last executing test programs: 19.474626166s ago: executing program 4 (id=8514): sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)}, 0x44000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff00000000000000ff80000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432"], 0x23c}}, 0x4080) 19.288592898s ago: executing program 4 (id=8518): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000440)='M', 0x1}], 0x1}}], 0x1, 0x4040040) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @local}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, &(0x7f0000000040)) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) socket$kcm(0x2, 0xa, 0x2) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000800) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000cbbbbbbbb8266bbbbbbbbbbbb88f7"], 0x12) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x100000000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0x14, 0x30, 0xb, 0x40000000, 0x3}, 0x14}}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r6, @ANYBLOB="87a33680d21e3730b8fc9a5ebfbe54f5a5bde10623d6315eb95ca83b28b69c573b4395ca0eb4383f962d54aef475e410040e54742d2c2ded9891bc4b393607420e6a9303b30581ff70343a78176685486ebf2ae255e907e9ecc10ddc058ac8762823e5aff0391f0469fedd56b9bfd78586cfde7d5098a1b5c475"], 0x3c}}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r9, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r9, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x48840, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r9, &(0x7f0000005d40)=[{{0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000840)=""/216, 0xd8}, 0x7}, {{&(0x7f0000000940)=@ieee802154, 0x80, 0x0}, 0x9}], 0x2, 0x22, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) 18.201240486s ago: executing program 4 (id=8532): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket(0x2000000000000021, 0x2, 0x10000000000002) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x14, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r3, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000005000)=[{0xfffffffffffffffe}], 0x1}, 0x4}], 0x2, 0x3, 0x0) sendmmsg(r3, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006480)=ANY=[], 0x30f8}}], 0x1, 0x4004044) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='io.stat\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000700)={0x0, 0xf8f, "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"}, &(0x7f0000001740)=0xf97) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000440)={r3, &(0x7f0000000000)='syz1\x00', 0x200, &(0x7f0000000380)={@_ha_fsid={[0x8, 0x1]}, {0x7, 0x8001, 0x7fff, 0x40}}, 0x4, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x700}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x30, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) 17.090614728s ago: executing program 4 (id=8546): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 16.745470354s ago: executing program 4 (id=8548): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xe, 0x0, &(0x7f0000000900)="80f8ad48cceeba31c500000c0c00", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x20, &(0x7f0000000440)=ANY=[@ANYBLOB="180000008d00f5ffffff00000300000018d33311000037a1579b1a483d9d5fd7a8f4bb05f153e83f71d008641798d786c253ce12e6800d98c489770eac3476c14979823d4e810eb496ca62ba91114173b5db290031436a2345149f5b7e5336084cbdfe4a3936f80594cfb211b219ac2f046c6f564d8bf1822e4fbe027716aed751880d46c4f36121387e", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf0900000000000055090100ffffffff9500000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000082000000850000000600000045000600040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x1001, &(0x7f0000000780)=""/4097, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 16.545138599s ago: executing program 4 (id=8553): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0801000016000100000000000001a0b164010100000000000000000000000000000000000000000000000000000000010000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000001a00000000002c000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff0000000000000000960700002dbd70000000000000000002be0000000000000000000000b1a001000800d8"], 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 5.095516516s ago: executing program 2 (id=8640): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0801000016000100000000000001a0b164010100000000000000000000000000000000000000000000000000000000010000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000a000000002c000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff0000000000000000960700002dbd70000000000000000002be0000000000000000000000b1a001000800d8"], 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 4.839629389s ago: executing program 2 (id=8642): r0 = socket$inet(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39062c40}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="000032da4b9ef8aa15c320000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xb, &(0x7f0000000440)=@raw=[@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x286}}, @alu={0x3, 0x1, 0xd, 0x8, 0x0, 0x1, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000007280)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x7, 0xffff}, {}, {0xf, 0x6}}}, 0x24}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323900080003400000000720000480060001000002000005000200110000000c000300080001000000001e14000000110001"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000150a01030000000000000000020000056da11de5d97befb06829c73212cf8f2bcb796bc24c49b988b40bf81f93326963577b31362dd269e482f94f58074feca366a8b3f8aaf19185b0680b9caa43a51efa0172dde15e84eb96663887df0bfcde43fbb726fb9a665eeba13e3f14e0513312b5a7a09792742579c8cc93557bbda63a3632c43430a64d08f4f0fd93ecbd041f4ea9ce10fbf86c4146432e139d360414a23e2119f9bf51f48e6a4570864b57accf1f167501150ea63c7792d0a9f14ae4436ae2d0de6ae78d7f50f32fa9dbddb9242ec96e65eac464643d0f00d4925d9337a6419ed4ceef66"], 0x14}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x11, 0x0, 0x300) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'lblcr\x00', 0x1d, 0x0, 0x40000}, 0x2c) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0xa}, 0x94) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f00000005c0)=@buf={0x93, &(0x7f00000004c0)="684e1d60aa891261ab236e00049790a50c9f16f1184735be864afe699bf39640f48ab803591fd152cb5293aa06923981634f40cf4a06d99163c57707606706e9d2802f0bff1f0195413524c9cf022091ef7e23cfd74492ea63f3074360597b71b7b9aedc9563ce0011ba6db142cc7bbc1a5e25b977ef7639a2363906ce278a0cfe60b510196367b0b35883097089b14d040425"}) r9 = socket$inet(0x2, 0x1, 0x6) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r10, 0x0, 0x4, 0x0, 0x0) preadv(r6, &(0x7f0000000c40)=[{&(0x7f0000000a40)=""/223, 0xdf}, {&(0x7f0000000b40)=""/233, 0xe9}], 0x2, 0x1, 0x0) sendto$inet(r10, 0x0, 0x0, 0x40010, &(0x7f0000000840)={0x2, 0x4e22, @multicast1}, 0x10) connect(r9, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) 4.133818082s ago: executing program 1 (id=8648): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b0700000000000000", 0x13}], 0x3}, 0xc854) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000180)=0x4c, 0x4) sendfile(r2, r3, 0x0, 0xffffffff000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8014) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000380)=@newchain={0x24, 0x64, 0x300, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0x6, 0xb}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket(0x2, 0x2, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r7, 0x11, 0x1, &(0x7f0000000400)=""/4096, &(0x7f0000001400)=0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000400"], 0x44}}, 0x0) 2.789447217s ago: executing program 1 (id=8650): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000001c0)={0x28, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x14}}}}}, 0x28}}, 0x40000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001340)={0x0, 0x0, 0x0}, &(0x7f0000001380)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}], 0x38, 0x40800}}], 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000051c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005200)={{{@in6=@empty, @in6=@local}}, {{@in6=@private0}, 0x0, @in6=@private0}}, &(0x7f0000005300)=0xe8) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x8, 0x4, 0x0, 0x2, 0x5775d278, 0x1ff, 0x1}, 0x20) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) 2.763517747s ago: executing program 2 (id=8651): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee5, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x40010, 0xffffffffffffffff, 0x0) (async) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f00000000c0)) 2.503817024s ago: executing program 1 (id=8653): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x48, r3, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x48}}, 0x2400400c) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000380)=@newtaction={0x18c, 0x30, 0x9, 0x0, 0x0, {}, [{0x178, 0x1, [@m_nat={0x174, 0x10, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x40, 0x6, 0x6, 0x30000, 0x8}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x537, 0x8, 0x1, 0x4a0, 0xffffffff}, @private=0xa010102, @private=0xa010102, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x401, 0x0, 0x7, 0xf137, 0xe8c9}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x3b7, 0x20000000, 0xdc70, 0xe4}, @loopback, @private=0xa010101, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x10000, 0xffffffffffffffff, 0x8d, 0x7fffffff}, @private=0xa010101, @rand_addr=0x64010101, 0xffffffff, 0x1}}]}, {0x81, 0x6, "445be9593147990b5fb87f0f79825a799963e2bbe04dc47cec0f6ce218174e1ec7536965d48e27fb9de3ae9e2c1bab19ed7690d0803434c82cc3bae18f81447c3d8cec1812c8e172fb6d6eb1e5b627896030a64121a8a3ec79755c661f90b1247a3d5aee39c29ac46c9becd4b04751c93502e660260eb7db1c5fdeaa73"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x18c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x40, r5, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 2.213528546s ago: executing program 0 (id=8654): syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bbffffffffffffff80000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432000000000000002001000000000000000000000000000006350000000002000000000000000000000000007f000001000000000000000000000000000000042b00000000000000fe8000000000000000000000000000bb0000000000000000000800000000000000000000ac141468000000000000000000000000000004d33200000000000000000000000000000000000000000000010000000000010000000000000000000000000000fe8000000000000000000000000000bb000004d533"], 0x23c}}, 0x4080) 2.0343465s ago: executing program 0 (id=8656): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0xb, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000002, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000640), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000260051e30094a1b0cf9800e51ee3aa4cb2ef1693ff907a4879bc592d9b31e7568f54880200e8c3612373ffd145c30b892c8b29d6d120b9111c98d6354e897f66007d4705b6cd445af58e29c750e07172d14964f61c3ed5736bd4e2027ab49acdc833ce97c3cf609ca416871c156998089f3533a6df0ea45fe90b9b6534b2570c9a8ca2cea3a7315ba1be57f86ec3562918e528", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="05000000010000000200"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000800)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000005c0)=ANY=[@ANYRES8=r3, @ANYRES32=r1, @ANYBLOB="f04c66c229286328dcad2e0fb5f7dfa4978ee85cedc77c9c3b686c91f341bb0cf65d2b060c8a7e6585fc78924910f43eebe87724210afc04672ce45c5929e6c8d154dc3bceb2c8cf4f44371a8345a2f8ee108e1cc511e59f6e8b94c309d7ce73919b06653d6d7b30ffd678ee90f4142d5814fce1"], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000400), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4600000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000e100000008001b0000069bdb11001a80100002800c0001800800000001000000"], 0x3c}}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) write$cgroup_pid(r8, &(0x7f0000000000), 0xffffff98) splice(r5, 0x0, r8, 0x0, 0x80, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xd, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b9", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) 1.814283273s ago: executing program 1 (id=8658): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000005000000000000008510000002000000850000000800000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000890000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x3b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @mcast2, [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0xffffff00], 'bond_slave_0\x00', 'team_slave_1\x00', {}, {}, 0x2c, 0x2, 0x6, 0x8}, 0x0, 0xe0, 0x100, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x8, {0xffc0000000}}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'syzkaller0\x00', 'bridge_slave_1\x00', {}, {}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x2c, 0x10, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x10000006, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002340)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068739e23480002800500030008000000050003000500000005000300fd0000000800021013aa00d0699a0000000000000000e6067959a406323b00740dc64f0748a1c0a512d927beb9b671788b27c7aa5f3b690f3af88c62d1e9fa917403e39564a6fbf87d5ac16d19274ebbbc1e6fa522", @ANYBLOB="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", @ANYRES16=r0, @ANYRES32=r4, @ANYRES64=r2], 0x90}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x154}}, 0x404c004) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x14, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18050000080000000000000003000000b7080000000000007b8af8ff00000000b70800000b5900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000008000000850000009500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r10, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000080)) 1.602903138s ago: executing program 0 (id=8659): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x1, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x1}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x8, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x802, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x81, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0xffff, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x1, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x8002}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x3, 0x9f98, 0x1, 0x8, 0xb}, {0xfff, 0x1000006, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0xfffffffd, 0x1, 0x7f, 0x7fffffff}, {0xffe, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x3cf, 0x9, 0x1, 0x0, 0x200}, {0x3ff, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f15, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x0, 0xfffffffc}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x200003, 0x10000008, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x800000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffa, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0xffffffff, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x40000100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xa, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0x5, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x0, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0xe, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x100}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x5, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x3, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x203, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x7, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0xba612617eb0a8457}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000485}, 0x4000000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000050c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\a', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf254b0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x44080}, 0x40080) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r2, 0x4}, 0x38) 1.386728848s ago: executing program 1 (id=8660): r0 = socket$inet(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39062c40}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="000032da4b9ef8aa15c320000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xb, &(0x7f0000000440)=@raw=[@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x286}}, @alu={0x3, 0x1, 0xd, 0x8, 0x0, 0x1, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000007280)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x7, 0xffff}, {}, {0xf, 0x6}}}, 0x24}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000150a01030000000000000000020000056da11de5d97befb06829c73212cf8f2bcb796bc24c49b988b40bf81f93326963577b31362dd269e482f94f58074feca366a8b3f8aaf19185b0680b9caa43a51efa0172dde15e84eb96663887df0bfcde43fbb726fb9a665eeba13e3f14e0513312b5a7a09792742579c8cc93557bbda63a3632c43430a64d08f4f0fd93ecbd041f4ea9ce10fbf86c4146432e139d360414a23e2119f9bf51f48e6a4570864b57accf1f167501150ea63c7792d0a9f14ae4436ae2d0de6ae78d7f50f32fa9dbddb9242ec96e65eac464643d0f00d4925d9337a6419ed4ceef66"], 0x14}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x11, 0x0, 0x300) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'lblcr\x00', 0x1d, 0x0, 0x40000}, 0x2c) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0xa}, 0x94) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f00000005c0)=@buf={0x93, &(0x7f00000004c0)="684e1d60aa891261ab236e00049790a50c9f16f1184735be864afe699bf39640f48ab803591fd152cb5293aa06923981634f40cf4a06d99163c57707606706e9d2802f0bff1f0195413524c9cf022091ef7e23cfd74492ea63f3074360597b71b7b9aedc9563ce0011ba6db142cc7bbc1a5e25b977ef7639a2363906ce278a0cfe60b510196367b0b35883097089b14d040425"}) r9 = socket$inet(0x2, 0x1, 0x6) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r10, 0x0, 0x4, 0x0, 0x0) preadv(r6, &(0x7f0000000c40)=[{&(0x7f0000000a40)=""/223, 0xdf}, {&(0x7f0000000b40)=""/233, 0xe9}], 0x2, 0x1, 0x0) sendto$inet(r10, 0x0, 0x0, 0x40010, &(0x7f0000000840)={0x2, 0x4e22, @multicast1}, 0x10) connect(r9, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) 1.257687041s ago: executing program 2 (id=8661): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000fabea20000470000000702009a57ffffffb603000008000000b7040000010000008500000082000000041a00029d0e000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000000ed0020000020000d9b53000ffffffff73a130000000000018250000", @ANYRES32=0x1, @ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x6, 0x26, &(0x7f0000000340)=""/38, 0x41100, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x9, 0x678eba39, 0x9}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000480)=[{0x5, 0x1, 0xf, 0x4}, {0x4, 0x1, 0xc, 0x5}], 0x10, 0x4}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r13) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044881}, 0x88001) r14 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r14, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x38, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0xb, '\x00', {0x9, 0x6, "155569", 0x7, 0x6c, 0xff, @private0={0xfc, 0x0, '\x00', 0x8}, @private0, [], "796ee019f45e1987"}}}}}}}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r16 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700), 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r2, r15, 0x25, 0x1a, @val=@netkit={@void, @value=r16}}, 0x1c) 925.040954ms ago: executing program 3 (id=8663): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 828.051745ms ago: executing program 3 (id=8664): openat$rfkill(0xffffffffffffff9c, &(0x7f0000002740), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000040000000000000000000005110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 670.842986ms ago: executing program 0 (id=8665): sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)}, 0x44000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000005ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432"], 0x23c}}, 0x4080) 581.469183ms ago: executing program 3 (id=8666): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="bc010000190001000000000000000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000100400000000000000000000000000000000401050000000000000000000000000000000001000000003c"], 0x1bc}}, 0x0) 500.622786ms ago: executing program 0 (id=8667): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0xe1, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x6, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x2, 0x63, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0x8, 0x3, 0x0, 0x1, [@generic="1d139ee65f9401400674a2911a982ff60b43826c16c89ecc4b96e1a3bd1eb3e7458bb3d20e4d731391cb149204bc967c1147e43e38984c6b6e6957c3729a8c1a6b886f4ae5122df8f2e224ce712ca5324a758ffad6a71a9c2217c690611c1bd99e7ce5e8457e3e069c53464719511c231f6645b7417f7474031dcfc69ecc645c2ff1510e81767a4afc8b65027dff"]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4008030) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="09101600"/14, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="b8"}, 0x50) 478.640041ms ago: executing program 3 (id=8668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x11c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xc4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 'veth1_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0xfffffffffffffe34, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x190}}, 0x0) 345.529348ms ago: executing program 1 (id=8669): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x38, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002080)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) sendmmsg$inet6(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r7, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r7, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '{'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x148, 0x24, 0x405, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x3, 0x4, 0x0, 0x8}}, @TCA_GRED_STAB={0x104, 0x2, "0000007200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000045d500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}]}}]}, 0x148}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x10, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1062c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x101cdf3}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x6d029}]}}}]}, 0x48}}, 0x40) 220.249491ms ago: executing program 0 (id=8670): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000102000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x1000, &(0x7f0000001000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 215.939225ms ago: executing program 2 (id=8671): bpf$OBJ_GET_MAP(0x7, &(0x7f0000002400)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r1, 0x22, 0x0, @void}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000003c0)={r4, r0, 0x4, r0}, 0x10) 134.041265ms ago: executing program 3 (id=8672): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000001c0)={0x28, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x14}}}}}, 0x28}}, 0x40000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001340)={0x0, 0x0, 0x0}, &(0x7f0000001380)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}], 0x38, 0x40800}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x8, 0x4, 0x0, 0x2, 0x5775d278, 0x1ff, 0x1}, 0x20) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) 89.222715ms ago: executing program 3 (id=8673): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000800d00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x80}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8001}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newtclass={0x38, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x8001}, {0x0, 0x8001}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x1, 0x8001}, {0x3, 0x300}}}, 0x24}}, 0x0) 0s ago: executing program 2 (id=8674): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f0000000200)=0xd, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000040)={&(0x7f0000000140)={0x1d, r4}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86d31a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3b"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) recvmmsg(r6, 0x0, 0x0, 0x10000, &(0x7f0000000440)={r8, r9+60000000}) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r10, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x3f8, 0x800, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4048800}, 0x0) r11 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r11, &(0x7f00000000c0)="355eabc213179bacccd12131c482aabccdf8bdefbce5f1dc0146c0c93c47a383251b0e799bef524cb4cb769aad1cc74dac4787ea709fd09ec5fde6dbca89792eb2d1ece080498fbf810e929558b35bd85deaddaa51299f9b0600caf617480f4e391df250760c9a1d023e1c9e4dd6af0d45a260f59125742f9237db5018e0ac0a6e98b3cca02d02e6294501a78f8d34d5f0d343568e49576fcfbf9387196f267d4d20b73d905eae9d54996065af3ffbda4c73ced58ffb4c3ac93299d758f5d39f", 0xc0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, 0x17, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x800) write$cgroup_pressure(r2, &(0x7f0000000180)={'some', 0x20, 0x7fffffffffffffff, 0x20, 0xffffffffffffffff}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b9ff05000700008d9c18ed0f6fd2", 0x0, 0xfea, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) kernel console output (not intermixed with test programs): 02.545563][T32324] 8021q: adding VLAN 0 to HW filter on device bond6 [ 902.549872][T32324] 8021q: adding VLAN 0 to HW filter on device bond7 [ 902.891709][T26202] IPVS: stop unused estimator thread 0... [ 903.209115][T32284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 903.506000][T32345] FAULT_INJECTION: forcing a failure. [ 903.506000][T32345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.506036][T32345] CPU: 1 UID: 0 PID: 32345 Comm: syz.1.7372 Not tainted syzkaller #0 PREEMPT(full) [ 903.506060][T32345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 903.506072][T32345] Call Trace: [ 903.506080][T32345] [ 903.506091][T32345] dump_stack_lvl+0xe8/0x150 [ 903.506128][T32345] should_fail_ex+0x410/0x560 [ 903.506157][T32345] _copy_to_user+0x31/0xb0 [ 903.506185][T32345] simple_read_from_buffer+0xe1/0x170 [ 903.506220][T32345] proc_fail_nth_read+0x1bb/0x230 [ 903.506250][T32345] ? common_file_perm+0x20e/0x2b0 [ 903.506278][T32345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 903.506313][T32345] ? rw_verify_area+0x24a/0x4c0 [ 903.506345][T32345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 903.506375][T32345] vfs_read+0x213/0xa80 [ 903.506411][T32345] ? __pfx___mutex_lock+0x10/0x10 [ 903.506436][T32345] ? __pfx_vfs_read+0x10/0x10 [ 903.506466][T32345] ? __fget_files+0x2a/0x420 [ 903.506499][T32345] ? __fget_files+0x3a2/0x420 [ 903.506524][T32345] ? __fget_files+0x2a/0x420 [ 903.506562][T32345] ksys_read+0x150/0x270 [ 903.506599][T32345] ? __pfx_ksys_read+0x10/0x10 [ 903.506641][T32345] do_syscall_64+0x166/0x520 [ 903.506673][T32345] ? trace_irq_disable+0x3b/0x140 [ 903.506693][T32345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.506714][T32345] ? clear_bhb_loop+0x70/0xc0 [ 903.506739][T32345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.506760][T32345] RIP: 0033:0x7f12f375e98e [ 903.506782][T32345] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 903.506799][T32345] RSP: 002b:00007f12f473ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 903.506823][T32345] RAX: ffffffffffffffda RBX: 00007f12f47406c0 RCX: 00007f12f375e98e [ 903.506838][T32345] RDX: 000000000000000f RSI: 00007f12f47400a0 RDI: 0000000000000004 [ 903.506851][T32345] RBP: 00007f12f4740090 R08: 0000000000000000 R09: 0000000000000000 [ 903.506865][T32345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.506878][T32345] R13: 00007f12f3a26038 R14: 00007f12f3a25fa0 R15: 00007fffaf7a6218 [ 903.506914][T32345] [ 903.527952][ T205] openvswitch: cpu_id mismatch with handler threads [ 903.765861][T32352] netlink: 'syz.0.7373': attribute type 1 has an invalid length. [ 904.222680][T32367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7377'. [ 904.518425][T32413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7383'. [ 905.030854][ T5275] veth0_macvtap: left promiscuous mode [ 905.205098][T32448] ovs-s: entered promiscuous mode [ 905.210705][T32448] openvswitch: ovs-s: Dropping previously announced user features [ 905.262485][T32450] FAULT_INJECTION: forcing a failure. [ 905.262485][T32450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 905.262524][T32450] CPU: 1 UID: 0 PID: 32450 Comm: syz.1.7390 Not tainted syzkaller #0 PREEMPT(full) [ 905.262548][T32450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 905.262561][T32450] Call Trace: [ 905.262570][T32450] [ 905.262580][T32450] dump_stack_lvl+0xe8/0x150 [ 905.262627][T32450] should_fail_ex+0x410/0x560 [ 905.262673][T32450] _copy_from_iter+0x1d3/0x1660 [ 905.262702][T32450] ? __alloc_skb+0x27a/0x7a0 [ 905.262729][T32450] ? __alloc_skb+0x27a/0x7a0 [ 905.262753][T32450] ? __alloc_skb+0x27a/0x7a0 [ 905.262776][T32450] ? __pfx__copy_from_iter+0x10/0x10 [ 905.262796][T32450] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 905.262828][T32450] ? __alloc_skb+0x27a/0x7a0 [ 905.262848][T32450] ? __alloc_skb+0x27a/0x7a0 [ 905.262875][T32450] ? netlink_sendmsg+0x650/0xb40 [ 905.262905][T32450] ? skb_put+0x112/0x210 [ 905.262932][T32450] netlink_sendmsg+0x6c0/0xb40 [ 905.262972][T32450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 905.263011][T32450] ? apparmor_socket_sendmsg+0x18b/0x360 [ 905.263039][T32450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 905.263067][T32450] sock_sendmsg_nosec+0x13a/0x180 [ 905.263102][T32450] ____sys_sendmsg+0x54e/0x850 [ 905.263135][T32450] ? __pfx_____sys_sendmsg+0x10/0x10 [ 905.263171][T32450] ? import_iovec+0x73/0xa0 [ 905.263200][T32450] ___sys_sendmsg+0x2a5/0x360 [ 905.263226][T32450] ? __lock_acquire+0x747/0x2de0 [ 905.263254][T32450] ? __pfx____sys_sendmsg+0x10/0x10 [ 905.263350][T32450] ? __fget_files+0x2a/0x420 [ 905.263377][T32450] ? __fget_files+0x3a2/0x420 [ 905.263416][T32450] __x64_sys_sendmsg+0x1b1/0x290 [ 905.263447][T32450] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 905.263499][T32450] do_syscall_64+0x166/0x520 [ 905.263534][T32450] ? trace_irq_disable+0x3b/0x140 [ 905.263556][T32450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.263579][T32450] ? clear_bhb_loop+0x70/0xc0 [ 905.263607][T32450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.263628][T32450] RIP: 0033:0x7f12f379e159 [ 905.263658][T32450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.263677][T32450] RSP: 002b:00007f12f4740028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 905.263703][T32450] RAX: ffffffffffffffda RBX: 00007f12f3a25fa0 RCX: 00007f12f379e159 [ 905.263719][T32450] RDX: 0000000020004000 RSI: 0000200000000080 RDI: 0000000000000003 [ 905.263734][T32450] RBP: 00007f12f4740090 R08: 0000000000000000 R09: 0000000000000000 [ 905.263749][T32450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.263775][T32450] R13: 00007f12f3a26038 R14: 00007f12f3a25fa0 R15: 00007fffaf7a6218 [ 905.263812][T32450] [ 905.458995][T32457] netlink: 'syz.4.7393': attribute type 10 has an invalid length. [ 905.656375][T32456] bridge_slave_0: left allmulticast mode [ 905.656407][T32456] bridge_slave_0: left promiscuous mode [ 905.656656][T32456] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.747792][T32456] bridge_slave_1: left allmulticast mode [ 905.747824][T32456] bridge_slave_1: left promiscuous mode [ 905.748250][T32456] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.816401][T32456] .`: (slave bond_slave_0): Releasing backup interface [ 905.917994][T32456] team0: Port device team_slave_1 removed [ 905.922423][T32456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 905.922451][T32456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 905.927411][T32456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 905.927436][T32456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 905.927885][T32467] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7396'. [ 906.022266][T32456] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 906.033866][T32459] team0: Mode changed to "broadcast" [ 906.043390][T32472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7396'. [ 906.550344][T32493] netlink: 'syz.1.7403': attribute type 1 has an invalid length. [ 906.703806][T32509] netlink: 'syz.0.7404': attribute type 1 has an invalid length. [ 906.783145][T32513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7404'. [ 906.859014][T32509] bond11: entered promiscuous mode [ 906.862280][T32509] 8021q: adding VLAN 0 to HW filter on device bond11 [ 907.134578][T32513] bond11: (slave bridge5): making interface the new active one [ 907.134608][T32513] bridge5: entered promiscuous mode [ 907.136513][T32513] bond11: (slave bridge5): Enslaving as an active interface with an up link [ 907.217272][T32524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7407'. [ 907.265094][T32525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7407'. [ 907.310128][T32527] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 907.312620][T32527] netlink: 'syz.2.7407': attribute type 2 has an invalid length. [ 907.606827][T32543] netlink: 'syz.0.7410': attribute type 4 has an invalid length. [ 907.662266][T32545] netlink: 'syz.0.7410': attribute type 4 has an invalid length. [ 907.747245][T32549] block nbd0: server does not support multiple connections per device. [ 907.747681][T32549] block nbd0: shutting down sockets [ 907.759091][T32540] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20003 [ 907.786036][T32540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7410'. [ 907.801101][T32540] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7410'. [ 908.008563][T32556] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7413'. [ 908.010088][T32542] lo speed is unknown, defaulting to 1000 [ 908.048302][T32542] wg2 speed is unknown, defaulting to 1000 [ 908.228227][T32560] netlink: 6076 bytes leftover after parsing attributes in process `syz.0.7414'. [ 908.250198][T32541] FAULT_INJECTION: forcing a failure. [ 908.250198][T32541] name fail_futex, interval 1, probability 0, space 0, times 1 [ 908.250238][T32541] CPU: 0 UID: 0 PID: 32541 Comm: syz.4.7409 Not tainted syzkaller #0 PREEMPT(full) [ 908.250263][T32541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 908.250276][T32541] Call Trace: [ 908.250285][T32541] [ 908.250296][T32541] dump_stack_lvl+0xe8/0x150 [ 908.250352][T32541] should_fail_ex+0x410/0x560 [ 908.250384][T32541] get_futex_key+0x8e2/0x1580 [ 908.250425][T32541] ? __pfx_get_futex_key+0x10/0x10 [ 908.250464][T32541] futex_wake+0x119/0x5f0 [ 908.250502][T32541] ? __pfx_futex_wake+0x10/0x10 [ 908.250542][T32541] ? mm_exit_exec_release+0x20/0x290 [ 908.250576][T32541] do_futex+0x458/0x4e0 [ 908.250610][T32541] ? __pfx_do_futex+0x10/0x10 [ 908.250642][T32541] ? __might_fault+0xaf/0x130 [ 908.250678][T32541] mm_exit_exec_release+0x10d/0x290 [ 908.250708][T32541] exit_mm+0x4d/0x2d0 [ 908.250733][T32541] do_exit+0x6cd/0x2360 [ 908.250764][T32541] ? __pfx_do_exit+0x10/0x10 [ 908.250786][T32541] ? cgroup1_freezing+0x20/0x350 [ 908.250815][T32541] ? cgroup1_freezing+0x20/0x350 [ 908.250853][T32541] do_group_exit+0x22d/0x2f0 [ 908.250874][T32541] ? _raw_spin_unlock_irq+0x23/0x50 [ 908.250910][T32541] get_signal+0x121b/0x12c0 [ 908.250961][T32541] arch_do_signal_or_restart+0xbb/0x860 [ 908.251002][T32541] ? fput+0xa0/0xd0 [ 908.251026][T32541] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 908.251053][T32541] ? __x64_sys_sendmsg+0x25d/0x290 [ 908.251100][T32541] exit_to_user_mode_loop+0x10e/0x770 [ 908.251123][T32541] ? rcu_is_watching+0x16/0xb0 [ 908.251152][T32541] do_syscall_64+0x328/0x520 [ 908.251174][T32541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.251196][T32541] ? clear_bhb_loop+0x70/0xc0 [ 908.251222][T32541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.251243][T32541] RIP: 0033:0x7fa6e239e159 [ 908.251264][T32541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.251281][T32541] RSP: 002b:00007fa6e3279028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 908.251306][T32541] RAX: fffffffffffffe00 RBX: 00007fa6e2626180 RCX: 00007fa6e239e159 [ 908.251321][T32541] RDX: 0000000000000004 RSI: 0000200000000580 RDI: 0000000000000004 [ 908.251334][T32541] RBP: 00007fa6e3279090 R08: 0000000000000000 R09: 0000000000000000 [ 908.251348][T32541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.251360][T32541] R13: 00007fa6e2626218 R14: 00007fa6e2626180 R15: 00007fff51c98fb8 [ 908.251395][T32541] [ 908.599701][T32568] FAULT_INJECTION: forcing a failure. [ 908.599701][T32568] name failslab, interval 1, probability 0, space 0, times 0 [ 908.599739][T32568] CPU: 0 UID: 0 PID: 32568 Comm: syz.3.7416 Not tainted syzkaller #0 PREEMPT(full) [ 908.599764][T32568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 908.599776][T32568] Call Trace: [ 908.599786][T32568] [ 908.599796][T32568] dump_stack_lvl+0xe8/0x150 [ 908.599833][T32568] should_fail_ex+0x410/0x560 [ 908.599864][T32568] should_failslab+0xa8/0x100 [ 908.599895][T32568] ? xfrm_state_alloc+0x24/0x2f0 [ 908.599994][T32568] kmem_cache_alloc_noprof+0xa1/0x600 [ 908.600029][T32568] ? xfrm_state_alloc+0x24/0x2f0 [ 908.600063][T32568] xfrm_state_alloc+0x24/0x2f0 [ 908.600091][T32568] xfrm_add_sa+0x15a9/0x40a0 [ 908.600148][T32568] ? __pfx_xfrm_add_sa+0x10/0x10 [ 908.600166][T32568] ? apparmor_capable+0x126/0x170 [ 908.600204][T32568] ? __nla_parse+0x40/0x60 [ 908.600237][T32568] xfrm_user_rcv_msg+0x7a8/0xf30 [ 908.600266][T32568] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 908.600327][T32568] ? __mutex_trylock_common+0x15f/0x270 [ 908.600361][T32568] ? __pfx___mutex_trylock_common+0x10/0x10 [ 908.600391][T32568] ? rcu_is_watching+0x16/0xb0 [ 908.600418][T32568] ? trace_contention_end+0x3d/0x140 [ 908.600456][T32568] netlink_rcv_skb+0x226/0x4a0 [ 908.600489][T32568] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 908.600513][T32568] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 908.600563][T32568] ? netlink_deliver_tap+0x2e/0x1b0 [ 908.600592][T32568] ? netlink_deliver_tap+0x2e/0x1b0 [ 908.600636][T32568] xfrm_netlink_rcv+0x79/0x90 [ 908.600658][T32568] netlink_unicast+0x7bd/0x940 [ 908.600700][T32568] netlink_sendmsg+0x813/0xb40 [ 908.600743][T32568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 908.600784][T32568] ? apparmor_socket_sendmsg+0x18b/0x360 [ 908.600810][T32568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 908.600840][T32568] sock_sendmsg_nosec+0x13a/0x180 [ 908.600876][T32568] ____sys_sendmsg+0x54e/0x850 [ 908.600911][T32568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 908.600951][T32568] ? import_iovec+0x73/0xa0 [ 908.600981][T32568] ___sys_sendmsg+0x2a5/0x360 [ 908.601007][T32568] ? __lock_acquire+0x747/0x2de0 [ 908.601036][T32568] ? __pfx____sys_sendmsg+0x10/0x10 [ 908.601117][T32568] ? __fget_files+0x2a/0x420 [ 908.601145][T32568] ? __fget_files+0x3a2/0x420 [ 908.601188][T32568] __x64_sys_sendmsg+0x1b1/0x290 [ 908.601218][T32568] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 908.601272][T32568] do_syscall_64+0x166/0x520 [ 908.601295][T32568] ? trace_irq_disable+0x3b/0x140 [ 908.601316][T32568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.601339][T32568] ? clear_bhb_loop+0x70/0xc0 [ 908.601398][T32568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.601421][T32568] RIP: 0033:0x7f822b99e159 [ 908.601443][T32568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.601461][T32568] RSP: 002b:00007f822c89d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 908.601487][T32568] RAX: ffffffffffffffda RBX: 00007f822bc25fa0 RCX: 00007f822b99e159 [ 908.601503][T32568] RDX: 0000000020004000 RSI: 0000200000000080 RDI: 0000000000000003 [ 908.601517][T32568] RBP: 00007f822c89d090 R08: 0000000000000000 R09: 0000000000000000 [ 908.601531][T32568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.601545][T32568] R13: 00007f822bc26038 R14: 00007f822bc25fa0 R15: 00007ffc642c8d08 [ 908.601583][T32568] [ 909.290917][T32574] batman_adv: batadv0: Adding interface: netdevsim0 [ 909.290939][T32574] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.290971][T32574] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 910.193224][T32629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 910.193255][T32629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.195158][T32629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 910.195183][T32629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.196305][T32629] batman_adv: batadv0: Interface deactivated: veth0 [ 910.196325][T32629] batman_adv: batadv0: Removing interface: veth0 [ 910.277013][T32635] xt_ipcomp: unknown flags 1D [ 910.361343][T32635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7434'. [ 910.657695][T32650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7442'. [ 910.681728][T32646] pim6reg1: entered allmulticast mode [ 911.199149][T32678] netlink: 280 bytes leftover after parsing attributes in process `syz.0.7451'. [ 911.542548][T32694] netlink: 'syz.4.7455': attribute type 1 has an invalid length. [ 911.780052][T32713] ip_tables: iptables: counters copy to user failed while replacing table [ 914.183567][T32684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 914.478070][T32738] FAULT_INJECTION: forcing a failure. [ 914.478070][T32738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.478108][T32738] CPU: 0 UID: 0 PID: 32738 Comm: syz.1.7464 Not tainted syzkaller #0 PREEMPT(full) [ 914.478133][T32738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 914.478147][T32738] Call Trace: [ 914.478156][T32738] [ 914.478166][T32738] dump_stack_lvl+0xe8/0x150 [ 914.478204][T32738] should_fail_ex+0x410/0x560 [ 914.478235][T32738] _copy_from_user+0x2d/0xb0 [ 914.478263][T32738] ___sys_sendmsg+0x1c6/0x360 [ 914.478290][T32738] ? __lock_acquire+0x747/0x2de0 [ 914.478316][T32738] ? __pfx____sys_sendmsg+0x10/0x10 [ 914.478385][T32738] ? __fget_files+0x2a/0x420 [ 914.478413][T32738] ? __fget_files+0x3a2/0x420 [ 914.478453][T32738] __x64_sys_sendmsg+0x1b1/0x290 [ 914.478483][T32738] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 914.478535][T32738] do_syscall_64+0x166/0x520 [ 914.478558][T32738] ? trace_irq_disable+0x3b/0x140 [ 914.478580][T32738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.478603][T32738] ? clear_bhb_loop+0x70/0xc0 [ 914.478631][T32738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.478653][T32738] RIP: 0033:0x7f12f379e159 [ 914.478675][T32738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.478694][T32738] RSP: 002b:00007f12f471f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 914.478720][T32738] RAX: ffffffffffffffda RBX: 00007f12f3a26090 RCX: 00007f12f379e159 [ 914.478737][T32738] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000006 [ 914.478752][T32738] RBP: 00007f12f471f090 R08: 0000000000000000 R09: 0000000000000000 [ 914.478767][T32738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.478782][T32738] R13: 00007f12f3a26128 R14: 00007f12f3a26090 R15: 00007fffaf7a6218 [ 914.478824][T32738] [ 914.504403][T32741] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7465'. [ 915.016413][T32756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7470'. [ 915.036449][T32752] nbd: must specify at least one socket [ 915.381100][ T304] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 915.381132][ T304] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 915.420562][ T306] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7478'. [ 915.598879][ T313] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7479'. [ 916.094244][ T329] team0: Device wg1 is of different type [ 916.120797][ T329] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 916.225986][ T332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7486'. [ 916.323815][ T342] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 916.328262][ T342] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 916.458739][ T345] netlink: 'syz.3.7491': attribute type 1 has an invalid length. [ 916.817313][ T363] netlink: 388 bytes leftover after parsing attributes in process `syz.4.7499'. [ 916.819404][ T361] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 916.822291][ T361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7498'. [ 916.822318][ T361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7498'. [ 917.003176][ T369] FAULT_INJECTION: forcing a failure. [ 917.003176][ T369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 917.003214][ T369] CPU: 1 UID: 0 PID: 369 Comm: syz.2.7500 Not tainted syzkaller #0 PREEMPT(full) [ 917.003239][ T369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 917.003253][ T369] Call Trace: [ 917.003262][ T369] [ 917.003272][ T369] dump_stack_lvl+0xe8/0x150 [ 917.003309][ T369] should_fail_ex+0x410/0x560 [ 917.003338][ T369] _copy_from_iter+0x1d3/0x1660 [ 917.003363][ T369] ? __alloc_skb+0x27a/0x7a0 [ 917.003388][ T369] ? __alloc_skb+0x27a/0x7a0 [ 917.003412][ T369] ? __alloc_skb+0x27a/0x7a0 [ 917.003435][ T369] ? __pfx__copy_from_iter+0x10/0x10 [ 917.003460][ T369] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 917.003491][ T369] ? __alloc_skb+0x27a/0x7a0 [ 917.003512][ T369] ? __alloc_skb+0x27a/0x7a0 [ 917.003542][ T369] ? netlink_sendmsg+0x650/0xb40 [ 917.003571][ T369] ? skb_put+0x112/0x210 [ 917.003600][ T369] netlink_sendmsg+0x6c0/0xb40 [ 917.003640][ T369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 917.003694][ T369] ? apparmor_socket_sendmsg+0x18b/0x360 [ 917.003722][ T369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 917.003751][ T369] sock_sendmsg_nosec+0x13a/0x180 [ 917.003786][ T369] ____sys_sendmsg+0x54e/0x850 [ 917.003820][ T369] ? __pfx_____sys_sendmsg+0x10/0x10 [ 917.003867][ T369] ? import_iovec+0x73/0xa0 [ 917.003898][ T369] ___sys_sendmsg+0x2a5/0x360 [ 917.003923][ T369] ? __lock_acquire+0x747/0x2de0 [ 917.003952][ T369] ? __pfx____sys_sendmsg+0x10/0x10 [ 917.004019][ T369] ? __fget_files+0x2a/0x420 [ 917.004047][ T369] ? __fget_files+0x3a2/0x420 [ 917.004087][ T369] __x64_sys_sendmsg+0x1b1/0x290 [ 917.004117][ T369] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 917.004169][ T369] do_syscall_64+0x166/0x520 [ 917.004192][ T369] ? trace_irq_disable+0x3b/0x140 [ 917.004214][ T369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.004237][ T369] ? clear_bhb_loop+0x70/0xc0 [ 917.004263][ T369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.004284][ T369] RIP: 0033:0x7f52f259e159 [ 917.004304][ T369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.004323][ T369] RSP: 002b:00007f52f07f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 917.004348][ T369] RAX: ffffffffffffffda RBX: 00007f52f2826090 RCX: 00007f52f259e159 [ 917.004364][ T369] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000006 [ 917.004379][ T369] RBP: 00007f52f07f6090 R08: 0000000000000000 R09: 0000000000000000 [ 917.004393][ T369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.004407][ T369] R13: 00007f52f2826128 R14: 00007f52f2826090 R15: 00007ffcb46ce6d8 [ 917.004443][ T369] [ 917.267333][ T379] netlink: 'syz.0.7504': attribute type 1 has an invalid length. [ 917.267360][ T379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7504'. [ 917.520384][ T380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7506'. [ 917.567694][ T389] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7508'. [ 917.880360][ T398] netlink: 'syz.4.7512': attribute type 10 has an invalid length. [ 917.880390][ T398] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7512'. [ 917.880963][ T32] audit: type=1804 audit(1789452142.613:16): pid=398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7512" name="/newroot/409/cgroup.controllers" dev="tmpfs" ino=2101 res=1 errno=0 [ 917.881021][ T32] audit: type=1800 audit(1789452142.613:17): pid=398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7512" name="cgroup.controllers" dev="tmpfs" ino=2101 res=0 errno=0 [ 917.970945][ T403] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7514'. [ 918.157710][ T406] netlink: 'syz.0.7515': attribute type 1 has an invalid length. [ 918.457829][ T398] dummy0: entered promiscuous mode [ 918.506618][ T398] bond12: (slave dummy0): Releasing active interface [ 918.606194][ T406] 8021q: adding VLAN 0 to HW filter on device bond12 [ 919.046871][ T424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7517'. [ 919.049631][ T424] siw: device registration error -23 [ 919.176572][ T432] gre0: entered promiscuous mode [ 919.176600][ T432] gre0: entered allmulticast mode [ 919.640707][ T447] netlink: 'syz.0.7523': attribute type 1 has an invalid length. [ 919.961814][ T465] x_tables: duplicate entry at hook 4 [ 921.086157][ T499] bridge_slave_0: left allmulticast mode [ 921.086188][ T499] bridge_slave_0: left promiscuous mode [ 921.086478][ T499] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.129894][ T499] bridge_slave_1: left allmulticast mode [ 921.130190][ T499] bridge_slave_1: left promiscuous mode [ 921.130474][ T499] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.187166][ T499] bond0: (slave bond_slave_0): Releasing backup interface [ 921.207972][ T499] bond0: (slave bond_slave_1): Releasing backup interface [ 921.218419][ T499] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 921.380017][ T522] netlink: 'syz.3.7539': attribute type 2 has an invalid length. [ 921.707821][ T534] __nla_validate_parse: 4 callbacks suppressed [ 921.707848][ T534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7541'. [ 921.867531][ T537] netlink: 'syz.1.7542': attribute type 1 has an invalid length. [ 922.300932][ T569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7545'. [ 922.561943][ T574] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7545'. [ 922.662244][T26202] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 923.083815][ T599] netlink: 'syz.1.7551': attribute type 1 has an invalid length. [ 923.302650][ T607] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7552'. [ 923.321369][ T607] netlink: 172 bytes leftover after parsing attributes in process `syz.2.7552'. [ 923.497940][ T617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7553'. [ 923.850616][ T617] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.852352][ T617] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.029716][ T617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 924.043903][ T617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 924.158179][ T617] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 924.212997][ T6071] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.213150][ T6060] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.213197][ T6060] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.213232][ T6060] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.513192][ T577] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 925.736256][ T643] FAULT_INJECTION: forcing a failure. [ 925.736256][ T643] name failslab, interval 1, probability 0, space 0, times 0 [ 925.736293][ T643] CPU: 1 UID: 0 PID: 643 Comm: syz.1.7557 Not tainted syzkaller #0 PREEMPT(full) [ 925.736317][ T643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 925.736331][ T643] Call Trace: [ 925.736341][ T643] [ 925.736351][ T643] dump_stack_lvl+0xe8/0x150 [ 925.736398][ T643] should_fail_ex+0x410/0x560 [ 925.736428][ T643] should_failslab+0xa8/0x100 [ 925.736457][ T643] __kmalloc_cache_noprof+0xa3/0x600 [ 925.736481][ T643] ? tc_chain_notify+0x25f/0x2e0 [ 925.736515][ T643] ? tcf_proto_create+0x65/0x330 [ 925.736544][ T643] ? tcf_proto_create+0x65/0x330 [ 925.736584][ T643] tcf_proto_create+0x65/0x330 [ 925.736623][ T643] tc_new_tfilter+0x13a6/0x1810 [ 925.736685][ T643] ? __pfx_tc_new_tfilter+0x10/0x10 [ 925.736744][ T643] ? lock_acquire+0x115/0x350 [ 925.736786][ T643] ? __pfx_tc_new_tfilter+0x10/0x10 [ 925.736815][ T643] rtnetlink_rcv_msg+0x802/0xc00 [ 925.736846][ T643] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 925.736869][ T643] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 925.736891][ T643] ? ref_tracker_free+0x689/0x830 [ 925.736921][ T643] ? __pfx_ref_tracker_free+0x10/0x10 [ 925.736959][ T643] netlink_rcv_skb+0x226/0x4a0 [ 925.736992][ T643] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 925.737019][ T643] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 925.737066][ T643] ? netlink_deliver_tap+0x2e/0x1b0 [ 925.737096][ T643] ? netlink_deliver_tap+0x2e/0x1b0 [ 925.737133][ T643] netlink_unicast+0x7bd/0x940 [ 925.737175][ T643] netlink_sendmsg+0x813/0xb40 [ 925.737217][ T643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 925.737258][ T643] ? apparmor_socket_sendmsg+0x18b/0x360 [ 925.737285][ T643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 925.737314][ T643] sock_sendmsg_nosec+0x13a/0x180 [ 925.737351][ T643] ____sys_sendmsg+0x54e/0x850 [ 925.737394][ T643] ? __pfx_____sys_sendmsg+0x10/0x10 [ 925.737433][ T643] ? import_iovec+0x73/0xa0 [ 925.737465][ T643] ___sys_sendmsg+0x2a5/0x360 [ 925.737490][ T643] ? __lock_acquire+0x747/0x2de0 [ 925.737516][ T643] ? __pfx____sys_sendmsg+0x10/0x10 [ 925.737580][ T643] ? __fget_files+0x2a/0x420 [ 925.737610][ T643] ? __fget_files+0x3a2/0x420 [ 925.737662][ T643] __x64_sys_sendmsg+0x1b1/0x290 [ 925.737694][ T643] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 925.737748][ T643] do_syscall_64+0x166/0x520 [ 925.737773][ T643] ? trace_irq_disable+0x3b/0x140 [ 925.737795][ T643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.737818][ T643] ? clear_bhb_loop+0x70/0xc0 [ 925.737842][ T643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.737862][ T643] RIP: 0033:0x7f12f379e159 [ 925.737882][ T643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.737900][ T643] RSP: 002b:00007f12f4740028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 925.737923][ T643] RAX: ffffffffffffffda RBX: 00007f12f3a25fa0 RCX: 00007f12f379e159 [ 925.737941][ T643] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000006 [ 925.737955][ T643] RBP: 00007f12f4740090 R08: 0000000000000000 R09: 0000000000000000 [ 925.737967][ T643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.737980][ T643] R13: 00007f12f3a26038 R14: 00007f12f3a25fa0 R15: 00007fffaf7a6218 [ 925.738016][ T643] [ 926.214622][ T655] can: request_module (can-proto-5) failed. [ 926.451644][ T668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7563'. [ 926.608529][ T672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7564'. [ 926.613784][ T672] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7564'. [ 926.613810][ T672] netlink: 43 bytes leftover after parsing attributes in process `syz.2.7564'. [ 926.613825][ T672] netlink: 'syz.2.7564': attribute type 6 has an invalid length. [ 926.613838][ T672] netlink: 'syz.2.7564': attribute type 5 has an invalid length. [ 926.969856][ T684] __nla_validate_parse: 1 callbacks suppressed [ 926.969881][ T684] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.7567'. [ 927.616411][ T718] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 927.679068][ T723] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not [ 927.679068][ T723] [ 927.985926][ T737] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7579'. [ 927.986522][ T737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7579'. [ 928.097680][ T741] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7583'. [ 928.142256][ T746] netlink: 67 bytes leftover after parsing attributes in process `syz.2.7584'. [ 928.867324][ T773] xt_hashlimit: max too large, truncated to 1048576 [ 928.867524][ T773] Cannot find add_set index 2 as target [ 928.941251][ T770] udevd[770]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 929.380784][ T789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7596'. [ 930.184345][ T821] netlink: 'syz.0.7607': attribute type 1 has an invalid length. [ 930.184375][ T821] netlink: 756 bytes leftover after parsing attributes in process `syz.0.7607'. [ 930.407081][ T825] ip6erspan0: entered allmulticast mode [ 931.981077][ T873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7626'. [ 932.146355][ T883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7631'. [ 932.196376][ T882] xt_hashlimit: size too large, truncated to 1048576 [ 932.313791][ T6071] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 932.314919][ T6071] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 932.315029][ T6071] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 932.315103][ T6071] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 932.934366][ T908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7638'. [ 933.148478][ T924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7642'. [ 933.299410][ T921] 8021q: adding VLAN 0 to HW filter on device .` [ 933.407223][ T933] nbd: must specify an index to disconnect [ 933.715396][ T958] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7647'. [ 933.717576][ T958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7647'. [ 933.717637][ T958] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 933.778144][ T963] netlink: 'syz.2.7651': attribute type 2 has an invalid length. [ 933.964035][ T971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7654'. [ 934.048057][ T973] tc_dump_action: action bad kind [ 934.115586][ T977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7655'. [ 934.227836][ T982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7658'. [ 934.378720][ T987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7659'. [ 934.403251][ T987] geneve0: entered promiscuous mode [ 934.409232][ T987] geneve0: left promiscuous mode [ 935.061592][ T1026] netlink: 'syz.2.7671': attribute type 10 has an invalid length. [ 935.092161][ T1026] team0: Device wg2 is of different type [ 935.258893][ T1039] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 935.258938][ T1039] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 935.258979][ T1039] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 935.326606][ T1039] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 935.435493][ T1040] pim6reg1: entered allmulticast mode [ 935.548949][ T1060] ip6gre1: entered promiscuous mode [ 935.548979][ T1060] ip6gre1: entered allmulticast mode [ 935.788401][ T1076] netlink: 'syz.2.7683': attribute type 1 has an invalid length. [ 935.872576][ T1076] bond8: entered promiscuous mode [ 935.878980][ T1076] 8021q: adding VLAN 0 to HW filter on device bond8 [ 936.526264][ T1112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 937.020428][ T1135] vlan3: entered promiscuous mode [ 937.020456][ T1135] bridge0: entered promiscuous mode [ 937.021279][ T1138] __nla_validate_parse: 11 callbacks suppressed [ 937.021297][ T1138] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7698'. [ 937.259690][ T1139] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7698'. [ 937.297188][ T1138] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7698'. [ 937.297715][ T1138] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7698'. [ 937.329414][ T1138] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7698'. [ 937.345210][ T1138] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7698'. [ 937.351459][ T1138] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7698'. [ 937.358334][ T1138] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7698'. [ 937.370049][ T1138] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7698'. [ 937.377668][ T1138] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7698'. [ 938.178714][ T1168] FAULT_INJECTION: forcing a failure. [ 938.178714][ T1168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 938.178754][ T1168] CPU: 0 UID: 0 PID: 1168 Comm: syz.1.7708 Not tainted syzkaller #0 PREEMPT(full) [ 938.178778][ T1168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 938.178944][ T1168] Call Trace: [ 938.178965][ T1168] [ 938.178976][ T1168] dump_stack_lvl+0xe8/0x150 [ 938.179015][ T1168] should_fail_ex+0x410/0x560 [ 938.179048][ T1168] _copy_from_user+0x2d/0xb0 [ 938.179076][ T1168] ___sys_sendmsg+0x1c6/0x360 [ 938.179102][ T1168] ? __lock_acquire+0x747/0x2de0 [ 938.179160][ T1168] ? __pfx____sys_sendmsg+0x10/0x10 [ 938.179228][ T1168] ? __fget_files+0x2a/0x420 [ 938.179258][ T1168] ? __fget_files+0x3a2/0x420 [ 938.179298][ T1168] __x64_sys_sendmsg+0x1b1/0x290 [ 938.179330][ T1168] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 938.179383][ T1168] do_syscall_64+0x166/0x520 [ 938.179408][ T1168] ? trace_irq_disable+0x3b/0x140 [ 938.179428][ T1168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.179452][ T1168] ? clear_bhb_loop+0x70/0xc0 [ 938.179479][ T1168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.179502][ T1168] RIP: 0033:0x7f12f379e159 [ 938.179525][ T1168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.179544][ T1168] RSP: 002b:00007f12f4740028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 938.179569][ T1168] RAX: ffffffffffffffda RBX: 00007f12f3a25fa0 RCX: 00007f12f379e159 [ 938.179585][ T1168] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 938.179600][ T1168] RBP: 00007f12f4740090 R08: 0000000000000000 R09: 0000000000000000 [ 938.179614][ T1168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.179626][ T1168] R13: 00007f12f3a26038 R14: 00007f12f3a25fa0 R15: 00007fffaf7a6218 [ 938.179656][ T1168] [ 939.179796][ T1195] netlink: 'syz.4.7715': attribute type 12 has an invalid length. [ 939.180980][ T1195] netlink: 'syz.4.7715': attribute type 12 has an invalid length. [ 940.704931][ T1249] netlink: 'syz.2.7727': attribute type 29 has an invalid length. [ 940.897583][ T1255] syzkaller0: entered promiscuous mode [ 940.897610][ T1255] syzkaller0: entered allmulticast mode [ 941.067062][ T205] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x6c [ 941.849565][ T1295] veth1_macvtap: left promiscuous mode [ 941.993474][ T1305] --map-set only usable from mangle table [ 942.996506][ T1302] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 943.084297][ T1302] vlan0: left allmulticast mode [ 943.084324][ T1302] bond3: left allmulticast mode [ 943.084338][ T1302] geneve2: left allmulticast mode [ 943.084359][ T1302] vlan0: left promiscuous mode [ 943.084371][ T1302] bond3: left promiscuous mode [ 943.084383][ T1302] geneve2: left promiscuous mode [ 943.084985][ T1302] macvtap1: left allmulticast mode [ 943.173055][ T6071] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 943.173097][ T6071] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.173137][ T6071] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 943.173164][ T6071] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.173199][ T6071] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 943.173225][ T6071] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.173258][ T6071] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 943.173283][ T6071] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.908690][ T1268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 944.444679][ T1361] __nla_validate_parse: 59 callbacks suppressed [ 944.444702][ T1361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7750'. [ 944.511452][ T1365] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7748'. [ 944.516130][ T1364] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 944.662343][ T1365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7748'. [ 944.683121][ T1377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7753'. [ 944.750323][ T1372] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7752'. [ 944.974261][ T1385] netlink: 'syz.2.7755': attribute type 1 has an invalid length. [ 945.059844][ T1385] 8021q: adding VLAN 0 to HW filter on device bond9 [ 945.110555][ T1395] macvlan3: entered promiscuous mode [ 945.110584][ T1395] macvlan3: entered allmulticast mode [ 945.110905][ T1395] bond9: entered allmulticast mode [ 945.110952][ T1395] bond9: entered promiscuous mode [ 945.145364][ T1395] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 945.151105][ T1395] team0: Port device macvlan3 added [ 945.249151][ T1385] bond9: (slave ip6gretap1): making interface the new active one [ 945.249182][ T1385] ip6gretap1: entered promiscuous mode [ 945.249350][ T1385] ip6gretap1: entered allmulticast mode [ 945.251271][ T1385] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 945.424241][ T1411] tipc: Enabling of bearer rejected, failed to enable media [ 945.769825][ T1422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7762'. [ 945.960220][ T1432] bridge_slave_1: entered promiscuous mode [ 945.971286][ T1432] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 945.971327][ T1432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 945.975157][ T1432] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7765'. [ 946.217691][ T1448] netlink: 'syz.3.7771': attribute type 1 has an invalid length. [ 946.246978][ T1450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7773'. [ 946.292991][ T1451] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7769'. [ 946.623747][ T6079] IPVS: starting estimator thread 0... [ 946.629658][ T1465] IPVS: Error connecting to the multicast addr [ 946.637553][ T1465] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 946.722980][ T1466] IPVS: using max 24 ests per chain, 57600 per kthread [ 947.039493][ T1478] ipvlan2: entered allmulticast mode [ 947.039518][ T1478] virt_wifi0: entered allmulticast mode [ 947.041631][ T1478] batman_adv: batadv0: Adding interface: ipvlan2 [ 947.042127][ T1478] batman_adv: batadv0: Interface activated: ipvlan2 [ 947.240098][ T1482] xt_policy: neither incoming nor outgoing policy selected [ 947.575804][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.575850][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.575878][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.575904][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.575929][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.575955][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.575982][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.576007][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.576032][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.576058][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.576084][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.576110][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.576135][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.576161][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.576186][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.576213][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.576239][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.576264][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.576289][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.579225][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.579267][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.579295][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.579321][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.579347][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.579373][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.579399][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.579425][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.579451][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.579478][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.579504][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.579529][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.579555][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.579581][ T1492] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11886 [ 947.675708][ T5617] Bluetooth: hci3: command 0x0405 tx timeout [ 948.172023][ T1509] netlink: 'syz.0.7788': attribute type 12 has an invalid length. [ 948.412670][ T1516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7791'. [ 949.408281][ T1552] bond10 (unregistering): Released all slaves [ 949.455129][ T1548] lo speed is unknown, defaulting to 1000 [ 949.478731][ T1559] __nla_validate_parse: 3 callbacks suppressed [ 949.478755][ T1559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7798'. [ 949.516010][ T1548] wg2 speed is unknown, defaulting to 1000 [ 949.731009][ T1566] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 949.914420][ T1577] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 949.938922][ T1577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7805'. [ 949.985978][ T1577] hsr_slave_1 (unregistering): left promiscuous mode [ 950.453556][ T1595] netlink: 'syz.3.7808': attribute type 1 has an invalid length. [ 950.460235][ T1593] netlink: 165 bytes leftover after parsing attributes in process `syz.2.7807'. [ 950.535065][ T1595] 8021q: adding VLAN 0 to HW filter on device bond13 [ 950.630660][ T1601] bond13: (slave veth3): Enslaving as an active interface with a down link [ 950.649540][ T1601] netlink: 'syz.3.7808': attribute type 10 has an invalid length. [ 950.649567][ T1601] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7808'. [ 950.649655][ T1601] dummy0: entered promiscuous mode [ 950.657225][ T1595] dummy0: left promiscuous mode [ 950.735334][ T1604] netlink: 'syz.4.7809': attribute type 1 has an invalid length. [ 950.752416][ T1595] bond13: (slave dummy0): making interface the new active one [ 950.765313][ T1595] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 950.941265][ T1603] lo speed is unknown, defaulting to 1000 [ 951.003298][ T1603] wg2 speed is unknown, defaulting to 1000 [ 952.344854][ T1668] FAULT_INJECTION: forcing a failure. [ 952.344854][ T1668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.344891][ T1668] CPU: 0 UID: 0 PID: 1668 Comm: syz.3.7826 Not tainted syzkaller #0 PREEMPT(full) [ 952.344914][ T1668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 952.344938][ T1668] Call Trace: [ 952.344946][ T1668] [ 952.344956][ T1668] dump_stack_lvl+0xe8/0x150 [ 952.345001][ T1668] should_fail_ex+0x410/0x560 [ 952.345033][ T1668] _copy_from_user+0x2d/0xb0 [ 952.345060][ T1668] ___sys_sendmsg+0x1c6/0x360 [ 952.345087][ T1668] ? __lock_acquire+0x747/0x2de0 [ 952.345114][ T1668] ? __pfx____sys_sendmsg+0x10/0x10 [ 952.345185][ T1668] ? __fget_files+0x2a/0x420 [ 952.345213][ T1668] ? __fget_files+0x3a2/0x420 [ 952.345251][ T1668] __x64_sys_sendmsg+0x1b1/0x290 [ 952.345282][ T1668] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 952.345333][ T1668] do_syscall_64+0x166/0x520 [ 952.345358][ T1668] ? trace_irq_disable+0x3b/0x140 [ 952.345381][ T1668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.345406][ T1668] ? clear_bhb_loop+0x70/0xc0 [ 952.345451][ T1668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.345473][ T1668] RIP: 0033:0x7f822b99e159 [ 952.345495][ T1668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.345512][ T1668] RSP: 002b:00007f822c89d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 952.345538][ T1668] RAX: ffffffffffffffda RBX: 00007f822bc25fa0 RCX: 00007f822b99e159 [ 952.345554][ T1668] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 952.345568][ T1668] RBP: 00007f822c89d090 R08: 0000000000000000 R09: 0000000000000000 [ 952.345581][ T1668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.345595][ T1668] R13: 00007f822bc26038 R14: 00007f822bc25fa0 R15: 00007ffc642c8d08 [ 952.345630][ T1668] [ 952.654886][ T1678] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7829'. [ 952.721823][ T1680] netlink: 'syz.1.7830': attribute type 1 has an invalid length. [ 953.163611][ T1700] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7835'. [ 953.227615][ T1704] netlink: 'syz.2.7837': attribute type 2 has an invalid length. [ 953.261044][ T1709] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7833'. [ 953.828864][ T5617] Bluetooth: hci3: link tx timeout [ 953.829173][ T5617] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 953.838968][ T5617] Bluetooth: hci3: link tx timeout [ 953.838991][ T5617] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 953.839293][ T5617] Bluetooth: hci3: link tx timeout [ 953.839305][ T5617] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 953.839319][ T5617] Bluetooth: hci3: link tx timeout [ 953.839329][ T5617] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 953.957160][ T1734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.105452][ T1741] ovs-s!: entered promiscuous mode [ 954.137495][ T1741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7845'. [ 954.140670][ T1741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7845'. [ 954.285405][ T1756] FAULT_INJECTION: forcing a failure. [ 954.285405][ T1756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 954.285458][ T1756] CPU: 1 UID: 0 PID: 1756 Comm: syz.0.7850 Not tainted syzkaller #0 PREEMPT(full) [ 954.285482][ T1756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 954.285495][ T1756] Call Trace: [ 954.285504][ T1756] [ 954.285513][ T1756] dump_stack_lvl+0xe8/0x150 [ 954.285550][ T1756] should_fail_ex+0x410/0x560 [ 954.285579][ T1756] _copy_from_iter+0x1d3/0x1660 [ 954.285603][ T1756] ? __alloc_skb+0x27a/0x7a0 [ 954.285629][ T1756] ? __alloc_skb+0x27a/0x7a0 [ 954.285653][ T1756] ? __alloc_skb+0x27a/0x7a0 [ 954.285675][ T1756] ? __pfx__copy_from_iter+0x10/0x10 [ 954.285696][ T1756] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 954.285727][ T1756] ? __alloc_skb+0x27a/0x7a0 [ 954.285747][ T1756] ? __alloc_skb+0x27a/0x7a0 [ 954.285776][ T1756] ? netlink_sendmsg+0x650/0xb40 [ 954.285806][ T1756] ? skb_put+0x112/0x210 [ 954.285832][ T1756] netlink_sendmsg+0x6c0/0xb40 [ 954.285872][ T1756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 954.285910][ T1756] ? apparmor_socket_sendmsg+0x98/0x360 [ 954.285937][ T1756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 954.285965][ T1756] sock_sendmsg_nosec+0x13a/0x180 [ 954.286004][ T1756] ____sys_sendmsg+0x54e/0x850 [ 954.286037][ T1756] ? __pfx_____sys_sendmsg+0x10/0x10 [ 954.286081][ T1756] ? import_iovec+0x73/0xa0 [ 954.286110][ T1756] ___sys_sendmsg+0x2a5/0x360 [ 954.286134][ T1756] ? __lock_acquire+0x747/0x2de0 [ 954.286160][ T1756] ? __pfx____sys_sendmsg+0x10/0x10 [ 954.286226][ T1756] ? __fget_files+0x2a/0x420 [ 954.286252][ T1756] ? __fget_files+0x3a2/0x420 [ 954.286290][ T1756] __x64_sys_sendmsg+0x1b1/0x290 [ 954.286319][ T1756] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 954.286369][ T1756] do_syscall_64+0x166/0x520 [ 954.286392][ T1756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.286415][ T1756] ? clear_bhb_loop+0x70/0xc0 [ 954.286442][ T1756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.286464][ T1756] RIP: 0033:0x7fed1079e159 [ 954.286486][ T1756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.286504][ T1756] RSP: 002b:00007fed115d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 954.286530][ T1756] RAX: ffffffffffffffda RBX: 00007fed10a25fa0 RCX: 00007fed1079e159 [ 954.286546][ T1756] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 954.286561][ T1756] RBP: 00007fed115d9090 R08: 0000000000000000 R09: 0000000000000000 [ 954.286574][ T1756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.286588][ T1756] R13: 00007fed10a26038 R14: 00007fed10a25fa0 R15: 00007ffdb8602088 [ 954.286625][ T1756] [ 954.579142][ T1762] ip_tables: iptables: counters copy to user failed while replacing table [ 955.916995][ T5617] Bluetooth: hci3: command 0x0405 tx timeout [ 958.798876][ T1831] macsec1: entered promiscuous mode [ 959.257649][ T1847] netlink: 'syz.0.7865': attribute type 1 has an invalid length. [ 959.370562][ T1855] gretap2: entered allmulticast mode [ 959.386362][ T1855] bond13: (slave gretap2): making interface the new active one [ 959.387172][ T1855] bond13: (slave gretap2): Enslaving as an active interface with an up link [ 959.514918][ T5617] Bluetooth: hci3: command 0x0405 tx timeout [ 959.730204][ T1870] netlink: 'syz.1.7869': attribute type 10 has an invalid length. [ 959.736254][ T1870] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 959.738217][ T1870] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 959.797787][ T1863] lo speed is unknown, defaulting to 1000 [ 959.799716][ T1863] wg2 speed is unknown, defaulting to 1000 [ 960.071488][ T1880] tipc: Enabled bearer , priority 0 [ 960.072449][ T1880] syzkaller0: entered promiscuous mode [ 960.072472][ T1880] syzkaller0: entered allmulticast mode [ 960.198744][ T1880] tipc: Resetting bearer [ 960.219825][ T1875] tipc: Resetting bearer [ 960.330600][ T1875] tipc: Disabling bearer [ 960.538820][ T1906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7880'. [ 960.786615][ T1918] netlink: 'syz.0.7883': attribute type 1 has an invalid length. [ 960.861993][ T1923] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7884'. [ 960.941866][ T1928] ip_tables: iptables: counters copy to user failed while replacing table [ 960.962383][ T1928] tipc: Enabled bearer , priority 10 [ 961.106153][ T1936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7890'. [ 961.107498][ T1936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7890'. [ 961.111437][ T1936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7890'. [ 961.144803][ T1936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7890'. [ 961.178755][ T1939] xt_hashlimit: size too large, truncated to 1048576 [ 961.178779][ T1939] xt_hashlimit: max too large, truncated to 1048576 [ 961.444394][ T1950] netlink: 'syz.2.7894': attribute type 6 has an invalid length. [ 961.444410][ T1950] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7894'. [ 961.542118][ T1952] netlink: 'syz.4.7895': attribute type 10 has an invalid length. [ 961.542148][ T1952] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7895'. [ 961.773074][ T1958] netlink: 'syz.0.7897': attribute type 2 has an invalid length. [ 961.773103][ T1958] netlink: 'syz.0.7897': attribute type 2 has an invalid length. [ 961.773117][ T1958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7897'. [ 962.408908][ T1968] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7900'. [ 962.607677][ T1979] veth1_macvtap: entered promiscuous mode [ 962.611052][ T1979] macsec0: entered promiscuous mode [ 962.635951][ T1981] netlink: 'syz.2.7903': attribute type 1 has an invalid length. [ 962.659061][ T1981] 8021q: adding VLAN 0 to HW filter on device bond10 [ 963.624721][ T1996] lo speed is unknown, defaulting to 1000 [ 963.626022][ T1996] wg2 speed is unknown, defaulting to 1000 [ 963.819588][ T2001] bridge_slave_0: left allmulticast mode [ 963.819608][ T2001] bridge_slave_0: left promiscuous mode [ 963.819790][ T2001] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.822283][ T2001] bridge_slave_1: left allmulticast mode [ 963.822306][ T2001] bridge_slave_1: left promiscuous mode [ 963.822609][ T2001] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.878825][ T2001] bond0: (slave bond_slave_0): Releasing backup interface [ 963.881749][ T2001] bond_slave_0: left promiscuous mode [ 963.904851][ T2001] bond0: (slave bond_slave_1): Releasing backup interface [ 963.906100][ T2001] bond_slave_1: left promiscuous mode [ 963.928379][ T2001] team0: Port device team_slave_0 removed [ 963.930876][ T2001] team0: Port device team_slave_1 removed [ 963.931162][ T2001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.932203][ T2001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 963.948080][ T2001] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 964.219925][ T1942] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 964.648135][ T2023] netlink: 'syz.1.7915': attribute type 11 has an invalid length. [ 965.608925][ T2073] netlink: 'syz.2.7926': attribute type 1 has an invalid length. [ 965.719623][ T2076] __nla_validate_parse: 5 callbacks suppressed [ 965.719640][ T2076] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7927'. [ 966.059614][ T2087] ipip0: entered promiscuous mode [ 966.249335][ T2099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7934'. [ 968.873041][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 969.497969][ T2117] FAULT_INJECTION: forcing a failure. [ 969.497969][ T2117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 969.498009][ T2117] CPU: 0 UID: 0 PID: 2117 Comm: syz.4.7942 Not tainted syzkaller #0 PREEMPT(full) [ 969.498034][ T2117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 969.498047][ T2117] Call Trace: [ 969.498057][ T2117] [ 969.498067][ T2117] dump_stack_lvl+0xe8/0x150 [ 969.498103][ T2117] should_fail_ex+0x410/0x560 [ 969.498134][ T2117] _copy_to_user+0x31/0xb0 [ 969.498164][ T2117] copy_to_sockptr_offset+0x66/0xa0 [ 969.498191][ T2117] sk_getsockopt+0x2355/0x28b0 [ 969.498228][ T2117] ? __pfx_sk_getsockopt+0x10/0x10 [ 969.498260][ T2117] ? lock_acquire+0x115/0x350 [ 969.498284][ T2117] ? get_pid_task+0x20/0x1f0 [ 969.498351][ T2117] do_sock_getsockopt+0x2bd/0x7e0 [ 969.498387][ T2117] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 969.498431][ T2117] ? __fget_files+0x3a2/0x420 [ 969.498460][ T2117] ? __fget_files+0x2a/0x420 [ 969.498497][ T2117] __x64_sys_getsockopt+0x1a4/0x240 [ 969.498534][ T2117] do_syscall_64+0x166/0x520 [ 969.498556][ T2117] ? trace_irq_disable+0x3b/0x140 [ 969.498579][ T2117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.498600][ T2117] ? clear_bhb_loop+0x70/0xc0 [ 969.498628][ T2117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.498649][ T2117] RIP: 0033:0x7fa6e239e159 [ 969.498670][ T2117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.498688][ T2117] RSP: 002b:00007fa6e32bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 969.498790][ T2117] RAX: ffffffffffffffda RBX: 00007fa6e2625fa0 RCX: 00007fa6e239e159 [ 969.498809][ T2117] RDX: 000000000000001c RSI: 0000000000000001 RDI: 0000000000000003 [ 969.498824][ T2117] RBP: 00007fa6e32bb090 R08: 0000200000000080 R09: 0000000000000000 [ 969.498839][ T2117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.498853][ T2117] R13: 00007fa6e2626038 R14: 00007fa6e2625fa0 R15: 00007fff51c98fb8 [ 969.498893][ T2117] [ 969.536203][ T2115] block nbd4: Unsupported socket: should be TCP or UNIX. [ 969.884220][ T2129] netlink: 'syz.4.7946': attribute type 15 has an invalid length. [ 970.198080][ T32] audit: type=1800 audit(1789452194.943:18): pid=2148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7952" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1703 res=0 errno=0 [ 971.059269][ T2181] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 971.147808][ T2187] syzkaller0: entered promiscuous mode [ 971.147834][ T2187] syzkaller0: entered allmulticast mode [ 971.174547][ T2187] tipc: Enabled bearer , priority 0 [ 971.191279][ T2187] tipc: Resetting bearer [ 971.231635][ T2192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7965'. [ 971.334075][ T2186] tipc: Resetting bearer [ 971.400089][ T2186] tipc: Disabling bearer [ 971.676498][ T2211] netlink: 'syz.0.7970': attribute type 1 has an invalid length. [ 971.705101][ T2209] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7971'. [ 971.712656][ T2211] 8021q: adding VLAN 0 to HW filter on device bond15 [ 974.486995][ T2203] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 974.497395][ T2222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7973'. [ 974.738653][ T2237] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7977'. [ 974.798517][ T2240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7979'. [ 974.926148][ T2248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7982'. [ 975.136356][ T2244] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7980'. [ 975.749781][ T2286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7990'. [ 975.886258][ T2293] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7992'. [ 975.973540][ T2295] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7993'. [ 976.082065][ T2301] syzkaller0: entered promiscuous mode [ 976.082091][ T2301] syzkaller0: entered allmulticast mode [ 976.339776][ T2314] netlink: 'syz.3.8000': attribute type 1 has an invalid length. [ 976.507095][ T2314] bond14: (slave veth0_to_bond): making interface the new active one [ 976.522336][ T2314] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 976.560142][ T2317] macvlan0: entered promiscuous mode [ 976.560172][ T2317] macvlan0: entered allmulticast mode [ 976.560895][ T2317] bond14: entered promiscuous mode [ 976.560913][ T2317] veth0_to_bond: entered promiscuous mode [ 976.578148][ T2317] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 976.581896][ T2317] bond14: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 976.581996][ T2317] bond14: left promiscuous mode [ 976.582010][ T2317] veth0_to_bond: left promiscuous mode [ 976.973473][ T2336] __nla_validate_parse: 4 callbacks suppressed [ 976.973498][ T2336] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8004'. [ 977.391683][ T2355] siw: device registration error -23 [ 977.577305][ T2360] xt_connbytes: Forcing CT accounting to be enabled [ 978.402514][ T2366] bond15: option lacp_rate: invalid value (3) [ 978.418958][ T2366] bond15 (unregistering): Released all slaves [ 978.567689][ T2378] netlink: 112 bytes leftover after parsing attributes in process `syz.0.8016'. [ 978.623080][ T2369] syzkaller0: entered promiscuous mode [ 978.623111][ T2369] syzkaller0: entered allmulticast mode [ 978.821201][ T2384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8019'. [ 979.125366][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 982.889551][ T2384] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 983.163145][ T2417] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8024'. [ 983.366905][ T2426] netlink: 'syz.0.8026': attribute type 1 has an invalid length. [ 983.537503][ T2450] xt_hashlimit: size too large, truncated to 1048576 [ 983.763818][ T2451] netlink: 284 bytes leftover after parsing attributes in process `syz.3.8031'. [ 983.934090][ T2471] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8037'. [ 984.382388][ T2495] netlink: 'syz.0.8039': attribute type 1 has an invalid length. [ 984.493152][ T2495] 8021q: adding VLAN 0 to HW filter on device bond17 [ 984.580352][ T2510] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8044'. [ 984.639808][ T2513] syzkaller1: tun_chr_ioctl cmd 1074812117 [ 984.660977][ T2513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8045'. [ 984.660999][ T2513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 984.661013][ T2513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.662193][ T2513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 984.662216][ T2513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.664788][ T2513] batman_adv: batadv0: Removing interface: netdevsim0 [ 984.889933][ T2517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8046'. [ 985.064587][ T2526] netlink: 'syz.3.8049': attribute type 3 has an invalid length. [ 985.064675][ T2526] netlink: 'syz.3.8049': attribute type 3 has an invalid length. [ 985.064725][ T2526] netlink: 'syz.3.8049': attribute type 3 has an invalid length. [ 985.064769][ T2526] netlink: 'syz.3.8049': attribute type 3 has an invalid length. [ 985.064817][ T2526] netlink: 'syz.3.8049': attribute type 3 has an invalid length. [ 985.064862][ T2526] netlink: 'syz.3.8049': attribute type 3 has an invalid length. [ 985.064909][ T2526] netlink: 'syz.3.8049': attribute type 3 has an invalid length. [ 985.064955][ T2526] netlink: 'syz.3.8049': attribute type 3 has an invalid length. [ 985.069049][ T2529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8050'. [ 985.149104][ T2529] bond10: entered allmulticast mode [ 985.585291][ T2546] syzkaller0: entered promiscuous mode [ 985.585318][ T2546] syzkaller0: entered allmulticast mode [ 985.606962][ T2546] tipc: Enabled bearer , priority 0 [ 985.621398][ T2544] tipc: Resetting bearer [ 985.701019][ T2544] tipc: Disabling bearer [ 985.924013][ T6052] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 985.924087][ T6052] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 985.924123][ T6052] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 985.924157][ T6052] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 985.947031][ C1] TC_ACT_REPEAT abuse ? [ 986.268803][ T2563] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 986.280233][ T2563] bond11 (unregistering): Released all slaves [ 986.323327][ C1] TC_ACT_REPEAT abuse ? [ 986.339074][ C0] TC_ACT_REPEAT abuse ? [ 986.366761][ T2583] bridge0: port 1(vlan2) entered blocking state [ 986.366881][ T2583] bridge0: port 1(vlan2) entered disabled state [ 986.366974][ T2583] vlan2: entered allmulticast mode [ 986.366985][ T2583] geneve0: entered allmulticast mode [ 986.389340][ T2583] vlan2: entered promiscuous mode [ 986.389361][ T2583] geneve0: entered promiscuous mode [ 986.627784][ T2609] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8067'. [ 986.707145][ T2612] ip6gre2: entered promiscuous mode [ 986.707172][ T2612] ip6gre2: entered allmulticast mode [ 986.718923][T26202] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 986.722056][T26202] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 986.744440][T32403] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 986.808497][T32404] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 987.027601][ T2631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8073'. [ 987.029541][ T2631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8073'. [ 987.094369][ T2629] 8021q: adding VLAN 0 to HW filter on device bond11 [ 987.269502][ T2630] 8021q: adding VLAN 0 to HW filter on device bond11 [ 987.360499][ C0] TC_ACT_REPEAT abuse ? [ 987.364720][ C0] TC_ACT_REPEAT abuse ? [ 987.434488][T32403] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 987.563439][ C0] TC_ACT_REPEAT abuse ? [ 988.412420][ T2686] validate_nla: 32 callbacks suppressed [ 988.412445][ T2686] netlink: 'syz.2.8082': attribute type 1 has an invalid length. [ 988.412461][ T2686] __nla_validate_parse: 3 callbacks suppressed [ 988.412473][ T2686] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8082'. [ 988.412489][ T2686] netlink: 'syz.2.8082': attribute type 1 has an invalid length. [ 988.807784][ T2696] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8085'. [ 988.864195][ T2698] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8085'. [ 988.867460][ T2696] veth1_to_team: entered promiscuous mode [ 988.868306][ T2696] gretap0: entered promiscuous mode [ 988.889652][ T2696] debugfs: 'hsr1' already exists in 'hsr' [ 988.889677][ T2696] Cannot create hsr debugfs directory [ 988.889697][ T2696] hsr1: entered promiscuous mode [ 989.380500][ T2728] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8090'. [ 989.453948][ T2729] netlink: 'syz.1.8091': attribute type 1 has an invalid length. [ 989.570285][ T2729] 8021q: adding VLAN 0 to HW filter on device bond12 [ 989.814533][ T2750] syzkaller0: entered promiscuous mode [ 989.814563][ T2750] syzkaller0: entered allmulticast mode [ 989.819611][ T2750] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8097'. [ 989.927156][ T2752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8098'. [ 989.935462][ T2752] netlink: 424 bytes leftover after parsing attributes in process `syz.4.8098'. [ 989.935503][ T2752] netlink: 424 bytes leftover after parsing attributes in process `syz.4.8098'. [ 990.338868][ T2771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8107'. [ 990.339315][ T2773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8107'. [ 990.735452][ T2801] 0ªX¹¦Dö»: renamed from gretap0 [ 990.737271][ T2801] 0ªX¹¦Dö»: entered allmulticast mode [ 991.113044][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 991.195728][ C0] TC_ACT_REPEAT abuse ? [ 991.246689][ T2834] netlink: 'syz.1.8119': attribute type 1 has an invalid length. [ 991.650169][ T2849] netlink: 'syz.1.8123': attribute type 1 has an invalid length. [ 991.691615][ T2849] bond13: entered promiscuous mode [ 991.692107][ T2849] 8021q: adding VLAN 0 to HW filter on device bond13 [ 991.796442][ T2849] 8021q: adding VLAN 0 to HW filter on device bond13 [ 991.796968][ T2849] bond13: (slave ipip0): The slave device specified does not support setting the MAC address [ 991.796992][ T2849] bond13: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 991.834774][ T2849] bond13: (slave ipip0): making interface the new active one [ 991.834801][ T2849] ipip0: entered promiscuous mode [ 991.836798][ T2849] bond13: (slave ipip0): Enslaving as an active interface with an up link [ 991.859323][ T2860] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 991.859354][ T2860] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 992.684587][ T2893] ip6tnl2: entered allmulticast mode [ 992.689872][ T6060] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 992.711545][ T6060] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 992.713267][T32426] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 992.856595][T32426] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 992.929246][ T2908] netlink: 'syz.2.8134': attribute type 1 has an invalid length. [ 993.033216][ T2910] netlink: 'syz.2.8134': attribute type 21 has an invalid length. [ 993.187171][T32426] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 993.190138][ T2916] bond0: option resend_igmp: invalid value (811597834) [ 993.190166][ T2916] bond0: option resend_igmp: allowed values 0 - 255 [ 993.191379][ T2925] bond0: option resend_igmp: invalid value (811597834) [ 993.191396][ T2925] bond0: option resend_igmp: allowed values 0 - 255 [ 993.247465][ T2908] bridge3: entered promiscuous mode [ 993.283328][ T2928] bridge4: entered promiscuous mode [ 993.576917][ T2947] netlink: 'syz.2.8141': attribute type 1 has an invalid length. [ 994.707827][ T3001] netlink: 'syz.4.8150': attribute type 1 has an invalid length. [ 994.925102][ T3007] netlink: 'syz.3.8153': attribute type 2 has an invalid length. [ 995.420278][ T3020] tap0: tun_chr_ioctl cmd 2148553947 [ 995.782429][ T3028] __nla_validate_parse: 11 callbacks suppressed [ 995.782456][ T3028] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8160'. [ 995.823977][ T3033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8162'. [ 995.824024][ T3033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8162'. [ 995.873953][ T3041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8162'. [ 995.874001][ T3041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8162'. [ 995.922297][ T3042] syzkaller0: entered promiscuous mode [ 995.922324][ T3042] syzkaller0: entered allmulticast mode [ 996.388613][ T3051] tipc: Enabling of bearer rejected, failed to enable media [ 996.403241][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 997.298586][ T3086] lo speed is unknown, defaulting to 1000 [ 997.315216][ T3085] lo speed is unknown, defaulting to 1000 [ 997.345453][ T3085] wg2 speed is unknown, defaulting to 1000 [ 997.370622][ T3086] wg2 speed is unknown, defaulting to 1000 [ 997.546614][ T3101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8180'. [ 997.652083][ T3103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8182'. [ 997.652109][ T3103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8182'. [ 997.725605][ T3107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8181'. [ 997.726864][ T3109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8182'. [ 998.146924][ T3121] netlink: 'syz.2.8185': attribute type 1 has an invalid length. [ 998.151781][ T3118] 8021q: adding VLAN 0 to HW filter on device bond14 [ 998.962643][ T3141] syzkaller0: left promiscuous mode [ 998.965499][ T3141] syzkaller0: left allmulticast mode [ 999.097590][ T3150] pim6reg1: entered promiscuous mode [ 999.097617][ T3150] pim6reg1: entered allmulticast mode [ 999.329827][ T3154] bridge3: entered promiscuous mode [ 999.591548][ T3159] netlink: 'syz.2.8196': attribute type 2 has an invalid length. [ 999.595395][ C0] TC_ACT_REPEAT abuse ? [ 999.753297][ T3166] Dead loop on virtual device bond13 (net 796), fix it urgently! [ 999.776376][ T3166] Dead loop on virtual device bond13 (net 796), fix it urgently! [ 999.779598][ T3166] Dead loop on virtual device bond13 (net 796), fix it urgently! [ 999.804586][ T3166] Dead loop on virtual device bond13 (net 796), fix it urgently! [ 999.808721][ T3166] Dead loop on virtual device bond13 (net 796), fix it urgently! [ 999.809537][ T3166] Dead loop on virtual device bond13 (net 796), fix it urgently! [ 999.811942][ T3166] Dead loop on virtual device bond13 (net 796), fix it urgently! [ 999.812813][ T3166] Dead loop on virtual device bond13 (net 796), fix it urgently! [ 999.856195][ T3166] Dead loop on virtual device bond13 (net 796), fix it urgently! [ 1000.232920][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1000.390284][ T3196] netlink: 'syz.0.8202': attribute type 1 has an invalid length. [ 1000.831015][ T3205] __nla_validate_parse: 5 callbacks suppressed [ 1000.831040][ T3205] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8205'. [ 1000.851623][ T3208] vlan0: entered allmulticast mode [ 1000.851646][ T3208] bond0: entered allmulticast mode [ 1001.339643][ T3245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8210'. [ 1001.355761][ T3241] netlink: 27 bytes leftover after parsing attributes in process `syz.3.8211'. [ 1001.359900][ T3245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8210'. [ 1001.387745][ T3249] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8212'. [ 1001.388638][ T3245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8210'. [ 1001.393192][ T3245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8210'. [ 1001.437954][ T3245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8210'. [ 1001.463652][ T3245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8210'. [ 1001.483976][ T3245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8210'. [ 1002.041775][ T3268] netlink: 'syz.2.8218': attribute type 1 has an invalid length. [ 1002.158025][ T3273] sctp: [Deprecated]: syz.1.8219 (pid 3273) Use of int in maxseg socket option. [ 1002.158025][ T3273] Use struct sctp_assoc_value instead [ 1002.158065][ T3273] sctp: [Deprecated]: syz.1.8219 (pid 3273) Use of int in maxseg socket option. [ 1002.158065][ T3273] Use struct sctp_assoc_value instead [ 1002.158091][ T3273] sctp: [Deprecated]: syz.1.8219 (pid 3273) Use of int in maxseg socket option. [ 1002.158091][ T3273] Use struct sctp_assoc_value instead [ 1002.158117][ T3273] sctp: [Deprecated]: syz.1.8219 (pid 3273) Use of int in maxseg socket option. [ 1002.158117][ T3273] Use struct sctp_assoc_value instead [ 1002.158143][ T3273] sctp: [Deprecated]: syz.1.8219 (pid 3273) Use of int in maxseg socket option. [ 1002.158143][ T3273] Use struct sctp_assoc_value instead [ 1002.158169][ T3273] sctp: [Deprecated]: syz.1.8219 (pid 3273) Use of int in maxseg socket option. [ 1002.158169][ T3273] Use struct sctp_assoc_value instead [ 1002.158196][ T3273] sctp: [Deprecated]: syz.1.8219 (pid 3273) Use of int in maxseg socket option. [ 1002.158196][ T3273] Use struct sctp_assoc_value instead [ 1002.158221][ T3273] sctp: [Deprecated]: syz.1.8219 (pid 3273) Use of int in maxseg socket option. [ 1002.158221][ T3273] Use struct sctp_assoc_value instead [ 1002.158246][ T3273] sctp: [Deprecated]: syz.1.8219 (pid 3273) Use of int in maxseg socket option. [ 1002.158246][ T3273] Use struct sctp_assoc_value instead [ 1002.158272][ T3273] sctp: [Deprecated]: syz.1.8219 (pid 3273) Use of int in maxseg socket option. [ 1002.158272][ T3273] Use struct sctp_assoc_value instead [ 1002.469429][ T3283] netlink: 'syz.0.8222': attribute type 16 has an invalid length. [ 1002.469536][ T3283] netlink: 'syz.0.8222': attribute type 3 has an invalid length. [ 1002.511629][ T3281] xt_hashlimit: size too large, truncated to 1048576 [ 1002.565444][ T3285] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1004.039520][ T3341] lo speed is unknown, defaulting to 1000 [ 1004.041495][ T3341] wg2 speed is unknown, defaulting to 1000 [ 1004.072905][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1005.194287][ C0] net_ratelimit: 1018 callbacks suppressed [ 1005.194315][ C0] TC_ACT_REPEAT abuse ? [ 1005.399706][ T3390] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1005.399837][ T3390] syzkaller1: linktype set to 769 [ 1005.680183][ T3401] gre0: left allmulticast mode [ 1005.848946][ T3407] syzkaller0: entered promiscuous mode [ 1005.849013][ T3407] syzkaller0: entered allmulticast mode [ 1005.873768][ C1] TC_ACT_REPEAT abuse ? [ 1006.204734][ T3421] Cannot find del_set index 2 as target [ 1006.233211][ T3429] __nla_validate_parse: 34 callbacks suppressed [ 1006.233237][ T3429] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8261'. [ 1006.250948][ T3421] lo speed is unknown, defaulting to 1000 [ 1006.257814][ T3421] wg2 speed is unknown, defaulting to 1000 [ 1006.355596][ C1] TC_ACT_REPEAT abuse ? [ 1006.356098][ C1] TC_ACT_REPEAT abuse ? [ 1006.875456][ C1] TC_ACT_REPEAT abuse ? [ 1007.201651][ C1] TC_ACT_REPEAT abuse ? [ 1007.209056][ T3462] IPv6: NLM_F_CREATE should be specified when creating new route [ 1007.569677][ T3471] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8273'. [ 1007.694743][ T3462] netlink: 208 bytes leftover after parsing attributes in process `syz.1.8270'. [ 1007.694792][ T3462] netlink: 208 bytes leftover after parsing attributes in process `syz.1.8270'. [ 1007.807592][ T3477] No such timeout policy "syz1" [ 1007.816906][ T3477] openvswitch: netlink: VXLAN extension 248 out of range max 1 [ 1007.838873][ T32] audit: type=1804 audit(1789452232.583:19): pid=3477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8275" name="/newroot/553/cgroup.controllers" dev="tmpfs" ino=2834 res=1 errno=0 [ 1007.838939][ T32] audit: type=1800 audit(1789452232.583:20): pid=3477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8275" name="cgroup.controllers" dev="tmpfs" ino=2834 res=0 errno=0 [ 1007.854861][ T3464] bond15: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1007.871864][ T3464] bond15 (unregistering): Released all slaves [ 1008.047494][ T3473] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 1008.047526][ T3473] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 1008.262276][ T3493] x_tables: duplicate underflow at hook 3 [ 1008.291605][ T3493] x_tables: duplicate underflow at hook 3 [ 1008.486448][ T3485] syzkaller0: entered promiscuous mode [ 1008.486481][ T3485] syzkaller0: entered allmulticast mode [ 1008.488029][ T3488] sctp: [Deprecated]: syz.4.8277 (pid 3488) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1008.488029][ T3488] Use struct sctp_sack_info instead [ 1008.489703][ T3502] netlink: 'syz.1.8278': attribute type 4 has an invalid length. [ 1010.699521][ T3512] FAULT_INJECTION: forcing a failure. [ 1010.699521][ T3512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1010.699558][ T3512] CPU: 0 UID: 0 PID: 3512 Comm: syz.3.8282 Not tainted syzkaller #0 PREEMPT(full) [ 1010.699581][ T3512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1010.699594][ T3512] Call Trace: [ 1010.699602][ T3512] [ 1010.699612][ T3512] dump_stack_lvl+0xe8/0x150 [ 1010.699651][ T3512] should_fail_ex+0x410/0x560 [ 1010.699679][ T3512] _copy_from_user+0x2d/0xb0 [ 1010.699705][ T3512] __sys_connect+0x155/0x450 [ 1010.699732][ T3512] ? __pfx___sys_connect+0x10/0x10 [ 1010.699781][ T3512] ? __pfx_ksys_write+0x10/0x10 [ 1010.699821][ T3512] __x64_sys_connect+0x7a/0x90 [ 1010.699844][ T3512] do_syscall_64+0x166/0x520 [ 1010.699867][ T3512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.699886][ T3512] ? clear_bhb_loop+0x70/0xc0 [ 1010.699911][ T3512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.699931][ T3512] RIP: 0033:0x7f822b99e159 [ 1010.699952][ T3512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.699969][ T3512] RSP: 002b:00007f822c89d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1010.700118][ T3512] RAX: ffffffffffffffda RBX: 00007f822bc25fa0 RCX: 00007f822b99e159 [ 1010.700135][ T3512] RDX: 0000000000000014 RSI: 0000200000000200 RDI: 0000000000000004 [ 1010.700148][ T3512] RBP: 00007f822c89d090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.700161][ T3512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.700173][ T3512] R13: 00007f822bc26038 R14: 00007f822bc25fa0 R15: 00007ffc642c8d08 [ 1010.700209][ T3512] [ 1012.974389][ T3524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8286'. [ 1013.171522][ T3534] netlink: 'syz.4.8292': attribute type 9 has an invalid length. [ 1013.190488][ T3534] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8292'. [ 1013.233074][ T3534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8292'. [ 1013.277445][ T3535] lo speed is unknown, defaulting to 1000 [ 1013.286343][ T3535] wg2 speed is unknown, defaulting to 1000 [ 1013.329391][ T3542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8293'. [ 1013.571294][ T3549] debugfs: '.�PÑè'óG!DEÒSˆ' already exists in 'ieee80211' [ 1014.000293][ T3572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8301'. [ 1014.040186][ T3565] netlink: 95 bytes leftover after parsing attributes in process `syz.2.8299'. [ 1014.050695][ T3565] ip_tables: iptables: counters copy to user failed while replacing table [ 1014.078869][ T3571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8301'. [ 1014.079045][ T3572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8301'. [ 1014.711630][ T3587] lo speed is unknown, defaulting to 1000 [ 1014.780207][ T3595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8305'. [ 1014.817845][ T3597] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8306'. [ 1014.941142][ T3587] wg2 speed is unknown, defaulting to 1000 [ 1015.129221][ T3607] netlink: 'syz.4.8309': attribute type 1 has an invalid length. [ 1015.220398][ T3610] macvtap1: entered allmulticast mode [ 1015.407186][ T3607] bond15: (slave bridge3): making interface the new active one [ 1015.409089][ T3607] bond15: (slave bridge3): Enslaving as an active interface with an up link [ 1017.548693][ T3701] netlink: Conntrack attr has 8 unknown bytes [ 1017.548823][ T3701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1017.678869][ T3697] IPVS: set_ctl: invalid protocol: 25 10.1.1.0:20001 [ 1017.748373][ T3685] sit2: entered promiscuous mode [ 1017.891380][ T3720] pim6reg: entered allmulticast mode [ 1017.900742][ T3718] pim6reg: left allmulticast mode [ 1017.936963][ T3722] mac80211_hwsim hwsim56 wlan0: entered promiscuous mode [ 1017.936992][ T3722] mac80211_hwsim hwsim56 wlan0: entered allmulticast mode [ 1017.937156][ T3722] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1017.985750][ T3723] __nla_validate_parse: 6 callbacks suppressed [ 1017.985772][ T3723] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8333'. [ 1018.005316][ T3723] sctp: [Deprecated]: syz.3.8333 (pid 3723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1018.005316][ T3723] Use struct sctp_sack_info instead [ 1018.115177][ T3728] lo speed is unknown, defaulting to 1000 [ 1018.120572][ T3728] wg2 speed is unknown, defaulting to 1000 [ 1018.153202][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1018.193865][ T3733] netlink: 'syz.1.8346': attribute type 2 has an invalid length. [ 1018.193893][ T3733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8346'. [ 1018.466704][ T3745] IPVS: Unknown mcast interface: vcan0 [ 1018.705108][ T3755] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8352'. [ 1018.731741][ T3757] netlink: Conntrack attr has 8 unknown bytes [ 1018.731785][ T3757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1018.831887][ T3762] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8353'. [ 1019.260954][ T3775] lo speed is unknown, defaulting to 1000 [ 1019.295077][ T3775] wg2 speed is unknown, defaulting to 1000 [ 1020.074919][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1020.311971][ T3820] syzkaller0: entered promiscuous mode [ 1020.311989][ T3820] syzkaller0: entered allmulticast mode [ 1021.804840][ T3762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1022.199192][ T3835] netlink: Conntrack attr has 8 unknown bytes [ 1022.199235][ T3835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1022.749042][ T3868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8376'. [ 1023.150424][ T3890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8379'. [ 1023.222317][ T3874] gre0: left promiscuous mode [ 1023.269034][ T3874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.271913][ T3874] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.297748][ T3874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1023.341833][ T3894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8381'. [ 1023.359346][ T3874] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1023.359387][ T3874] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1023.389155][ T3874] veth1_vlan: left promiscuous mode [ 1023.390579][ T3874] veth0_vlan: left promiscuous mode [ 1023.406242][ T3874] veth0_vlan: entered promiscuous mode [ 1023.410145][ T3874] veth1_vlan: entered promiscuous mode [ 1023.439180][ T3874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1023.439890][ T3874] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1023.440861][ T3874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1023.442305][ T3874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1023.484446][ T3874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1023.487735][ T3874] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1023.487780][ T3874] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1023.488158][ T3874] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1023.489106][ T3874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1023.490928][ T3874] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1023.492577][ T3874] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1023.529306][ T3874] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1023.530700][ T3874] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1023.534710][ T3874] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1023.536504][ T3874] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1023.556698][ T3874] mac80211_hwsim hwsim54 wlan0: entered promiscuous mode [ 1023.579909][ T3874] ip6gre1: left promiscuous mode [ 1023.580803][ T3874] bond8: left promiscuous mode [ 1023.595941][ T3874] macvlan3: left promiscuous mode [ 1023.595968][ T3874] bond9: left promiscuous mode [ 1023.605488][ T3874] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1023.607165][ T3874] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1023.608148][ T3874] bridge3: left promiscuous mode [ 1023.610399][ T3874] bridge4: left promiscuous mode [ 1023.629823][ T3874] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1023.652066][ T3874] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1023.654783][ T3874] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1023.727938][ T3881] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1023.782951][ T3881] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1023.784902][ T3881] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1023.835556][ T3881] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1023.837929][ T3881] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1023.865885][T32426] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1023.916542][ T205] bond6: (slave bridge2): link status up again after 0 ms [ 1023.925225][ T3881] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1023.936176][T32395] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1023.941181][ T3881] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1023.950417][ T13] bond6: (slave bridge2): link status up again after 0 ms [ 1023.959349][ T3881] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1023.965584][T26202] bond6: (slave bridge2): link status up again after 0 ms [ 1023.966272][ T3881] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1023.983507][ T6052] bond6: (slave bridge2): link status up again after 0 ms [ 1023.995211][ T3881] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1024.013451][ T205] bond6: (slave bridge2): link status up again after 0 ms [ 1024.036465][ T6071] bond6: (slave bridge2): link status up again after 0 ms [ 1024.039891][ T3881] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 1024.053518][T32395] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1024.065144][ T6052] bond6: (slave bridge2): link status up again after 0 ms [ 1024.134146][T32403] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1024.353972][T32426] openvswitch: cpu_id mismatch with handler threads [ 1024.360910][ T6087] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1024.364241][T26202] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.368233][T26202] bond13: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1024.382274][T26202] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.382375][T26202] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.382408][T26202] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.448016][ T6087] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1024.663051][ T3919] netlink: 'syz.0.8388': attribute type 1 has an invalid length. [ 1024.663077][ T3919] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8388'. [ 1024.663095][ T3919] NCSI netlink: No device for ifindex 0 [ 1024.793849][T32426] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1024.873475][T32395] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1025.203376][T32430] openvswitch: cpu_id mismatch with handler threads [ 1025.462071][ T3928] netlink: 'syz.1.8390': attribute type 7 has an invalid length. [ 1025.686315][ T3933] lo speed is unknown, defaulting to 1000 [ 1025.688635][ T3933] wg2 speed is unknown, defaulting to 1000 [ 1026.737304][ T3974] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8405'. [ 1026.762628][ T3974] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8405'. [ 1026.796171][ T3974] veth1_to_team: entered promiscuous mode [ 1026.801627][ T3974] veth1_to_team: left promiscuous mode [ 1027.243060][ T6052] net_ratelimit: 24 callbacks suppressed [ 1027.243086][ T6052] bond6: (slave bridge2): failed to get link speed/duplex [ 1027.553006][T26202] bond6: (slave bridge2): failed to get link speed/duplex [ 1027.576028][ T3995] netlink: 'syz.1.8410': attribute type 29 has an invalid length. [ 1027.663994][ T6052] bond6: (slave bridge2): failed to get link speed/duplex [ 1027.674706][ T32] audit: type=1804 audit(1789452252.413:21): pid=3998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8411" name="/newroot/435/cgroup.controllers" dev="tmpfs" ino=2245 res=1 errno=0 [ 1027.674770][ T32] audit: type=1800 audit(1789452252.423:22): pid=3998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8411" name="cgroup.controllers" dev="tmpfs" ino=2245 res=0 errno=0 [ 1027.707055][ T32] audit: type=1800 audit(1789452252.423:23): pid=3998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8411" name="cgroup.controllers" dev="tmpfs" ino=2245 res=0 errno=0 [ 1027.707117][ T32] audit: type=1800 audit(1789452252.423:24): pid=3998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8411" name="cgroup.controllers" dev="tmpfs" ino=2245 res=0 errno=0 [ 1027.707167][ T32] audit: type=1800 audit(1789452252.423:25): pid=3998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8411" name="cgroup.controllers" dev="tmpfs" ino=2245 res=0 errno=0 [ 1027.707214][ T32] audit: type=1800 audit(1789452252.423:26): pid=3998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8411" name="cgroup.controllers" dev="tmpfs" ino=2245 res=0 errno=0 [ 1027.707261][ T32] audit: type=1800 audit(1789452252.423:27): pid=3998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8411" name="cgroup.controllers" dev="tmpfs" ino=2245 res=0 errno=0 [ 1027.707308][ T32] audit: type=1800 audit(1789452252.423:28): pid=3998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8411" name="cgroup.controllers" dev="tmpfs" ino=2245 res=0 errno=0 [ 1027.707354][ T32] audit: type=1800 audit(1789452252.423:29): pid=3998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8411" name="cgroup.controllers" dev="tmpfs" ino=2245 res=0 errno=0 [ 1027.707399][ T32] audit: type=1800 audit(1789452252.423:30): pid=3998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8411" name="cgroup.controllers" dev="tmpfs" ino=2245 res=0 errno=0 [ 1027.949428][ T4000] pimreg9: entered allmulticast mode [ 1027.963711][ T6087] bond6: (slave bridge2): failed to get link speed/duplex [ 1028.073435][ T6079] bond6: (slave bridge2): failed to get link speed/duplex [ 1028.197989][ T4018] netlink: 'syz.4.8414': attribute type 1 has an invalid length. [ 1028.291262][ T4018] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1028.330061][ T4018] netlink: 'syz.4.8414': attribute type 1 has an invalid length. [ 1028.384469][ T4023] bond16: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1028.393382][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1028.428620][ T6087] bond6: (slave bridge2): failed to get link speed/duplex [ 1028.553271][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1028.578083][ T4029] xt_CT: No such helper "snmp_trap" [ 1028.584164][ T6052] bond6: (slave bridge2): failed to get link speed/duplex [ 1028.591141][ T5617] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 1028.591188][ T5617] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1028.709418][ T6079] bond6: (slave bridge2): failed to get link speed/duplex [ 1028.814460][ T6087] bond6: (slave bridge2): failed to get link speed/duplex [ 1028.926436][ T6079] bond6: (slave bridge2): failed to get link speed/duplex [ 1029.324038][ T4069] syzkaller0: entered promiscuous mode [ 1029.324065][ T4069] syzkaller0: entered allmulticast mode [ 1029.807145][ T4081] syzkaller0: entered promiscuous mode [ 1029.807175][ T4081] syzkaller0: entered allmulticast mode [ 1030.040473][ T4093] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8440'. [ 1030.189681][ T4102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8438'. [ 1030.437730][ T4110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8443'. [ 1030.437757][ T4110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8443'. [ 1031.440283][ T4118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8445'. [ 1031.560994][ T4120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8446'. [ 1034.480244][ T4091] pim6reg: entered allmulticast mode [ 1034.480582][ T4104] pim6reg: left allmulticast mode [ 1034.512453][ T4109] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 1034.522870][ T205] net_ratelimit: 7 callbacks suppressed [ 1034.522898][ T205] bond6: (slave bridge2): failed to get link speed/duplex [ 1034.633071][ T205] bond6: (slave bridge2): failed to get link speed/duplex [ 1034.742956][T13691] bond6: (slave bridge2): failed to get link speed/duplex [ 1034.767840][ T4132] netlink: 'syz.2.8450': attribute type 1 has an invalid length. [ 1034.767867][ T4132] netlink: 200 bytes leftover after parsing attributes in process `syz.2.8450'. [ 1034.767884][ T4132] netlink: 'syz.2.8450': attribute type 1 has an invalid length. [ 1034.767897][ T4132] netlink: 29 bytes leftover after parsing attributes in process `syz.2.8450'. [ 1034.831679][ T4130] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8449'. [ 1034.893044][ T6087] bond6: (slave bridge2): failed to get link speed/duplex [ 1035.002942][ T205] bond6: (slave bridge2): failed to get link speed/duplex [ 1035.173172][ T6071] bond6: (slave bridge2): failed to get link speed/duplex [ 1035.211628][ T4139] netlink: 'syz.0.8452': attribute type 11 has an invalid length. [ 1035.406175][T13691] bond6: (slave bridge2): failed to get link speed/duplex [ 1035.454898][ T4150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8456'. [ 1035.454928][ T4150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8456'. [ 1035.454954][ T4150] netlink: 'syz.3.8456': attribute type 6 has an invalid length. [ 1035.455764][ T4150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8456'. [ 1035.455783][ T4150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8456'. [ 1035.455802][ T4150] netlink: 'syz.3.8456': attribute type 6 has an invalid length. [ 1035.526416][ T6060] bond6: (slave bridge2): failed to get link speed/duplex [ 1035.635614][ T205] bond6: (slave bridge2): failed to get link speed/duplex [ 1035.671059][ T4155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1035.743806][ T6060] bond6: (slave bridge2): failed to get link speed/duplex [ 1035.750554][ T4157] syzkaller0: left promiscuous mode [ 1035.750580][ T4157] syzkaller0: left allmulticast mode [ 1035.912530][ T4161] netlink: 10184 bytes leftover after parsing attributes in process `syz.1.8459'. [ 1035.912563][ T4161] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8459'. [ 1036.072966][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1037.353607][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1037.375827][ T4199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8468'. [ 1037.723764][ T4204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.725110][ T4204] dummy0: left promiscuous mode [ 1037.803358][ T4204] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1037.849784][ T4204] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1037.866260][ T4204] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1037.878889][ T4204] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1037.880981][ T4204] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1037.882506][ T4204] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1037.886017][ T4204] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1037.889704][ T4204] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1037.891530][ T4204] geneve2: left promiscuous mode [ 1037.900675][ T4204] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1037.917592][ T4204] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1037.949767][ T4204] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1037.956312][ T4204] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1037.963881][ T4204] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1037.987875][ T4204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.989497][ T4204] gtp0: left promiscuous mode [ 1038.000307][ T4204] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1038.006997][ T4204] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1038.008503][ T4204] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 1038.008528][ T4204] hsr1: Slave B (00ªX¹¦Dö») is not up; please bring it up to get a fully working HSR network [ 1038.008641][ T4204] hsr1: left promiscuous mode [ 1038.055377][ T4204] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1038.061660][ T4204] bond15: entered allmulticast mode [ 1038.061683][ T4204] bridge3: entered allmulticast mode [ 1038.093763][ T4204] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1038.096383][ T4204] bridge3: entered promiscuous mode [ 1038.146562][ T6071] bond16: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 1038.186742][ T6071] bond16: (slave veth0_to_bond): making interface the new active one [ 1038.265831][ T6071] bond16: active interface up! [ 1038.269618][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.269702][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.269750][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.664167][ T6052] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.768435][ T6052] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1038.768912][ T6052] bond1: (slave veth3): making interface the new active one [ 1038.826078][ T6052] bond1: active interface up! [ 1038.880501][ T4239] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8478'. [ 1038.927660][ T4254] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8481'. [ 1039.127518][ T4261] netlink: 'syz.0.8484': attribute type 1 has an invalid length. [ 1039.158286][ T4264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8483'. [ 1039.534211][ T6087] net_ratelimit: 12 callbacks suppressed [ 1039.534238][ T6087] bond6: (slave bridge2): failed to get link speed/duplex [ 1039.743563][ T6087] bond6: (slave bridge2): failed to get link speed/duplex [ 1039.873387][ T6071] bond6: (slave bridge2): failed to get link speed/duplex [ 1039.995963][ T6071] bond6: (slave bridge2): failed to get link speed/duplex [ 1040.116905][ T6052] bond6: (slave bridge2): failed to get link speed/duplex [ 1040.225919][ T6052] bond6: (slave bridge2): failed to get link speed/duplex [ 1040.414033][ T6052] bond6: (slave bridge2): failed to get link speed/duplex [ 1040.525723][ T6079] bond6: (slave bridge2): failed to get link speed/duplex [ 1040.561053][ T4320] __nla_validate_parse: 4 callbacks suppressed [ 1040.561076][ T4320] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8508'. [ 1040.634425][ T6087] bond6: (slave bridge2): failed to get link speed/duplex [ 1040.654041][ T4320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8508'. [ 1040.712506][ T4320] netlink: 'syz.1.8508': attribute type 10 has an invalid length. [ 1040.712536][ T4320] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8508'. [ 1040.748453][ T6052] bond6: (slave bridge2): failed to get link speed/duplex [ 1041.426996][ T4356] xt_hashlimit: size too large, truncated to 1048576 [ 1041.810376][ T4371] netlink: 'syz.4.8518': attribute type 1 has an invalid length. [ 1041.890935][ T4371] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1041.900460][ T4367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8521'. [ 1042.266121][ T4395] netlink: 10184 bytes leftover after parsing attributes in process `syz.1.8526'. [ 1042.266152][ T4395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8526'. [ 1042.733072][ T4418] x_tables: duplicate entry at hook 2 [ 1042.756808][ T4418] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20000 [ 1042.891828][ T4428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8538'. [ 1043.128270][ T4438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1043.307944][ T4447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8544'. [ 1043.307972][ T4447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8544'. [ 1043.307996][ T4447] netlink: 'syz.1.8544': attribute type 18 has an invalid length. [ 1043.426695][ T4336] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 1043.431445][ T4336] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 1043.434575][ T6076] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 1043.438096][ T4338] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 1043.626468][ T4458] ip6t_frag: unknown flags 4 [ 1044.087083][ T4474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8550'. [ 1044.148490][ T4476] netlink: 'syz.3.8551': attribute type 83 has an invalid length. [ 1044.152070][ T4472] xt_hashlimit: size too large, truncated to 1048576 [ 1044.195698][ T4480] netlink: 'syz.1.8549': attribute type 12 has an invalid length. [ 1044.256585][ T4480] netlink: 'syz.1.8549': attribute type 12 has an invalid length. [ 1044.605879][ T6071] net_ratelimit: 31 callbacks suppressed [ 1044.605905][ T6071] bond6: (slave bridge2): failed to get link speed/duplex [ 1044.773590][ T205] bond6: (slave bridge2): failed to get link speed/duplex [ 1044.903807][T19734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1044.911426][T19734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1044.924519][ T6071] bond6: (slave bridge2): failed to get link speed/duplex [ 1044.942576][T19734] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1044.951348][T19734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1044.952077][T19734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1045.037371][ T4507] bond6: (slave bridge2): failed to get link speed/duplex [ 1045.142874][ T6058] bond6: (slave bridge2): failed to get link speed/duplex [ 1045.179459][ T4512] ip_tables: iptables: counters copy to user failed while replacing table [ 1045.715152][ T6058] bond6: (slave bridge2): failed to get link speed/duplex [ 1045.827803][ T6052] bond6: (slave bridge2): failed to get link speed/duplex [ 1046.140299][ T13] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1046.141910][ T13] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.223135][ T4555] bond6: (slave bridge2): failed to get link speed/duplex [ 1046.439100][ T4572] netlink: 'syz.0.8567': attribute type 1 has an invalid length. [ 1046.447004][ T4574] __nla_validate_parse: 8 callbacks suppressed [ 1046.447024][ T4574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8569'. [ 1046.468801][ T13] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1046.468841][ T13] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.483907][ T6071] bond6: (slave bridge2): failed to get link speed/duplex [ 1046.707125][ T13] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1046.707166][ T13] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.747431][ T4577] lo speed is unknown, defaulting to 1000 [ 1046.778878][ T4577] wg2 speed is unknown, defaulting to 1000 [ 1046.818135][ T13] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1046.818164][ T13] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.848803][ T4500] lo speed is unknown, defaulting to 1000 [ 1046.882091][ T4500] wg2 speed is unknown, defaulting to 1000 [ 1047.034419][ T5617] Bluetooth: hci0: command tx timeout [ 1047.057767][ T4591] nbd: must specify a size in bytes for the device [ 1047.088984][ T4591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8573'. [ 1047.351911][ T4601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8577'. [ 1047.951820][ T4623] netlink: 236 bytes leftover after parsing attributes in process `syz.1.8580'. [ 1048.190259][ T4635] netlink: 'syz.3.8585': attribute type 1 has an invalid length. [ 1048.364731][ T13] 0ªX¹¦Dö» (unregistering): left promiscuous mode [ 1048.444840][ T13] bond15 (unregistering): (slave bridge3): Releasing active interface [ 1048.444873][ T13] bridge3 (unregistering): left allmulticast mode [ 1048.468742][ T13] bond0 (unregistering): Released all slaves [ 1048.485532][ T13] bond1 (unregistering): (slave veth3): Releasing active interface [ 1048.487431][ T13] bond1 (unregistering): Released all slaves [ 1048.503425][ T13] bond2 (unregistering): Released all slaves [ 1048.517626][ T13] bond3 (unregistering): Released all slaves [ 1048.530011][ T13] bond4 (unregistering): Released all slaves [ 1048.551084][ T13] bond5 (unregistering): Released all slaves [ 1048.568990][ T13] bond6 (unregistering): Released all slaves [ 1048.587461][ T13] bond7 (unregistering): Released all slaves [ 1048.604409][ T13] bond8 (unregistering): Released all slaves [ 1048.621526][ T13] bond9 (unregistering): Released all slaves [ 1048.638980][ T13] bond10 (unregistering): Released all slaves [ 1048.659404][ T13] bond11 (unregistering): Released all slaves [ 1048.677098][ T13] bond12 (unregistering): Released all slaves [ 1048.688003][ T13] bond13 (unregistering): Released all slaves [ 1048.712251][ T13] bond14 (unregistering): Released all slaves [ 1048.725815][ T13] bond15 (unregistering): left allmulticast mode [ 1048.760847][ T13] bond15 (unregistering): Released all slaves [ 1048.778075][ T13] bond16 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1048.779593][ T13] bond16 (unregistering): Released all slaves [ 1048.798558][ T13] bond17 (unregistering): Released all slaves [ 1049.080577][ T13] ovs-s: left promiscuous mode [ 1049.136754][ T5617] Bluetooth: hci0: command tx timeout [ 1049.440329][ T13] tipc: Disabling bearer [ 1049.440474][ T13] tipc: Left network mode [ 1049.737473][ T13] IPVS: stopping backup sync thread 27374 ... [ 1050.046380][ T4678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8595'. [ 1050.189020][ T6071] net_ratelimit: 7 callbacks suppressed [ 1050.189044][ T6071] bond6: (slave bridge2): failed to get link speed/duplex [ 1050.207000][ T4682] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1050.436460][ T4695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8599'. [ 1050.466856][ T4500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.466986][ T4500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.467180][ T4500] bridge_slave_0: entered allmulticast mode [ 1050.471220][ T4500] bridge_slave_0: entered promiscuous mode [ 1050.482914][ T6071] bond6: (slave bridge2): failed to get link speed/duplex [ 1050.794999][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1050.948022][ T4500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.948201][ T4500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.948384][ T4500] bridge_slave_1: entered allmulticast mode [ 1050.950888][ T4500] bridge_slave_1: entered promiscuous mode [ 1050.985941][ T4693] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1051.070968][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1051.194268][ T5617] Bluetooth: hci0: command tx timeout [ 1051.213154][ T4500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1051.359410][ T4500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1051.436598][ T6071] bond6: (slave bridge2): failed to get link speed/duplex [ 1051.513852][ T4741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8607'. [ 1051.532344][ T4500] team0: Port device team_slave_0 added [ 1051.540481][ T4742] netlink: 'syz.2.8602': attribute type 1 has an invalid length. [ 1051.540983][ T4727] syzkaller0: entered promiscuous mode [ 1051.541004][ T4727] syzkaller0: entered allmulticast mode [ 1051.560301][ T4500] team0: Port device team_slave_1 added [ 1051.637473][ T13] veth1_to_team: left promiscuous mode [ 1051.640157][ T13] hsr_slave_0: left promiscuous mode [ 1052.071568][ T4732] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1052.073534][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1052.225729][ T4756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8612'. [ 1052.313598][ T4548] bond6: (slave bridge2): failed to get link speed/duplex [ 1052.337842][ T4500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.337860][ T4500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.337883][ T4500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.477491][ T4500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1052.477514][ T4500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.477546][ T4500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1052.553522][ T4559] bond6: (slave bridge2): failed to get link speed/duplex [ 1052.693489][ T4767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8617'. [ 1052.711155][ T4763] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8614'. [ 1052.877398][ T4500] hsr_slave_0: entered promiscuous mode [ 1052.895379][ T4500] hsr_slave_1: entered promiscuous mode [ 1053.104852][ T4553] bond6: (slave bridge2): failed to get link speed/duplex [ 1053.144137][ T13] IPVS: stop unused estimator thread 0... [ 1053.214412][ T4553] bond6: (slave bridge2): failed to get link speed/duplex [ 1053.273607][ T5617] Bluetooth: hci0: command tx timeout [ 1053.382810][ T6058] bond6: (slave bridge2): failed to get link speed/duplex [ 1053.387978][ T4790] syzkaller0: entered promiscuous mode [ 1053.388006][ T4790] syzkaller0: entered allmulticast mode [ 1053.471755][ T4789] Bluetooth: MGMT ver 1.23 [ 1053.526330][ T4789] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8620'. [ 1053.554075][ T6071] bond6: (slave bridge2): failed to get link speed/duplex [ 1053.799696][ T4807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8623'. [ 1053.993131][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1054.216398][ T4818] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8624'. [ 1054.247553][ T4818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8624'. [ 1054.247585][ T4818] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8624'. [ 1054.393489][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1054.477828][ T4827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8628'. [ 1055.224475][ T4856] netlink: 'syz.2.8636': attribute type 11 has an invalid length. [ 1055.264397][ T6071] net_ratelimit: 8 callbacks suppressed [ 1055.264423][ T6071] bond6: (slave bridge2): failed to get link speed/duplex [ 1055.393138][ T6071] bond6: (slave bridge2): failed to get link speed/duplex [ 1055.492306][ T4500] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1055.514265][ T4500] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1055.515293][ T4500] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1055.540598][ T4500] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1055.541758][ T4500] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1055.562349][ T4500] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1055.571307][ T4500] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1055.609205][ T4500] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1055.690407][ T4860] bridge4: entered promiscuous mode [ 1055.692346][ T4860] bridge4: entered allmulticast mode [ 1055.885256][ T4548] bond6: (slave bridge2): failed to get link speed/duplex [ 1055.920386][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1056.014673][ T6058] bond6: (slave bridge2): failed to get link speed/duplex [ 1056.128166][ T6071] bond6: (slave bridge2): failed to get link speed/duplex [ 1056.219280][ T4890] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 1056.273391][ T6071] bond6: (slave bridge2): failed to get link speed/duplex [ 1056.383982][ T4553] bond6: (slave bridge2): failed to get link speed/duplex [ 1056.462078][ T4500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.538277][ T4500] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.541639][ T4904] __nla_validate_parse: 3 callbacks suppressed [ 1056.541661][ T4904] netlink: 564 bytes leftover after parsing attributes in process `syz.3.8647'. [ 1056.563118][ T4548] bond6: (slave bridge2): failed to get link speed/duplex [ 1056.571691][ T6058] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.571821][ T6058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.620139][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.620265][ T6058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.715536][ T4340] bond6: (slave bridge2): failed to get link speed/duplex [ 1056.816624][ T4500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1057.698716][ T4937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8649'. [ 1057.698746][ T4937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8649'. [ 1058.000920][ T4935] x_tables: unsorted underflow at hook 2 [ 1058.347928][ T4500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1058.808343][ T5617] block nbd4: Receive control failed (result -32) [ 1059.098422][ T4988] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 1059.099282][ T4988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8658'. [ 1059.206364][ T4985] pim6reg1: entered promiscuous mode [ 1059.206395][ T4985] pim6reg1: entered allmulticast mode [ 1059.398393][ T4500] veth0_vlan: entered promiscuous mode [ 1059.428137][ T4500] veth1_vlan: entered promiscuous mode [ 1059.519712][ T5002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8661'. [ 1059.617920][ T4500] veth0_macvtap: entered promiscuous mode [ 1059.651681][ T4500] veth1_macvtap: entered promiscuous mode [ 1059.716371][ T5002] vlan2: entered allmulticast mode [ 1059.716398][ T5002] bridge5: entered allmulticast mode [ 1059.747394][ T5002] bridge5: port 1(erspan0) entered blocking state [ 1059.749041][ T5002] bridge5: port 1(erspan0) entered disabled state [ 1059.749236][ T5002] erspan0: entered allmulticast mode [ 1059.766558][ T5002] erspan0: entered promiscuous mode [ 1059.769488][ T5002] bridge5: port 1(erspan0) entered blocking state [ 1059.769661][ T5002] bridge5: port 1(erspan0) entered forwarding state [ 1059.834438][ T4500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1059.898122][ T5004] bridge5: port 1(erspan0) entered disabled state [ 1060.333457][ T4553] net_ratelimit: 23 callbacks suppressed [ 1060.333482][ T4553] bond6: (slave bridge2): failed to get link speed/duplex [ 1060.357057][ T4500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1060.362315][ T5022] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8668'. [ 1060.404902][ T6071] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.470172][ T4544] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.470266][ T4544] bond6: (slave bridge2): failed to get link speed/duplex [ 1060.645778][ T6071] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.645844][ T6071] bond6: (slave bridge2): failed to get link speed/duplex [ 1060.672026][ T4544] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.784726][ T4544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.784752][ T4544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.846932][ T6058] bond6: (slave bridge2): failed to get link speed/duplex [ 1060.887273][ T6058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.887297][ T6058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.894425][ T5031] nbd5: detected capacity c ** replaying previous printk message ** [ 1060.894425][ T5031] nbd5: detected capacity change from 0 to 127 [ 1060.920418][ T1904] [ 1060.933709][ T1904] ====================================================== [ 1060.941162][ T1904] WARNING: possible circular locking dependency detected [ 1060.948469][ T1904] syzkaller #0 Not tainted [ 1060.952911][ T1904] ------------------------------------------------------ [ 1060.960021][ T1904] kworker/0:1H/1904 is trying to acquire lock: [ 1060.966321][ T1904] ffff888056e26068 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0xff0 [ 1060.975623][ T1904] [ 1060.975623][ T1904] but task is already holding lock: [ 1060.982414][ T5617] block nbd5: Receive control failed (result -32) [ 1060.989524][ T1904] ffff888027d0e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 1060.998095][ T1904] [ 1060.998095][ T1904] which lock already depends on the new lock. [ 1060.998095][ T1904] [ 1061.008506][ T1904] [ 1061.008506][ T1904] the existing dependency chain (in reverse order) is: [ 1061.017619][ T1904] [ 1061.017619][ T1904] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 1061.025021][ T1904] __mutex_lock+0x19d/0x1550 [ 1061.030163][ T1904] nbd_queue_rq+0xc1/0xff0 [ 1061.035116][ T1904] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1061.041561][ T1904] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1061.048586][ T1904] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1061.055368][ T1904] blk_mq_run_work_fn+0x16c/0x300 [ 1061.061148][ T1904] process_scheduled_works+0xc3d/0x1630 [ 1061.067225][ T1904] worker_thread+0xa47/0xfb0 [ 1061.072354][ T1904] kthread+0x38b/0x480 [ 1061.077046][ T1904] ret_from_fork+0x514/0xb70 [ 1061.082176][ T1904] ret_from_fork_asm+0x1a/0x30 [ 1061.087559][ T1904] [ 1061.087559][ T1904] -> #5 (set->srcu){.+.+}-{0:0}: [ 1061.094698][ T1904] __synchronize_srcu+0xc9/0x2f0 [ 1061.100336][ T1904] elevator_switch+0x1e8/0x7b0 [ 1061.105697][ T1904] elevator_change+0x2fa/0x480 [ 1061.110989][ T1904] elevator_set_default+0x375/0x440 [ 1061.116709][ T1904] blk_register_queue+0x3f3/0x4e0 [ 1061.122300][ T1904] __add_disk+0x6b8/0xdb0 [ 1061.127343][ T1904] add_disk_fwnode+0x100/0x3a0 [ 1061.132859][ T1904] nbd_dev_add+0x733/0xb60 [ 1061.138299][ T1904] nbd_init+0x168/0x1f0 [ 1061.143089][ T1904] do_one_initcall+0x250/0x870 [ 1061.148423][ T1904] do_initcall_level+0x10a/0x1a0 [ 1061.154052][ T1904] do_initcalls+0x59/0xa0 [ 1061.158934][ T1904] kernel_init_freeable+0x29d/0x3e0 [ 1061.164666][ T1904] kernel_init+0x22/0x1d0 [ 1061.169542][ T1904] ret_from_fork+0x514/0xb70 [ 1061.174681][ T1904] ret_from_fork_asm+0x1a/0x30 [ 1061.180347][ T1904] [ 1061.180347][ T1904] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 1061.188275][ T1904] __mutex_lock+0x19d/0x1550 [ 1061.193406][ T1904] elevator_change+0x1af/0x480 [ 1061.198854][ T1904] elevator_set_none+0xb5/0x140 [ 1061.204272][ T1904] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1061.210635][ T1904] nbd_start_device+0x189/0xb30 [ 1061.216015][ T1904] nbd_genl_connect+0x167d/0x1cd0 [ 1061.221642][ T1904] genl_family_rcv_msg_doit+0x233/0x340 [ 1061.227717][ T1904] genl_rcv_msg+0x614/0x7a0 [ 1061.232845][ T1904] netlink_rcv_skb+0x226/0x4a0 [ 1061.238170][ T1904] genl_rcv+0x28/0x40 [ 1061.242741][ T1904] netlink_unicast+0x7bd/0x940 [ 1061.248064][ T1904] netlink_sendmsg+0x813/0xb40 [ 1061.253500][ T1904] sock_sendmsg_nosec+0x13a/0x180 [ 1061.259285][ T1904] ____sys_sendmsg+0x54e/0x850 [ 1061.265124][ T1904] ___sys_sendmsg+0x2a5/0x360 [ 1061.270778][ T1904] __x64_sys_sendmsg+0x1b1/0x290 [ 1061.276391][ T1904] do_syscall_64+0x166/0x520 [ 1061.281812][ T1904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.289038][ T1904] [ 1061.289038][ T1904] -> #3 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 1061.298018][ T1904] blk_alloc_queue+0x544/0x690 [ 1061.303437][ T1904] __blk_mq_alloc_disk+0x194/0x390 [ 1061.309267][ T1904] nbd_dev_add+0x494/0xb60 [ 1061.314612][ T1904] nbd_init+0x168/0x1f0 [ 1061.319858][ T1904] do_one_initcall+0x250/0x870 [ 1061.325711][ T1904] do_initcall_level+0x10a/0x1a0 [ 1061.331374][ T1904] do_initcalls+0x59/0xa0 [ 1061.336254][ T1904] kernel_init_freeable+0x29d/0x3e0 [ 1061.342068][ T1904] kernel_init+0x22/0x1d0 [ 1061.347053][ T1904] ret_from_fork+0x514/0xb70 [ 1061.352551][ T1904] ret_from_fork_asm+0x1a/0x30 [ 1061.357875][ T1904] [ 1061.357875][ T1904] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 1061.365324][ T1904] fs_reclaim_acquire+0x71/0x100 [ 1061.370823][ T1904] __kmalloc_noprof+0xbc/0x720 [ 1061.376143][ T1904] tls_sw_sendmsg+0x59b/0x2b50 [ 1061.381506][ T1904] sock_sendmsg_nosec+0x90/0x180 [ 1061.387101][ T1904] sock_sendmsg+0x1ca/0x2d0 [ 1061.392425][ T1904] splice_to_socket+0xb5e/0x12a0 [ 1061.397929][ T1904] direct_splice_actor+0x101/0x160 [ 1061.403626][ T1904] splice_direct_to_actor+0x57b/0xcb0 [ 1061.409904][ T1904] do_splice_direct+0x195/0x290 [ 1061.415544][ T1904] do_sendfile+0x52e/0x7c0 [ 1061.420731][ T1904] __se_sys_sendfile64+0x144/0x1a0 [ 1061.426495][ T1904] do_syscall_64+0x166/0x520 [ 1061.431651][ T1904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.438283][ T1904] [ 1061.438283][ T1904] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 1061.446507][ T1904] lock_sock_nested+0x41/0x100 [ 1061.451806][ T1904] inet_shutdown+0x6a/0x390 [ 1061.456934][ T1904] nbd_mark_nsock_dead+0x2cb/0x550 [ 1061.462753][ T1904] recv_work+0x1cee/0x1e10 [ 1061.467730][ T1904] process_scheduled_works+0xc3d/0x1630 [ 1061.473869][ T1904] worker_thread+0xa47/0xfb0 [ 1061.479024][ T1904] kthread+0x38b/0x480 [ 1061.483745][ T1904] ret_from_fork+0x514/0xb70 [ 1061.488976][ T1904] ret_from_fork_asm+0x1a/0x30 [ 1061.494721][ T1904] [ 1061.494721][ T1904] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 1061.502752][ T1904] __lock_acquire+0x164c/0x2de0 [ 1061.508290][ T1904] lock_acquire+0x115/0x350 [ 1061.513520][ T1904] __mutex_lock+0x19d/0x1550 [ 1061.518776][ T1904] nbd_queue_rq+0x373/0xff0 [ 1061.523927][ T1904] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1061.530391][ T1904] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1061.537376][ T1904] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1061.544178][ T1904] blk_mq_run_work_fn+0x16c/0x300 [ 1061.549949][ T1904] process_scheduled_works+0xc3d/0x1630 [ 1061.556131][ T1904] worker_thread+0xa47/0xfb0 [ 1061.561277][ T1904] kthread+0x38b/0x480 [ 1061.565909][ T1904] ret_from_fork+0x514/0xb70 [ 1061.571301][ T1904] ret_from_fork_asm+0x1a/0x30 [ 1061.576721][ T1904] [ 1061.576721][ T1904] other info that might help us debug this: [ 1061.576721][ T1904] [ 1061.586966][ T1904] Chain exists of: [ 1061.586966][ T1904] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 1061.586966][ T1904] [ 1061.599167][ T1904] Possible unsafe locking scenario: [ 1061.599167][ T1904] [ 1061.606694][ T1904] CPU0 CPU1 [ 1061.612082][ T1904] ---- ---- [ 1061.617485][ T1904] lock(&cmd->lock); [ 1061.621592][ T1904] lock(set->srcu); [ 1061.628044][ T1904] lock(&cmd->lock); [ 1061.634574][ T1904] lock(&nsock->tx_lock); [ 1061.639002][ T1904] [ 1061.639002][ T1904] *** DEADLOCK *** [ 1061.639002][ T1904] [ 1061.647158][ T1904] locks held by kworker/0:1H/1904: 4, last CPU#0: [ 1061.654005][ T1904] #0: ffff88801fed8540 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1061.665961][ T1904] #1: ffffc900066c7c40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1061.679149][ T1904] #2: ffff888027325718 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 1061.688612][ T1904] #3: ffff888027d0e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 1061.697564][ T1904] [ 1061.697564][ T1904] stack backtrace: [ 1061.703662][ T1904] CPU: 0 UID: 0 PID: 1904 Comm: kworker/0:1H Not tainted syzkaller #0 PREEMPT(full) [ 1061.713223][ T1904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1061.723336][ T1904] Workqueue: kblockd blk_mq_run_work_fn [ 1061.729186][ T1904] Call Trace: [ 1061.732595][ T1904] [ 1061.735555][ T1904] dump_stack_lvl+0xe8/0x150 [ 1061.740280][ T1904] print_circular_bug+0x2e2/0x300 [ 1061.745342][ T1904] check_noncircular+0x12f/0x150 [ 1061.750398][ T1904] __lock_acquire+0x164c/0x2de0 [ 1061.755291][ T1904] lock_acquire+0x115/0x350 [ 1061.759818][ T1904] ? nbd_queue_rq+0x373/0xff0 [ 1061.764515][ T1904] __mutex_lock+0x19d/0x1550 [ 1061.769129][ T1904] ? nbd_queue_rq+0x373/0xff0 [ 1061.774028][ T1904] ? do_raw_spin_lock+0x12b/0x2f0 [ 1061.779359][ T1904] ? nbd_queue_rq+0x373/0xff0 [ 1061.784248][ T1904] ? __pfx___mutex_lock+0x10/0x10 [ 1061.789494][ T1904] ? rcu_is_watching+0x16/0xb0 [ 1061.794271][ T1904] ? trace_sched_exit_tp+0x3a/0x130 [ 1061.799499][ T1904] nbd_queue_rq+0x373/0xff0 [ 1061.804113][ T1904] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1061.809256][ T1904] ? irqentry_exit+0x218/0x910 [ 1061.814123][ T1904] ? __pfx___schedule+0x10/0x10 [ 1061.818986][ T1904] ? irqentry_exit+0x218/0x910 [ 1061.823757][ T1904] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1061.829329][ T1904] ? sbitmap_get+0x229/0x390 [ 1061.834045][ T1904] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1061.840220][ T1904] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1061.846060][ T1904] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1061.852422][ T1904] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1061.859453][ T1904] ? lock_acquire+0x115/0x350 [ 1061.864312][ T1904] ? process_scheduled_works+0x97a/0x1630 [ 1061.870333][ T1904] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1061.876383][ T1904] ? blk_mq_run_work_fn+0x144/0x300 [ 1061.881615][ T1904] blk_mq_run_work_fn+0x16c/0x300 [ 1061.886876][ T1904] ? process_scheduled_works+0x97a/0x1630 [ 1061.892622][ T1904] process_scheduled_works+0xc3d/0x1630 [ 1061.898226][ T1904] ? __pfx_process_scheduled_works+0x10/0x10 [ 1061.904237][ T1904] ? assign_work+0x3cf/0x5d0 [ 1061.908873][ T1904] worker_thread+0xa47/0xfb0 [ 1061.913508][ T1904] ? __kthread_parkme+0x71/0x1f0 [ 1061.918477][ T1904] kthread+0x38b/0x480 [ 1061.922644][ T1904] ? __pfx_worker_thread+0x10/0x10 [ 1061.927777][ T1904] ? __pfx_kthread+0x10/0x10 [ 1061.932376][ T1904] ret_from_fork+0x514/0xb70 [ 1061.937088][ T1904] ? __pfx_ret_from_fork+0x10/0x10 [ 1061.942354][ T1904] ? __switch_to+0xc89/0x1420 [ 1061.947039][ T1904] ? __pfx_kthread+0x10/0x10 [ 1061.951633][ T1904] ret_from_fork_asm+0x1a/0x30 [ 1061.956432][ T1904] [ 1061.977228][ T1904] block nbd5: Dead connection, failed to find a fallback [ 1061.977256][ T1904] block nbd5: shutting down sockets [ 1061.977272][ T1904] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1061.977332][ T1904] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1061.977349][ T1904] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1061.977365][ T1904] Buffer I/O error on dev nbd5, logical block 2, async page read [ 1061.977379][ T1904] Buffer I/O error on dev nbd5, logical block 3, async page read [ 1061.977865][ T1904] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1061.977907][ T1904] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1061.978812][ T1904] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 1061.978842][ T1904] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1061.978858][ T1904] Buffer I/O error on dev nbd5, logical block 2, async page read [ 1061.978872][ T1904] Buffer I/O error on dev nbd5, logical block 3, async page read [ 1061.979017][ T1904] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1061.979044][ T1904] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1061.979060][ T1904] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1061.979176][ T1904] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1061.979302][ T1904] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1061.979481][ T1904] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1061.979803][ T1904] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1061.980202][ T1904] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1061.980316][ T1904] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1061.981100][ T4245] ldm_validate_partition_table(): Disk read failed. [ 1061.982234][ T4245] Dev nbd5: unable to read RDB block 0 [ 1061.984006][ T4245] nbd5: unable to read partition table [ 1062.021195][ T4245] ldm_validate_partition_table(): Disk read failed. [ 1062.021586][ T4245] Dev nbd5: unable to read RDB block 0 [ 1062.022064][ T4245] nbd5: unable to read partition table [ 1062.051002][ T6058] bond6: (slave bridge2): failed to get link speed/duplex [ 1062.166860][ T4544] bond6: (slave bridge2): failed to get link speed/duplex [ 1062.263769][ T4544] bond6: (slave bridge2): failed to get link speed/duplex [ 1062.383488][ T6058] bond6: (slave bridge2): failed to get link speed/duplex [ 1062.494058][ T6058] bond6: (slave bridge2): failed to get link speed/duplex [ 1062.603588][ T6058] bond6: (slave bridge2): failed to get link speed/duplex [ 1065.393087][ T4544] net_ratelimit: 24 callbacks suppressed [ 1065.393109][ T4544] bond6: (slave bridge2): failed to get link speed/duplex [ 1065.503017][ T4553] bond6: (slave bridge2): failed to get link speed/duplex [ 1065.623486][ T4544] bond6: (slave bridge2): failed to get link speed/duplex [ 1065.733271][ T6071] bond6: (slave bridge2): failed to get link speed/duplex [ 1065.843095][ T4544] bond6: (slave bridge2): failed to get link speed/duplex [ 1065.953308][ T13] bond6: (slave bridge2): failed to get link speed/duplex [ 1066.073545][ T13] bond6: (slave bridge2): failed to get link speed/duplex [ 1066.183508][ T4544] bond6: (slave bridge2): failed to get link speed/duplex [ 1066.303151][ T6071] bond6: (slave bridge2): failed to get link speed/duplex [ 1066.413731][ T6071] bond6: (slave bridge2): failed to get link speed/duplex [ 1070.504055][ T4544] net_ratelimit: 36 callbacks suppressed [ 1070.504083][ T4544] bond6: (slave bridge2): failed to get link speed/duplex [ 1070.614166][ T4548] bond6: (slave bridge2): failed to get link speed/duplex [ 1070.723064][ T13] bond6: (slave bridge2): failed to get link speed/duplex [ 1070.833427][ T4553] bond6: (slave bridge2): failed to get link speed/duplex