last executing test programs: 3.835417332s ago: executing program 3 (id=4938): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x80ad}, 0x1c) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xce20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @mcast1, 0x7}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = socket(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2, 0x5}, 0x1c) 3.833268315s ago: executing program 2 (id=4939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd5e5414000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="b900000010001fff26bd700000000000", @ANYRES32=0x0, @ANYBLOB="05160000740f0000240012800b00010067726574617000001400028006000e000300000008000700e000000108000a00", @ANYRES32=r4, @ANYBLOB], 0x4c}}, 0x4000) close(0x3) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x15, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x503, 0x70bd28, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x440b0) (async) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000100)={0x1d, r9, 0x2, {0x3}}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00A', @ANYRES16=r11, @ANYBLOB="010026bd7000fbdbdf25030000000a000900aaaaaaaaaaaa000008000300", @ANYRES32=r12, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000084) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r11, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) r13 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x70, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4894}, 0x2) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r14) 3.490164254s ago: executing program 3 (id=4944): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000140)={0x200000000000001, 0x2}, 0x38) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e0a, 0xb, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x170, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x154, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7850}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13e8d45a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x277993a0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d773156}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdcf5ffb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5247522e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9e6e43}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9c4f}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x174b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6f2c}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74af35d}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f9f6d34}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x632787c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e4b52f1}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7142}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f8ffd89}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x72f4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb126}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4197}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xece5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf98e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cd4c081}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b4e8497}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58d916d5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7191191a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x37d}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67fbb77a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6288}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda30}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63c61d9e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ebe3fa0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8921}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x54c5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35099bb6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf3c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf1b1}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000}, 0x4004004) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x24040) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb69, 0xbd, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x8, 0x1c00, 0xb, 0x8, 0x3ff, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x5, 0x4, 0x7, 0x7, 0x10, 0x101, 0xd7, 0x1fa0860a, 0x200, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf5, 0x5, 0x2, 0x6, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x4, 0x10, 0x6, 0x6, 0x3, 0x80000000, 0xece0, 0x5a3, 0x6, 0x0, 0x100, 0x5, 0x252, 0x81, 0x8b, 0x4, 0x20006, 0x5, 0x2, 0xb, 0x1, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x8, 0x0, 0x401, 0x66cd, 0x6, 0x8000, 0x2008da0, 0x1fc, 0x0, 0x4]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x278, 0x100000c, 0x148, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x1000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x0, "3a2a8fa7d4b22c81086c268084a9c7223d88d322ef00"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0xfe}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff000000, 0xffffff00, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21, 0x0, 0x28}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xd, 0xa1, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000015c0)=0x0) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000001a00)=[{&(0x7f0000000480)={0x27, r7, 0x1, 0x0, 0x2e, 0xe2, "28313baf2b4a9686384a0f2705c9d87e4e9c08b88871f385c6ad2247e84bf566620bd98beb2866bf066cf804e7790206f14cd9dae485cb643befd4e1941671", 0x8}, 0x60, &(0x7f0000001580)=[{&(0x7f0000000540)="4b5296f74a4d993e9b83a0fa36c2e8b264a299a4940dceda", 0x18}, {&(0x7f0000000580)="b5bd2bf05b932c21a1ace5fba05e58eedb6cbe1692567df1e4db5bb3172610841dca01d56965cbb34b951212a6c495533111bf2135c7c9d9b4a275944365d2b88c147540a4299524f3cf4bf98e0a2934c30fba8c69829103a90d5052fcbf762044d3eb6fbd8982f50f65ac1ab7c75ff9f7ddd04cb66ff19d53ab65143857d46352f61b9c374e7e446f394bd22b0d6bc1016f593269b5fd8c3889dbfbd40cdf50f773e02c2246b03c076bdc44702c4c6d9b53224fa62f82433d77c3ef7f215ebf1eb3f019413a9baf75ba697dd980a6cef87d834931468b25c0916f4b032dce4f5ca474399e1197f1943e310a2768616e397262c1248dd9017a1a4f2effbff9b01f97becdb501f68d8da959090552f5f398ec3e6a41682916988c3fab7de7c1802c64d0c3641017316dc647ead7b4a4b01278a0f15e3c9bf9ca5a024fbb039f21449027db512d698f8fe6effe58f735117de8c5e560798db35902508f4f24e2d25e89b359dffd28204d55e70b074ce724c608bb99ddb52b3227c490123b2ad6a61b2d994ebb8bdc94228ca6a7433d879e354cbd8d7f8568c0189f61eb49ad737445ee7de78f61be059881d37f2333d2914216886adc2cbfac867b315dc8d3783fdff561842045a3a2bd82d39853ca27fdbb0166354b2ce6233c2ef6ac28ba8773e832da09da5d8d6b0bb376e36350f45eb4deb9794e573864cc3d676346d694ab05bfabacd14b92a3daf968eb36b8476aa3a45d6ceffdea4282f30c64e3913e1e5957f2aa63454fa2199e7e8b8458cb464b90a0c09746a42ea29375eb1836ee3c3703beb83cb1d3924418f341eb3ea39a580679da3ff3c60d249cb4ca0c6f76eacea9d820788d9a2e5f3efdf0eea813be3e1d9f45b05cef0cfca909ff3217d005efc8dd25fea86976c839d636d6d07e07b8db4fce16856490379821e90d15f513b3aa8c62b615aa5b906499f0f673e23784ff7be66921656712e9d4d03e995417652d8646f35e21ce123395e92528cc6f1caf4117f411e3f74e23960bef272e7af4d79d9d84c970565c880021b9937b89e2426444bed7eac6f4e6ae4af042a1ecd1950bdbc0ff9340d0a982d88f924430fe270e52dc548ecf1a9ee8e70d9577661d94be9ea78bac5ffcec71e5e5895f369bdda023f1ef6a103389ea81b853a727eac0ca3fd12f37396dd49d9d547aa527af99c5e34616b24eac9346f300e4efc23117d42fdb368054b77da5ba1d01630ed60c131989a1a333bb9eea7bd7b0283f220fe00455c88e5cd34494e1b3d6c7e37e8fba3c629aa234d1ca88913a76f2c298dfb6a0fb7f14f377279779e1422773fb7890ecdb44c9035de0f3e914d94540c038595ae49242b2bdfaf4db1c26be1b1f21c763fc1f914993a245d014fbcfe89db6fdfda2d0a60683f4cbd94976c663c6b2651d23ec8a89f5be734acf2d08c0776029f4a57ddc8247c866d17ec3d3e4035affe7087fab1abb01074bab07d2232560ac2f9880f64c52ee363cb23593336884c909cb8daee98df398999f6dfc486976e67b807f5a76c4aa6c4dd2adb15c06a43a18960a940476d437e474e825aae75a46962fd9b98d47157f7dab484f92678e83c32cc5780347c3e2884b5b20bc65c9b7775fd944bdd1392a6fd3a2f774cfc2cf784afaf630ef4930ac17a212fee63c48f7ed362de64cc40b74d0dd104bc911baf693c28d388f2bf1a3e9572df51cd499087a767229425bd0e2912797845d607d09b7d39e3e5bc6f926f2ed2bade4fd46c60c659659826ad91ba1920287c3ec8413820761dd9fa4ded8ef3e8a790e52141b33cd471aed8fae6abdb1648dc0f24692150ae5ef6c1b98a56bd3da381289a0f246294ebe4d50eb2c747877eed36678a0407b774470e9fa2664e0af870a06214dd23be30b718e14522d1bf6df8bcdbaa5526b454f5d72f55d8f749982f11180fb182a4a64adf9acc676b91824d2f6ad22eabea9d42b30fd8d1323af6c26262d2b4fd92474efb8a8c712ab92bb9906eca966cae97746bcbae3c27bcae2359901a0a7823364058de78426bccac298ab208f0da084da7a93b70c58bfa041629d40952c141744b634e60ea54c66040230ee22aa1ea92dc82cd7a793ba66b9933d65d3d145307282f0a8acfdbad1a93d9e39a960ae9967240bfc139194549a677a8c809397fad804361ec01b16b286f19e3ff05ffdd0a5fae178c24303f125c5194d2b2557bca2e961f7b5cb29eff959daed9c12d773e2609321ff27436014a5d0641b71e781fb393bc3439d2a4476397023443a5dc5d9c9e5d8e47f36dc6d40b4c15f222fee8d17c344742063589dddf0f9887bc4440666b54558ce48dd3d847e2545a2e10afbc2626cafc2a65717f1f02ff8b8fdc2b268885248350ff4fb3280816d28c140ae21b3098d9073d8d18670b298ab3b86aa383c715c6c4c66b21dde424f68c62dcbeffa116354a75208d0e6606d5ba4185e0798bd326ac509cbcdbaa74dfbeedb7b66f29bab4a8a2f367c63b6b0cec8761fbbb29cbf4f0fb9b7e6869526df8e95e62b2f7fccf1a2df1dac2170204320d08a04f6da0818480cce5a8aa7ba67d2261201cbc40aeada884f85432304fec3961869e287eaa2f7d6d3f6a0a0f902a831f54c3aaec2922aca240129e4e722d2c520a01713b28227a352c84e8b57128177b268784f9595e4c39c608747d769071f5aa9af69af47fb9b6b267de33fb2ca82925651e1b9d04637b0a4fd1e66c01a267be4bd88d090722d621d123e02349c0834407cdb7f642bef7fc9ec25d4d86e109d21171198012af6c9e3076bcac2f69f34a4e503e815857039a8ca012d0d119b58fcec8724870314792efd11af467f190717b060cfdefc81a3d2b9630e17e566223721d55d26156c64cf7e035d32022c7bada337c37c19d251630615a2c66368107ae33bd88c92e441baedb79c345a6487bfea0580557e4c0efe48ad52d81000ee3fd87357c550941c8dea17f54a2e361908118f84a473a11371304a01a79c0f5500484d4056e6c4319e8daa777e1dabc957bed72fc934ad94f1083eeb54e3277293e13b9398870988b5adb26c2e26aa08bba06434d937f4f545131af51725ace225775109fc315bdc810818904d42155fb6a80126fbd4e867d24157785ff975d21a19615ab540982f348b4c4803c6fc2861668b31fc5ac7d3badc8fe68e07fc05e9e93dd231f3c2f5b7cd10a30e180d5dba699b4acbde1a05695ef6caad093281906af995dfd2f8b32453278ccf589488d541af66d0fee6f3d58216af99b9ad65b81fffa40fe3cbef30a5567d69f42f570b8c46907fde9ab4281b5a12414cb96b1f7c1c6f455f4a1ac8a595a940b38c67e0da83bde1f486107f439ae5bdc04ef2cca5d1de945e2b889906562a8f3d823a8480153fe3350471530eadee984fa7afc032c7ef77d503081f99c2a5be7bf6283d58ec256d20d68ecbd9b1b030c53f13eb438b072caf0aeb96e60c1c9e481af81dd43ae333c7555c0665f03b621263b576ca5a834e9e27b1b55e9869f9d7acde4b6aaef63f79dcf8b67b63b5502320a5d7ca15d22d97c6ee519e1c41b011995357cba30e1968a367f2d634d1bd3493f21b433a2cbcf8403818a8602b66b63e73fe6be95dc0ce51c29f4a2700fae0f6b59fe6dab091c7c8c9fa404dd8a539ee514bbb071529801c74b931d2638f044c2c4393b0ce949458c9b23acba1925a54d11c804cfa6cc7021cd42cb4ad8fa7d6c488b638aad24e59568f83a0cde8ea3bfc9503694ef866b08e8faea91d8ef84efd1ec058a1d1c777bf5e0aabe249fdd6669ac5b21c6ec4e40150cdeb9bb6be693500b1afb176023c6379e3cefbdf66de48257ac8307bcdc37c1be0e8b4b8ad9d1b416a1590caf8f8f4eab1dd6e580ddcba744ef924b8fc3319b9f44aed4c21493fbf86fd477d480192a668e891dcfa2bdc463cffef0a228d0c026b9433675df4bfcaa8d49f3f744524700b668113d3944a9a1c693501a46012796f20c024db89588c5fc69f9d59fe854eeb922bc6f608581b2a18d60b599a83a68a27dce0a23fd83b898e3908ec76d442c9d5e17c9d620795dfdd7bacaf9ac227a90479aac4dce43b15162bcd657a266ffbb98406232fac05381d09a9b9422fd9a5323a869550f31b94a77931c456e034e52c1312bd4f59896451d8806b7ba0dbb91cec2e0269f6e3b735f87bb8deada7e6772c4f42254a10846f90a6fd12bca614c88cbc2d59aaeef7595c8ea6555c83720a78f23be8229c56aaf8c6cf694b03979f75be00bd9ced3b3e71fabc0453b27c9a086942498797acac6a6854d7cd6b571919571c0e161fd1432b9e150d23f20f88327b81551193058c076695d14c8a6046c99477880a14f5a0b8d32856167111d91a97d0bad4c23b5605187a52b401b1a1e34ee79ce02331fd456ed148ec22c2cbd8ed79f596a3de97a7a1ac5369aa769a93150f8f7d4acf0c9a74ede7b26a88d46b2fe938db4f2572d7fa1e281a7197fbb364fdd8ce92dfe9aed072823c6f277ed87375e79baf23aad1f94e3810120649bc175eea93ec3a33e56dd8352edaa75aae4783d485762fb2a1bf7ed4b3da5b9306d32506ae01482e41df0053a13f47e1b176f829eead574552c33f35e40b2d909870403906e3f5f87bbf3e8fc755af79e873946758619f57ac36debd54209d1750c7d2784a38475d236ca5b751b03953f88035643391e701bef961912904dbc441df199d977ca99656ff5f89bbfd68cf9fd77032fc590e1959b40741100bbbff253be1107a5bbf83d34d1a0cf81dea437edd7ac3e31c22200767fbdd4a57b6f53235e139c03f787ed61ce7d1c37411f8ae66a959299ab4050d3fd50060218a48f847b841c43a15c41030f8a4760603c2c2aa6d55f4f8abb5f4086bf528c697035e7ab24d23243d5cb2bd70227bdae7e7c55979657f73cab6e094079a5cd7df20057324670f9a8d5b7f0739a544ae93df9a2902d10ce61e51d8fb212f2d4771826846c6ec458355d077161a1f69ca3840a256c099c36b34cd78e73bde6a80729ba8ebdc8b4a0f9797d265158c643a98c96793ec1d88cea7d804207f615e6579c50f25d9df522aeb4490654ebe159c0f54b67cc83c39ee26a15c2669ab8c539cde8da0940d1f37977f1315b85af48ca5c368688468a826082aeb2725e7785036039a9aeb90e3b5604ebf1c751fd059e0e871b48bf2cdc5cb80e56ced335b24bbda8c25efb46e1f3a6cd83595eb7172faa5e0c9018d0400901bdd8b83ada527a7e710aa474e7826f6f124c6505717ea926ff1d87049f102bce5fe5f11d9cdf1757afdd4e9f7b04f7f642acd7cb904e4ab4a50eeabffb7340d64569e2f5416dbaa47449702d164ebd0cd224a7d5e9f54c54af5dd2d629b682d26cac54f2a317013f55701405386fd9e193b501c69b911db20e32bbf61017ac238565039c866c0ce9e9c8c9a9b1ed1fde9b7047421a0a6462a3c084fc78caa703d08cf9b33ca422ca8c4f7b6ce1f2fe6a1619bb530003bcd85512207ed6fbe8f44b6f2d20d7b91a4f68a3be1cfa1ef832b9791df7698b1a42f83cffe1f22cab71f4720ae9f23ac1d21c88a52226f765b228044f5a931c4f35bb1fc57eb0d7c389421e077a5f72c7220e0c1da7be8c3836468f7987ccb8f6a26c48a6e2a6a9a46fd591fa49aafcee0c5a4d311308969809301e530d54edeea23e1a72e139165558ca3ffcddcdb8f2da49108306f39cdf91e954e42a55a1a9d6cf2b2ecf7ca0fa1c4d68e3fa625365724c4a82b5187d9c4e0e43ae8cb04", 0x1000}], 0x2, 0x0, 0x0, 0x20000081}, {&(0x7f0000001600)={0x27, r8, 0xffffffffffffffff, 0x2, 0x7, 0x0, "5422ef05fd0283cffe8591793953fc5e899d791fb173d776702dad52fc065661a9cb7e3747135b0b8a7758699e49c8874b17f23ddb1277b4555cae514a0e0f", 0x23}, 0x60, &(0x7f0000001740)=[{&(0x7f0000001680)="109518b849e9ef82fdcda281fb460a7723a5fc4ca9d93a6b329cf0da89652a82a1f1ee6f8b8edf10cc029305c0b01b51e0cae9051acf3e75f490b7517a30c6dff655ea66ffef198cf909b87649d05c9c32ccd22ec239eb3f4fd6340e6e9396346fcae8d6aa18fce8cd0201ae163900651dc001c58b26e65791b8a549fd34f21c5343bec33ff513b5bc799456", 0x8c}], 0x1, 0x0, 0x0, 0x4000004}, {&(0x7f00000017c0)={0x27, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x40, "9f6590fc780845ada44c217610f7dad13fd91776d76d38afa50733318d93bba22f8fafcdbf3fadb2e394e4f816b1f8982513773b9b327f8cbf3893e3223cb3", 0x28}, 0x60, &(0x7f0000001880)=[{&(0x7f0000001840)="68dac5cb545fe6", 0x7}], 0x1, &(0x7f00000018c0)={0x108, 0x114, 0x8, "a303337935b2e9b23e7ce6b6fdd7937a166a34cc72251c85006b0478c1703116d4bfcf3e1c97e93026c96e622111b180dccd52355551786aaaf5994a50ed656a73a1bc6a196b60f30e3adee26bc1f715d0480f7ff8f32f51cd4294c7783728c53984646aff63bd5ae530c19625717d4a1c0f657b86d3d6c0a96fca6194a79d75fedb4a5b7d65d359dd1907d7808b91758affae4118fc28887b23153f26f78d3296ecc23ad13417e0d45f095d094d5321c7b8f0ec69c158ec7f956f503acee846ac3800a06829561b7a9b1f48cc636e27c335fe8b3ea3007f3ea8610bde987f7a97f6cc95b45e711759bf60a1a50cd2adb6b039"}, 0x108, 0x200000c1}], 0x3, 0x41) 2.770283227s ago: executing program 1 (id=4948): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x1, 0x10000000, 0x6, 0x5}, 0x4, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r10 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r10, &(0x7f0000000300)={&(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000640)="97452a300c00"/17, 0x11}, {&(0x7f00000000c0)="9e762d2f24d02a99cb0aa5", 0xb}], 0x2, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102}}}], 0x20}, 0x2400c804) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r8}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r13) sendmsg$ETHTOOL_MSG_TSINFO_GET(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x20, r14, 0x6a98047402e98331, 0x4070bd29, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004110}, 0x8000) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @empty, @broadcast}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r12, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r11, 0x40047211, &(0x7f0000000000)=0x28) 2.686198802s ago: executing program 0 (id=4949): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) unshare(0x2c020400) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1, 0x6bbf, 0x7c) pselect6(0x40, &(0x7f00000003c0)={0x4, 0x8, 0x833, 0x1, 0x7, 0x2, 0xd, 0x1}, 0x0, &(0x7f0000000440)={0x8, 0x7, 0x80000001, 0x3, 0x3, 0xfffffffffffffffd, 0x2, 0x2}, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) 2.362609579s ago: executing program 2 (id=4951): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="05000000020000000600000004"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xe) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000340), 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f0000000000)='-^#]]^}^@\x00', 0x40, &(0x7f0000000140)={@_ha_fsid={[0x7, 0x80]}, {0x200, 0xb0f, 0x8, 0x8001}}, 0x8ebb, &(0x7f0000000180), &(0x7f00000001c0)=0x800}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9bf8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005d93000000000000b503020000000000850000008b000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="05000000020000000600000004"], 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) (async) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xe) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000340), 0x4) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f0000000000)='-^#]]^}^@\x00', 0x40, &(0x7f0000000140)={@_ha_fsid={[0x7, 0x80]}, {0x200, 0xb0f, 0x8, 0x8001}}, 0x8ebb, &(0x7f0000000180), &(0x7f00000001c0)=0x800}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9bf8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005d93000000000000b503020000000000850000008b000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 2.234345342s ago: executing program 0 (id=4952): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 2.108408937s ago: executing program 1 (id=4953): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x19, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000004000000000000feffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000300b7030000000000008500000083000000bf0900000000000055090100000000009500003f00000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 2.026852815s ago: executing program 3 (id=4954): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x80ad}, 0x1c) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xce20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @mcast1, 0x7}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = socket(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2, 0x5}, 0x1c) 1.89876376s ago: executing program 4 (id=4955): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000bc000000b70000000200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x103, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.895736136s ago: executing program 0 (id=4956): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) 1.745879926s ago: executing program 1 (id=4957): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x210}]}, 0x34}}, 0x8000) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)={@local, @broadcast, @void, {@canfd={0xd, {{0x0, 0x0, 0x1, 0x1}, 0x37, 0x1, 0x0, 0x0, "88f0b0d2f6203d90a118658807791ed42ac7a90a88e4785e66d98e1ddf4dd9c2c62935127d5c4b9c4bbde067d4cdf5db347e46a4d2f3ea9e71d507eef252be7d"}}}}, &(0x7f0000000300)={0x0, 0x4, [0x27e, 0xd0f, 0xeb1, 0x611]}) getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xbc, 0xa, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfff}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}}]}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x192480}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan0\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x401}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x77}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x900}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000044}, 0x26000090) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x80, r8, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x35}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x811) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) 1.628162417s ago: executing program 4 (id=4958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1.616164003s ago: executing program 3 (id=4959): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xdc}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2239}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.312637057s ago: executing program 4 (id=4960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1.242495247s ago: executing program 1 (id=4961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f00000002c0)=[{0x20, 0x0, 0x45, 0xfffff010}, {0x20, 0x2, 0x40, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x5, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1, {[@ra={0x94, 0x4}]}}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb39161906e8b6c78ab07fe1b3fe07565e76f3049a8f11350ffa159ce18eb0ce3712cc785657be76b1587f708924c9feb2e292ab97040cca863de23b3b516cc537105bb0404f84119e4260762c50671dc5aab1358ab653fbfb4bbcd3b4664ec16d8f9ec7829cd1af4a5450585bb1de8f968728adf5dec1de9e1e4a8ababf331c67b6c63551249f96344f4f4656e7cd6bf657857a8af5d2df76f377033b968501e40ed92b801d6efaaa61bdc158a6194b1fd1d6380bb7300a70b1d36c1a76ca97d8aec866053ca0d0d4830f966f48a3461bc25fba4dec31acaa7571527df4164e4f6a96c48ac714f8a8e0a4cd14617b52de88f0bee1cffccc96655f4fc658b5a0510e050f6f40aa3d28453590c3af7a4460719f9106f81797c856d60ec8528cc0c9487e69aa50cea9f374fa68593421c48bae1999c875cb205cc55f3c991416ff38e4f093a4c86ad36f19d1b3578242eedcfafd2c931fd2868dc24d9892f790ed560f40a848dd0670f0f611a61640053a2641ddc8ea149145bc5669b176bf12f40d9e0664760a3e476a93a362dd7dfcc3fd9f8be8ee2cd7a0a5fe189031bacbc1ed8e7c15a2bae104b7650c38ed42128a21ad834bac63ed73159e680f90d41475f28567eef33b4c21860ea1cd7a3f56ca286f87608ed49b72d36a1e6b04e4e0ba9ba7f76bece6426a6cad503c8ab33f28772edee91ab52fa29ff4da3893fa0629d1084b2a87f00a468feed92e5fe5aef33ae040aeb89098033fa81bec4535683391297f750f184f06ccb58dfa50ae2d6c159a0208481450bf38bca83f26c50fffe1449895cb8c990aa1cc0dd4cd2d0b4b3cc0006626898fdf274ecfaa1650c61e17f303f41559d75d470da40196aa5dff545903db275a12166b1692f334c70e4c5cf2ca2410989b429e3bc6e2e630adc5d6a039ad7872c4b4754cceeec43a3323d4594fcc28623e65f3067444e098c8817c9eb3f6dc06b6ec407438c09f2c137009c06505d88e0337c765f6c3b16f53bb0d1b235dbdc509ea3fd0996c8cad5bce70eea4d8852e7adfc222b06552d250e70211228251bfb5b95dd3b09bc30fc52337505a6f0689bfca144db622dead3525fbb73056d1b7fa7b08535af3952a8d77a1f34655eb69616c963f4e8b34e88b8405e0e3cd5130c4f98c4e180bfe76ec6cd6ac5e8ccf5d1cf99fdd79bca0a227ee78d2037a55c8593f7ff10bd42d82cd6c4931df7fa6c0c6a8246cef83599095269fb7841aec2cf1afb41d1c7c54136b2737d2c2ae2be604058b657eec27669b99fa669c92a9ebc8e817ed6860070d2fe6bad743ee65d35633de56f026710729102ed175e2ec0af8cc2840af173c71862e90bd370cd3d277a7d2622a5f00946649c1d7894f2a69c3cf8e21276d72c4536149038f9967ec0c748de34376da7971495e0cd783056cdf20cddab2e2201ea43e657e36c54d42c47d1e6a1c9dede599e6c0baac06c2e3fcc5687c5d4706f32337ab639633822dd98089ba20c532fbe4a5e72963d53a86ec34d6a4aa536015a3272c0d4cc0a3a3ab2196ec7a92bf2daf638ba5957941ff0facfe6a161da6a6cbf8e6b40c8b6a601ee91e592f6bb9dc85f84c99e088004ed3f650404934c8b1d436500f3c83333b33be5532076d1a718f80c139db1ac28c953cc23394a5a137567cde82fc681f32e66aa415c2358d02486cb6cb4d6a77e5b27d729e0116773725410332c58b4cc3683fc9dc5235b19a60ea8794986e56e5e8e2ce65655f261ee0c33c8c0b99e7b5bc61fb55040d9e109a3a1182a0f81c2ca081b14cc207b11dad4592add90ff543d2d237421f938af8a010cd197502dbf42f14f1572aabc9f16593a735c07484d61bc43b5f300eb66abe2052cec153f89c1819512316ad728eca65949bf1f903a556ae67871a0d35b0fcb5485e8fae70695cf90547784da27450d6c3e6049bf2f1b923fab49cf4caebccc7a0171aee4364db173c795cc486475427fb92efdbf161ab7a35aecb8e1d5435ea2733cc8dc3f824b00c6d3e05e406de563d1fc6aa77ef76351a3be04557d915df5ed1fd52207872666bbff9ffb84a6e91ae863af42b3e9dd6da62115ab71c6db508875db1a83e631c4cd658a6492cb1a8bd4a42b4546afb74484d519cb5b1a8db29d91ea575a09dc45f63b51b0ace075511556116db62507ed8b163430eea2dcc171890c51afe0ffb22d6595c15112730ce041648d543abf1871bb62b40303b277b2084eaee4895a9e552bcb2d319cbf733d2682940050095fc9499f116e3c828727c2f0755e2c624891a794a1bd9ff52237f13ccf144e67b5311e556333c5b11816fecd78fffb72190480b93e7fe13682b465aad1c2cf564c16d3e8fb07aed4b415f781a52dda6822ed0023b93c07b61e7740470216f29cb9c770ffd33837a6a0bc2990899778c74af304996ec13c1fc935b6d67b23f5190bf8b1bb3cc4e42bb2b9f1e3b330f24fe172396da0c8b52cdb4351a80fcebfcc85e54436327d8ad72d288551540f9a7bda7ecf2f2c41c3e775e26313de86c1b41ea1199321d533abe105ebfd90c9defd30ce9c7ea7a342b310eeca3dd88732dd9d7751c0ae685fbaed556727d2ece266a66ec7adc3a20f377b386ca7c909aba90fef9605ac37d43dd89e4da8455f086c1d2ce9c5b0eb4296ac64b7c244b28b4fd66a8be0442cbeacc7ba871efb11069d7c28dcdaf5798d0025741e461adabb3f270d056b1fe961e6626fc9a533924364687e80aa10e8ae081d743487bcfa97c0e1938dd47fc9075c3b0772284d98e683f0314c4a261845a3e50106e9c0a529b77293c251472a8eb6213ae49b0cc9d569e0a0c4fa1fb10663e4e0b6b0f9cee796aace2a1b42e42758a0180c2ee89119bf9359c6a277a062eda92a932ccf4b72ec1f998224acbe9eb8d594b8861b65ac276f1d401418c7be4d9344b52eb07aa74ba352e347f06e7e923b86cae5c0beb9f7aa0201b6537a82ea8f9281ac6e82a327ea7b879209dd30c1d40c22c402d3e6f09f4b4146b28cac26532eafbb5f6a67f6f734601ab352c804083570087124b23d7d3bff4d31569fcb8c091f157336d11e0e388a91ddf82b05b22dc3cc2ba4355a9453d9329cbca9d52489f15da5849ba32eb11d91184c6a352fe064aae6e85de05288282f911ebf2a932d43413c9bff9cb50f86af7eecca5eb9e3ce7fe9bc1743bcf24d01d02961116a87e4b55ddc1f217fb488c002cd85bb79db625bded4360983abf1e4574a9a46cfe05f0e45da2dd28703599adbae4703aad3ba1cc44813bcdf2432f0e5e9dd67ee8c6b34a9107fb81f21d87dd8fdf270068528685ea3c989beddc08410a59b5ad68d2fd9b37f8b3fddef393433de51b01314e3d6bb08fd7ea5b9abb4d4ccc5a5a43820004ac3870491b8df621be5388e2c3e2c40843d6798c493b308bef505d9f2d2734990a30150b4cefcaeb590118d21f331f201569c778cd5e54e34ec30a73d1fd48cd5d64d444a2a58856a71fa8173713136bdaef1b9cf1776cd7d5be3179ae7a2a95d7138334add686c5b50ca87e41b4c3f5343387cc491e97c280becefd3d72ae959a4fb3e51c15d6dea3210c480342c1748a040879f005f98a8b0d6a32fad631f557694179d117f71ae5fa6d54d4208aca72c5d1e03d34e80b221522c04b1bc7bc1ee008550a1757a1b74a0fea1d22778fd7e7a5f58e41cf72edf60d751bc35223646397457e8f9036838fd3b72e2bc176acc3e1e99a392b1d496cbfbdaa641b2212ef41c1728dd587272849b3a5cbe3b66f7eaf622d2cdf72ada32ccd3e16dddba2c890beaa8dba3773c88415fbcb733084a9bac52b6844f28377ba01fa3a09f74a57d87f31468ee2c64ae05b35fe3d660bcc6ed908b710a1216974db0232d90a124a4e8ee30322a20455feb4d0bef13ce0fafb56f492a99c3fb1c57900330bf75246147b44f23c77554119f1d96a4558d8fff90922af4f9299407344d7292d29ce3446e39bd9277e513e6068394584a08b356e6a0c641108f6e89390290844548a6c8122d8a83cc6c7d7f0c10d330a537d832bc779ea245a37c850b85858885541da0f914e1a41ec5b49ad9b3b41814f66c50bd1f49cd514d027ecd1bd2f002f1989fc621f23d6d5f1b9976ce95c305fa34ebd3404919c3414fd97227a590684ce5af0a18fb4fa6f41d4a3951fb49cc8184b547e9aa2ceb4912975ecf8e956bb29389789b8ceab72e7ae88fb402795ba7712323409fc83cbaf10a523dd4602d9ae7c158a56fee8df04ba4c48cdd63b1ce09bc697ca138f01f261f51bdc05480b7cf5f64836bf8e029d4883d4bc2f53115129cee1d9a9e57b4a5fb4ebef2237a2bdad349baeab05e6b24167ba67ea94f808d9d1386b08b0fd3c92a80ed253db5bb40e6a0c308339c615af56e554ed0d78881228da41706acd8596c52e33abc8a4a3317847dd50b8d77b341063fb29dd02594a540fa737a4dcf9c57ca8717d36e8a8a84eecf9ebb7bb0f4d8cb0f247f982e4fb7a29a7072f08eb1479e278b1084f4faba3c75b6c33438e24e7b454f1e8ee7c64507ef34f37e8655f49cf6871e8012bbf80d2fe2ad9424464d0a408ca50037f1b1221c2d3dbe4dfa75c236f6b59b8a9c8e3a4b1ef73bae3f8d44affc10c72485dee42b73671867221778a6f9ba1ddd5715a6115845af2da8687e0e75f35cca527cb21a07bb2018a574a7e1eb626ad6939990038588cabc63aaafada2c88336f2c764d52cf5c3740371c79ed30f4b7325768c43b9daab5532b4778bdc380bc56bf656eaeea1f7987db28672850e46fce9c9d7dcc7df7b01e9f98ae98890491949c3a9af72cf35227fe88e79d1853ab46903dffd8ceb6060b5a2da5ee061db21e07124b510af4be93a2eda5c9469c73ef661e52d1d3ddf6d0dbd58715730485d26b731da17fb67b1bdedd400cdd472ab88c059e99452b932202fa8500e9b14ec63791857fc33fb97a21469dc318e9799d6b8d3155a9b9ddae7704457f9fbafd0756fcf8464e2398a88b2b4ea3f655cacd390f6df7b195b35b25c6873f0c53ba2939efe513e448ec1c406380ca4e0a6ef53cb183f05bfe99b003429aa5a4709dbf9b6da2fcbc243bcc6b6e8840ed0636af84b6dd3c3b9e50f19c7fda40185dd542f8ff32e7ca9fad274847238e05cf0db24cf7ac1e2cecbcb20bbfe4868b6245899d8e6717a1f9321fd38b87c0c02bb24ed937e9460d03a5a38fa8e0d222105c8527d898f889bbe298b368fff9b951d1b0780352ce8ad10a5dea883292d6cf149618406fc33ca1539da60a1922ee27b7b74aa3507e6a5731bf2c42c879e9efa0750c8bacc63e2225589eab7bf237c259f715248b61278e4ef6f6d238d5bc9bde650795243874b294f228597cf687df0aa8ab1e58548991a1bd903f70408cd4c23f2db7f2ad3f9a0b12a4e52f09270d8f79aa0cde1ffd268d50fcf47c5b2a41898a076e8467cc40de311c26a1f5ff5d1a6693402f927077083490b65e594d5f4e848dc76e03adb210826926ef65e1f63346ad6a14b732cd7a23bf393e72b3c264258d7ea"}}}}, 0xfce) recvmmsg(r0, &(0x7f0000001ec0)=[{{&(0x7f0000000000)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f00000001c0)=""/224, 0xe0}, {&(0x7f00000002c0)=""/21, 0x15}, {&(0x7f0000000300)=""/85, 0x55}], 0x4}, 0x3}, {{&(0x7f00000003c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000440)=""/214, 0xd6}, {&(0x7f0000000540)=""/14, 0xe}, {&(0x7f0000000580)=""/171, 0xab}, {&(0x7f0000000640)=""/245, 0xf5}, {&(0x7f0000000740)=""/32, 0x20}, {&(0x7f0000000780)=""/248, 0xf8}], 0x6, &(0x7f0000000900)=""/106, 0x6a}, 0x8}, {{&(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000a00)=""/95, 0x5f}, {&(0x7f0000000a80)=""/43, 0x2b}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/213, 0xd5}, {&(0x7f0000001bc0)=""/169, 0xa9}], 0x5}, 0x80}, {{&(0x7f0000001d00)=@phonet, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001d80)=""/58, 0x3a}, {&(0x7f0000001dc0)=""/4, 0x4}], 0x2, &(0x7f0000001e40)=""/87, 0x57}, 0xd63a}], 0x4, 0x10000, &(0x7f0000001fc0)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780"], 0x60}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) readv(r4, &(0x7f0000002200)=[{&(0x7f0000002000)=""/104, 0x68}, {&(0x7f0000002080)=""/131, 0x83}, {&(0x7f0000002140)=""/182, 0xb6}], 0x3) 1.234236191s ago: executing program 2 (id=4962): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) unshare(0x2c020400) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1, 0x6bbf, 0x7c) pselect6(0x40, &(0x7f00000003c0)={0x4, 0x8, 0x833, 0x1, 0x7, 0x2, 0xd, 0x1}, 0x0, &(0x7f0000000440)={0x8, 0x7, 0x80000001, 0x3, 0x3, 0xfffffffffffffffd, 0x2, 0x2}, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) 1.066559291s ago: executing program 0 (id=4963): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x50, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffd}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x50}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x2ffffffff}, 0xc) (async) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40000001800dd8d00000b00000000000200000000000006000000000600150004000000900016808c000300fde83a6d787c1ce4149d9520453bc3272236bd65f3eb2020701dec1fc8d5a3cea8cc55bb6256f0190c94ba260be06bd64d8a69af13b8e37e29f465dcdd014e5d59e0575c101431f55189a5c07a6fc064fab76e0291a81fdd9554e7e111c7222e5a030000009915fcd6aaedaa869cf74c0034b9baa3d3110000fbff000000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x841}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x40) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000400)={0x0, 0x7, 0x1, [0x6]}, 0xa) 889.659201ms ago: executing program 4 (id=4964): ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x509001, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x1, 0x0, 0x6, 0x1000, 0x8, 0x2be3, 0x800, 0x4}], 0x1, 0x38, 0x1, 0x5}) (async) pread64(r0, &(0x7f0000000100)=""/79, 0x4f, 0x0) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x1, @private1, 0x1}}, 0x100}, &(0x7f00000002c0)=0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e20, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8f55}}, 0x7, 0x5, 0x0, 0x4, 0x0, 0x3, 0x21}, &(0x7f00000003c0)=0x9c) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r4, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x840) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r3) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r5, 0x702, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x400c004) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000680)={@loopback, 0x0, 0x0, 0x90, 0x0, [{@initdev}, {@private}, {@loopback}, {@initdev}, {@multicast1}, {@multicast2}, {@multicast2}, {@initdev}, {@broadcast}]}}) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000780)=0x10000, 0x4) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x1000}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x6}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x80000001}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x5c5d}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004084}, 0x20004041) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x541b, &(0x7f0000000900)) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000980), r3) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r9, 0x209, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan4\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '#\x00'}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '-$\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x3b}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) (async) ioctl$XFS_IOC_GETPARENTS(r8, 0xc028583e, &(0x7f0000000b80)={{[0xb9b, 0x91, 0x1, 0x2]}, 0x0, 0x2, 0x430, 0x0, &(0x7f0000000ac0)=[{{@_ha_fsid={[0x1, 0x3]}, {0x3, 0x6, 0x5}}, 0xfffffff8, 0x0, '#\x00'}, {{@_ha_fsid={[0x80, 0x5]}, {0xf, 0x3, 0xfffffffe, 0x100000000000000}}, 0x2, 0x0, '#\x00'}, {{@align=0x7ff, {0x3, 0x1e2, 0x7ff, 0x9}}, 0x3, 0x0, '#\x00'}, {{@align=0x8, {0x9, 0x8000, 0x7fff, 0x9}}, 0x9, 0x0, 'wpan4\x00'}, {{@_ha_fsid={[0x4]}, {0x5, 0x7, 0x5d92, 0x7}}, 0x1, 0x0, '#\x00'}]}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000bc0)={'gretap0\x00'}) (async) connect(r8, &(0x7f0000000c00)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e22, @remote}, 0x1, 0x4, 0x1, 0x1}}, 0x80) (async) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000d00)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r10, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000e80)={0xfffffffffffffffe, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)={0x3c, r5, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48840}, 0x40000) (async) listen(r1, 0x9) 667.762024ms ago: executing program 2 (id=4965): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000023c0)={&(0x7f0000000000)="c7b3cf65997d1b3727b7896a99c90a8a574d6a6abebcc552bb63830f44ad8754b3095ab71cf1a2cf9f56a9366afe84b3df71399e0194ce65e7847f76fb6021acffb4fe6b36cec1ad5a66263099ce21319c00737a26b58f778eb29f0383af4131f68710007f07991c11efb3f4d6cd6a4ee3d5d39bc330ce4f7b932bebf88a755bb546fe3d4ecbbee74540e09f764f528ce7b1e1eb63d00354b48b46d321d24b361482aa5a7b5812c84204d7ee707de63c7bda943568c3077c783ec4dfad7e276b33b7f844e1cebbd3f416df461718128394a1d0f66da4a3dd07b606e5496515c6c9c7faccb3403b20d502", &(0x7f0000000100)=""/9, &(0x7f00000003c0)="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", &(0x7f00000013c0)="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", 0x1, r2}, 0x38) 506.593938ms ago: executing program 1 (id=4966): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0xfffffffc, @empty, 0xa}, 0x1c) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x90) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc0}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) (async) socket$inet6(0xa, 0x2, 0x3a) (async) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0xfffffffc, @empty, 0xa}, 0x1c) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x90) (async) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc0}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x8}, 0x94) (async) 506.039715ms ago: executing program 4 (id=4967): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x19, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000004000000000000feffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000300b7030000000000008500000083000000bf0900000000000055090100000000009500004100000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 499.798229ms ago: executing program 3 (id=4968): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000bc000000b70000000200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x201, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 371.50871ms ago: executing program 0 (id=4969): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x80ad}, 0x1c) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xce20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @mcast1, 0x7}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = socket(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2, 0x5}, 0x1c) 287.830921ms ago: executing program 2 (id=4970): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) socket(0x2, 0xa, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x38, 0x20000800, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}, @eol]}}}}}}}, 0x0) 232.932692ms ago: executing program 4 (id=4971): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pK \x00'}, 0x20) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x21010, r0, 0xe6d14000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f00000023c0)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001300)="1f", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)='G', 0x1}], 0x1}}], 0x2, 0x880) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b80)={r2, &(0x7f0000000a80), 0x0}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x3c, r4, 0x1, 0xfffffffd, 0x3, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0xc800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x84900, 0x0) write$tun(r9, &(0x7f0000002440)={@void, @val={0x0, 0x1, 0x0, 0x8, 0xb08, 0xd}, @ipv6=@icmpv6={0x0, 0x6, "3d50f0", 0x2546, 0x3a, 0x1, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, {[@srh={0x32, 0x8, 0x4, 0x4, 0x47, 0x50, 0x9, [@private0, @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback]}, @routing={0x2c, 0x4, 0x1, 0x80, 0x0, [@private2, @mcast2]}, @fragment={0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x66}, @srh={0x4, 0xc, 0x4, 0x6, 0x2, 0x8, 0x7, [@empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @loopback, @loopback, @dev={0xfe, 0x80, '\x00', 0x30}]}], @ndisc_ns={0x87, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [{0x22, 0x1f, "ab847b71e0442a753182da5b8e90eaca1e4d6215e033d233d859340719521e811336e6155d7c9aabc3d9392ea6385bfd0597bbcc89bbc916ed2b84ca5944d098e486b4f4436291affbb16818de4aec75b1f27fb55809971f884789d9e67c75c9812970f294fd6311eb8623f45e7c367774db049bbe4bfc81bf83248342190fae8acc80c7c2b7b309e25021a258c76530cd5a97df7037258d58a0f1dfa24aa8baba6e82b5248ac5ed45bf1361b6557df82477c19bc09f838c36906c7b404adb0f0ce98d9991de7147f6d452cd5518ddd43c390f9a82abc5a3845e1a3bd74ba46d88da54192670b4f29c8dac24c2c7962de18567884669d0"}, {0x3, 0x200, "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"}, {0x1f, 0x200, "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"}, {0x3, 0x1f, "77c3b98951590c5d2bc8184cd0b4f4fa2176eb9dfa1c5b0785e4ad9548452f80fd731d39c5a7cfc9a860c71a81bee8f0b46bd41b7e195e09618993831081cceeb2ea53ea0278044eaab967eec2d46e7d9e26e590bb342391874a42dd36ea913b585aca178d0df3cff4d4f05197fd5cd28684a348b578dfe07531affccbad0f11a8917462390cc47a4851393a75ebc3c42557c7e4cda0e6bb6fbde4973727fa230acf7a1422501688f8050838bc6e37b900ca12fa4245fa5641a63dcec6aa7e460291baeb13da9ad0cfae4fca28552a7f0f8381cc5ca77114012b326785d66a99665ee018fc98f7962b0fe273e71122ef064b01b5db6215"}, {0x1f, 0x16, "57a5cdcb73c21850e94d5826871da5f3ebed94900b814496ef116f3f92ed57e2a9b80bd4decf580c36a3c1a6324ac159477b5cba430f1cd5659f846253a73b29fd948dcc4a4f4e4aa5880a77abdb5f56f7d8166d6d7eca97b16e728c5291d11e53020e3efea55495aa181dd20942b39333b9c7461fa759a7f21024a4f40b23145e0db814f4723a02bf5364eb085814c0cb634136acaee84833ddbe7b6e446bf0ff26796d26cdb27a147635e65c80"}, {0x3, 0x16, "68877bc66ed9fae0127394b4b1769ebb8245d500b4331fda1f81691450efa10ce2d657ecf7e25205e1cc028bd98f453a1c03d93537aa6cf410e80bb8243932647747b3fe5260750295b1a4a23152fe561ecc8f2e8286bd8fe397056d0e82f7b63b208e36ff55b80c569cc3b1feafdc808bc8c351fece28584adedfdc10bf1f7661974a6ffbc404f817000fad84f96f83f7f19dab6170f5e8d17d897f676eed27ba72b84591144ba3004d14dd59ef50d926f6d023"}, {0x18, 0x14, "6285124d23842a9c9f70f0b19e027f9e8bf8c3b3b63b63596d0076bcb8846c0e8ce1fd4ec123e810f15361c8b5ed7e8c68968db9162b8a96b0614d818877e25d06405e7cc59f53b689e69ea5fe7f293ab6a85c4b7b967f801489b93dcecfd0640a911083fd235ecafb4ee094a850891b4d172461973281451064b1712ba33e1b42ee4f9eb49c0200d1791cf31929d9a72033b2484302df8c6a0414db587b0a"}, {0x1f, 0xa, "c869190ed529d9c764ccb15db0ec54858870263369d0cf25675b21c518dc7dbf600258256bc212cf538ab264b546aa267d577994e26692f014da8be821cf7400bb84acccffc0772e8e5ef02be125353a60e9d3"}]}}}}, 0x2578) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x34, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x13}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x34}}, 0x4800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r8, 0x400, 0x70bd29, 0x3, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x4010) shutdown(r1, 0x1) 158.295252ms ago: executing program 3 (id=4972): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000002800000240012800b00010062726964676100003400028006002700070000000500290006000000"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c012}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x1, 0x70bd27, 0xfffffffc, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x42885}, 0x4004000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x323ac000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r13, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29e}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x14, 0x6, 0x6, 0x4}, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r14 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r14, 0x107, 0xf, &(0x7f0000000600), 0x56) 69.364724ms ago: executing program 1 (id=4973): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) 68.232457ms ago: executing program 0 (id=4974): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 0s ago: executing program 2 (id=4975): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) unshare(0x2c020400) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1, 0x6bbf, 0x7c) pselect6(0x40, &(0x7f00000003c0)={0x4, 0x8, 0x833, 0x1, 0x7, 0x2, 0xd, 0x1}, 0x0, &(0x7f0000000440)={0x8, 0x7, 0x80000001, 0x3, 0x3, 0xfffffffffffffffd, 0x2, 0x2}, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) kernel console output (not intermixed with test programs): 51.395490][T20421] name failslab, interval 1, probability 0, space 0, times 0 [ 551.395530][T20421] CPU: 0 UID: 0 PID: 20421 Comm: syz.2.3770 Not tainted syzkaller #0 PREEMPT(full) [ 551.395552][T20421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 551.395565][T20421] Call Trace: [ 551.395573][T20421] [ 551.395583][T20421] dump_stack_lvl+0xe8/0x150 [ 551.395618][T20421] should_fail_ex+0x410/0x560 [ 551.395648][T20421] should_failslab+0xa8/0x100 [ 551.395675][T20421] __kvmalloc_node_noprof+0x176/0x820 [ 551.395700][T20421] ? __kvmalloc_node_noprof+0x345/0x820 [ 551.395722][T20421] ? bpf_compute_scc+0xec/0xb10 [ 551.395741][T20421] ? bpf_compute_scc+0xec/0xb10 [ 551.395769][T20421] bpf_compute_scc+0xec/0xb10 [ 551.395813][T20421] bpf_check+0x2720/0x2ef0 [ 551.395856][T20421] ? __pfx_bpf_check+0x10/0x10 [ 551.395883][T20421] ? bpf_obj_name_cpy+0x194/0x1e0 [ 551.395916][T20421] bpf_prog_load+0x14d6/0x1c20 [ 551.395954][T20421] ? __pfx_bpf_prog_load+0x10/0x10 [ 551.396008][T20421] __sys_bpf+0xd0d/0xd90 [ 551.396042][T20421] ? __pfx___sys_bpf+0x10/0x10 [ 551.396078][T20421] ? __fget_files+0x2a/0x420 [ 551.396127][T20421] ? ksys_write+0x242/0x270 [ 551.396160][T20421] ? __pfx_ksys_write+0x10/0x10 [ 551.396196][T20421] __x64_sys_bpf+0xba/0xd0 [ 551.396221][T20421] do_syscall_64+0x166/0x520 [ 551.396240][T20421] ? trace_irq_disable+0x3b/0x140 [ 551.396261][T20421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.396281][T20421] ? clear_bhb_loop+0x70/0xc0 [ 551.396307][T20421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.396337][T20421] RIP: 0033:0x7f22e379e199 [ 551.396357][T20421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.396373][T20421] RSP: 002b:00007f22e45a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 551.396397][T20421] RAX: ffffffffffffffda RBX: 00007f22e3a25fa0 RCX: 00007f22e379e199 [ 551.396413][T20421] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 551.396426][T20421] RBP: 00007f22e45a0090 R08: 0000000000000000 R09: 0000000000000000 [ 551.396440][T20421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 551.396452][T20421] R13: 00007f22e3a26038 R14: 00007f22e3a25fa0 R15: 00007ffef085ee58 [ 551.396484][T20421] [ 551.822251][T20430] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3773'. [ 551.828073][T20430] batadv_slave_0: entered promiscuous mode [ 551.962279][T20428] batadv_slave_0: left promiscuous mode [ 552.300791][T20412] macvlan1: entered promiscuous mode [ 552.313511][T20412] macvlan1: left promiscuous mode [ 552.450428][T20443] sit0: entered promiscuous mode [ 552.735099][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 552.787699][T12335] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 552.795635][T20449] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 553.039272][T20458] __nla_validate_parse: 2 callbacks suppressed [ 553.039298][T20458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3784'. [ 555.874138][T20486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3794'. [ 556.063469][T20493] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3796'. [ 556.320574][ C1] vcan0: j1939_tp_rxtimer: 0xffff888066394400: rx timeout, send abort [ 556.320765][ C1] vcan0: j1939_tp_rxtimer: 0xffff888066394c00: rx timeout, send abort [ 556.320967][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888066394400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 556.321164][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888066394c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 557.394713][T20531] netlink: 'syz.2.3811': attribute type 1 has an invalid length. [ 557.394740][T20531] netlink: 1368 bytes leftover after parsing attributes in process `syz.2.3811'. [ 558.106156][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 560.364078][T20572] netlink: 'syz.2.3821': attribute type 10 has an invalid length. [ 560.364104][T20572] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3821'. [ 560.422913][T20575] IPVS: ip_vs_add_dest(): server weight less than zero [ 560.447646][T20575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3822'. [ 560.523463][T20575] tipc: Disabling bearer [ 560.596070][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057135400: rx timeout, send abort [ 560.596275][ C1] vcan0: j1939_tp_rxtimer: 0xffff888052fdf400: rx timeout, send abort [ 560.598193][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057135400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 560.598746][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888052fdf400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 561.295080][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 561.526728][T20610] FAULT_INJECTION: forcing a failure. [ 561.526728][T20610] name failslab, interval 1, probability 0, space 0, times 0 [ 561.526768][T20610] CPU: 1 UID: 0 PID: 20610 Comm: syz.0.3832 Not tainted syzkaller #0 PREEMPT(full) [ 561.526791][T20610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 561.526802][T20610] Call Trace: [ 561.526812][T20610] [ 561.526821][T20610] dump_stack_lvl+0xe8/0x150 [ 561.526856][T20610] should_fail_ex+0x410/0x560 [ 561.526896][T20610] should_failslab+0xa8/0x100 [ 561.526923][T20610] __kvmalloc_node_noprof+0x176/0x820 [ 561.526950][T20610] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 561.526974][T20610] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 561.527005][T20610] bpf_compute_live_registers+0x14f/0x1ff0 [ 561.527029][T20610] ? kfree+0x1c5/0x650 [ 561.527064][T20610] ? bpf_compute_scc+0xab6/0xb10 [ 561.527092][T20610] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 561.527128][T20610] bpf_check+0x2746/0x2ef0 [ 561.527171][T20610] ? __pfx_bpf_check+0x10/0x10 [ 561.527196][T20610] ? bpf_obj_name_cpy+0x194/0x1e0 [ 561.527229][T20610] bpf_prog_load+0x14d6/0x1c20 [ 561.527266][T20610] ? __pfx_bpf_prog_load+0x10/0x10 [ 561.527317][T20610] __sys_bpf+0xd0d/0xd90 [ 561.527348][T20610] ? __pfx___sys_bpf+0x10/0x10 [ 561.527383][T20610] ? __fget_files+0x2a/0x420 [ 561.527429][T20610] ? ksys_write+0x242/0x270 [ 561.527461][T20610] ? __pfx_ksys_write+0x10/0x10 [ 561.527496][T20610] __x64_sys_bpf+0xba/0xd0 [ 561.527521][T20610] do_syscall_64+0x166/0x520 [ 561.527541][T20610] ? trace_irq_disable+0x3b/0x140 [ 561.527561][T20610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.527581][T20610] ? clear_bhb_loop+0x70/0xc0 [ 561.527607][T20610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.527627][T20610] RIP: 0033:0x7f104239e199 [ 561.527648][T20610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.527665][T20610] RSP: 002b:00007f1043313028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 561.527689][T20610] RAX: ffffffffffffffda RBX: 00007f1042625fa0 RCX: 00007f104239e199 [ 561.527704][T20610] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 561.527718][T20610] RBP: 00007f1043313090 R08: 0000000000000000 R09: 0000000000000000 [ 561.527732][T20610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 561.527745][T20610] R13: 00007f1042626038 R14: 00007f1042625fa0 R15: 00007ffde05351b8 [ 561.527779][T20610] [ 561.528276][T20611] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3830'. [ 562.073731][T20600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 562.421652][T19709] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 563.715589][T20657] syzkaller1: entered promiscuous mode [ 564.421647][T20681] veth1_virt_wifi: entered promiscuous mode [ 564.596352][T20685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3850'. [ 566.247879][T20680] veth1_virt_wifi: left promiscuous mode [ 567.212987][T20708] veth1_to_team: entered promiscuous mode [ 567.320768][T20708] veth1_to_team: left promiscuous mode [ 567.331049][ C1] vcan0: j1939_tp_rxtimer: 0xffff888052533000: rx timeout, send abort [ 567.339727][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888052533000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 568.227580][T20740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3861'. [ 568.317014][T20740] veth15: entered allmulticast mode [ 571.032409][T20788] sctp: [Deprecated]: syz.3.3872 (pid 20788) Use of int in maxseg socket option. [ 571.032409][T20788] Use struct sctp_assoc_value instead [ 571.125914][T20784] bridge_slave_0: left allmulticast mode [ 571.125945][T20784] bridge_slave_0: left promiscuous mode [ 571.126230][T20784] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.293891][T20784] bridge_slave_1: left allmulticast mode [ 571.293920][T20784] bridge_slave_1: left promiscuous mode [ 571.294158][T20784] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.352809][T20784] bond3: (slave veth0_to_bond): Releasing backup interface [ 571.369443][T20784] bond0: (slave bond_slave_0): Releasing backup interface [ 571.371964][T20784] bond_slave_0: left allmulticast mode [ 571.399226][T20784] bond0: (slave bond_slave_1): Releasing backup interface [ 571.403195][T20784] bond_slave_1: left allmulticast mode [ 571.427196][T20784] team0: Port device team_slave_0 removed [ 571.434612][T20784] team0: Port device team_slave_1 removed [ 571.448741][T20784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.461210][T20784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.497393][T20784] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 571.507080][T20797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3875'. [ 571.660455][T20797] veth7: entered allmulticast mode [ 571.671553][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880596c3c00: rx timeout, send abort [ 571.671769][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d9e8000: rx timeout, send abort [ 571.672037][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880596c3c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 571.672212][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d9e8000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 571.832430][T20807] FAULT_INJECTION: forcing a failure. [ 571.832430][T20807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.832467][T20807] CPU: 1 UID: 0 PID: 20807 Comm: syz.1.3879 Not tainted syzkaller #0 PREEMPT(full) [ 571.832493][T20807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 571.832505][T20807] Call Trace: [ 571.832514][T20807] [ 571.832525][T20807] dump_stack_lvl+0xe8/0x150 [ 571.832561][T20807] should_fail_ex+0x410/0x560 [ 571.832593][T20807] _copy_from_user+0x2d/0xb0 [ 571.832634][T20807] ___sys_sendmsg+0x1c6/0x360 [ 571.832669][T20807] ? __lock_acquire+0x747/0x2de0 [ 571.832700][T20807] ? __pfx____sys_sendmsg+0x10/0x10 [ 571.832769][T20807] ? __fget_files+0x2a/0x420 [ 571.832797][T20807] ? __fget_files+0x3a2/0x420 [ 571.832836][T20807] __x64_sys_sendmsg+0x1b1/0x290 [ 571.832868][T20807] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 571.832921][T20807] do_syscall_64+0x166/0x520 [ 571.832942][T20807] ? trace_irq_disable+0x3b/0x140 [ 571.832963][T20807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.832984][T20807] ? clear_bhb_loop+0x70/0xc0 [ 571.833010][T20807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.833031][T20807] RIP: 0033:0x7ff20419e199 [ 571.833051][T20807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.833069][T20807] RSP: 002b:00007ff205014028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.833093][T20807] RAX: ffffffffffffffda RBX: 00007ff204425fa0 RCX: 00007ff20419e199 [ 571.833114][T20807] RDX: 0000000004080000 RSI: 0000200000000040 RDI: 0000000000000003 [ 571.833128][T20807] RBP: 00007ff205014090 R08: 0000000000000000 R09: 0000000000000000 [ 571.833142][T20807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.833155][T20807] R13: 00007ff204426038 R14: 00007ff204425fa0 R15: 00007ffcb6a2a908 [ 571.833191][T20807] [ 572.296682][T20793] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3873'. [ 572.296725][T20793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3873'. [ 572.296742][T20793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 573.163851][T20834] netlink: 'syz.3.3888': attribute type 16 has an invalid length. [ 573.163876][T20834] netlink: 'syz.3.3888': attribute type 17 has an invalid length. [ 573.598459][T20834] dummy0: left promiscuous mode [ 573.822159][T20834] team_slave_0: left allmulticast mode [ 573.835900][T20834] veth1_to_team: left allmulticast mode [ 574.162338][T20834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.180762][T20834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.290467][T20834] vlan0: left promiscuous mode [ 574.392423][T20855] FAULT_INJECTION: forcing a failure. [ 574.392423][T20855] name failslab, interval 1, probability 0, space 0, times 0 [ 574.392460][T20855] CPU: 1 UID: 0 PID: 20855 Comm: syz.2.3894 Not tainted syzkaller #0 PREEMPT(full) [ 574.392484][T20855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 574.392498][T20855] Call Trace: [ 574.392507][T20855] [ 574.392516][T20855] dump_stack_lvl+0xe8/0x150 [ 574.392553][T20855] should_fail_ex+0x410/0x560 [ 574.392585][T20855] should_failslab+0xa8/0x100 [ 574.392612][T20855] ? skb_clone+0x212/0x3a0 [ 574.392644][T20855] kmem_cache_alloc_noprof+0xa1/0x600 [ 574.392677][T20855] ? skb_clone+0x212/0x3a0 [ 574.392719][T20855] skb_clone+0x212/0x3a0 [ 574.392747][T20855] ? nfnetlink_rcv+0x4b0/0x28c0 [ 574.392858][T20855] nfnetlink_rcv+0x4de/0x28c0 [ 574.392883][T20855] ? kernel_text_address+0xa5/0xe0 [ 574.392928][T20855] ? __kernel_text_address+0xd/0x30 [ 574.392952][T20855] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 574.392975][T20855] ? arch_stack_walk+0xfb/0x150 [ 574.393026][T20855] ? stack_trace_save+0xa9/0x100 [ 574.393049][T20855] ? __lock_acquire+0x747/0x2de0 [ 574.393072][T20855] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 574.393116][T20855] ? __lock_acquire+0x747/0x2de0 [ 574.393160][T20855] ? __netlink_lookup+0xc6/0x8b0 [ 574.393198][T20855] ? lock_acquire+0x115/0x350 [ 574.393219][T20855] ? netlink_deliver_tap+0x2e/0x1b0 [ 574.393251][T20855] ? netlink_deliver_tap+0x2e/0x1b0 [ 574.393273][T20855] ? netlink_deliver_tap+0x2e/0x1b0 [ 574.393302][T20855] netlink_unicast+0x7bd/0x940 [ 574.393337][T20855] netlink_sendmsg+0x813/0xb40 [ 574.393371][T20855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.393404][T20855] ? apparmor_socket_sendmsg+0x98/0x360 [ 574.393445][T20855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.393469][T20855] sock_sendmsg_nosec+0x14e/0x190 [ 574.393496][T20855] ____sys_sendmsg+0x54e/0x850 [ 574.393534][T20855] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.393575][T20855] ? import_iovec+0x73/0xa0 [ 574.393607][T20855] ___sys_sendmsg+0x2a5/0x360 [ 574.393636][T20855] ? __lock_acquire+0x747/0x2de0 [ 574.393663][T20855] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.393733][T20855] ? __fget_files+0x2a/0x420 [ 574.393762][T20855] ? __fget_files+0x3a2/0x420 [ 574.393802][T20855] __x64_sys_sendmsg+0x1b1/0x290 [ 574.393836][T20855] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 574.393892][T20855] do_syscall_64+0x166/0x520 [ 574.393913][T20855] ? trace_irq_disable+0x3b/0x140 [ 574.393935][T20855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.393957][T20855] ? clear_bhb_loop+0x70/0xc0 [ 574.393984][T20855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.394006][T20855] RIP: 0033:0x7f22e379e199 [ 574.394028][T20855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.394046][T20855] RSP: 002b:00007f22e45a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.394071][T20855] RAX: ffffffffffffffda RBX: 00007f22e3a25fa0 RCX: 00007f22e379e199 [ 574.394087][T20855] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 574.394102][T20855] RBP: 00007f22e45a0090 R08: 0000000000000000 R09: 0000000000000000 [ 574.394116][T20855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.394130][T20855] R13: 00007f22e3a26038 R14: 00007f22e3a25fa0 R15: 00007ffef085ee58 [ 574.394173][T20855] [ 574.954757][T20834] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 574.969024][T20834] ip6gretap1: left allmulticast mode [ 574.994421][T20834] bond1: left allmulticast mode [ 575.001595][T20834] geneve2: left promiscuous mode [ 575.010378][T13006] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.026404][T13006] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.027640][T13006] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.027683][T13006] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.186858][T20864] FAULT_INJECTION: forcing a failure. [ 575.186858][T20864] name failslab, interval 1, probability 0, space 0, times 0 [ 575.186895][T20864] CPU: 1 UID: 0 PID: 20864 Comm: syz.3.3897 Not tainted syzkaller #0 PREEMPT(full) [ 575.186918][T20864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 575.186931][T20864] Call Trace: [ 575.186940][T20864] [ 575.186950][T20864] dump_stack_lvl+0xe8/0x150 [ 575.186986][T20864] should_fail_ex+0x410/0x560 [ 575.187015][T20864] ? __alloc_skb+0x1db/0x7a0 [ 575.187043][T20864] should_failslab+0xa8/0x100 [ 575.187070][T20864] ? __alloc_skb+0x1db/0x7a0 [ 575.187094][T20864] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 575.187125][T20864] ? __alloc_skb+0x18d/0x7a0 [ 575.187153][T20864] ? __alloc_skb+0x1db/0x7a0 [ 575.187186][T20864] __alloc_skb+0x1db/0x7a0 [ 575.187218][T20864] netlink_sendmsg+0x5d4/0xb40 [ 575.187254][T20864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.187313][T20864] ? apparmor_socket_sendmsg+0x98/0x360 [ 575.187341][T20864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.187363][T20864] sock_sendmsg_nosec+0x14e/0x190 [ 575.187391][T20864] ____sys_sendmsg+0x54e/0x850 [ 575.187428][T20864] ? __pfx_____sys_sendmsg+0x10/0x10 [ 575.187468][T20864] ? import_iovec+0x73/0xa0 [ 575.187504][T20864] ___sys_sendmsg+0x2a5/0x360 [ 575.187533][T20864] ? __lock_acquire+0x747/0x2de0 [ 575.187576][T20864] ? __pfx____sys_sendmsg+0x10/0x10 [ 575.187646][T20864] ? __fget_files+0x2a/0x420 [ 575.187705][T20864] ? __fget_files+0x3a2/0x420 [ 575.187745][T20864] __x64_sys_sendmsg+0x1b1/0x290 [ 575.187845][T20864] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 575.187935][T20864] do_syscall_64+0x166/0x520 [ 575.187957][T20864] ? trace_irq_disable+0x3b/0x140 [ 575.187980][T20864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.188002][T20864] ? clear_bhb_loop+0x70/0xc0 [ 575.188029][T20864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.188050][T20864] RIP: 0033:0x7fe3c9f9e199 [ 575.188072][T20864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.188092][T20864] RSP: 002b:00007fe3caf2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.188116][T20864] RAX: ffffffffffffffda RBX: 00007fe3ca225fa0 RCX: 00007fe3c9f9e199 [ 575.188132][T20864] RDX: 0000000004080000 RSI: 0000200000000040 RDI: 0000000000000003 [ 575.188147][T20864] RBP: 00007fe3caf2c090 R08: 0000000000000000 R09: 0000000000000000 [ 575.188160][T20864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.188174][T20864] R13: 00007fe3ca226038 R14: 00007fe3ca225fa0 R15: 00007ffc626553b8 [ 575.188220][T20864] [ 575.631790][T20867] x_tables: duplicate underflow at hook 1 [ 575.634334][T20867] x_tables: duplicate underflow at hook 1 [ 575.634879][T20867] x_tables: duplicate underflow at hook 1 [ 575.636961][T20867] x_tables: duplicate underflow at hook 1 [ 575.637746][T20867] x_tables: duplicate underflow at hook 1 [ 575.638350][T20867] x_tables: duplicate underflow at hook 1 [ 575.638954][T20867] x_tables: duplicate underflow at hook 1 [ 575.639548][T20867] x_tables: duplicate underflow at hook 1 [ 575.640153][T20867] x_tables: duplicate underflow at hook 1 [ 575.640760][T20867] x_tables: duplicate underflow at hook 1 [ 576.183697][T20883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3903'. [ 576.224506][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e72c800: rx timeout, send abort [ 576.224683][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802aa1d800: rx timeout, send abort [ 576.225055][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e72c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 576.225337][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802aa1d800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 576.294333][T20883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3903'. [ 576.305123][ T1115] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.305171][ T1115] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.305205][ T1115] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.305238][ T1115] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.405562][T20889] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3905'. [ 576.405603][T20889] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3905'. [ 576.458751][T20889] erspan0: entered promiscuous mode [ 576.460108][T20889] 0ªX¹¦Dö»: entered promiscuous mode [ 576.461039][T20889] debugfs: 'hsr1' already exists in 'hsr' [ 576.461062][T20889] Cannot create hsr debugfs directory [ 576.559273][T20893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3907'. [ 576.559304][T20893] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 576.625898][T20897] netlink: 'syz.3.3909': attribute type 1 has an invalid length. [ 576.775787][T20903] netlink: 'syz.3.3909': attribute type 1 has an invalid length. [ 576.781382][T20900] bond2: (slave geneve3): making interface the new active one [ 576.809134][T20900] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 576.831145][T20902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3907'. [ 577.022260][T20903] bond2: option mode: unable to set because the bond device has slaves [ 577.025671][ T1115] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 577.025727][ T1115] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 577.025762][ T1115] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 577.025797][ T1115] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 577.314497][T20915] FAULT_INJECTION: forcing a failure. [ 577.314497][T20915] name failslab, interval 1, probability 0, space 0, times 0 [ 577.314534][T20915] CPU: 1 UID: 0 PID: 20915 Comm: syz.3.3913 Not tainted syzkaller #0 PREEMPT(full) [ 577.314558][T20915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 577.314572][T20915] Call Trace: [ 577.314581][T20915] [ 577.314591][T20915] dump_stack_lvl+0xe8/0x150 [ 577.314628][T20915] should_fail_ex+0x410/0x560 [ 577.314659][T20915] should_failslab+0xa8/0x100 [ 577.314687][T20915] __kvmalloc_node_noprof+0x176/0x820 [ 577.314710][T20915] ? rcu_is_watching+0x16/0xb0 [ 577.314736][T20915] ? bpf_compute_subprog_arg_access+0x187/0x14d0 [ 577.314760][T20915] ? trace_kmalloc+0x2a/0xf0 [ 577.314778][T20915] ? call_instance+0x263/0x560 [ 577.314802][T20915] ? call_instance+0x263/0x560 [ 577.314831][T20915] call_instance+0x263/0x560 [ 577.314861][T20915] bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 577.314888][T20915] ? raw_tp_prog_func_proto+0x32/0xc0 [ 577.314935][T20915] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 577.314966][T20915] ? __kvmalloc_node_noprof+0x345/0x820 [ 577.314989][T20915] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 577.315011][T20915] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 577.315042][T20915] bpf_compute_live_registers+0x8d3/0x1ff0 [ 577.315087][T20915] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 577.315125][T20915] bpf_check+0x2746/0x2ef0 [ 577.315179][T20915] ? __pfx_bpf_check+0x10/0x10 [ 577.315206][T20915] ? bpf_obj_name_cpy+0x194/0x1e0 [ 577.315241][T20915] bpf_prog_load+0x14d6/0x1c20 [ 577.315280][T20915] ? __pfx_bpf_prog_load+0x10/0x10 [ 577.315334][T20915] __sys_bpf+0xd0d/0xd90 [ 577.315368][T20915] ? __pfx___sys_bpf+0x10/0x10 [ 577.315405][T20915] ? __fget_files+0x2a/0x420 [ 577.315455][T20915] ? ksys_write+0x242/0x270 [ 577.315489][T20915] ? __pfx_ksys_write+0x10/0x10 [ 577.315526][T20915] __x64_sys_bpf+0xba/0xd0 [ 577.315552][T20915] do_syscall_64+0x166/0x520 [ 577.315572][T20915] ? trace_irq_disable+0x3b/0x140 [ 577.315594][T20915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.315615][T20915] ? clear_bhb_loop+0x70/0xc0 [ 577.315642][T20915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.315661][T20915] RIP: 0033:0x7fe3c9f9e199 [ 577.315683][T20915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.315701][T20915] RSP: 002b:00007fe3caf2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 577.315725][T20915] RAX: ffffffffffffffda RBX: 00007fe3ca225fa0 RCX: 00007fe3c9f9e199 [ 577.315741][T20915] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 577.315755][T20915] RBP: 00007fe3caf2c090 R08: 0000000000000000 R09: 0000000000000000 [ 577.315769][T20915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 577.315782][T20915] R13: 00007fe3ca226038 R14: 00007fe3ca225fa0 R15: 00007ffc626553b8 [ 577.315818][T20915] [ 577.908544][T20927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3916'. [ 577.914697][T20929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3916'. [ 578.000407][T20935] FAULT_INJECTION: forcing a failure. [ 578.000407][T20935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.000445][T20935] CPU: 1 UID: 0 PID: 20935 Comm: syz.1.3919 Not tainted syzkaller #0 PREEMPT(full) [ 578.000468][T20935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 578.000481][T20935] Call Trace: [ 578.000491][T20935] [ 578.000506][T20935] dump_stack_lvl+0xe8/0x150 [ 578.000542][T20935] should_fail_ex+0x410/0x560 [ 578.000572][T20935] _copy_from_iter+0x1d3/0x1660 [ 578.000596][T20935] ? __alloc_skb+0x27a/0x7a0 [ 578.000624][T20935] ? __alloc_skb+0x27a/0x7a0 [ 578.000652][T20935] ? __alloc_skb+0x27a/0x7a0 [ 578.000677][T20935] ? __pfx__copy_from_iter+0x10/0x10 [ 578.000699][T20935] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 578.000729][T20935] ? __alloc_skb+0x27a/0x7a0 [ 578.000751][T20935] ? __alloc_skb+0x27a/0x7a0 [ 578.000784][T20935] ? netlink_sendmsg+0x650/0xb40 [ 578.000806][T20935] ? skb_put+0x112/0x210 [ 578.000835][T20935] netlink_sendmsg+0x6c0/0xb40 [ 578.000868][T20935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.000901][T20935] ? apparmor_socket_sendmsg+0x98/0x360 [ 578.000927][T20935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.000949][T20935] sock_sendmsg_nosec+0x14e/0x190 [ 578.000975][T20935] ____sys_sendmsg+0x54e/0x850 [ 578.001009][T20935] ? __pfx_____sys_sendmsg+0x10/0x10 [ 578.001047][T20935] ? import_iovec+0x73/0xa0 [ 578.001076][T20935] ___sys_sendmsg+0x2a5/0x360 [ 578.001103][T20935] ? __lock_acquire+0x747/0x2de0 [ 578.001134][T20935] ? __pfx____sys_sendmsg+0x10/0x10 [ 578.001214][T20935] ? __fget_files+0x2a/0x420 [ 578.001241][T20935] ? __fget_files+0x3a2/0x420 [ 578.001279][T20935] __x64_sys_sendmsg+0x1b1/0x290 [ 578.001311][T20935] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 578.001363][T20935] do_syscall_64+0x166/0x520 [ 578.001383][T20935] ? trace_irq_disable+0x3b/0x140 [ 578.001404][T20935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.001425][T20935] ? clear_bhb_loop+0x70/0xc0 [ 578.001450][T20935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.001471][T20935] RIP: 0033:0x7ff20419e199 [ 578.001491][T20935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.001509][T20935] RSP: 002b:00007ff205014028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 578.001533][T20935] RAX: ffffffffffffffda RBX: 00007ff204425fa0 RCX: 00007ff20419e199 [ 578.001549][T20935] RDX: 0000000004080000 RSI: 0000200000000040 RDI: 0000000000000003 [ 578.001563][T20935] RBP: 00007ff205014090 R08: 0000000000000000 R09: 0000000000000000 [ 578.001577][T20935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.001589][T20935] R13: 00007ff204426038 R14: 00007ff204425fa0 R15: 00007ffcb6a2a908 [ 578.001624][T20935] [ 578.439668][T20958] netlink: 'syz.4.3920': attribute type 4 has an invalid length. [ 578.578777][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 578.805863][T20937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.817546][T20937] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.830829][T20937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.208350][T20937] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 579.208381][T20937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 579.226630][T20937] veth1_vlan: left promiscuous mode [ 579.231336][T20937] veth0_vlan: left promiscuous mode [ 579.236782][T20937] veth0_vlan: entered promiscuous mode [ 579.248241][T20937] veth1_vlan: entered promiscuous mode [ 579.286011][T20937] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 579.315284][T20937] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 579.317223][T20937] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 579.318456][T20937] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 579.322770][T20937] bond1: left promiscuous mode [ 579.323133][T20937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 579.356776][T20937] 8021q: adding VLAN 0 to HW filter on device bond2 [ 579.363673][T20937] 8021q: adding VLAN 0 to HW filter on device bond3 [ 579.368378][T20937] bridge1: left promiscuous mode [ 579.374534][T20937] 8021q: adding VLAN 0 to HW filter on device bond4 [ 579.389557][T20937] bridge2: left promiscuous mode [ 579.407736][T20937] erspan1: left promiscuous mode [ 579.434234][T20937] 8021q: adding VLAN 0 to HW filter on device bond5 [ 579.451076][T20937] batman_adv: batadv0: Interface activated: gretap1 [ 579.451483][T20937] bond6: left promiscuous mode [ 579.452825][T20937] 8021q: adding VLAN 0 to HW filter on device bond6 [ 579.463768][T20937] 8021q: adding VLAN 0 to HW filter on device bond7 [ 579.543684][T20930] syzkaller0: entered promiscuous mode [ 579.543710][T20930] syzkaller0: entered allmulticast mode [ 579.547316][T20112] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.547348][T20112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.547407][T20112] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.547429][T20112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.547465][T20112] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.547487][T20112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.547519][T20112] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.547541][T20112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.343752][T20992] FAULT_INJECTION: forcing a failure. [ 582.343752][T20992] name failslab, interval 1, probability 0, space 0, times 0 [ 582.343792][T20992] CPU: 0 UID: 0 PID: 20992 Comm: syz.1.3930 Not tainted syzkaller #0 PREEMPT(full) [ 582.343816][T20992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 582.343830][T20992] Call Trace: [ 582.343839][T20992] [ 582.343849][T20992] dump_stack_lvl+0xe8/0x150 [ 582.343884][T20992] should_fail_ex+0x410/0x560 [ 582.343916][T20992] should_failslab+0xa8/0x100 [ 582.343945][T20992] __kvmalloc_node_noprof+0x176/0x820 [ 582.343970][T20992] ? rcu_is_watching+0x16/0xb0 [ 582.343996][T20992] ? analyze_subprog+0x846/0x9e00 [ 582.344018][T20992] ? analyze_subprog+0x846/0x9e00 [ 582.344049][T20992] analyze_subprog+0x846/0x9e00 [ 582.344073][T20992] ? is_bpf_text_address+0x292/0x2b0 [ 582.344112][T20992] ? kernel_text_address+0xa5/0xe0 [ 582.344142][T20992] ? arch_stack_walk+0xfb/0x150 [ 582.344182][T20992] ? __pfx_stack_trace_save+0x10/0x10 [ 582.344210][T20992] ? __pfx___css_rstat_updated+0x10/0x10 [ 582.344270][T20992] ? call_instance+0x263/0x560 [ 582.344292][T20992] ? bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 582.344315][T20992] ? bpf_compute_live_registers+0x8d3/0x1ff0 [ 582.344340][T20992] ? __pfx_analyze_subprog+0x10/0x10 [ 582.344362][T20992] ? __x64_sys_bpf+0xba/0xd0 [ 582.344381][T20992] ? do_syscall_64+0x166/0x520 [ 582.344400][T20992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.344465][T20992] ? call_instance+0x263/0x560 [ 582.344487][T20992] ? rcu_is_watching+0x16/0xb0 [ 582.344512][T20992] ? call_instance+0x263/0x560 [ 582.344534][T20992] ? trace_kmalloc+0x2a/0xf0 [ 582.344556][T20992] ? call_instance+0x263/0x560 [ 582.344578][T20992] ? __kvmalloc_node_noprof+0x52f/0x820 [ 582.344601][T20992] ? __kvmalloc_node_noprof+0x345/0x820 [ 582.344623][T20992] ? call_instance+0x263/0x560 [ 582.344644][T20992] ? call_instance+0x263/0x560 [ 582.344675][T20992] ? call_instance+0x42e/0x560 [ 582.344707][T20992] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 582.344734][T20992] ? raw_tp_prog_func_proto+0x32/0xc0 [ 582.344787][T20992] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 582.344815][T20992] ? __kvmalloc_node_noprof+0x345/0x820 [ 582.344835][T20992] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 582.344857][T20992] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 582.344890][T20992] bpf_compute_live_registers+0x8d3/0x1ff0 [ 582.344937][T20992] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 582.344974][T20992] bpf_check+0x2746/0x2ef0 [ 582.345018][T20992] ? __pfx_bpf_check+0x10/0x10 [ 582.345045][T20992] ? bpf_obj_name_cpy+0x194/0x1e0 [ 582.345078][T20992] bpf_prog_load+0x14d6/0x1c20 [ 582.345127][T20992] ? __pfx_bpf_prog_load+0x10/0x10 [ 582.345180][T20992] __sys_bpf+0xd0d/0xd90 [ 582.345214][T20992] ? __pfx___sys_bpf+0x10/0x10 [ 582.345251][T20992] ? __fget_files+0x2a/0x420 [ 582.345300][T20992] ? ksys_write+0x242/0x270 [ 582.345334][T20992] ? __pfx_ksys_write+0x10/0x10 [ 582.345370][T20992] __x64_sys_bpf+0xba/0xd0 [ 582.345396][T20992] do_syscall_64+0x166/0x520 [ 582.345414][T20992] ? trace_irq_disable+0x3b/0x140 [ 582.345435][T20992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.345456][T20992] ? clear_bhb_loop+0x70/0xc0 [ 582.345483][T20992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.345504][T20992] RIP: 0033:0x7ff20419e199 [ 582.345525][T20992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.345543][T20992] RSP: 002b:00007ff205014028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 582.345567][T20992] RAX: ffffffffffffffda RBX: 00007ff204425fa0 RCX: 00007ff20419e199 [ 582.345582][T20992] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 582.345596][T20992] RBP: 00007ff205014090 R08: 0000000000000000 R09: 0000000000000000 [ 582.345609][T20992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 582.345622][T20992] R13: 00007ff204426038 R14: 00007ff204425fa0 R15: 00007ffcb6a2a908 [ 582.345657][T20992] [ 582.798151][T20998] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 583.208518][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880582e8400: rx timeout, send abort [ 583.210342][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880582e9400: rx timeout, send abort [ 583.210612][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880582e8400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 583.210763][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880582e9400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 583.588799][T21025] netlink: 'syz.4.3940': attribute type 16 has an invalid length. [ 583.588827][T21025] netlink: 'syz.4.3940': attribute type 17 has an invalid length. [ 583.679842][T21022] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.727882][T21022] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.902060][T21035] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 584.012504][T21037] xt_CT: You must specify a L4 protocol and not use inversions on it [ 584.103291][T21038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.119950][T21025] 0ªX¹¦Dö»: left allmulticast mode [ 584.192632][T21025] sit0: left promiscuous mode [ 584.443069][T21044] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3944'. [ 584.443093][T21044] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3944'. [ 584.507287][T21025] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.507433][T21025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.529442][T21025] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.529568][T21025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.791576][T21025] gtp0: left promiscuous mode [ 584.791606][T21025] gtp0: left allmulticast mode [ 584.798321][T21025] veth3: left allmulticast mode [ 584.810613][T21025] veth5: left allmulticast mode [ 584.844477][T21025] veth7: left allmulticast mode [ 584.849871][T21025] geneve0: entered promiscuous mode [ 584.858294][T21028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3940'. [ 585.125670][T21044] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3944'. [ 585.577794][T21072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3953'. [ 585.577829][T21072] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3953'. [ 585.831130][T21090] openvswitch: netlink: Message has 2 unknown bytes. [ 585.845808][T21092] openvswitch: netlink: Message has 2 unknown bytes. [ 585.853419][T21090] tipc: Enabling of bearer rejected, failed to enable media [ 586.079779][T21098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3958'. [ 586.488232][T21081] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3954'. [ 586.492453][T21110] ref_ctr_offset mismatch. inode: 0xc8 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 586.515413][T21081] netlink: zone id is out of range [ 586.515430][T21081] netlink: zone id is out of range [ 586.515438][T21081] netlink: zone id is out of range [ 586.515446][T21081] netlink: zone id is out of range [ 586.515453][T21081] netlink: zone id is out of range [ 586.618741][T21110] netlink: 'syz.2.3963': attribute type 83 has an invalid length. [ 586.995246][T21122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3967'. [ 587.144594][T21126] netlink: 'syz.2.3969': attribute type 2 has an invalid length. [ 587.144623][T21126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3969'. [ 587.756175][T21155] FAULT_INJECTION: forcing a failure. [ 587.756175][T21155] name failslab, interval 1, probability 0, space 0, times 0 [ 587.756222][T21155] CPU: 0 UID: 0 PID: 21155 Comm: syz.1.3976 Not tainted syzkaller #0 PREEMPT(full) [ 587.756245][T21155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 587.756257][T21155] Call Trace: [ 587.756265][T21155] [ 587.756275][T21155] dump_stack_lvl+0xe8/0x150 [ 587.756309][T21155] should_fail_ex+0x410/0x560 [ 587.756340][T21155] should_failslab+0xa8/0x100 [ 587.756369][T21155] __kmalloc_cache_noprof+0xa3/0x600 [ 587.756392][T21155] ? nft_trans_flowtable_add+0x59/0x460 [ 587.756504][T21155] ? nft_trans_flowtable_add+0x59/0x460 [ 587.756536][T21155] nft_trans_flowtable_add+0x59/0x460 [ 587.756558][T21155] ? nf_flow_table_init+0x287/0x2a0 [ 587.756634][T21155] nf_tables_newflowtable+0x1c99/0x25e0 [ 587.756656][T21155] ? reacquire_held_locks+0x117/0x1a0 [ 587.756699][T21155] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 587.756723][T21155] ? lock_acquire+0x115/0x350 [ 587.756760][T21155] ? __nla_parse+0x40/0x60 [ 587.756793][T21155] nfnetlink_rcv+0x1288/0x28c0 [ 587.756856][T21155] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 587.756928][T21155] ? skb_clone+0x246/0x3a0 [ 587.756975][T21155] ? netlink_deliver_tap+0x2e/0x1b0 [ 587.756997][T21155] ? netlink_deliver_tap+0x2e/0x1b0 [ 587.757026][T21155] netlink_unicast+0x7bd/0x940 [ 587.757060][T21155] netlink_sendmsg+0x813/0xb40 [ 587.757096][T21155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 587.757129][T21155] ? apparmor_socket_sendmsg+0x98/0x360 [ 587.757158][T21155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 587.757179][T21155] sock_sendmsg_nosec+0x14e/0x190 [ 587.757215][T21155] ____sys_sendmsg+0x54e/0x850 [ 587.757250][T21155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 587.757287][T21155] ? import_iovec+0x73/0xa0 [ 587.757318][T21155] ___sys_sendmsg+0x2a5/0x360 [ 587.757345][T21155] ? __lock_acquire+0x747/0x2de0 [ 587.757370][T21155] ? __pfx____sys_sendmsg+0x10/0x10 [ 587.757437][T21155] ? __fget_files+0x2a/0x420 [ 587.757464][T21155] ? __fget_files+0x3a2/0x420 [ 587.757504][T21155] __x64_sys_sendmsg+0x1b1/0x290 [ 587.757556][T21155] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 587.757609][T21155] do_syscall_64+0x166/0x520 [ 587.757628][T21155] ? trace_irq_disable+0x3b/0x140 [ 587.757646][T21155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.757667][T21155] ? clear_bhb_loop+0x70/0xc0 [ 587.757692][T21155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.757712][T21155] RIP: 0033:0x7ff20419e199 [ 587.757733][T21155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.757751][T21155] RSP: 002b:00007ff205014028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 587.757775][T21155] RAX: ffffffffffffffda RBX: 00007ff204425fa0 RCX: 00007ff20419e199 [ 587.757791][T21155] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 587.757804][T21155] RBP: 00007ff205014090 R08: 0000000000000000 R09: 0000000000000000 [ 587.757817][T21155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.757829][T21155] R13: 00007ff204426038 R14: 00007ff204425fa0 R15: 00007ffcb6a2a908 [ 587.757861][T21155] [ 589.839892][T21220] set match dimension is over the limit! [ 589.943557][T21223] __nla_validate_parse: 1 callbacks suppressed [ 589.943582][T21223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3994'. [ 590.001157][T21222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3995'. [ 590.012800][T21213] udevd[21213]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 590.053783][T21228] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 590.068539][T21212] udevd[21212]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 590.083241][T21223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3994'. [ 590.100760][T19709] block nbd23: Receive control failed (result -1) [ 590.121181][T21231] tunl0: entered promiscuous mode [ 590.149747][T21231] gre0: entered promiscuous mode [ 590.401276][T21231] gretap0: entered promiscuous mode [ 590.422417][T21231] erspan0: entered promiscuous mode [ 590.443862][T21231] ip_vti0: entered promiscuous mode [ 590.472132][T21231] ip6_vti0: entered promiscuous mode [ 590.511558][T21231] sit0: entered promiscuous mode [ 590.560655][T21231] ip6tnl0: entered promiscuous mode [ 590.580806][T21231] ip6gre0: entered promiscuous mode [ 590.685493][T21231] syz_tun: entered promiscuous mode [ 590.763561][T21231] ip6gretap0: entered promiscuous mode [ 590.789797][T21231] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.790147][T21231] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.832401][T21231] bridge0: entered promiscuous mode [ 590.879933][T21231] vcan0: entered promiscuous mode [ 590.917795][T21231] bond0: entered promiscuous mode [ 590.917823][T21231] bond_slave_0: entered promiscuous mode [ 590.918056][T21231] bond_slave_1: entered promiscuous mode [ 590.918258][T21231] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 590.939197][T21231] team0: entered promiscuous mode [ 590.939223][T21231] team_slave_0: entered promiscuous mode [ 590.939445][T21231] team_slave_1: entered promiscuous mode [ 590.978352][T21231] nlmon0: entered promiscuous mode [ 590.991701][T21231] batadv0: entered promiscuous mode [ 591.017742][T21231] vxcan0: entered promiscuous mode [ 591.022938][T21231] vxcan1: entered promiscuous mode [ 591.030049][T21231] veth0: entered promiscuous mode [ 591.050714][T21231] veth1: entered promiscuous mode [ 591.078580][T21231] wg0: entered promiscuous mode [ 591.091947][T21231] wg1: entered promiscuous mode [ 591.123393][T21246] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3999'. [ 591.123820][T21231] wg2: entered promiscuous mode [ 591.142099][T21231] veth0_to_bridge: entered promiscuous mode [ 591.173136][T21231] veth1_to_bridge: entered promiscuous mode [ 591.202268][T21231] veth0_to_bond: entered promiscuous mode [ 591.220475][T21231] veth1_to_bond: entered promiscuous mode [ 591.249587][T21231] veth0_to_team: entered promiscuous mode [ 591.268871][T21231] veth1_to_team: entered promiscuous mode [ 591.284533][T21249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4000'. [ 591.289838][T21231] veth0_to_batadv: entered promiscuous mode [ 591.312024][T21231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.312088][T21231] batadv_slave_0: entered promiscuous mode [ 591.324183][T21231] veth1_to_batadv: entered promiscuous mode [ 591.333430][T21231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.333492][T21231] batadv_slave_1: entered promiscuous mode [ 591.349121][T21231] xfrm0: entered promiscuous mode [ 591.368411][T21231] veth0_to_hsr: entered promiscuous mode [ 591.408098][T21231] veth1_to_hsr: entered promiscuous mode [ 591.440995][T21231] hsr0: entered promiscuous mode [ 591.461232][T21231] veth1_virt_wifi: entered promiscuous mode [ 591.481105][T21231] veth0_virt_wifi: entered promiscuous mode [ 591.509862][T21231] virt_wifi0: entered promiscuous mode [ 591.561285][T21231] vlan0: entered promiscuous mode [ 591.577560][T21231] vlan1: entered promiscuous mode [ 591.600529][T21231] macvlan0: entered promiscuous mode [ 591.630671][T21231] macvlan1: entered promiscuous mode [ 591.641206][T21231] ipvlan0: entered promiscuous mode [ 591.656889][T21231] ipvlan1: entered promiscuous mode [ 591.744033][T21231] macvtap0: entered promiscuous mode [ 591.764040][T21231] macsec0: entered promiscuous mode [ 591.780406][T21231] geneve0: entered promiscuous mode [ 591.792147][T21231] geneve1: entered promiscuous mode [ 591.832789][T21231] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 591.868402][T21231] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 591.884315][T21231] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 591.931262][T21231] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 591.985643][T21231] mac80211_hwsim hwsim20 wlan1: entered promiscuous mode [ 592.037851][T21231] mac80211_hwsim hwsim20 nicvf0: entered promiscuous mode [ 592.058368][T21231] bridge1: entered promiscuous mode [ 592.064472][T21231] dvmrp0: entered promiscuous mode [ 592.064636][T21231] veth2: entered promiscuous mode [ 592.065441][T21231] veth3: entered promiscuous mode [ 592.078482][T21231] bond2: entered promiscuous mode [ 592.079577][T21231] veth4: entered promiscuous mode [ 592.080779][T21231] veth5: entered promiscuous mode [ 592.084557][T21231] gtp0: entered promiscuous mode [ 592.120516][T21231] bridge2: entered promiscuous mode [ 592.129917][T21231] gre1: entered promiscuous mode [ 592.192103][T21261] netlink: 'syz.4.4002': attribute type 10 has an invalid length. [ 592.192130][T21261] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4002'. [ 592.266673][ T176] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.266731][ T176] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.266768][ T176] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.266814][ T176] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.402318][T21249] veth7: entered allmulticast mode [ 592.662170][T21259] netlink: 'syz.4.4002': attribute type 4 has an invalid length. [ 593.025654][T21284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4006'. [ 593.108722][T21292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4006'. [ 593.221767][T21280] netlink: 'syz.0.4006': attribute type 1 has an invalid length. [ 593.282788][T21295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4006'. [ 593.764652][T21292] team0: left allmulticast mode [ 593.764678][T21292] team_slave_0: left allmulticast mode [ 593.768464][T21292] team_slave_1: left allmulticast mode [ 593.768486][T21292] bridge2: left allmulticast mode [ 593.768503][T21292] team0: left promiscuous mode [ 593.768516][T21292] team_slave_0: left promiscuous mode [ 593.768732][T21292] team_slave_1: left promiscuous mode [ 593.768902][T21292] bridge2: left promiscuous mode [ 593.769251][T21292] bridge0: port 3(team0) entered disabled state [ 593.783826][T21292] bridge_slave_1: left allmulticast mode [ 593.783851][T21292] bridge_slave_1: left promiscuous mode [ 593.784101][T21292] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.800220][T21292] bridge_slave_0: left allmulticast mode [ 593.800245][T21292] bridge_slave_0: left promiscuous mode [ 593.800451][T21292] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.952325][T21280] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 594.069157][T21302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4011'. [ 594.246024][T21305] netlink: 'syz.1.4012': attribute type 1 has an invalid length. [ 594.481497][T21305] bond3: entered promiscuous mode [ 594.493388][T21305] 8021q: adding VLAN 0 to HW filter on device bond3 [ 594.541750][T21309] macvtap1: entered allmulticast mode [ 594.570041][T21315] macvtap2: entered allmulticast mode [ 594.710201][T21318] veth3: entered allmulticast mode [ 594.790461][T21319] bond3: (slave bridge3): making interface the new active one [ 594.790491][T21319] bridge3: entered promiscuous mode [ 594.808901][T21319] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 595.557873][T21353] mac80211_hwsim hwsim19 wlan0: left promiscuous mode [ 595.703562][T21361] __nla_validate_parse: 4 callbacks suppressed [ 595.703586][T21361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4028'. [ 595.822464][T21363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4029'. [ 596.383410][T21363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4029'. [ 596.399068][T19709] block nbd24: Receive control failed (result -1) [ 596.654734][T21383] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4030'. [ 596.901461][T21383] netlink: 'syz.3.4030': attribute type 3 has an invalid length. [ 596.901489][T21383] netlink: 'syz.3.4030': attribute type 4 has an invalid length. [ 596.901505][T21383] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.4030'. [ 597.039765][T21393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4033'. [ 597.098470][T21393] veth17: entered allmulticast mode [ 597.661783][T21390] syzkaller0: entered promiscuous mode [ 597.663220][T21390] syzkaller0: entered allmulticast mode [ 598.205511][T21432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4043'. [ 598.209820][T19709] block nbd25: Receive control failed (result -1) [ 598.693806][T21448] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4046'. [ 599.474128][T21459] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4047'. [ 599.954590][T21472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4051'. [ 603.335607][T21457] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4047'. [ 603.335641][T21457] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4047'. [ 603.446868][T21485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4056'. [ 603.452275][T21484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4057'. [ 603.523688][T21486] xt_check_table_hooks: 23 callbacks suppressed [ 603.523774][T21486] x_tables: duplicate underflow at hook 1 [ 603.596713][T21485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.830844][T21500] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4059'. [ 603.837334][T21484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4057'. [ 603.857669][T19709] block nbd26: Receive control failed (result -107) [ 603.884616][T21496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.923263][T21496] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.026970][T21496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.448223][T21496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.466193][T21496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.512236][T21496] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 604.512266][T21496] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 604.554892][T21496] veth1_vlan: left promiscuous mode [ 604.562257][T21496] veth0_vlan: left promiscuous mode [ 604.579191][T21496] veth0_vlan: entered promiscuous mode [ 604.674887][T21496] veth1_vlan: entered promiscuous mode [ 604.813116][T21524] FAULT_INJECTION: forcing a failure. [ 604.813116][T21524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.813162][T21524] CPU: 0 UID: 0 PID: 21524 Comm: syz.2.4064 Not tainted syzkaller #0 PREEMPT(full) [ 604.813185][T21524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 604.813199][T21524] Call Trace: [ 604.813208][T21524] [ 604.813219][T21524] dump_stack_lvl+0xe8/0x150 [ 604.813255][T21524] should_fail_ex+0x410/0x560 [ 604.813287][T21524] _copy_from_user+0x2d/0xb0 [ 604.813317][T21524] kstrtouint_from_user+0xd6/0x180 [ 604.813344][T21524] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 604.813379][T21524] ? lock_acquire+0x115/0x350 [ 604.813409][T21524] proc_fail_nth_write+0x8e/0x210 [ 604.813432][T21524] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 604.813465][T21524] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 604.813485][T21524] vfs_write+0x296/0xba0 [ 604.813529][T21524] ? __pfx_vfs_write+0x10/0x10 [ 604.813562][T21524] ? __fget_files+0x2a/0x420 [ 604.813594][T21524] ? __fget_files+0x3a2/0x420 [ 604.813618][T21524] ? __fget_files+0x2a/0x420 [ 604.813654][T21524] ksys_write+0x150/0x270 [ 604.813696][T21524] ? __pfx_ksys_write+0x10/0x10 [ 604.813746][T21524] do_syscall_64+0x166/0x520 [ 604.813775][T21524] ? trace_irq_disable+0x3b/0x140 [ 604.813796][T21524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.813844][T21524] ? clear_bhb_loop+0x70/0xc0 [ 604.813889][T21524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.813911][T21524] RIP: 0033:0x7f22e375e9ce [ 604.813931][T21524] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 604.813947][T21524] RSP: 002b:00007f22e459ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 604.813978][T21524] RAX: ffffffffffffffda RBX: 00007f22e45a06c0 RCX: 00007f22e375e9ce [ 604.813993][T21524] RDX: 0000000000000001 RSI: 00007f22e45a00a0 RDI: 0000000000000004 [ 604.814006][T21524] RBP: 00007f22e45a0090 R08: 0000000000000000 R09: 0000000000000000 [ 604.814019][T21524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 604.814031][T21524] R13: 00007f22e3a26038 R14: 00007f22e3a25fa0 R15: 00007ffef085ee58 [ 604.814069][T21524] [ 605.105658][T21496] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 605.109789][T21496] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 605.115544][T21496] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 605.177562][T21496] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 605.202070][T21496] batman_adv: batadv0: Interface activated: ip6gretap1 [ 605.230719][T21496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 605.243245][T21535] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4067'. [ 605.243271][T21535] net_ratelimit: 9 callbacks suppressed [ 605.243345][T21535] openvswitch: netlink: Flow key attr not present in new flow. [ 605.244294][T21535] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20003 [ 605.307276][T21496] 8021q: adding VLAN 0 to HW filter on device bond2 [ 605.369642][T21535] xt_CT: You must specify a L4 protocol and not use inversions on it [ 605.442877][T21500] macsec0: entered promiscuous mode [ 605.442904][T21500] macsec0: entered allmulticast mode [ 605.445594][ T1115] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 605.445658][ T1115] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 605.445734][ T1115] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 605.445771][ T1115] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 605.514122][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.514246][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.542274][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.542437][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.563768][T21564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4075'. [ 606.697306][T21573] ip_tables: iptables: counters copy to user failed while replacing table [ 606.783390][T21564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4075'. [ 606.787108][T19709] block nbd27: Receive control failed (result -107) [ 612.085252][T21614] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 612.497019][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 613.489482][T21644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4095'. [ 614.562178][T21646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4095'. [ 614.579545][T21648] netlink: 'syz.2.4095': attribute type 10 has an invalid length. [ 614.579570][T21648] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4095'. [ 614.948231][T21665] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4099'. [ 615.563373][T20112] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x6c [ 615.638890][T21677] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 615.648947][T21682] xt_NFQUEUE: number of total queues is 0 [ 615.673021][T21677] IPv6: sit1: Disabled Multicast RS [ 615.879369][T21689] syzkaller0: entered promiscuous mode [ 615.879395][T21689] syzkaller0: entered allmulticast mode [ 615.916433][T21693] netlink: 'syz.2.4108': attribute type 1 has an invalid length. [ 617.340405][T21745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4124'. [ 617.341915][T21746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4124'. [ 617.367476][T21742] netlink: 'syz.1.4123': attribute type 1 has an invalid length. [ 617.492262][T21742] 8021q: adding VLAN 0 to HW filter on device bond4 [ 617.664375][T21743] dummy0: left promiscuous mode [ 618.017560][T21757] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4127'. [ 618.022028][T21763] netlink: zone id is out of range [ 618.022046][T21763] netlink: zone id is out of range [ 618.022055][T21763] netlink: zone id is out of range [ 618.022064][T21763] netlink: zone id is out of range [ 618.022074][T21763] netlink: zone id is out of range [ 618.022083][T21763] netlink: zone id is out of range [ 618.022096][T21763] netlink: zone id is out of range [ 618.022106][T21763] netlink: zone id is out of range [ 618.022115][T21763] netlink: zone id is out of range [ 618.022124][T21763] netlink: zone id is out of range [ 619.015255][T21782] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4135'. [ 619.019247][T21782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4135'. [ 619.103603][T21786] netlink: 'syz.0.4134': attribute type 1 has an invalid length. [ 619.251795][T21786] 8021q: adding VLAN 0 to HW filter on device bond2 [ 619.309700][T21787] tc action pedit unable to extract header offset for header type (0x5) [ 619.309728][T21787] tc action pedit unable to extract header offset for header type (0x5) [ 619.309743][T21787] tc action pedit unable to extract header offset for header type (0x5) [ 619.309756][T21787] tc action pedit unable to extract header offset for header type (0x5) [ 619.309770][T21787] tc action pedit unable to extract header offset for header type (0x5) [ 619.309783][T21787] tc action pedit unable to extract header offset for header type (0x5) [ 619.309797][T21787] tc action pedit unable to extract header offset for header type (0x5) [ 619.309811][T21787] tc action pedit unable to extract header offset for header type (0x5) [ 619.309824][T21787] tc action pedit unable to extract header offset for header type (0x5) [ 619.309838][T21787] tc action pedit unable to extract header offset for header type (0x5) [ 620.522024][T21773] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4129'. [ 620.778798][T21817] veth0: entered promiscuous mode [ 621.164183][T21813] veth0: left promiscuous mode [ 621.902384][T21851] x_tables: duplicate underflow at hook 2 [ 622.265417][T19709] Bluetooth: hci2: connection err: -111 [ 622.493025][T21866] netlink: 'syz.1.4160': attribute type 20 has an invalid length. [ 622.493053][T21866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4160'. [ 622.547803][T15167] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.548042][T15167] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.548104][T15167] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.548138][T15167] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.560426][T21866] netlink: 'syz.1.4160': attribute type 20 has an invalid length. [ 622.560449][T21866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4160'. [ 627.612307][T21887] syzkaller0: entered promiscuous mode [ 627.612333][T21887] syzkaller0: entered allmulticast mode [ 627.617822][T21898] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 627.707862][T21881] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 627.823188][T21897] tipc: Enabled bearer , priority 0 [ 627.948103][T21897] tipc: Resetting bearer [ 628.051775][T21897] tipc: Disabling bearer [ 628.420713][T21929] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4172'. [ 628.886247][T21940] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 628.888555][T21940] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 628.892609][T21940] net_ratelimit: 1704 callbacks suppressed [ 628.892631][T21940] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 629.134138][T21939] block nbd28: server does not support multiple connections per device. [ 629.234387][T21939] block nbd28: shutting down sockets [ 629.335914][T21947] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4180'. [ 629.335941][T21947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4180'. [ 629.583250][T21953] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4182'. [ 629.881257][T21955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4183'. [ 630.201541][T21970] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20001 [ 630.378610][T21977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4190'. [ 632.002280][T22012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.314059][T22021] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4203'. [ 633.383283][T22048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4213'. [ 633.471105][T22048] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4213'. [ 633.805455][T22051] x_tables: duplicate underflow at hook 4 [ 634.654558][T22075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4225'. [ 634.799551][T22082] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4225'. [ 636.766504][T22131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4241'. [ 636.933030][T22136] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4241'. [ 637.050934][T22143] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4246'. [ 637.050963][T22143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4246'. [ 637.417010][T22157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4249'. [ 637.418237][T22157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4249'. [ 638.049185][T22167] syz.2.4252 (22167) used obsolete PPPIOCDETACH ioctl [ 638.747534][T22175] bond3: entered allmulticast mode [ 639.390535][T22200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4264'. [ 639.419597][T22203] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4265'. [ 639.459339][T22201] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4265'. [ 639.573344][T22206] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4264'. [ 640.046534][T22221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4273'. [ 640.259006][T22228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4274'. [ 640.480356][T22236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4277'. [ 641.008331][T22259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4283'. [ 641.048528][T22260] vcan1: entered allmulticast mode [ 641.081462][T22258] tipc: Failed to remove unknown binding: 66,0,0/0:840950384/840950386 [ 641.081496][T22258] tipc: Failed to remove unknown binding: 66,0,0/0:840950384/840950385 [ 641.106047][T22258] tipc: Failed to remove unknown binding: 66,0,0/0:840950384/840950386 [ 641.106078][T22258] tipc: Failed to remove unknown binding: 66,0,0/0:840950384/840950385 [ 641.740401][T22286] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4291'. [ 641.985971][T22295] 8021q: VLANs not supported on syzkaller0 [ 642.432797][T22307] xt_hashlimit: size too large, truncated to 1048576 [ 643.188477][T22324] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4298'. [ 643.556994][T19709] Bluetooth: hci2: link tx timeout [ 643.557018][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.573030][T19709] Bluetooth: hci2: link tx timeout [ 643.573052][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.581277][T19709] Bluetooth: hci2: link tx timeout [ 643.581298][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.587214][T19709] Bluetooth: hci2: link tx timeout [ 643.587231][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.595468][T19709] Bluetooth: hci2: link tx timeout [ 643.595484][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.600688][T19709] Bluetooth: hci2: link tx timeout [ 643.600704][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.608624][T19709] Bluetooth: hci2: link tx timeout [ 643.608638][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.613916][T19709] Bluetooth: hci2: link tx timeout [ 643.613931][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.622124][T19709] Bluetooth: hci2: link tx timeout [ 643.622141][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.627682][T19709] Bluetooth: hci2: link tx timeout [ 643.627698][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.635975][T19709] Bluetooth: hci2: link tx timeout [ 643.635991][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.641301][T19709] Bluetooth: hci2: link tx timeout [ 643.641318][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.649289][T19709] Bluetooth: hci2: link tx timeout [ 643.649305][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.662887][T19709] Bluetooth: hci2: link tx timeout [ 643.662905][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.663681][T19709] Bluetooth: hci2: link tx timeout [ 643.663696][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.669042][T19709] Bluetooth: hci2: link tx timeout [ 643.669057][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.677256][T19709] Bluetooth: hci2: link tx timeout [ 643.677273][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.682602][T19709] Bluetooth: hci2: link tx timeout [ 643.682616][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.900927][T19709] Bluetooth: hci2: link tx timeout [ 643.900951][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.903882][T19709] Bluetooth: hci2: link tx timeout [ 643.903898][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.943447][T19709] Bluetooth: hci2: link tx timeout [ 643.943469][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.943600][T19709] Bluetooth: hci2: link tx timeout [ 643.943613][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.943722][T19709] Bluetooth: hci2: link tx timeout [ 643.943735][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.943840][T19709] Bluetooth: hci2: link tx timeout [ 643.943852][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.943960][T19709] Bluetooth: hci2: link tx timeout [ 643.943971][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.944077][T19709] Bluetooth: hci2: link tx timeout [ 643.944089][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.944193][T19709] Bluetooth: hci2: link tx timeout [ 643.944205][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.944310][T19709] Bluetooth: hci2: link tx timeout [ 643.944322][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.944437][T19709] Bluetooth: hci2: link tx timeout [ 643.944449][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.944554][T19709] Bluetooth: hci2: link tx timeout [ 643.944566][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.944671][T19709] Bluetooth: hci2: link tx timeout [ 643.944683][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 643.946380][T19709] Bluetooth: hci2: link tx timeout [ 643.946396][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.159419][T22329] ip_vti0 speed is unknown, defaulting to 1000 [ 644.170659][T19709] Bluetooth: hci2: link tx timeout [ 644.170684][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.252358][T19709] Bluetooth: hci2: link tx timeout [ 644.252389][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.252527][T19709] Bluetooth: hci2: link tx timeout [ 644.252540][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.252649][T19709] Bluetooth: hci2: link tx timeout [ 644.252661][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.252768][T19709] Bluetooth: hci2: link tx timeout [ 644.252780][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.252893][T19709] Bluetooth: hci2: link tx timeout [ 644.252905][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.253012][T19709] Bluetooth: hci2: link tx timeout [ 644.253025][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.253137][T19709] Bluetooth: hci2: link tx timeout [ 644.253149][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.253274][T19709] Bluetooth: hci2: link tx timeout [ 644.253287][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.253404][T19709] Bluetooth: hci2: link tx timeout [ 644.253416][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.253540][T19709] Bluetooth: hci2: link tx timeout [ 644.253551][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.408337][T19709] Bluetooth: hci2: link tx timeout [ 644.408357][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.408555][T19709] Bluetooth: hci2: link tx timeout [ 644.408568][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.445106][T19709] Bluetooth: hci2: link tx timeout [ 644.445126][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.445249][T19709] Bluetooth: hci2: link tx timeout [ 644.445262][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.445378][T19709] Bluetooth: hci2: link tx timeout [ 644.445391][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.445517][T19709] Bluetooth: hci2: link tx timeout [ 644.445529][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.445635][T19709] Bluetooth: hci2: link tx timeout [ 644.445647][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.445753][T19709] Bluetooth: hci2: link tx timeout [ 644.445765][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.445872][T19709] Bluetooth: hci2: link tx timeout [ 644.445884][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.445989][T19709] Bluetooth: hci2: link tx timeout [ 644.446001][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.446106][T19709] Bluetooth: hci2: link tx timeout [ 644.446118][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.446222][T19709] Bluetooth: hci2: link tx timeout [ 644.446234][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.446339][T19709] Bluetooth: hci2: link tx timeout [ 644.446350][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.446464][T19709] Bluetooth: hci2: link tx timeout [ 644.446476][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.446581][T19709] Bluetooth: hci2: link tx timeout [ 644.446593][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.446716][T19709] Bluetooth: hci2: link tx timeout [ 644.446728][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.448811][T19709] Bluetooth: hci2: link tx timeout [ 644.448825][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.448939][T19709] Bluetooth: hci2: link tx timeout [ 644.448951][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.449062][T19709] Bluetooth: hci2: link tx timeout [ 644.449074][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.449690][T19709] Bluetooth: hci2: link tx timeout [ 644.449703][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.452003][T19709] Bluetooth: hci2: link tx timeout [ 644.452020][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.453721][T19709] Bluetooth: hci2: link tx timeout [ 644.453736][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.453855][T19709] Bluetooth: hci2: link tx timeout [ 644.453867][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.453974][T19709] Bluetooth: hci2: link tx timeout [ 644.453986][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.454110][T19709] Bluetooth: hci2: link tx timeout [ 644.454123][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.516934][T19709] Bluetooth: hci2: link tx timeout [ 644.516955][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.846576][T19709] Bluetooth: hci2: link tx timeout [ 644.846601][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.846769][T19709] Bluetooth: hci2: link tx timeout [ 644.846782][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.846891][T19709] Bluetooth: hci2: link tx timeout [ 644.846903][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.847054][T19709] Bluetooth: hci2: link tx timeout [ 644.847067][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.847172][T19709] Bluetooth: hci2: link tx timeout [ 644.847184][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.847290][T19709] Bluetooth: hci2: link tx timeout [ 644.847302][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.847417][T19709] Bluetooth: hci2: link tx timeout [ 644.847429][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.847536][T19709] Bluetooth: hci2: link tx timeout [ 644.847547][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.847653][T19709] Bluetooth: hci2: link tx timeout [ 644.847665][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.847770][T19709] Bluetooth: hci2: link tx timeout [ 644.847782][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.847888][T19709] Bluetooth: hci2: link tx timeout [ 644.847900][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 644.848023][T19709] Bluetooth: hci2: link tx timeout [ 644.848035][T19709] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 645.145252][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 645.245087][T22344] __nla_validate_parse: 1 callbacks suppressed [ 645.245112][T22344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4303'. [ 645.245135][T22344] block nbd28: Unsupported socket: should be TCP or UNIX. [ 645.567378][T22349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4304'. [ 645.615952][T19709] Bluetooth: hci2: command 0x0406 tx timeout [ 645.730077][T22349] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4304'. [ 645.890855][T22362] netlink: 'syz.4.4306': attribute type 10 has an invalid length. [ 646.414045][T22372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4308'. [ 646.414229][T22372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4308'. [ 646.414395][T22372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4308'. [ 646.414546][T22372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4308'. [ 646.414725][T22372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4308'. [ 646.485329][T22372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4308'. [ 646.485507][T22372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4308'. [ 646.654193][T22384] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 646.687256][T22384] 0ªX¹¦Dö»: entered allmulticast mode [ 647.419347][T22389] veth0_to_bridge: entered promiscuous mode [ 647.420044][T22389] macvtap0: entered allmulticast mode [ 647.420061][T22389] veth0_to_bridge: entered allmulticast mode [ 647.495741][T22389] veth0_to_bridge: left allmulticast mode [ 647.495776][T22389] veth0_to_bridge: left promiscuous mode [ 647.921550][ T4934] block nbd28: Receive control failed (result -107) [ 649.408215][T22446] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 649.408236][T22446] IPv6: NLM_F_CREATE should be set when creating new route [ 649.408488][T22446] IPv6: NLM_F_CREATE should be set when creating new route [ 649.408518][T22446] IPv6: NLM_F_CREATE should be set when creating new route [ 649.491545][T22448] team0: Port device bridge0 added [ 651.003608][T22490] __nla_validate_parse: 66 callbacks suppressed [ 651.003675][T22490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4346'. [ 651.092280][T22490] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4346'. [ 651.228776][T22499] netlink: 'syz.4.4350': attribute type 1 has an invalid length. [ 651.307310][T22502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4347'. [ 651.348453][T22503] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4350'. [ 651.427186][T22499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4350'. [ 651.444668][T22499] 8021q: adding VLAN 0 to HW filter on device bond2 [ 651.584519][T22499] bridge2: entered promiscuous mode [ 651.584545][T22499] bridge2: entered allmulticast mode [ 651.609937][T22499] bond2: (slave bridge2): making interface the new active one [ 651.628306][T22499] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 651.898377][T22510] ipvlan0: left promiscuous mode [ 651.916085][T22510] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 651.960090][T22526] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4358'. [ 652.051816][T22534] netlink: 'syz.4.4361': attribute type 7 has an invalid length. [ 652.055664][T22534] netlink: 'syz.4.4361': attribute type 7 has an invalid length. [ 652.354188][T22538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4363'. [ 652.616455][T22545] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 652.705285][T22546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4365'. [ 652.952527][T22552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 653.099002][T22542] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4363'. [ 653.174035][T22553] xt_ecn: cannot match TCP bits for non-tcp packets [ 653.205280][T22553] netlink: Conntrack attr has 8 unknown bytes [ 653.205320][T22553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 653.700313][T22564] syzkaller0: entered promiscuous mode [ 653.700340][T22564] syzkaller0: entered allmulticast mode [ 654.752851][T22588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4376'. [ 654.778371][T22585] netlink: 'syz.2.4376': attribute type 1 has an invalid length. [ 654.965624][T22585] 8021q: adding VLAN 0 to HW filter on device bond8 [ 655.049565][T22588] bond8: (slave geneve3): making interface the new active one [ 655.053196][T22588] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 655.278753][T22605] lo: entered promiscuous mode [ 655.278963][T22605] tunl0: entered promiscuous mode [ 655.279137][T22605] gre0: entered promiscuous mode [ 655.279269][T22605] gretap0: entered promiscuous mode [ 655.279416][T22605] erspan0: entered promiscuous mode [ 655.279550][T22605] ip_vti0: entered promiscuous mode [ 655.279718][T22605] ip6_vti0: entered promiscuous mode [ 655.279846][T22605] sit0: entered promiscuous mode [ 655.279980][T22605] ip6tnl0: entered promiscuous mode [ 655.280129][T22605] ip6gre0: entered promiscuous mode [ 655.346394][T22605] syz_tun: entered promiscuous mode [ 655.349174][T22605] vcan0: entered promiscuous mode [ 655.411864][T22605] bond0: entered promiscuous mode [ 655.411893][T22605] bond_slave_0: entered promiscuous mode [ 655.413349][T22605] bond_slave_1: entered promiscuous mode [ 655.573052][T22605] team0: entered promiscuous mode [ 655.573081][T22605] team_slave_0: entered promiscuous mode [ 655.574527][T22605] team_slave_1: entered promiscuous mode [ 655.576210][T22605] bridge2: entered promiscuous mode [ 655.578874][T22605] dummy0: entered promiscuous mode [ 655.580381][T22605] nlmon0: entered promiscuous mode [ 655.583076][T22605] vxcan0: entered promiscuous mode [ 655.584555][T22605] vxcan1: entered promiscuous mode [ 655.633763][T22605] veth0: entered promiscuous mode [ 655.633947][T22605] veth1: entered promiscuous mode [ 655.634114][T22605] wg0: entered promiscuous mode [ 655.634284][T22605] wg1: entered promiscuous mode [ 655.634460][T22605] wg2: entered promiscuous mode [ 655.634661][T22605] veth0_to_bridge: entered promiscuous mode [ 655.635051][T22605] bridge_slave_0: entered promiscuous mode [ 655.675373][T22605] veth1_to_bridge: entered promiscuous mode [ 655.675602][T22605] bridge_slave_1: entered promiscuous mode [ 655.675771][T22605] veth0_to_bond: entered promiscuous mode [ 655.676118][T22605] veth1_to_bond: entered promiscuous mode [ 655.676456][T22605] veth0_to_team: entered promiscuous mode [ 655.676778][T22605] veth1_to_team: entered promiscuous mode [ 655.681148][T22605] veth0_to_batadv: entered promiscuous mode [ 655.681333][T22605] batadv_slave_0: entered promiscuous mode [ 655.681497][T22605] veth1_to_batadv: entered promiscuous mode [ 655.681662][T22605] batadv_slave_1: entered promiscuous mode [ 655.681833][T22605] xfrm0: entered promiscuous mode [ 655.682006][T22605] veth0_to_hsr: entered promiscuous mode [ 655.684021][T22605] veth1_to_hsr: entered promiscuous mode [ 655.684361][T22605] hsr0: entered promiscuous mode [ 655.684535][T22605] veth1_virt_wifi: entered promiscuous mode [ 655.684705][T22605] veth0_virt_wifi: entered promiscuous mode [ 655.744271][T22605] virt_wifi0: entered promiscuous mode [ 655.762658][T22605] vlan0: entered promiscuous mode [ 655.775656][T22605] vlan1: entered promiscuous mode [ 655.806202][T22605] macvlan0: entered promiscuous mode [ 655.807921][T22605] macvlan1: entered promiscuous mode [ 655.809440][T22605] ipvlan0: entered promiscuous mode [ 655.811143][T22605] ipvlan1: entered promiscuous mode [ 655.837110][T22605] macvtap0: entered promiscuous mode [ 655.838243][T22605] macsec0: entered promiscuous mode [ 655.839704][T22605] geneve0: entered promiscuous mode [ 655.841186][T22605] geneve1: entered promiscuous mode [ 655.871207][T22605] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 655.872880][T22605] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 655.874677][T22605] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 655.896531][T22605] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 655.898054][T22605] veth2: entered promiscuous mode [ 655.923261][T22605] veth3: entered promiscuous mode [ 655.991643][T22605] bond1: entered promiscuous mode [ 655.991840][T22605] geneve2: entered promiscuous mode [ 655.992082][T22605] bridge1: entered promiscuous mode [ 655.992373][T22605] macvlan2: entered promiscuous mode [ 655.992546][T22605] macvlan3: entered promiscuous mode [ 655.992712][T22605] geneve3: entered promiscuous mode [ 655.992844][T22605] syztnl0: entered promiscuous mode [ 655.992971][T22605] veth4: entered promiscuous mode [ 655.993432][T22605] veth5: entered promiscuous mode [ 655.993608][T22605] @: entered promiscuous mode [ 655.993747][T22605] bridge3: entered promiscuous mode [ 656.058559][T22605] hsr1: entered promiscuous mode [ 656.059583][T22605] veth6: entered promiscuous mode [ 656.059776][T22605] veth7: entered promiscuous mode [ 656.060400][T22605] bond2: entered promiscuous mode [ 656.061397][T22605] gre1: entered promiscuous mode [ 656.094350][T22605] bond3: entered promiscuous mode [ 656.094529][T22605] bridge0: entered promiscuous mode [ 656.107683][T22605] bridge4: entered promiscuous mode [ 656.112342][T22605] bridge5: entered promiscuous mode [ 656.301909][T22621] __nla_validate_parse: 3 callbacks suppressed [ 656.301935][T22621] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4382'. [ 656.973901][T22633] hsr0: entered allmulticast mode [ 656.973928][T22633] hsr_slave_0: entered allmulticast mode [ 656.973946][T22633] hsr_slave_1: entered allmulticast mode [ 657.005941][T22633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4389'. [ 657.313703][T22662] xt_hashlimit: size too large, truncated to 1048576 [ 657.515516][T22667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4397'. [ 659.961827][T22633] hsr_slave_0: left promiscuous mode [ 660.005170][T22633] hsr_slave_1: left promiscuous mode [ 660.495703][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 660.541523][T22660] syzkaller0: entered promiscuous mode [ 660.541873][T22660] syzkaller0: entered allmulticast mode [ 660.719249][T22690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4402'. [ 660.884166][T22694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4401'. [ 663.347389][T22732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4409'. [ 665.987510][T22703] veth19: entered allmulticast mode [ 666.011592][T22713] tipc: Started in network mode [ 666.011627][T22713] tipc: Node identity 7a2f23e641b4, cluster identity 4711 [ 666.011834][T22713] tipc: Enabled bearer , priority 0 [ 666.129365][T22714] syzkaller0: entered promiscuous mode [ 666.129393][T22714] syzkaller0: entered allmulticast mode [ 666.129965][T22714] tipc: Resetting bearer [ 666.214572][T20111] tipc: Resetting bearer [ 666.242941][T22732] veth9: entered allmulticast mode [ 666.350536][T22709] tipc: Resetting bearer [ 666.396972][T22748] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4413'. [ 666.397019][T22748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4413'. [ 666.435260][T22753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4413'. [ 667.185661][T22762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4415'. [ 667.409990][T22762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4415'. [ 667.432798][ T4934] block nbd29: Receive control failed (result -1) [ 671.307813][T22709] tipc: Disabling bearer [ 671.341204][T22753] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 671.398863][T22756] syzkaller1: entered promiscuous mode [ 671.398890][T22756] syzkaller1: entered allmulticast mode [ 671.401789][ T990] tipc: Node number set to 1000023014 [ 671.702884][T22782] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 671.954570][T22793] ip_tables: iptables: counters copy to user failed while replacing table [ 672.039137][T22786] syzkaller0: entered promiscuous mode [ 672.039163][T22786] syzkaller0: entered allmulticast mode [ 672.331005][T22806] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4425'. [ 673.050265][T22824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.563268][T22834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4432'. [ 673.756408][T22841] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4432'. [ 673.829578][T22846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4435'. [ 673.829604][T22846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4435'. [ 673.833907][T22846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4435'. [ 673.833931][T22846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4435'. [ 673.833953][T22846] netlink: 'syz.4.4435': attribute type 5 has an invalid length. [ 674.175136][T19709] Bluetooth: hci2: command 0x0406 tx timeout [ 674.232574][T22858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4436'. [ 674.248961][T22865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4440'. [ 674.348958][T22868] netlink: 'syz.0.4439': attribute type 1 has an invalid length. [ 674.731298][T22865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4440'. [ 674.751840][ T4934] block nbd30: Receive control failed (result -1) [ 674.979810][T22868] 8021q: adding VLAN 0 to HW filter on device bond4 [ 675.024603][T22873] veth0_to_bond: left promiscuous mode [ 676.891191][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803211c800: rx timeout, send abort [ 676.891420][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803211c800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 678.279549][T22957] ipt_REJECT: ECHOREPLY no longer supported. [ 678.427398][T22966] __nla_validate_parse: 7 callbacks suppressed [ 678.427423][T22966] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4462'. [ 678.688440][T22965] syzkaller0: entered promiscuous mode [ 678.688467][T22965] syzkaller0: entered allmulticast mode [ 679.003450][T22983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4464'. [ 679.020502][T22986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4464'. [ 679.143003][T22988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4468'. [ 679.170938][T22988] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4468'. [ 679.280178][T22992] sock: sock_set_timeout: `syz.1.4470' (pid 22992) tries to set negative timeout [ 679.545911][T22999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4471'. [ 679.579746][T22994] syzkaller0: entered promiscuous mode [ 679.579776][T22994] syzkaller0: entered allmulticast mode [ 679.664542][T22999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4471'. [ 679.678962][ T4934] block nbd31: Receive control failed (result -1) [ 679.690585][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807fd94000: rx timeout, send abort [ 679.692653][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807fd94000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 679.814157][T23010] sctp: [Deprecated]: syz.3.4474 (pid 23010) Use of int in maxseg socket option. [ 679.814157][T23010] Use struct sctp_assoc_value instead [ 680.005935][T23019] Dead loop on virtual device ip6_vti0 (net 425), fix it urgently! [ 680.227330][T23023] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4478'. [ 680.312537][T23027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4478'. [ 680.985240][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 680.985522][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 681.369027][T23043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4482'. [ 684.768479][T23045] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4482'. [ 685.170836][T23062] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4489'. [ 685.829917][T23086] ip_tables: iptables: counters copy to user failed while replacing table [ 685.834369][T23086] netlink: 'syz.3.4495': attribute type 1 has an invalid length. [ 685.851985][T23054] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 685.870814][T23066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4487'. [ 686.132443][T23086] bond3: entered promiscuous mode [ 686.132524][T23086] bond3: entered allmulticast mode [ 686.133049][T23086] 8021q: adding VLAN 0 to HW filter on device bond3 [ 686.223438][T23089] erspan1: entered allmulticast mode [ 686.269084][T23096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4497'. [ 686.269113][T23096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4497'. [ 686.269316][T23096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4497'. [ 686.269335][T23096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4497'. [ 686.269531][T23096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4497'. [ 686.269549][T23096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4497'. [ 686.272882][T23096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4497'. [ 686.311817][T23089] bond3: (slave erspan1): making interface the new active one [ 686.311846][T23089] erspan1: entered promiscuous mode [ 686.341214][T23089] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 687.005649][T23113] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:0 [ 687.076758][T23092] 8021q: adding VLAN 0 to HW filter on device bond9 [ 687.527811][T23131] tipc: Started in network mode [ 687.527846][T23131] tipc: Node identity 7f000001, cluster identity 4711 [ 687.527905][T23131] tipc: Enabling of bearer rejected, failed to enable media [ 687.687454][T23133] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 687.978917][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055c6e800: rx timeout, send abort [ 687.979202][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055c6e800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 688.143836][T23153] bridge0: port 1(bond0) entered blocking state [ 688.144547][T23153] bridge0: port 1(bond0) entered disabled state [ 688.237489][T23153] bond0: entered promiscuous mode [ 688.344957][ T4934] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 688.908675][T23181] netlink: 'syz.1.4519': attribute type 1 has an invalid length. [ 689.270537][ T4934] block nbd32: Receive control failed (result -1) [ 689.292677][T23189] netlink: 'syz.1.4519': attribute type 1 has an invalid length. [ 690.120299][T23214] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 690.123261][T23214] __nla_validate_parse: 69 callbacks suppressed [ 690.123283][T23214] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4528'. [ 690.568125][T23238] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4531'. [ 690.637182][T23241] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4531'. [ 690.718163][T23243] netlink: 'syz.4.4533': attribute type 49 has an invalid length. [ 690.757133][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804cd6dc00: rx timeout, send abort [ 690.757363][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804cd6dc00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 691.441045][T23243] ip6gretap0: entered promiscuous mode [ 691.441073][T23243] ip6gretap0: entered allmulticast mode [ 691.897700][T23273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4540'. [ 691.941336][T23273] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4540'. [ 691.998666][T23276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4541'. [ 692.153557][T23276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4541'. [ 692.170642][ T4934] block nbd33: Receive control failed (result -1) [ 692.550045][T23293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4545'. [ 692.800075][T23293] veth21: entered allmulticast mode [ 692.900709][T23302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4546'. [ 693.347389][T23313] netlink: 'syz.1.4549': attribute type 1 has an invalid length. [ 693.506136][ C1] vcan0: j1939_tp_rxtimer: 0xffff888045dcc000: rx timeout, send abort [ 693.506844][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888045dcc000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 693.676308][T23308] sctp: [Deprecated]: syz.4.4547 (pid 23308) Use of struct sctp_assoc_value in delayed_ack socket option. [ 693.676308][T23308] Use struct sctp_sack_info instead [ 693.747521][T23321] netlink: 'syz.1.4549': attribute type 1 has an invalid length. [ 693.807273][T23335] netlink: 'syz.2.4551': attribute type 1 has an invalid length. [ 693.851871][T23313] bond5: (slave geneve3): making interface the new active one [ 693.870369][T23313] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 694.127084][T23335] 8021q: adding VLAN 0 to HW filter on device bond10 [ 694.145378][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 694.257987][T23343] macvlan2: entered promiscuous mode [ 694.258307][T23343] macvlan2: entered allmulticast mode [ 694.263380][T23343] bond10: entered promiscuous mode [ 694.355423][T23343] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 694.438760][T23350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4551'. [ 694.446719][T23343] bond10: left promiscuous mode [ 694.560618][T23349] xt_time: unknown flags 0x4 [ 694.705789][T15167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 694.729439][T20112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 694.729899][T20112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 694.988004][ T4934] block nbd34: Receive control failed (result -1) [ 695.282153][T23368] __nla_validate_parse: 5 callbacks suppressed [ 695.282176][T23368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4558'. [ 695.282900][T23368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4558'. [ 695.510555][T23378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4558'. [ 695.594009][T23380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4558'. [ 695.614311][T23380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4558'. [ 695.635032][T23380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4558'. [ 695.948319][T23392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4561'. [ 696.248719][T23400] netlink: NAT attribute has 4 unknown bytes [ 696.248762][T23400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 696.504434][T23407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4567'. [ 696.618789][T23412] netlink: 'syz.3.4566': attribute type 10 has an invalid length. [ 696.618818][T23412] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4566'. [ 696.646451][T23407] veth9: entered allmulticast mode [ 696.853217][T23415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4570'. [ 696.991796][T23425] netlink: 'syz.3.4566': attribute type 4 has an invalid length. [ 697.002825][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804b1bdc00: rx timeout, send abort [ 697.003120][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804b1bdc00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 697.721447][ T4934] block nbd35: Receive control failed (result -1) [ 697.813989][T23449] IPv6: Can't replace route, no match found [ 698.295836][T23456] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 699.083441][T23464] bond0: left promiscuous mode [ 699.592593][T23481] veth23: entered allmulticast mode [ 699.973784][ T4934] block nbd36: Receive control failed (result -1) [ 699.980423][T23493] netlink: 'syz.0.4587': attribute type 2 has an invalid length. [ 699.980460][T23493] block nbd3: NBD_DISCONNECT [ 699.981399][T23493] block nbd3: Send disconnect failed -22 [ 699.981420][T23493] block nbd3: shutting down sockets [ 701.011342][T23517] syzkaller0: entered promiscuous mode [ 701.011368][T23517] syzkaller0: entered allmulticast mode [ 701.051083][T23517] tipc: Enabled bearer , priority 0 [ 701.091724][T23517] __nla_validate_parse: 8 callbacks suppressed [ 701.091747][T23517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4594'. [ 701.452439][T23516] tipc: Resetting bearer [ 701.708212][T23516] tipc: Disabling bearer [ 702.093266][T23539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4603'. [ 702.112596][T19709] block nbd3: Receive control failed (result -1) [ 702.336212][T19709] Bluetooth: hci2: command 0x0406 tx timeout [ 702.342316][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880352e8400: rx timeout, send abort [ 702.342615][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880352e8400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 702.900244][T23561] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4608'. [ 702.922826][T23565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4609'. [ 703.003790][T23565] veth11: entered allmulticast mode [ 704.253896][T23602] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 704.594363][T23606] lo: entered promiscuous mode [ 704.594388][T23606] lo: entered allmulticast mode [ 704.623384][T23606] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4625'. [ 704.623411][T23606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 705.436763][T23639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4635'. [ 705.962566][T23653] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4640'. [ 705.962594][T23653] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4640'. [ 706.950254][T23678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4645'. [ 707.511539][T23678] veth11: entered allmulticast mode [ 708.476594][T23686] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 708.642992][T23697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4649'. [ 708.706781][T23697] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4649'. [ 708.808435][T23687] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.4647'. [ 709.203226][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880779c8000: rx timeout, send abort [ 709.203543][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880779ca000: rx timeout, send abort [ 709.203720][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880779c8000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 709.203890][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880779ca000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 710.129053][T23731] netlink: 'syz.3.4659': attribute type 1 has an invalid length. [ 710.699273][T23731] bond4: entered promiscuous mode [ 710.711382][T23731] 8021q: adding VLAN 0 to HW filter on device bond4 [ 711.210280][T23736] 8021q: adding VLAN 0 to HW filter on device bond4 [ 711.235411][T23736] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 711.235441][T23736] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 711.284417][T23736] bond4: (slave xfrm1): making interface the new active one [ 711.284446][T23736] xfrm1: entered promiscuous mode [ 711.403202][T23736] xfrm1: left promiscuous mode [ 711.620847][T23738] syzkaller1: entered promiscuous mode [ 711.620875][T23738] syzkaller1: entered allmulticast mode [ 714.363088][T23782] syzkaller0: entered promiscuous mode [ 714.363118][T23782] syzkaller0: entered allmulticast mode [ 714.435551][T23786] vlan0: entered promiscuous mode [ 714.683266][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035a4b400: rx timeout, send abort [ 714.683476][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035a4b800: rx timeout, send abort [ 714.684596][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888035a4b400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 714.684882][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888035a4b800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 715.183401][T23816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4673'. [ 716.040271][T23816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4673'. [ 716.060841][ T4934] block nbd37: Receive control failed (result -1) [ 716.464568][T23848] netlink: 'syz.0.4678': attribute type 2 has an invalid length. [ 717.243254][T23862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4680'. [ 722.537540][T23899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4690'. [ 722.584050][T23899] lo: Caught tx_queue_len zero misconfig [ 722.688292][T23903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4691'. [ 723.037050][T23908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4694'. [ 723.037381][T23908] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 723.403149][T23913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4695'. [ 723.635790][T23920] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4695'. [ 723.685141][ T4934] block nbd38: Receive control failed (result -32) [ 723.892324][T23914] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4693'. [ 724.074996][T23936] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4699'. [ 724.391510][T23942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4700'. [ 724.412179][T23934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4698'. [ 724.583113][T23942] 8021q: adding VLAN 0 to HW filter on device bond6 [ 724.699576][T23934] 8021q: adding VLAN 0 to HW filter on device bond5 [ 725.377265][T23970] gretap1: entered allmulticast mode [ 725.441936][T23976] netlink: 'syz.1.4707': attribute type 1 has an invalid length. [ 725.692693][T23982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4707'. [ 728.133216][T23974] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 728.133264][T23974] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 728.133600][T23974] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 728.827895][T24019] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 729.021840][T24021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 729.265252][ T1169] IPVS: starting estimator thread 0... [ 729.356192][T24031] IPVS: using max 25 ests per chain, 60000 per kthread [ 729.570586][ T9] hid-generic 0005:0008:63AA.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa [ 730.155791][T24043] fido_id[24043]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 730.938678][T24079] syzkaller0: entered promiscuous mode [ 730.938705][T24079] syzkaller0: entered allmulticast mode [ 730.978133][T24079] tc mirred to Houston: device batadv_slave_0 is down [ 731.347501][T24091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4748'. [ 731.798291][T24095] syzkaller0: entered promiscuous mode [ 731.798622][T24095] syzkaller0: entered allmulticast mode [ 732.754595][T24120] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.022501][T24137] netlink: 'syz.0.4759': attribute type 1 has an invalid length. [ 733.152925][T24150] netlink: 'syz.2.4761': attribute type 1 has an invalid length. [ 733.264427][T24137] 8021q: adding VLAN 0 to HW filter on device bond6 [ 733.289203][T24140] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 733.293195][T24146] bond6: entered promiscuous mode [ 733.293222][T24146] bond6: entered allmulticast mode [ 733.659297][T24167] netlink: 'syz.2.4768': attribute type 2 has an invalid length. [ 733.659335][T24167] block nbd5: NBD_DISCONNECT [ 733.659367][T24167] block nbd5: Send disconnect failed -104 [ 733.659386][T24167] block nbd5: shutting down sockets [ 733.844101][T24168] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4765'. [ 733.844510][T24178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4769'. [ 733.902247][T24164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4765'. [ 735.448812][T24223] syzkaller0: entered promiscuous mode [ 735.448838][T24223] syzkaller0: entered allmulticast mode [ 735.488386][T24222] tipc: Enabled bearer , priority 0 [ 735.598241][T24221] tipc: Resetting bearer [ 735.756467][T24221] tipc: Disabling bearer [ 735.869248][T24231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4784'. [ 736.293581][T24231] 8021q: adding VLAN 0 to HW filter on device bond3 [ 736.611517][T24261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4790'. [ 736.611558][T24261] netlink: 'syz.2.4790': attribute type 20 has an invalid length. [ 736.611573][T24261] netlink: 'syz.2.4790': attribute type 21 has an invalid length. [ 736.876309][T24238] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 736.924443][T24265] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.968179][T24271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4794'. [ 737.587066][T24290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4800'. [ 738.315796][T24308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4803'. [ 738.438394][T24308] 8021q: adding VLAN 0 to HW filter on device bond4 [ 738.952588][T24327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 739.410969][T24331] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4812'. [ 740.047487][T24350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4820'. [ 740.194263][T24350] 8021q: adding VLAN 0 to HW filter on device bond7 [ 740.669617][T24360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4822'. [ 743.250620][T24370] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4826'. [ 743.518274][T24384] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 743.584406][T24386] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 743.701890][T24397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4831'. [ 743.764431][T24399] ip6t_rpfilter: unknown options [ 743.774005][T24399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4832'. [ 743.791663][T24399] netlink: 'syz.1.4832': attribute type 1 has an invalid length. [ 743.791689][T24399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4832'. [ 744.098023][T24381] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 744.197518][T24397] veth13: entered allmulticast mode [ 745.133339][T24437] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 745.191477][T24433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4838'. [ 745.289067][T24437] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 745.379978][T24433] 8021q: adding VLAN 0 to HW filter on device bond11 [ 745.471977][T24437] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 745.956499][T24455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4845'. [ 746.038936][T24455] veth15: entered allmulticast mode [ 746.043845][T24454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4844'. [ 746.172849][T24449] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4843'. [ 746.578790][T24471] syzkaller0: entered promiscuous mode [ 746.578816][T24471] syzkaller0: entered allmulticast mode [ 746.672519][T24471] netlink: 'syz.1.4847': attribute type 1 has an invalid length. [ 746.684504][T24471] netlink: 400 bytes leftover after parsing attributes in process `syz.1.4847'. [ 746.811186][T24480] sch_fq: defrate 4294967293 ignored. [ 746.813436][T24478] syzkaller0: entered promiscuous mode [ 746.813462][T24478] syzkaller0: entered allmulticast mode [ 747.316326][T24492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4855'. [ 747.416953][T24492] 8021q: adding VLAN 0 to HW filter on device bond8 [ 748.633916][T24541] __nla_validate_parse: 3 callbacks suppressed [ 748.633941][T24541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4866'. [ 748.633957][T24541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4866'. [ 748.883162][T24539] netlink: 'syz.0.4866': attribute type 14 has an invalid length. [ 748.895160][ T1169] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.896291][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.896333][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.896368][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.381974][T24555] ip_vti0 speed is unknown, defaulting to 1000 [ 749.912295][T24577] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 749.919547][T24577] netlink: 'syz.3.4873': attribute type 1 has an invalid length. [ 750.217457][T24586] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4873'. [ 750.250272][T24585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4874'. [ 750.402370][T24577] 8021q: adding VLAN 0 to HW filter on device bond5 [ 750.645929][T24591] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4874'. [ 752.708018][T24646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4883'. [ 752.883040][T24645] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4885'. [ 753.392285][T24664] netlink: 'syz.2.4889': attribute type 1 has an invalid length. [ 753.578003][T24669] team0: Port device bridge0 removed [ 753.580862][T24669] bridge_slave_0: left allmulticast mode [ 753.584315][T24669] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.617948][T24669] bridge_slave_1: left allmulticast mode [ 753.618202][T24669] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.674465][T24669] bond0: (slave bond_slave_0): Releasing backup interface [ 753.700125][T24669] bond0: (slave bond_slave_1): Releasing backup interface [ 753.728608][T24669] team0: Port device team_slave_0 removed [ 753.743092][T24669] team0: Port device team_slave_1 removed [ 753.743534][T24669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.752419][T24669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.758834][T24669] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 753.899143][T24670] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 754.096106][T24683] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4894'. [ 754.111031][T24681] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1500 [ 754.354305][T24681] ip6gre1: entered allmulticast mode [ 754.374363][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 754.536123][T24698] netlink: 'syz.3.4897': attribute type 1 has an invalid length. [ 754.693432][T24698] bond6: entered promiscuous mode [ 754.699831][T24698] 8021q: adding VLAN 0 to HW filter on device bond6 [ 754.781790][T24707] netlink: 'syz.3.4897': attribute type 1 has an invalid length. [ 754.899186][T24698] bond6: (slave bridge6): making interface the new active one [ 754.899216][T24698] bridge6: entered promiscuous mode [ 754.918207][T24698] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 754.965895][T24709] bond6: (slave bridge7): Enslaving as a backup interface with an up link [ 754.973041][T24716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4901'. [ 755.109791][T24710] bond6: (slave bridge8): Enslaving as a backup interface with an up link [ 755.239010][T24716] veth11: entered allmulticast mode [ 755.332551][T24730] xt_nfacct: accounting object `' does not exist [ 755.372858][T24729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4903'. [ 755.751553][T24732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.751584][T24732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.790760][T24732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 755.790789][T24732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 755.825295][T24732] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 755.825321][T24732] batman_adv: batadv0: Removing interface: ip6gretap1 [ 755.960334][T24745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4907'. [ 756.400155][T24749] 0: reclassify loop, rule prio 0, protocol 03 [ 756.534608][T24752] syzkaller1: entered promiscuous mode [ 756.534634][T24752] syzkaller1: entered allmulticast mode [ 756.737500][T24762] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4912'. [ 756.737734][T24762] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4912'. [ 756.737939][T24762] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4912'. [ 756.781244][T24762] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4912'. [ 756.781485][T24762] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4912'. [ 756.781687][T24762] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4912'. [ 756.902157][T24758] A link change request failed with some changes committed already. Interface 00ªX¹¦Dö» may have been left with an inconsistent configuration, please check. [ 757.371837][T24774] netlink: 'syz.2.4915': attribute type 1 has an invalid length. [ 757.433984][T24774] 8021q: adding VLAN 0 to HW filter on device bond12 [ 757.679591][T24779] bond12: (slave veth25): Enslaving as an active interface with a down link [ 757.898170][T24774] veth3: left allmulticast mode [ 757.917161][T24774] bond1: left allmulticast mode [ 757.958773][T24774] veth5: left allmulticast mode [ 757.972075][T24774] vlan2: left allmulticast mode [ 758.060522][T24774] veth7: left allmulticast mode [ 758.078494][T24774] veth9: left allmulticast mode [ 758.098423][T24774] veth11: left allmulticast mode [ 758.116455][T24774] veth13: left allmulticast mode [ 758.198972][T24774] veth15: left allmulticast mode [ 758.233923][T24774] veth17: left allmulticast mode [ 758.402315][T24774] veth19: left allmulticast mode [ 758.457229][T24774] veth21: left allmulticast mode [ 758.495287][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 758.518154][T24774] veth23: left allmulticast mode [ 758.664234][T24774] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 758.735443][T24779] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 758.764288][T24779] bond12: (slave batadv2): making interface the new active one [ 758.783310][T24779] batadv2: entered promiscuous mode [ 758.783883][T24779] bond12: (slave batadv2): Enslaving as an active interface with an up link [ 759.320989][T24838] __nla_validate_parse: 15 callbacks suppressed [ 759.321012][T24838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4924'. [ 759.497289][T24838] veth13: entered allmulticast mode [ 759.975453][T24852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4929'. [ 760.007445][T24852] bond9: option lacp_active: invalid value (5) [ 760.011519][T24852] bond9 (unregistering): Released all slaves [ 760.752549][T24887] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4937'. [ 760.946784][T24894] netlink: 'syz.2.4939': attribute type 1 has an invalid length. [ 760.976284][T24893] netlink: 'syz.2.4939': attribute type 1 has an invalid length. [ 761.300977][T24911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4942'. [ 762.031386][T24924] syzkaller0: entered promiscuous mode [ 762.031412][T24924] syzkaller0: entered allmulticast mode [ 762.089758][T24924] ip_tables: iptables: counters copy to user failed while replacing table [ 762.490007][T24928] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.095838][T24956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4957'. [ 763.664563][T24973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4961'. [ 764.152827][T13006] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.152890][T13006] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.152926][T13006] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.152961][T13006] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.278819][T24990] smc: net device lo applied user defined pnetid SYZ2 [ 764.286441][T24990] smc: net device lo erased user defined pnetid SYZ2 [ 764.650028][T25005] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4972'. [ 764.666126][T25006] nbd5: detected capacity change from 0 to 63 [ 764.721527][ T1969] [ 764.723928][ T1969] ====================================================== [ 764.730988][ T1969] WARNING: possible circular locking dependency detected [ 764.738059][ T1969] syzkaller #0 Not tainted [ 764.742491][ T1969] ------------------------------------------------------ [ 764.749572][ T1969] kworker/1:1H/1969 is trying to acquire lock: [ 764.755735][ T1969] ffff88805a7ccc68 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0xff0 [ 764.764871][ T1969] [ 764.764871][ T1969] but task is already holding lock: [ 764.772256][ T1969] ffff888027980178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 764.779015][T19709] block nbd5: Receive control failed (result -32) [ 764.787156][ T1969] [ 764.787156][ T1969] which lock already depends on the new lock. [ 764.787156][ T1969] [ 764.797581][ T1969] [ 764.797581][ T1969] the existing dependency chain (in reverse order) is: [ 764.806622][ T1969] [ 764.806622][ T1969] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 764.813942][ T1969] __mutex_lock+0x19d/0x1550 [ 764.819086][ T1969] nbd_queue_rq+0xc1/0xff0 [ 764.824079][ T1969] blk_mq_dispatch_rq_list+0x499/0x1990 [ 764.830250][ T1969] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 764.837196][ T1969] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 764.843730][ T1969] blk_mq_run_work_fn+0x16c/0x300 [ 764.849322][ T1969] process_scheduled_works+0xc3d/0x1630 [ 764.855421][ T1969] worker_thread+0xa47/0xfb0 [ 764.860553][ T1969] kthread+0x38b/0x480 [ 764.865156][ T1969] ret_from_fork+0x514/0xb70 [ 764.870299][ T1969] ret_from_fork_asm+0x1a/0x30 [ 764.875618][ T1969] [ 764.875618][ T1969] -> #5 (set->srcu){.+.+}-{0:0}: [ 764.882776][ T1969] __synchronize_srcu+0xc9/0x2f0 [ 764.888259][ T1969] elevator_switch+0x1e8/0x7b0 [ 764.893616][ T1969] elevator_change+0x2fa/0x480 [ 764.898919][ T1969] elevator_set_default+0x375/0x440 [ 764.904687][ T1969] blk_register_queue+0x3f3/0x4e0 [ 764.910314][ T1969] __add_disk+0x6b8/0xdb0 [ 764.915214][ T1969] add_disk_fwnode+0x100/0x3a0 [ 764.920529][ T1969] nbd_dev_add+0x733/0xb60 [ 764.925510][ T1969] nbd_init+0x168/0x1f0 [ 764.930337][ T1969] do_one_initcall+0x250/0x870 [ 764.935652][ T1969] do_initcall_level+0x10a/0x1a0 [ 764.941175][ T1969] do_initcalls+0x59/0xa0 [ 764.946038][ T1969] kernel_init_freeable+0x29d/0x3e0 [ 764.951778][ T1969] kernel_init+0x22/0x1d0 [ 764.956649][ T1969] ret_from_fork+0x514/0xb70 [ 764.961790][ T1969] ret_from_fork_asm+0x1a/0x30 [ 764.967098][ T1969] [ 764.967098][ T1969] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 764.974944][ T1969] __mutex_lock+0x19d/0x1550 [ 764.980077][ T1969] elevator_change+0x1af/0x480 [ 764.985397][ T1969] elevator_set_none+0xb5/0x140 [ 764.990785][ T1969] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 764.997139][ T1969] nbd_start_device+0x189/0xb30 [ 765.002530][ T1969] nbd_genl_connect+0x167d/0x1cd0 [ 765.008090][ T1969] genl_family_rcv_msg_doit+0x233/0x340 [ 765.014194][ T1969] genl_rcv_msg+0x614/0x7a0 [ 765.019439][ T1969] netlink_rcv_skb+0x226/0x4a0 [ 765.024741][ T1969] genl_rcv+0x28/0x40 [ 765.029261][ T1969] netlink_unicast+0x7bd/0x940 [ 765.034571][ T1969] netlink_sendmsg+0x813/0xb40 [ 765.039874][ T1969] sock_sendmsg_nosec+0x14e/0x190 [ 765.045614][ T1969] ____sys_sendmsg+0x54e/0x850 [ 765.050924][ T1969] ___sys_sendmsg+0x2a5/0x360 [ 765.056149][ T1969] __x64_sys_sendmsg+0x1b1/0x290 [ 765.061638][ T1969] do_syscall_64+0x166/0x520 [ 765.066770][ T1969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.073215][ T1969] [ 765.073215][ T1969] -> #3 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 765.081891][ T1969] blk_alloc_queue+0x544/0x690 [ 765.087216][ T1969] __blk_mq_alloc_disk+0x194/0x390 [ 765.092884][ T1969] nbd_dev_add+0x494/0xb60 [ 765.097854][ T1969] nbd_init+0x168/0x1f0 [ 765.102563][ T1969] do_one_initcall+0x250/0x870 [ 765.107889][ T1969] do_initcall_level+0x10a/0x1a0 [ 765.113388][ T1969] do_initcalls+0x59/0xa0 [ 765.118285][ T1969] kernel_init_freeable+0x29d/0x3e0 [ 765.124045][ T1969] kernel_init+0x22/0x1d0 [ 765.128934][ T1969] ret_from_fork+0x514/0xb70 [ 765.134088][ T1969] ret_from_fork_asm+0x1a/0x30 [ 765.139416][ T1969] [ 765.139416][ T1969] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 765.146658][ T1969] fs_reclaim_acquire+0x71/0x100 [ 765.152136][ T1969] __kmalloc_noprof+0xbc/0x720 [ 765.157421][ T1969] tls_sw_sendmsg+0x5d6/0x2c00 [ 765.162796][ T1969] sock_sendmsg_nosec+0x90/0x190 [ 765.168261][ T1969] sock_sendmsg+0x1ca/0x2d0 [ 765.173300][ T1969] splice_to_socket+0xb5e/0x12a0 [ 765.178772][ T1969] direct_splice_actor+0x101/0x160 [ 765.184424][ T1969] splice_direct_to_actor+0x57b/0xcb0 [ 765.190333][ T1969] do_splice_direct+0x195/0x290 [ 765.195719][ T1969] do_sendfile+0x52e/0x7c0 [ 765.200663][ T1969] __se_sys_sendfile64+0x144/0x1a0 [ 765.206302][ T1969] do_syscall_64+0x166/0x520 [ 765.211435][ T1969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.217852][ T1969] [ 765.217852][ T1969] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 765.225988][ T1969] lock_sock_nested+0x41/0x100 [ 765.231284][ T1969] inet_shutdown+0x6a/0x390 [ 765.236378][ T1969] nbd_mark_nsock_dead+0x2cb/0x550 [ 765.242034][ T1969] sock_shutdown+0x15e/0x260 [ 765.247179][ T1969] nbd_clear_sock+0x24/0x170 [ 765.252306][ T1969] nbd_config_put+0x477/0x7e0 [ 765.257516][ T1969] nbd_genl_connect+0x19b8/0x1cd0 [ 765.263062][ T1969] genl_family_rcv_msg_doit+0x233/0x340 [ 765.269160][ T1969] genl_rcv_msg+0x614/0x7a0 [ 765.274197][ T1969] netlink_rcv_skb+0x226/0x4a0 [ 765.279487][ T1969] genl_rcv+0x28/0x40 [ 765.284006][ T1969] netlink_unicast+0x7bd/0x940 [ 765.289294][ T1969] netlink_sendmsg+0x813/0xb40 [ 765.294759][ T1969] sock_sendmsg_nosec+0x14e/0x190 [ 765.300308][ T1969] ____sys_sendmsg+0x54e/0x850 [ 765.305602][ T1969] ___sys_sendmsg+0x2a5/0x360 [ 765.310808][ T1969] __x64_sys_sendmsg+0x1b1/0x290 [ 765.316277][ T1969] do_syscall_64+0x166/0x520 [ 765.321390][ T1969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.327808][ T1969] [ 765.327808][ T1969] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 765.335463][ T1969] __lock_acquire+0x164c/0x2de0 [ 765.340844][ T1969] lock_acquire+0x115/0x350 [ 765.345866][ T1969] __mutex_lock+0x19d/0x1550 [ 765.350990][ T1969] nbd_queue_rq+0x373/0xff0 [ 765.356040][ T1969] blk_mq_dispatch_rq_list+0x499/0x1990 [ 765.362140][ T1969] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 765.369018][ T1969] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 765.375559][ T1969] blk_mq_run_work_fn+0x16c/0x300 [ 765.381114][ T1969] process_scheduled_works+0xc3d/0x1630 [ 765.387190][ T1969] worker_thread+0xa47/0xfb0 [ 765.392311][ T1969] kthread+0x38b/0x480 [ 765.396900][ T1969] ret_from_fork+0x514/0xb70 [ 765.402019][ T1969] ret_from_fork_asm+0x1a/0x30 [ 765.407335][ T1969] [ 765.407335][ T1969] other info that might help us debug this: [ 765.407335][ T1969] [ 765.417562][ T1969] Chain exists of: [ 765.417562][ T1969] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 765.417562][ T1969] [ 765.429659][ T1969] Possible unsafe locking scenario: [ 765.429659][ T1969] [ 765.437170][ T1969] CPU0 CPU1 [ 765.442579][ T1969] ---- ---- [ 765.447990][ T1969] lock(&cmd->lock); [ 765.451988][ T1969] lock(set->srcu); [ 765.458409][ T1969] lock(&cmd->lock); [ 765.464924][ T1969] lock(&nsock->tx_lock); [ 765.469364][ T1969] [ 765.469364][ T1969] *** DEADLOCK *** [ 765.469364][ T1969] [ 765.477511][ T1969] locks held by kworker/1:1H/1969: 4, last CPU#1: [ 765.484013][ T1969] #0: ffff888020e82940 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 765.495108][ T1969] #1: ffffc90006547c40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 765.507996][ T1969] #2: ffff8880278f2d18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 765.517415][ T1969] #3: ffff888027980178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 765.526301][ T1969] [ 765.526301][ T1969] stack backtrace: [ 765.532192][ T1969] CPU: 1 UID: 0 PID: 1969 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) [ 765.541653][ T1969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 765.551717][ T1969] Workqueue: kblockd blk_mq_run_work_fn [ 765.557279][ T1969] Call Trace: [ 765.560566][ T1969] [ 765.563514][ T1969] dump_stack_lvl+0xe8/0x150 [ 765.568117][ T1969] print_circular_bug+0x2e2/0x300 [ 765.573176][ T1969] check_noncircular+0x12f/0x150 [ 765.578138][ T1969] __lock_acquire+0x164c/0x2de0 [ 765.583012][ T1969] lock_acquire+0x115/0x350 [ 765.587525][ T1969] ? nbd_queue_rq+0x373/0xff0 [ 765.592213][ T1969] __mutex_lock+0x19d/0x1550 [ 765.596805][ T1969] ? nbd_queue_rq+0x373/0xff0 [ 765.601491][ T1969] ? ret_from_fork_asm+0x1a/0x30 [ 765.606460][ T1969] ? unwind_next_frame+0x8f/0x2550 [ 765.611602][ T1969] ? nbd_queue_rq+0x373/0xff0 [ 765.616286][ T1969] ? __pfx___mutex_lock+0x10/0x10 [ 765.621315][ T1969] ? ret_from_fork_asm+0x1a/0x30 [ 765.626287][ T1969] ? stack_trace_save+0xa9/0x100 [ 765.631228][ T1969] ? __pfx_stack_trace_save+0x10/0x10 [ 765.636615][ T1969] nbd_queue_rq+0x373/0xff0 [ 765.641127][ T1969] ? __lock_acquire+0x1511/0x2de0 [ 765.646158][ T1969] ? __pfx_nbd_queue_rq+0x10/0x10 [ 765.651201][ T1969] blk_mq_dispatch_rq_list+0x499/0x1990 [ 765.656760][ T1969] ? sbitmap_get+0x229/0x390 [ 765.661413][ T1969] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 765.667400][ T1969] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 765.673213][ T1969] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 765.679555][ T1969] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 765.686327][ T1969] ? lock_acquire+0x115/0x350 [ 765.691008][ T1969] ? process_scheduled_works+0x97a/0x1630 [ 765.696738][ T1969] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 765.702731][ T1969] ? blk_mq_run_work_fn+0x144/0x300 [ 765.707937][ T1969] blk_mq_run_work_fn+0x16c/0x300 [ 765.712970][ T1969] ? process_scheduled_works+0x97a/0x1630 [ 765.718698][ T1969] process_scheduled_works+0xc3d/0x1630 [ 765.724263][ T1969] ? __pfx_process_scheduled_works+0x10/0x10 [ 765.730251][ T1969] ? assign_work+0x3cf/0x5d0 [ 765.734853][ T1969] worker_thread+0xa47/0xfb0 [ 765.739457][ T1969] ? __kthread_parkme+0x71/0x1f0 [ 765.744404][ T1969] kthread+0x38b/0x480 [ 765.748475][ T1969] ? __pfx_worker_thread+0x10/0x10 [ 765.753590][ T1969] ? __pfx_kthread+0x10/0x10 [ 765.758187][ T1969] ret_from_fork+0x514/0xb70 [ 765.762791][ T1969] ? __pfx_ret_from_fork+0x10/0x10 [ 765.767913][ T1969] ? __switch_to+0xc89/0x1420 [ 765.772625][ T1969] ? __pfx_kthread+0x10/0x10 [ 765.777215][ T1969] ret_from_fork_asm+0x1a/0x30 [ 765.781995][ T1969] [ 765.793614][ T1969] block nbd5: Dead connection, failed to find a fallback [ 765.793640][ T1969] block nbd5: shutting down sockets [ 765.793655][ T1969] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 765.793683][ T1969] Buffer I/O error on dev nbd5, logical block 0, async page read [ 765.817489][ T1969] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 765.817528][ T1969] Buffer I/O error on dev nbd5, logical block 1, async page read [ 765.817622][ T1969] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 765.817647][ T1969] Buffer I/O error on dev nbd5, logical block 2, async page read [ 765.817719][ T1969] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 765.817742][ T1969] Buffer I/O error on dev nbd5, logical block 3, async page read [ 765.817831][ T1969] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 765.817856][ T1969] Buffer I/O error on dev nbd5, logical block 0, async page read [ 765.817925][ T1969] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 765.817948][ T1969] Buffer I/O error on dev nbd5, logical block 1, async page read [ 765.818015][ T1969] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 765.818039][ T1969] Buffer I/O error on dev nbd5, logical block 2, async page read [ 765.818109][ T1969] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 765.818132][ T1969] Buffer I/O error on dev nbd5, logical block 3, async page read [ 765.818221][ T1969] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 765.818246][ T1969] Buffer I/O error on dev nbd5, logical block 0, async page read [ 765.818317][ T1969] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 765.818340][ T1969] Buffer I/O error on dev nbd5, logical block 1, async page read [ 765.819696][T25014] ldm_validate_partition_table(): Disk read failed. [ 765.820751][T25014] Dev nbd5: unable to read RDB block 0 [ 765.821794][T25014] nbd5: unable to read partition table [ 765.827857][T25014] ldm_validate_partition_table(): Disk read failed. [ 765.828781][T25014] Dev nbd5: unable to read RDB block 0 [ 765.829809][T25014] nbd5: unable to read partition table [ 766.734933][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 770.855697][T24804] batadv2: left promiscuous mode