_from_fork+0x514/0xb70 [ 1357.279499][T12191] ret_from_fork_asm+0x1a/0x30 [ 1357.284814][T12191] [ 1357.284814][T12191] -> #4 (set->srcu){.+.+}-{0:0}: [ 1357.291956][T12191] __synchronize_srcu+0xc9/0x2f0 [ 1357.297438][T12191] elevator_switch+0x1e8/0x7b0 [ 1357.302762][T12191] elevator_change+0x2fa/0x480 [ 1357.308065][T12191] elevator_set_default+0x375/0x440 [ 1357.313803][T12191] blk_register_queue+0x3f3/0x4e0 [ 1357.319375][T12191] __add_disk+0x6cb/0xe30 [ 1357.324276][T12191] add_disk_fwnode+0x100/0x3a0 [ 1357.329692][T12191] nbd_dev_add+0x733/0xb60 [ 1357.334665][T12191] nbd_init+0x15f/0x1e0 [ 1357.339353][T12191] do_one_initcall+0x250/0x870 [ 1357.344698][T12191] do_initcall_level+0x10a/0x1a0 [ 1357.350185][T12191] do_initcalls+0x59/0xa0 [ 1357.355072][T12191] kernel_init_freeable+0x29d/0x3e0 [ 1357.360912][T12191] kernel_init+0x1d/0x1d0 [ 1357.365788][T12191] ret_from_fork+0x514/0xb70 [ 1357.370920][T12191] ret_from_fork_asm+0x1a/0x30 [ 1357.376226][T12191] [ 1357.376226][T12191] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1357.384066][T12191] __mutex_lock+0x19d/0x1550 [ 1357.389203][T12191] elevator_change+0x1af/0x480 [ 1357.394524][T12191] elevator_set_none+0xb5/0x140 [ 1357.399920][T12191] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1357.406306][T12191] nbd_start_device+0x189/0xb30 [ 1357.411712][T12191] nbd_genl_connect+0x1597/0x1c10 [ 1357.417279][T12191] genl_family_rcv_msg_doit+0x233/0x340 [ 1357.423373][T12191] genl_rcv_msg+0x614/0x7a0 [ 1357.428416][T12191] netlink_rcv_skb+0x226/0x4a0 [ 1357.433723][T12191] genl_rcv+0x28/0x40 [ 1357.438264][T12191] netlink_unicast+0x7bb/0x940 [ 1357.443569][T12191] netlink_sendmsg+0x813/0xb40 [ 1357.448876][T12191] sock_sendmsg_nosec+0x13a/0x180 [ 1357.454441][T12191] ____sys_sendmsg+0x54e/0x850 [ 1357.459747][T12191] ___sys_sendmsg+0x2a5/0x360 [ 1357.465005][T12191] __x64_sys_sendmsg+0x1b1/0x290 [ 1357.470484][T12191] do_syscall_64+0x174/0x580 [ 1357.475633][T12191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.482058][T12191] [ 1357.482058][T12191] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 1357.490707][T12191] blk_alloc_queue+0x544/0x690 [ 1357.496011][T12191] __blk_mq_alloc_disk+0x194/0x390 [ 1357.501671][T12191] nbd_dev_add+0x494/0xb60 [ 1357.506669][T12191] nbd_init+0x15f/0x1e0 [ 1357.511360][T12191] do_one_initcall+0x250/0x870 [ 1357.516663][T12191] do_initcall_level+0x10a/0x1a0 [ 1357.522156][T12191] do_initcalls+0x59/0xa0 [ 1357.527028][T12191] kernel_init_freeable+0x29d/0x3e0 [ 1357.532777][T12191] kernel_init+0x1d/0x1d0 [ 1357.537647][T12191] ret_from_fork+0x514/0xb70 [ 1357.542786][T12191] ret_from_fork_asm+0x1a/0x30 [ 1357.548093][T12191] [ 1357.548093][T12191] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1357.555328][T12191] fs_reclaim_acquire+0x71/0x100 [ 1357.560811][T12191] kmem_cache_alloc_noprof+0x64/0x5f0 [ 1357.566718][T12191] __kernfs_iattrs+0xdd/0x380 [ 1357.571938][T12191] kernfs_iop_setattr+0xe6/0x3f0 [ 1357.577411][T12191] notify_change+0xbba/0xea0 [ 1357.582538][T12191] do_truncate+0x1c2/0x250 [ 1357.587494][T12191] path_openat+0x2fed/0x3830 [ 1357.592654][T12191] do_file_open+0x23e/0x4a0 [ 1357.597703][T12191] do_sys_openat2+0x115/0x200 [ 1357.602974][T12191] __x64_sys_openat+0x138/0x170 [ 1357.608376][T12191] do_syscall_64+0x174/0x580 [ 1357.613528][T12191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.619975][T12191] [ 1357.619975][T12191] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1357.628530][T12191] __lock_acquire+0x1520/0x2cf0 [ 1357.633924][T12191] lock_acquire+0x106/0x350 [ 1357.638957][T12191] down_write+0x96/0x200 [ 1357.643730][T12191] kernfs_link_sibling+0x4c7/0x5a0 [ 1357.649397][T12191] kernfs_add_one+0x1d2/0x5e0 [ 1357.654626][T12191] kernfs_create_dir_ns+0x1a1/0x230 [ 1357.660362][T12191] sysfs_create_dir_ns+0x12f/0x2a0 [ 1357.666022][T12191] kobject_add_internal+0x622/0xcd0 [ 1357.671756][T12191] kobject_add+0x163/0x240 [ 1357.676708][T12191] device_add+0x3fa/0xb80 [ 1357.681569][T12191] hci_conn_add_sysfs+0xd5/0x210 [ 1357.687046][T12191] hci_conn_complete_evt+0x8a8/0x1350 [ 1357.692960][T12191] hci_event_packet+0x6cd/0xf10 [ 1357.698349][T12191] hci_rx_work+0x3ee/0x1020 [ 1357.703383][T12191] process_scheduled_works+0xa8e/0x14e0 [ 1357.709479][T12191] worker_thread+0xa47/0xfb0 [ 1357.714615][T12191] kthread+0x388/0x470 [ 1357.719218][T12191] ret_from_fork+0x514/0xb70 [ 1357.724340][T12191] ret_from_fork_asm+0x1a/0x30 [ 1357.729647][T12191] [ 1357.729647][T12191] other info that might help us debug this: [ 1357.729647][T12191] [ 1357.739903][T12191] Chain exists of: [ 1357.739903][T12191] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1357.739903][T12191] [ 1357.754353][T12191] Possible unsafe locking scenario: [ 1357.754353][T12191] [ 1357.761815][T12191] CPU0 CPU1 [ 1357.767191][T12191] ---- ---- [ 1357.772587][T12191] lock(&root->kernfs_rwsem); [ 1357.777404][T12191] lock(cpuhp_state_mutex); [ 1357.784531][T12191] lock(&root->kernfs_rwsem); [ 1357.791829][T12191] lock(&root->kernfs_iattr_rwsem); [ 1357.797124][T12191] [ 1357.797124][T12191] *** DEADLOCK *** [ 1357.797124][T12191] [ 1357.805301][T12191] 4 locks held by kworker/u9:0/12191: [ 1357.810676][T12191] #0: ffff888055318940 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1357.821670][T12191] #1: ffffc90004dc7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1357.833704][T12191] #2: ffff88808d3100b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 1357.843573][T12191] #3: ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 1357.853436][T12191] [ 1357.853436][T12191] stack backtrace: [ 1357.859346][T12191] CPU: 0 UID: 0 PID: 12191 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 1357.859387][T12191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1357.859398][T12191] Workqueue: hci1 hci_rx_work [ 1357.859439][T12191] Call Trace: [ 1357.859447][T12191] [ 1357.859455][T12191] dump_stack_lvl+0xe8/0x150 [ 1357.859479][T12191] print_circular_bug+0x2e1/0x300 [ 1357.859509][T12191] check_noncircular+0x12e/0x150 [ 1357.859538][T12191] __lock_acquire+0x1520/0x2cf0 [ 1357.859564][T12191] ? __lock_acquire+0x683/0x2cf0 [ 1357.859592][T12191] ? kernfs_link_sibling+0x4c7/0x5a0 [ 1357.859617][T12191] lock_acquire+0x106/0x350 [ 1357.859637][T12191] ? kernfs_link_sibling+0x4c7/0x5a0 [ 1357.859667][T12191] down_write+0x96/0x200 [ 1357.859691][T12191] ? kernfs_link_sibling+0x4c7/0x5a0 [ 1357.859715][T12191] ? __pfx_down_write+0x10/0x10 [ 1357.859738][T12191] ? kernfs_root+0x1c/0x230 [ 1357.859760][T12191] ? kernfs_root+0x1c/0x230 [ 1357.859780][T12191] ? kernfs_root+0x1c/0x230 [ 1357.859807][T12191] ? kernfs_root+0x1ea/0x230 [ 1357.859831][T12191] kernfs_link_sibling+0x4c7/0x5a0 [ 1357.859861][T12191] kernfs_add_one+0x1d2/0x5e0 [ 1357.859888][T12191] kernfs_create_dir_ns+0x1a1/0x230 [ 1357.859916][T12191] sysfs_create_dir_ns+0x12f/0x2a0 [ 1357.859939][T12191] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1357.859963][T12191] ? do_raw_spin_unlock+0xf5/0x210 [ 1357.859983][T12191] kobject_add_internal+0x622/0xcd0 [ 1357.860004][T12191] kobject_add+0x163/0x240 [ 1357.860021][T12191] ? __pfx_kobject_add+0x10/0x10 [ 1357.860039][T12191] ? get_device_parent+0x366/0x3a0 [ 1357.860067][T12191] device_add+0x3fa/0xb80 [ 1357.860094][T12191] hci_conn_add_sysfs+0xd5/0x210 [ 1357.860118][T12191] hci_conn_complete_evt+0x8a8/0x1350 [ 1357.860144][T12191] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1357.860168][T12191] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 1357.860197][T12191] ? skb_pull_data+0xf0/0x200 [ 1357.860225][T12191] hci_event_packet+0x6cd/0xf10 [ 1357.860258][T12191] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 1357.860296][T12191] ? __pfx_hci_event_packet+0x10/0x10 [ 1357.860328][T12191] ? audit_tree_freeing_mark+0x8d0/0xb20 [ 1357.860353][T12191] ? hci_send_to_monitor+0xe2/0x590 [ 1357.860378][T12191] hci_rx_work+0x3ee/0x1020 [ 1357.860412][T12191] ? process_scheduled_works+0xa20/0x14e0 [ 1357.860435][T12191] process_scheduled_works+0xa8e/0x14e0 [ 1357.860473][T12191] ? __pfx_process_scheduled_works+0x10/0x10 [ 1357.860499][T12191] ? assign_work+0x3cf/0x5d0 [ 1357.860523][T12191] worker_thread+0xa47/0xfb0 [ 1357.860566][T12191] ? __kthread_parkme+0x71/0x1f0 [ 1357.860596][T12191] kthread+0x388/0x470 [ 1357.860633][T12191] ? __pfx_worker_thread+0x10/0x10 [ 1357.860653][T12191] ? __pfx_kthread+0x10/0x10 [ 1357.860679][T12191] ret_from_fork+0x514/0xb70 [ 1357.860706][T12191] ? __pfx_ret_from_fork+0x10/0x10 [ 1357.860732][T12191] ? __switch_to+0xc89/0x1420 [ 1357.860755][T12191] ? __pfx_kthread+0x10/0x10 [ 1357.860791][T12191] ret_from_fork_asm+0x1a/0x30 [ 1357.860825][T12191] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1360.581332][T32720] Bluetooth: hci1: command tx timeout [ 1362.690615][T32720] Bluetooth: hci1: command tx timeout [ 1364.080227][ C1] sched: DL replenish lagged too much [ 1364.740607][T32720] Bluetooth: hci1: command tx timeout [ 1366.821308][T32720] Bluetooth: hci1: command tx timeout