last executing test programs: 8.820192661s ago: executing program 4 (id=4235): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000200)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4, 0x0, 0x0, 0x81}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="0011223344550011223344560800", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4, 0xc}, {}, {0x6, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008811}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) r11 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r11, &(0x7f0000000480)="01154e0001000011221e445588fbca0100011606df4849fedfd3e48edefe3e55e500141df3865049865d6842c7be85df1b04a3b82efd32de2d2ed1d58e05f6666a7579b6", 0x44, 0x4044015, &(0x7f0000000040)={0x11, 0x0, r12, 0x0, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x14) 8.525399339s ago: executing program 2 (id=4240): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0xb4dac462410a8f85, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000b40)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000b80)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r2, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000d40)="1100f8ae", 0x4}, {&(0x7f0000000d80)="00020021", 0x4}], 0x3) (async) sendmsg$sock(r1, &(0x7f0000000900)={&(0x7f0000000940)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x3, @empty}, 0x1c) (async, rerun: 64) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @private=0xa010100}, 0x5}}, 0x2e) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'veth0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000060000000d00000002000004000000000000080003000001000000000b00000005000000100000000000000b0500000005f7000000000008040000000c0000000000000c04000000002e2e005f00"], &(0x7f0000000800)=""/223, 0x66, 0xdf, 0x1, 0x1000}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x4, 0xf}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x207, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x84, 0x1}, {0x1, 0x3}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24049084}, 0x0) (async) syz_emit_ethernet(0x4c, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000003ace65fbcee5586dd60f1000000161100f68000000000000000000000000000bbfe8000000000000000000000000000aa00030efe4e70bc6c24ce0b0ae5bbb2e15199fbfab0e402a12370dee4345d6b9f4b63b1287cc4aee7bc838ec065776fd61b45f6c846af34780244ac7f081e60ef9ccd29ab9e919f7297b09c069bcb00c83a319c494fa98dc92bd6592d"], 0x0) (async) r8 = socket(0xa, 0x3, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000a40)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000a80), 0x12) (async) writev(r10, &(0x7f0000000ac0)=[{0x0}], 0x1) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000b40)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r11, 0x0) (async) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f0000000480)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd3, &(0x7f0000000500)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 8.268184929s ago: executing program 0 (id=4241): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000500), 0x56) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e, 0xfeffffff}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)="27030200dc0f14000e0005000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801) 8.094411005s ago: executing program 4 (id=4243): r0 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "63e23e2a54b8cfb3a4517abd956adf253dd9a48896ce41e6983bff869d52939d", "0a6174baf34472d0f389d5eee1870d84a06d50fb7cbf45249781537bbfacaf4a", "90e06811c122d63cc1686f6f469594aedca72a7ef6e99b582e9273895211b5ec", "79b2a1d913b47e79e191225c6692029ede5bcb6592810f41443b6f8dd6d798cf", "6b3159b2ca6443b632843a878eaf0056aa3032bee3aa28401bb81d748fe8f877", "a53b3bdf3950721e841ce4b7", 0x3, 0x2d2, 0x0, 0x2, 0x9}}) sendto$rxrpc(r0, &(0x7f0000000140)="9dd8d7015e81a77fdf8e38119f422bdac95a547f62dc52d90eb0fe42599da110e9d5e4d91e8eed5b92d2fb88cbdcab3583118101b7a84e2d", 0x38, 0x4008080, 0x0, 0x0) sendto(r0, &(0x7f0000000180)="e353880d652de2f247c46af62fe06d0402b0bdbd9ac9a1af9bbdd87ae6b8817aab93e1aefad63890cbc741c801370fbf0ce39208be7a5268382bc8440117ff9c33bc19a479bd3788de405620036b7d79e22084a0017faaaa234381f5c839bb7288c7841758fbfb4f73871512d4e1dcbdcdd6f7af91c179223dddae943bbb84bbc4569bdaa0ab8d5f6f14770535e0bf02cf0c6764dc8812a8095104f67050da7e807b7498f48a396a6203f9908da333134f7f721c2d1840ba2774e439b90092d2a166f20674262138c2be242bbf067a09a54642b8f2df4e6a6f834c58407939c3c4372c02d3236c4b0e96", 0xea, 0x4040, &(0x7f0000000280)=@caif=@dbg={0x25, 0x6, 0x4}, 0x80) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000300)={'geneve1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x3, &(0x7f0000000440)=@raw=[@exit, @map_fd={0x18, 0x7}], &(0x7f0000000480)='GPL\x00', 0x3, 0x72, &(0x7f00000004c0)=""/114, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x8, 0x860c, 0x2}, 0x10, 0x0, r0, 0x3, &(0x7f00000005c0)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000600)=[{0x5, 0x1, 0x7, 0x1}, {0x0, 0x2, 0xd, 0xc}, {0x3, 0x1, 0x7, 0x6}], 0x10, 0x8001}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000700)=r2}, 0x20) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000780)=0xaf6, 0x4) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000900)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0xb, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9, 0x2}, {}, {0xf, 0x4}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x6, 0x4}, {0x3, 0x4}]}, @var={0x10, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x2037673bc132423f, 0x5f, 0x2e, 0x0, 0x61, 0x5f, 0x0, 0x30, 0x61]}}, &(0x7f0000000840)=""/105, 0x73, 0x69, 0x0, 0x401, 0x10000, @value=r4}, 0x28) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x74, r6, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffc00}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7e17e499}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x74}}, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x800}, &(0x7f0000000b00)=0xc) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000b40)={0x2, 0x0, 0x6}, &(0x7f0000000b80)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000bc0)=@assoc_value={r9, 0x9}, 0x8) sendto$inet6(r8, &(0x7f0000000c00)="bc4b1e7bc9cc084f948cc017cdd46c9de8350a9396f4eaa5a3fa43140f8244be07d28decaa2a9a14c1", 0x29, 0x1, &(0x7f0000000c40)={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80}, 0x1c) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r10, &(0x7f0000000c80)={0x24, @none={0x0, 0x1}}, 0x14) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000034c0)={{r2, &(0x7f0000000cc0)='IPVS\x00', 0x400, &(0x7f0000000d00)={@_ha_fsid={[0x200, 0xe72f]}, {0x0, 0x7, 0x0, 0x3}}, 0x1, &(0x7f0000000d40), &(0x7f0000000d80)=0x3}, 0xa, &(0x7f0000003380)=[{0x2, 0x2, &(0x7f0000000dc0)='-)\\%]/!\\$\x0f&\x00', &(0x7f0000000e00)="cc9dc2263cce78962b951e9aae2a1e7819d4e689d5aaacc813ae719d6489ab2b8dcf1dba436a3c160a2c8bb9cad9997e7c21d019d5efe252a96e2af6febf0b7a0778782ca3e40214f625992b74f6e6a5256cf0e543edae28f253a4794d669c81", 0x60, 0x22}, {0x1, 0x8, &(0x7f0000000e80)='batadv0\x00', &(0x7f0000000ec0)="64f8a0eaf2c2e3ecc6081bbff2befa", 0xf, 0x12}, {0x2, 0x6, &(0x7f0000000f00)='\x00', &(0x7f0000000f40)="edd3fb91a1c057c27b640c6f6ea15f32c254f485c59c336a2796174bdedcd325061f8faadefe364ee93fd6b22527712248d8523b963d1a4e", 0x38, 0x2}, {0x1, 0xba71, &(0x7f0000000f80)='geneve1\x00', &(0x7f0000000fc0)="5cf14a54860e4556", 0x8}, {0x1, 0x7, &(0x7f0000001000)='\xe1!#/*\\\x00', &(0x7f0000001040)="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", 0x1000, 0x28}, {0x2, 0x0, &(0x7f0000002040)='fo\x00', &(0x7f0000002080)="e75f8e318f114735a1adbdc9e20d672951ea06cc75a4f89641f5b508a02c8057801cdd9acf8dfb5ee04f4528fce1d7a3465cfe9480112bf286a2074d4cec7de4ba62a797749ffe9f88a4acbbd0b8858c5e54b7ada9088d949b8267cd2680547d4b50ae8bd32e72dd94a16260b92dbb032214b6dbbb79a55a2d28beeb8757fdd2c6b33929a21c434f706ef31ff17afb4b869e9b799e78a5be3215fbcf2ce01bbd9cd775b0dd52e44990a8c28207bca13de72f9de100b3d820fa03f29377e3dc1d64b9a8942d47911bfe9630f918ba09242774bc91cc7da758b91c", 0xda}, {0x2, 0x401, &(0x7f0000002180)='IPVS\x00', &(0x7f00000021c0)="307573382897a77e655007dcb48d8b6e51ab954704c90da4beea5351c231013701993ebc955425ea0d", 0x29, 0x28}, {0x2, 0x4599de86, &(0x7f0000002200)='[\xcc]\x00', &(0x7f0000002240)="1daf5258d29a34b8c71dad9a97d5f4decbd927f0656c07ae943d371d1bebbb8b02bd910936a637c70e4876d1ae6797db0c86d6ec96c233393eef6706f2faed9a74a3", 0x42}, {0x2, 0xffff, &(0x7f00000022c0)='\x00', &(0x7f0000002300)="281eb2bb987614d5cbe34d830e674dd043ed570f69c2182dc006684dd98b6ec909ca1db49a42978eb608328f6ab70e", 0x2f, 0x8}, {0x1, 0x8, &(0x7f0000002340)='GPL\x00', &(0x7f0000002380)="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", 0x1000, 0x18}]}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x1f, &(0x7f0000003540)={r7, @in={{0x2, 0x4e22, @local}}, 0x7000, 0x9}, &(0x7f0000003600)=0x90) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003640)={0x1b, 0x0, 0x0, 0x5, 0x0, r3, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003700), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000003800)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003780)={0x28, r13, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x200, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x71d3ca2ccb05e2e6) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000003840)={'tunl0\x00'}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r12, 0x4048587b, &(0x7f0000004e00)={{r10, &(0x7f0000003880)=']^\x00', 0x82200, &(0x7f00000038c0)={@align=0x439c, {0x9, 0x200, 0x0, 0x8}}, 0x7f, &(0x7f0000003900), &(0x7f0000003940)=0x1}, 0x5, &(0x7f0000004d40)=[{0x2, 0x7, &(0x7f0000003980)='\x00', &(0x7f00000039c0)="2505712a86c928d10a1d98f6061dd6cec52524bd3f5a94308a4f61e713d6afbe58fe7333c021f29036f5afc079454d50cc917657f5033c3216a50d72a5932706bce39b13c19771b36ba2ff0b8ad4ed1c9c45d13d7062dc0c0b43e83dee6b33946a0c694cf0819efbb3f30689b8061704e0eca0bc7c1c50e225044a426efc9b622940a21255ffe33ed284a71598283553aac8240dc3a4534939675156f4d357bb0c4c03926a454f07c9072a0d2638b14d4344b917c36dfaa7ac6cfebf9c6a0dbb6b0e1b2d94296ea5219b3e9415eb33e84a80e385101d7768a379723a2cc836f4c49f09f613", 0xe5, 0x2a}, {0x3, 0x5, &(0x7f0000003ac0)='nl80211\x00', &(0x7f0000003b00)="117479e177fbc319757d52be822e582accd276c905c46d", 0x17}, {0x3, 0xffffff14, &(0x7f0000003b40)='+\xef{[\x00', &(0x7f0000003b80)="b06b0e3d73d8b4d622a682f3c9eabe7715f7426bd06217faeb0e4fcb6395be6bb79f9359dad0c105ce4110413ed30926c09b11beaa0f1b1be7b3eaf37b2541288eb58fc4819c9999fb568a72a9f7351b22e93b31a588f575c1f16bfb1b5bf339cd814c23896fcea7d9e9f62a531aa90bf5fdcf3459fc85f03bdf1eb75fcb6c3980a821e5a0a793401890b9f1c279cb5d7d86b33f5e03dd7eca0c9f75bc759ecbba50402cdeba4dc70cebac48c58a9c5c51a72cc68b60afd04c7f41b1a541febf", 0xc0, 0x1}, {0x1, 0x80000001, &(0x7f0000003c40)='\xc4:]+\x00', &(0x7f0000003c80)="b24de230af95c6bbd302079f441eaf0265f228982b8c4f633615dd1281b3038cf12abb5acfa4f7699cc59bb333cb066e5007972d2c23fd440f15e7e9e06224704eb58216557786998f35f06806e8f180c86563f869b70bec18de", 0x5a, 0x10}, {0x2, 0x9, &(0x7f0000003d00)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000003d40)="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", 0x1000, 0x32}]}) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004ec0), r11) sendmsg$TIPC_NL_LINK_RESET_STATS(r15, &(0x7f0000004f80)={&(0x7f0000004e80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004f40)={&(0x7f0000004f00)={0x38, r16, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x80) 7.691444427s ago: executing program 2 (id=4245): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="6c0100001a00130700000000ffdbdf25fe80000080ffffff00000000000000bbfe880000000000000000000000000101000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa0000000000000000000000e3000104d232000000ac141438000000000000000000000000050000000000000000000000000000000008000000000000910e00000000000001000000ffffffff0000001000000000010000800000000043050000000000000400000000000100ffffffffffffff7f00010000000000000c0000000000000000000000000000000000000026bd7000053500000a000440540000000000000070001200726663373533396573702863686163686132302c706f6c7931333035290000000000000000000000000000000000000000000000000000000000000000002001000080"], 0x16c}, 0x1, 0x0, 0x0, 0x20040880}, 0x0) 7.52019709s ago: executing program 2 (id=4246): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@delchain={0x24, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000022c0)=0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002300)={0x0, 0x0}, &(0x7f0000002340)=0xc) sendmsg$nl_route(r2, &(0x7f0000002380)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002400)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r3}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002480)={0x0, 0x0, 0x0}, &(0x7f00000024c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002500)={0x0}, &(0x7f0000002540)=0xc) r6 = getuid() r7 = getgid() sendmmsg$unix(r0, &(0x7f0000002640)=[{{&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000580)="9cbfb64e9b0a436fe6a3aebc04bf35e079e07877191e6e2d507c7ea8a4ff2fac1faa600ec2f084555bcf3e4aae5cf42f2a221c5a77380bd3bc405e6292daaee5ee6d3b03ec289a33", 0x48}, {&(0x7f0000000600)="1978711ec0291995a1709b1fdcfa098ce9bf6022f0c7fc6f84fdd1c2552a289ebf535ccae123740f9c3da9ba8a86d41777eee2cec2d6f666776fc847d5d3df7a629457b324ee8a8bcfa8e82b74745114f2c81a95dd2f769e094a20e6718330ebe4d20298b8c612a6be1aab4d0f5bda776ea7990baf4217a9f308f4184dd243f4a8ed6466263fc3b89707ad9ed82d67001ce2c10a705588bf72bdf9b803754d538528e3163d01d5727bac6f50f0155c4037d411d9892cce15d147eef42995cfcc4b", 0xc1}], 0x2, &(0x7f0000000c00)=[@rights={{0x30, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}], 0x78, 0x4008040}}, {{&(0x7f0000000c80)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="fc76f7aea821b1ccd479ff9d3361f178ad539776d7c13e06149ca45cda4073dec04f229db46ecde9cbc425deaf85f620ef7b4e1bb027d1e3f14bd8e73f779e260d6e0a413d7dcdc12acf778a2b30a5f6fa79f3fed6eb49d65115d949658df9d370c9232810ee3c62f242bff9ca3bd3dcf9b28e15ab1da408ba1e22de81fdd424e73bd0507a2480a0dcab659819c0643e23bfca2e617936e1", 0x98}], 0x1, &(0x7f0000000fc0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}}], 0x50, 0x20000040}}, {{&(0x7f0000001040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002280)=[{&(0x7f00000010c0)="20195c6acce9ff569a89255d37ba945f3dd5c844182b118931143ef2439a63631707ba9d12e03612dc9925e536542328a23db40eaec691792efdcf6b6acf69e1e5433be1b95b0895c28e55ace743fa0e69407a034d1ceb2eed8078a229744fc1d9b6ca602019ccd880fb886fcdc120a31a1f49cba94ffab6e2b19c96cb19563ada42c6b69af576a3208f8c3d9b79149ca8c3a4216101a8292151f844b3a6a236729f4b1cc25b58c5e3604aad5de27f70a8e19e5f5a54878f6949c41a61545f04601db7266df1ba0d537be37f3df566655511c2414a24239d78ab1dee6ad287529017faf14330e01d8b85de1e", 0xec}, {&(0x7f00000011c0)="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", 0x1000}, {&(0x7f00000021c0)="b331e14aff88cf19f2b832c1bf29c32c55cfd6de41098e65b4cf346a610d0d4abe3850f159f5c7e9e60d4bc322baee92989967abba435bcb84cf8dac2fa197fed1cb7520d72202d4bb66be4571e765874e4388af3b24298ea9364347e94fe687890356d5c3cb7c75b5121764c19541266b9ac55b8621bb9614887cf883877f752e3f2b24ccdad4dd97a72672f18659e2bdc9d82dcc6378dc6db6b1ee46cadd07ac", 0xa1}], 0x3, &(0x7f0000002580)=[@cred={{0x1c, 0x1, 0x2, {r1, r3, r4}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0x88, 0xf36718248e7924d2}}], 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="b2e70d1ed6398c4d34e004b518bdb487a7bca88a738d128614d3bd40ba91673c6f3d5bbd5eb1d34ff99add42b0d331c74fd78a2a5c120ab27978a9347b619300367ca707a38d4c83423c2c6c35decd013aa7bde002d5545666d25f957b6aa8dca8ef8620bf93f24c0352ce81ffec2d776e84d6433e094aa307"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x24008814) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000180)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) sendmsg$kcm(r9, &(0x7f0000000340)={&(0x7f00000003c0)=@qipcrtr={0x2a, 0x4, 0x4000}, 0x80, 0x0}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), r11) getsockname$packet(r11, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000009c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 7.401159563s ago: executing program 4 (id=4248): r0 = socket(0xa, 0x3, 0x1) getsockopt(r0, 0xff, 0x0, 0x0, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30c) 6.114436965s ago: executing program 3 (id=4251): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000780)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 64) recvfrom$inet(r0, &(0x7f00000007c0)=""/105, 0x69, 0x40000126, 0x0, 0x0) (rerun: 64) syz_emit_ethernet(0x74, &(0x7f0000000840)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a00000000000000fe8000000000000000000000000000aabf090000200002004a00000000000005fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYRES16=r3, @ANYBLOB="010000000000010000001900000018000180140002006970766c616e310000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000480)={'veth1_to_team\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'vlan1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r9], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x10, 0xfffa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x3c}}, 0x24040804) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x5001}) (async) write$tun(r5, &(0x7f0000000240)={@void, @val={0x3, 0x3, 0x1b, 0x30, 0x72, 0x6}, @ipv6=@gre_packet={0x3, 0x6, '\x00', 0x52, 0x2f, 0xff, @remote, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "1d13094a290fb1d156dbdd2c002e"}, {0x8, 0x88be, 0x4, {{0x8, 0x1, 0x7, 0x0, 0x0, 0x1, 0x7, 0x7}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x4, {{0xc, 0x2, 0x15, 0x3, 0x1, 0x2, 0x4, 0x7}, 0x2, {0x0, 0x8, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}}}}}, 0x84) (async) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000300)) 3.777634445s ago: executing program 0 (id=4252): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x1c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1808000000000000000000000a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300006e00000000000000b7020000000000007b9af0ff00000000c509feff00000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f2ff76000000bf9820000000000056080000000000008500004107000000b70000000000000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.728398354s ago: executing program 1 (id=4253): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, 0xffffffffffffffff, 0x100000000) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000240)={0x1, 0x1, 0xfb, 0x4, 0x6, 0x4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xe}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_ACT={0x30, 0x3, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) sendto$inet6(r3, &(0x7f0000000440)='/', 0x1, 0x4008840, &(0x7f0000000480)={0xa, 0x4e23, 0x4, @loopback, 0x80000000}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={@loopback, @mcast1, @empty, 0x7fff, 0x6, 0x8000, 0x400, 0x9, 0x200002}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x25, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @empty}}}, 0x9c) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d3000000000000005000b0000000000080011"], 0x3c}}, 0x0) 3.560371652s ago: executing program 0 (id=4254): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x128, r1, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x19}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x78d}]}, 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x40, 0x107, 0x70bd2a, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @fd=r0}, @typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48854}, 0xc010) 3.537850276s ago: executing program 2 (id=4255): r0 = socket(0x840000000002, 0x3, 0xff) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000010003704000080000016000000000000", @ANYRES32=r2, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f00000002c0)="9723af4501000000010001008cc5595c4a9b8f99595311dc93a46126", 0x1c}], 0x1, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x38}, @local}}}], 0x20}, 0x6008844) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x8000}, 0x8) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001600)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000002400)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdb01, {0x0, 0x0, 0x0, r7, {0x5, 0xc}, {0x1, 0xfff1}, {0xe, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000000}, 0x4041080) sendmmsg$inet6(r3, &(0x7f0000000380)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x10, @private2, 0x8}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000480)="99", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e24, 0x9b5d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000540)="92", 0x1}], 0x1}}], 0x2, 0x4000090) shutdown(r3, 0x1) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000580)=""/4057, &(0x7f0000001580)=0xfd9) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4a) 3.388663744s ago: executing program 4 (id=4256): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="6c0100001a00130700000000ffdbdf25fe800000ffffffffffffff80000000bbfe880000000000000000000000000101000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa0000000000000000000000e3000104d232000000ac141438000000000000000000000000050000000000000000000000000000000008000000000000910e00000000000001000000ffffffff0000001000000000010000800000000043050000000000000400000000000100ffffffffffffff7f00010000000000000c0000000000000000000000000000000000000026bd7000053500000a000440540000000000000070001200726663373533396573702863686163686132302c706f6c7931333035290000000000000000000000000000000000000000000000000000000000000000002001000080"], 0x16c}, 0x1, 0x0, 0x0, 0x20040880}, 0x0) 3.344540177s ago: executing program 0 (id=4257): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000500), 0x56) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)="27030200dc0f14000e0005000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801) 3.331677153s ago: executing program 3 (id=4258): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000440)={0x1d, r2}, 0x10) (async) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) (async) sendmsg$can_bcm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1, 0x0, 0x3, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "44478438da5cbd75"}}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) close(0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x31, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x40080) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newtaction={0x48, 0x30, 0x871a15abc695fb3d, 0xffffffff, 0x25dfdc02, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x48050}, 0x20004800) (async, rerun: 64) r5 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="68000000300005060000000d000000000000010054000100500001000900010067617465"], 0x68}], 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64) write(r4, &(0x7f0000000080)="4c00000011000f14001600020000020002000000200000", 0x17) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x3, &(0x7f00000003c0)=@framed={{0x3d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000400)='syzkaller\x00'}, 0x80) (async) socket$packet(0x11, 0x2, 0x300) 3.200256645s ago: executing program 4 (id=4259): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1, 0x9, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000009c0)={r0, &(0x7f0000000a00), &(0x7f0000000a40)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r0, &(0x7f0000000b00), &(0x7f0000000b40)=@tcp6, 0x1}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3400000012000100000000000000000000000000000000000000ffffe000000200000000f10614670c0015000000000000000000"], 0x34}}, 0x0) r2 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1e, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="0100007300000000000000000000711229002ec50000950000000013a7e1"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmmsg$inet(r2, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="9c", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000300)={0xffff, 0x1, 0x1, 0x1, r3}, 0x10) recvmsg$can_raw(r2, &(0x7f0000000740)={&(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/53, 0x35}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/215, 0xd7}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/113, 0x71}], 0x5, &(0x7f0000000700)=""/8, 0x8}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffa0}, 0x48) 3.093550624s ago: executing program 4 (id=4260): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = accept4$inet_tcp(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @private}, &(0x7f0000000200)=0x10, 0x80000) accept$inet(r3, 0x0, &(0x7f0000000240)) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000108010300000000000000000400000005000300", @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.874710868s ago: executing program 2 (id=4261): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x14, 0x15, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000440)=""/228, 0x2e, 0xe4, 0x1}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) getsockname$packet(r1, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r4, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xd6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) (async) sendmsg$nl_route(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r4, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xd6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x40, 0x1, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x40, 0x1, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c00990000000210000000000800a000940900000800260094cde79d716bc102"], 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x10, 0x80, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x1, 0xfffffffffffffd4d, 0x0, 0x0, 0x10, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x10, 0x80, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x1, 0xfffffffffffffd4d, 0x0, 0x0, 0x10, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000001400078008000840000000000800174000000004050005000a000000050001000700000005000400000000000900020073513d31000000000d0003006c6973743a736574"], 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008114) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[], 0x60}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xd, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x8a}, @exit], &(0x7f0000000400)='GPL\x00'}, 0x90) 1.176241762s ago: executing program 3 (id=4262): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf253800000008000300", @ANYRES32=r5, @ANYBLOB='\f\x00X\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0xc80c}, 0x20000000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x1fc}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000004a00010000000000000000000a00", @ANYBLOB="c387f644d082"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.13384004s ago: executing program 1 (id=4263): bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000440)=0x79, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) bind$inet(r1, &(0x7f00000004c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000500)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000980)='hybla', 0x5) sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000680)="b82f3102acc6ce03713cfd24638506be6b88c2fafcc32d3872e1d2670b234fda59d0d09b842a1f1f44a08289101a7a1dd2451141872193e0f5f8c97406d09d17e0038a81cfc05c083e9bcee05b85c01dc399205f8f2ab79ed653d62f4e72e796b70f21a83916ee52776eee5cff5272", 0x6f}, {&(0x7f0000000700)="903b2b2539b778755a22ee99f1ec0d9b0daf1809deb16c9feb8ded8503048da219d60f01deab57c72472cb102fe503f59f577e0dba7accc5d7fe652fd3b366b9c91722b512da0bdf55c302e2974b6bfbde6d5fe069e6501b9ee880f9f88a0fa81dea55d7bb6b0ce680a38a9a07fa1d", 0x6f}, {&(0x7f0000000780)="e1e468e071cb0eda3f93c524d2f25e0b90937d", 0x13}, {&(0x7f0000000880)="5773a206b125957d", 0x8}, {0x0}, {&(0x7f0000000c00)="00c25046038f9b1a41cabe4eef98f4d3c3463c63b1ca929e6e5e3ddc484bd023e2fc98a194d9f0fe9c636aea06122f7b3dd640c082da2d5c004b37a152b94f550e34cdf5525a85b1420f9ccbc891233b", 0x50}], 0x6}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)="3dbb6437a91169073ea89e38081714ab0e46a7bdea506ec9488319ddd489ec7192708e94d67e84ca4dcfce242687dcc1d50e3cd5101547d8cb8deb8a29e4858c2cbf8d0b94a800ffb5553a527503fea3bf66c6f659c9954b9b45a1d8eac2738d17332b50ec5b7fdca56fca0b8347", 0x6e}, {0x0}], 0x2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="14000000000000000000000001000000080000000000000014000000000000000000000002000000010000000000000080"], 0xb0}}], 0x2, 0x4000080) 1.070723864s ago: executing program 1 (id=4264): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x1c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1808000000000000000000000a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300006e00000000000000b7020000000000007b9af0ff00000000c509feff00000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f2ff76000000bf9820000000000056080000000000008500ffb007000000b70000000000000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 812.28467ms ago: executing program 1 (id=4265): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000014c0), 0x0, 0x10, &(0x7f0000001500), 0xfffffffffffffd00}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 681.602384ms ago: executing program 3 (id=4266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090a010400000000000000000a0000040900010073797a31000000000900020073797a310000000008000a40fffffffc0800054000000024080003400000004408000f400000000214000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) close(r0) 667.722967ms ago: executing program 0 (id=4267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x1, 0x1, 0xc7adbdec1a9ee59f, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xfb4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24044002) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) (async, rerun: 64) socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8b0b, &(0x7f00000005c0)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000b8a1df25020000000800020001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r7, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x18}, 0x11) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) 579.564928ms ago: executing program 2 (id=4268): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRESDEC=r0, @ANYBLOB="39adbeac5d16"], 0x30}}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000cc0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r3, &(0x7f0000000e00)=ANY=[], 0x6) write$nci(r3, &(0x7f0000000e40)=ANY=[@ANYBLOB="7105e7000303017f4004df18babb170c84c107afc8e176bec5602b61bce1833cd139784822a325cc2d87bc0264e3a0fd3c21b018c0dc4768ee09a734dce24600b92cf4f75e3319d10b6182c9a1d143554464da1fc9084a88176205c45c12926dfa38415e6999650980aba323c0a1b2827973d4287fbb3e5b95fd21a5084c7256a716dde7eb90b9e542fb550c45edc737e1f4030593b51810259ab11ce8dc4b6e89e151bbdb2f8110259c2137e3bebf4b92f824a470d6d94763dacc58e55da93d1ae42783f198ed291b023177e425955405b7654d442a622f"], 0x194) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000c40)={@multicast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x32, 0x3c, 0x64, 0x0, 0x7f, 0x29, 0x0, @private=0xa010101, @multicast1}, "28afdea0cbfe7114878929d3fe4e3179c0cf335b939370f8401e8c8469283a9952366f3d77b16ea2"}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xf, 0x6, 0x0, 0x40, 0x4d, 0xffffffff, 0xef, 0x7ff, 0x401, 0x3, 0x5, 0xffff, 0x3, 0xfff, 0x5, 0x1, 0x401, 0x501354af, 0x6, 0x2, 0x54, 0x7, 0x1}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r7, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000580)) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000700)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x310, 0xf0, 0xffffffff, 0xf0, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'batadv0\x00', 'veth0_to_batadv\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x3, @ipv6=@mcast2, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @icmp_id=0x6b, @icmp_id=0x65}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffff00]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x36}, @ipv4=@multicast2, @gre_key=0x400, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) r13 = openat$cgroup_procs(r11, &(0x7f0000000380)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1a, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, {}, {}, [@map_fd={0x18, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @tail_call, @call={0x85, 0x0, 0x0, 0xd1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f00000006c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) write$cgroup_pid(r13, &(0x7f00000003c0), 0x12) 366.29617ms ago: executing program 1 (id=4269): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="6c0100001a00130700000000ffdbdf25fe80000080ffffffffffffff000000bbfe880000000000000000000000000101000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa0000000000000000000000e3000104d232000000ac141438000000000000000000000000050000000000000000000000000000000008000000000000910e00000000000001000000ffffffff0000001000000000010000800000000043050000000000000400000000000100ffffffffffffff7f00010000000000000c0000000000000000000000000000000000000026bd7000053500000a000440540000000000000070001200726663373533396573702863686163686132302c706f6c7931333035290000000000000000000000000000000000000000000000000000000000000000002001000080"], 0x16c}, 0x1, 0x0, 0x0, 0x20040880}, 0x0) 324.775818ms ago: executing program 3 (id=4270): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="16000000000000001c0012800b00012062726964b7000000000000000800050000000000"], 0x3c}}, 0x0) 176.496442ms ago: executing program 1 (id=4271): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x70, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x200000000740, 0x200000000770], 0x0, 0x0, &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x68, 0xf6, 'ip6gre0\x00', 'veth0\x00', 'batadv_slave_1\x00', 'vcan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, [0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0x0, 0x70, 0x70, 0xc0, [], [], @common=@log={'log\x00', 0x28, {{0x1, "a0dc11f19decb43ff21c10155f449a592b9dc96dc562d69734af7b924c28", 0x8}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1c8) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0xdb, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000680)={0x0, {{0xa, 0x0, 0xdb, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f00000007c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'veth0_to_team\x00', {}, 0xfff}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 337.737µs ago: executing program 3 (id=4272): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x15, &(0x7f0000000000)=0x200, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="cd928b0285d82c515a64994c9bcf2f5811400badadbe098cb22e80105debbef7d2e0b42e9d839f69d4c861d6a001ce"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) 0s ago: executing program 0 (id=4273): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880180001801400108004000b8004000f0090bb000000000000040002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000200)=@ethtool_coalesce={0xf, 0x1000, 0x3, 0x5, 0x4, 0x0, 0x40003ff, 0x8000, 0x2, 0x39, 0x10, 0x8, 0x6, 0x5, 0xfffffffb, 0x1, 0xfff, 0x6, 0x514f, 0x401, 0x6, 0x8, 0xffff}}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@private}}, 0xe8) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000010300200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00140232f9c49b82d4ea61003a712f0756b80000"], 0x54}}, 0x0) kernel console output (not intermixed with test programs): [ T5004] udevd[5004]: seq 14370 '/devices/virtual/block/nbd0' killed [ 483.877206][T18903] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3178'. [ 484.000610][T18906] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3178'. [ 484.105049][T18912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3180'. [ 484.189345][T18637] team0: Port device netdevsim3 removed [ 484.207236][T18637] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.207272][T18637] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.286603][T18918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3182'. [ 484.348220][T18920] netlink: 'syz.2.3183': attribute type 1 has an invalid length. [ 484.452974][T18920] bond16: entered promiscuous mode [ 484.456857][T18925] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3183'. [ 484.457095][T18920] 8021q: adding VLAN 0 to HW filter on device bond16 [ 484.521472][T18921] bond0: left promiscuous mode [ 484.521629][T18921] bond0: left allmulticast mode [ 484.664276][T18933] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3185'. [ 484.740313][T18637] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.740347][T18637] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.982600][T18637] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.982637][T18637] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.128630][T18637] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 485.129128][T18637] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.129159][T18637] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.357848][T18965] tunl0: left promiscuous mode [ 486.481003][T18965] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 486.484209][T18965] veth1_vlan: entered promiscuous mode [ 486.485567][T18965] veth1_vlan: entered allmulticast mode [ 486.485799][T18965] macvlan1: left promiscuous mode [ 486.517174][T18965] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 486.531528][T18965] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 486.534520][T18965] bond2: entered allmulticast mode [ 486.534563][T18965] bond2: entered promiscuous mode [ 486.534830][T18965] macvlan2: left promiscuous mode [ 486.534842][T18965] bond2: left promiscuous mode [ 486.535428][T18965] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 486.536417][T18965] geneve2: left promiscuous mode [ 486.537967][T18965] bond3: left promiscuous mode [ 486.538308][T18965] 8021q: adding VLAN 0 to HW filter on device bond3 [ 486.607155][T18965] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 486.683272][T18637] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 486.860458][T18637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 486.865004][T18637] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 486.920503][T18637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 486.924048][T18637] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 486.963650][T18637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 486.969394][T18637] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 487.018866][T18637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 487.164700][T18994] trusted_key: syz.3.3201 sent an empty control message without MSG_MORE. [ 487.280396][T18998] IPv6: NLM_F_CREATE should be specified when creating new route [ 487.400471][T19002] openvswitch: netlink: Flow actions attr not present in new flow. [ 487.627895][T18637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.729187][T18637] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.805475][T12264] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.805645][T12264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.882571][T12264] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.882686][T12264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.009645][T19012] tipc: Started in network mode [ 488.009678][T19012] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 488.016496][T19012] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0000 [ 488.017048][T19012] tipc: Enabled bearer , priority 10 [ 488.669513][T19034] __nla_validate_parse: 6 callbacks suppressed [ 488.669537][T19034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3215'. [ 488.808200][T19044] xt_LOG: prefix is not null-terminated [ 488.808326][T19044] xt_LOG: prefix is not null-terminated [ 488.808460][T19044] xt_LOG: prefix is not null-terminated [ 488.833250][T19044] xt_LOG: prefix is not null-terminated [ 488.833359][T19044] xt_LOG: prefix is not null-terminated [ 488.833455][T19044] xt_LOG: prefix is not null-terminated [ 488.833545][T19044] xt_LOG: prefix is not null-terminated [ 488.833644][T19044] xt_LOG: prefix is not null-terminated [ 488.833738][T19044] xt_LOG: prefix is not null-terminated [ 488.833832][T19044] xt_LOG: prefix is not null-terminated [ 489.144996][T19047] netlink: zone id is out of range [ 489.145013][T19047] netlink: get zone limit has 8 unknown bytes [ 489.234909][ T1580] tipc: Node number set to 1 [ 489.577328][T19069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3221'. [ 489.690731][T19073] ipvlan1: Caught tx_queue_len zero misconfig [ 489.726949][T18637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.843284][T19073] bond1: option all_slaves_active: invalid value (179) [ 489.850950][T19073] bond1 (unregistering): Released all slaves [ 490.047091][T19079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.097447][T18637] veth0_vlan: entered promiscuous mode [ 490.146356][T18637] veth1_vlan: entered promiscuous mode [ 490.307554][T18637] veth0_macvtap: entered promiscuous mode [ 490.323378][T18637] veth1_macvtap: entered promiscuous mode [ 490.398004][T18637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.426661][T18637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.498070][T19069] netlink: 'syz.2.3221': attribute type 1 has an invalid length. [ 490.569254][T19069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3221'. [ 490.670943][T12259] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.671007][T12259] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.671040][T12259] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.671072][T12259] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.619016][T19116] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3231'. [ 491.799713][T19043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 492.084083][T12267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.084106][T12267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.309080][T12264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.309103][T12264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.555357][T19136] IPVS: ip_vs_add_dest(): server weight less than zero [ 492.646849][T19136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3237'. [ 492.646873][T19136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3237'. [ 493.677179][T19181] 8021q: adding VLAN 0 to HW filter on device bond18 [ 493.777093][ T5648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 493.778759][ T5648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 493.780433][ T5648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 493.805579][ T5648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 493.821682][ T5648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 494.099537][T19196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3251'. [ 494.135194][ T5647] batman_adv: batadv0: Interface deactivated: syz_tun [ 494.225327][ T5647] batman_adv: batadv0: Removing interface: syz_tun [ 494.459333][T19210] openvswitch: netlink: IP tunnel dst address not specified [ 494.493166][T19210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3254'. [ 494.656533][T19219] syzkaller0: entered promiscuous mode [ 494.656557][T19219] syzkaller0: entered allmulticast mode [ 495.330514][T19189] rxe_eth0 speed is unknown, defaulting to 1000 [ 495.506760][T19234] netlink: 'syz.0.3259': attribute type 3 has an invalid length. [ 495.508644][T19236] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3258'. [ 495.611098][T19240] netlink: 'syz.0.3259': attribute type 3 has an invalid length. [ 495.941373][ T5648] Bluetooth: hci1: command tx timeout [ 496.123907][T19249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3258'. [ 497.555879][T19189] C speed is unknown, defaulting to 1000 [ 497.621387][T19254] bridge8: entered allmulticast mode [ 497.672220][ T182] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.807245][T12271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.807268][T12271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.830763][T19258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3261'. [ 497.830784][T19258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3261'. [ 497.953091][T19269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3261'. [ 497.953113][T19269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3261'. [ 498.020087][ T5648] Bluetooth: hci1: command tx timeout [ 498.101796][T19280] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 498.660954][T19294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3267'. [ 498.771835][T19306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3267'. [ 499.135784][T19317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3273'. [ 499.162708][T19311] syzkaller0: entered promiscuous mode [ 499.162732][T19311] syzkaller0: entered allmulticast mode [ 499.399358][T19329] netlink: 'syz.2.3276': attribute type 4 has an invalid length. [ 499.656166][T19338] veth0: entered promiscuous mode [ 499.816265][T19337] veth0: left promiscuous mode [ 500.057277][T19189] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.057461][T19189] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.057623][T19189] bridge_slave_0: entered allmulticast mode [ 500.088618][T19189] bridge_slave_0: entered promiscuous mode [ 500.100951][ T5648] Bluetooth: hci1: command tx timeout [ 500.105451][T19189] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.105617][T19189] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.105769][T19189] bridge_slave_1: entered allmulticast mode [ 500.113748][T19346] IPVS: lblc: UDP [fe80::aa]:8080 - no destination available [ 500.124116][T12267] IPVS: starting estimator thread 0... [ 500.154568][T19189] bridge_slave_1: entered promiscuous mode [ 500.210918][T19189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.212242][T19347] IPVS: using max 36 ests per chain, 86400 per kthread [ 500.216077][T19189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.285601][T19189] team0: Port device team_slave_0 added [ 500.288443][T19189] team0: Port device team_slave_1 added [ 500.332195][T19189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.332213][T19189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.332239][T19189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.333872][T19189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.333885][T19189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.333903][T19189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.509103][T19189] hsr_slave_0: entered promiscuous mode [ 500.517009][T19189] hsr_slave_1: entered promiscuous mode [ 500.517720][T19189] debugfs: 'hsr0' already exists in 'hsr' [ 500.517738][T19189] Cannot create hsr debugfs directory [ 500.781589][T19355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3285'. [ 500.927266][T19361] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3287'. [ 500.942121][T19359] netlink: 'syz.3.3286': attribute type 251 has an invalid length. [ 500.947676][T19189] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.947711][T19189] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 500.947736][T19189] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.958218][T19362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.056366][T19365] macvlan2: entered promiscuous mode [ 501.056389][T19365] macvlan2: entered allmulticast mode [ 501.215216][T19189] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.215259][T19189] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 501.215285][T19189] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.509242][T19189] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.509284][T19189] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 501.509309][T19189] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.581110][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.715379][T19390] syzkaller0: entered promiscuous mode [ 501.715407][T19390] syzkaller0: entered allmulticast mode [ 501.811786][T19189] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.811824][T19189] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 501.811849][T19189] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.864261][T19386] tipc: Started in network mode [ 501.864291][T19386] tipc: Node identity ac1414aa, cluster identity 4711 [ 501.864533][T19386] tipc: New replicast peer: 172.20.20.187 [ 501.866214][T19386] tipc: Enabled bearer , priority 10 [ 502.184294][ T5648] Bluetooth: hci1: command tx timeout [ 504.834106][T19189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 504.838119][T19189] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 504.839262][T19189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 504.867400][T19189] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 504.868390][T19189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 504.889451][T19189] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 504.903481][T19189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 504.907625][T19189] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 504.991461][T19404] batadv_slave_0: Caught tx_queue_len zero misconfig [ 505.027825][ T5849] tipc: Node number set to 2886997162 [ 505.332844][T19427] netlink: 'syz.3.3301': attribute type 1 has an invalid length. [ 505.432128][T19434] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3302'. [ 505.464723][T19445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3301'. [ 505.504751][T19445] 8021q: adding VLAN 0 to HW filter on device bond1 [ 505.609477][T19427] bridge1: entered promiscuous mode [ 505.636818][T19427] bond1: (slave bridge1): making interface the new active one [ 505.653176][T19427] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 505.773618][T19189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.898031][T19189] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.938961][T12266] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.939069][T12266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.966915][T19437] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3303'. [ 505.966935][T19437] tipc: Invalid UDP bearer configuration [ 505.966976][T19437] tipc: Enabling of bearer rejected, failed to enable media [ 505.967838][T19437] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3303'. [ 505.967854][T19437] tipc: Invalid UDP bearer configuration [ 505.967898][T19437] tipc: Enabling of bearer rejected, failed to enable media [ 505.968265][T19435] netlink: 'syz.1.3303': attribute type 1 has an invalid length. [ 505.996717][T19437] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3303'. [ 505.996737][T19437] tipc: Invalid UDP bearer configuration [ 505.996777][T19437] tipc: Enabling of bearer rejected, failed to enable media [ 506.006607][T19435] netlink: 'syz.1.3303': attribute type 1 has an invalid length. [ 506.007443][T19435] netlink: 'syz.1.3303': attribute type 1 has an invalid length. [ 506.084196][T12266] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.084307][T12266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.122045][T19435] netlink: 'syz.1.3303': attribute type 1 has an invalid length. [ 506.253113][T19437] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3303'. [ 506.253136][T19437] tipc: Invalid UDP bearer configuration [ 506.253177][T19437] tipc: Enabling of bearer rejected, failed to enable media [ 506.253488][T19437] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3303'. [ 506.253503][T19437] tipc: Invalid UDP bearer configuration [ 506.253540][T19437] tipc: Enabling of bearer rejected, failed to enable media [ 506.253787][T19437] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3303'. [ 506.253826][T19437] tipc: Invalid UDP bearer configuration [ 506.253871][T19437] tipc: Enabling of bearer rejected, failed to enable media [ 506.254114][T19437] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3303'. [ 506.254127][T19437] tipc: Invalid UDP bearer configuration [ 506.254165][T19437] tipc: Enabling of bearer rejected, failed to enable media [ 506.254400][T19437] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3303'. [ 506.254413][T19437] tipc: Invalid UDP bearer configuration [ 506.254450][T19437] tipc: Enabling of bearer rejected, failed to enable media [ 506.257212][T19437] tipc: Invalid UDP bearer configuration [ 506.257257][T19437] tipc: Enabling of bearer rejected, failed to enable media [ 506.257517][T19437] tipc: Invalid UDP bearer configuration [ 506.257556][T19437] tipc: Enabling of bearer rejected, failed to enable media [ 506.257813][T19437] tipc: Invalid UDP bearer configuration [ 506.257860][T19437] tipc: Enabling of bearer rejected, failed to enable media [ 506.259320][T19437] tipc: Invalid UDP bearer configuration [ 506.259359][T19437] tipc: Enabling of bearer rejected, failed to enable media [ 506.259643][T19437] tipc: Invalid UDP bearer configuration [ 506.259682][T19437] tipc: Enabling of bearer rejected, failed to enable media [ 506.300861][T19435] netlink: 'syz.1.3303': attribute type 1 has an invalid length. [ 506.301704][T19435] netlink: 'syz.1.3303': attribute type 1 has an invalid length. [ 506.302536][T19435] netlink: 'syz.1.3303': attribute type 1 has an invalid length. [ 506.303374][T19435] netlink: 'syz.1.3303': attribute type 1 has an invalid length. [ 506.304191][T19435] netlink: 'syz.1.3303': attribute type 1 has an invalid length. [ 506.329466][T19435] netlink: 'syz.1.3303': attribute type 1 has an invalid length. [ 506.547259][T19437] tipc: Invalid UDP bearer configuration [ 506.547311][T19437] tipc: Enabling of bearer rejected, failed to enable media [ 506.547766][T19460] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 506.548420][T19437] tipc: Invalid UDP bearer configuration [ 506.548460][T19437] tipc: Enabling of bearer rejected, failed to enable media [ 506.549337][T19437] tipc: Invalid UDP bearer configuration [ 506.549377][T19437] tipc: Enabling of bearer rejected, failed to enable media [ 506.572419][T19437] tipc: Invalid UDP bearer configuration [ 506.578654][T19437] tipc: Enabling of bearer rejected, failed to enable media [ 506.704525][T19437] tipc: Invalid UDP bearer configuration [ 506.704572][T19437] tipc: Enabling of bearer rejected, failed to enable media [ 506.704890][T19437] tipc: Invalid UDP bearer configuration [ 506.704929][T19437] tipc: Enabling of bearer rejected, failed to enable media [ 506.706235][T19437] tipc: Invalid UDP bearer configuration [ 506.706306][T19437] tipc: Enabling of bearer rejected, failed to enable media [ 506.706585][T19437] tipc: Invalid UDP bearer configuration [ 506.706668][T19437] tipc: Enabling of bearer rejected, failed to enable media [ 507.009067][T19437] tipc: Invalid UDP bearer configuration [ 507.009114][T19437] tipc: Enabling of bearer rejected, failed to enable media [ 507.437027][T19480] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 508.367499][T19502] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.897360][T19530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.995852][T19535] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 508.996025][T19535] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 509.016004][T19533] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 509.047269][T19189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.123381][T19189] veth0_vlan: entered promiscuous mode [ 510.148186][T19189] veth1_vlan: entered promiscuous mode [ 510.303408][T19189] veth0_macvtap: entered promiscuous mode [ 510.427818][T19189] veth1_macvtap: entered promiscuous mode [ 510.463445][T19578] __nla_validate_parse: 22 callbacks suppressed [ 510.463466][T19578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3340'. [ 510.498765][T19579] vlan4: entered promiscuous mode [ 510.498786][T19579] hsr0: entered promiscuous mode [ 510.527140][T19578] hsr_slave_0: left promiscuous mode [ 510.537745][T19578] hsr_slave_1: left promiscuous mode [ 510.893130][T19587] 8021q: VLANs not supported on ipvlan0 [ 510.947991][T19189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.985129][T19189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.050308][T12259] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.196870][T19597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3343'. [ 511.196907][T19597] validate_nla: 19 callbacks suppressed [ 511.196930][T19597] netlink: 'syz.0.3343': attribute type 5 has an invalid length. [ 511.196944][T19597] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3343'. [ 511.351664][T19597] geneve2: entered promiscuous mode [ 511.351845][T19597] geneve2: entered allmulticast mode [ 511.405941][T12259] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.740270][T12266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.772979][T12262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.773000][T12262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.794092][T12266] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 511.795301][T12262] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 511.795338][T12262] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 511.795372][T12262] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.109888][T19610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3345'. [ 512.154326][T12262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.154350][T12262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.397063][T19625] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3349'. [ 512.595463][T19630] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3350'. [ 512.948112][T19634] C: renamed from lo (while UP) [ 513.024735][T19634] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 513.704059][ T2008] block nbd0: Possible stuck request ffff8880282de000: control (read@0,1024B). Runtime 210 seconds [ 513.704103][ T2008] block nbd0: Possible stuck request ffff8880282de1c0: control (read@1024,3072B). Runtime 210 seconds [ 514.017031][T19682] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 514.019159][T19682] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 514.027332][T19681] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3361'. [ 514.051318][T19682] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 514.057057][T19682] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 514.059045][T19682] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 514.307731][T19686] bond2: entered promiscuous mode [ 514.379616][T19689] macvlan2: entered promiscuous mode [ 514.379638][T19689] macvlan2: entered allmulticast mode [ 514.405160][T19689] bond2: (slave macvlan2): Opening slave failed [ 514.832937][T19711] netlink: 'syz.3.3367': attribute type 1 has an invalid length. [ 514.995845][T19717] IPVS: length: 239 != 24 [ 514.996580][T19716] IPVS: length: 239 != 24 [ 515.154191][T19680] rxe_eth0 speed is unknown, defaulting to 1000 [ 515.322639][T19728] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3372'. [ 515.457075][T19680] C speed is unknown, defaulting to 1000 [ 515.847070][T19741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.163662][T19755] netlink: 'syz.3.3381': attribute type 1 has an invalid length. [ 516.180796][ T5648] Bluetooth: hci4: command tx timeout [ 516.407326][T19764] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3383'. [ 516.443879][T19755] bridge2: entered promiscuous mode [ 516.475496][T19755] bond3: (slave bridge2): making interface the new active one [ 516.479565][T19755] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 516.605461][T19767] netlink: 'syz.1.3384': attribute type 12 has an invalid length. [ 516.658435][T19767] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 516.762663][T19777] syz.0.3385: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 516.762746][T19777] CPU: 1 UID: 0 PID: 19777 Comm: syz.0.3385 Not tainted syzkaller #0 PREEMPT(full) [ 516.762769][T19777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 516.762780][T19777] Call Trace: [ 516.762788][T19777] [ 516.762797][T19777] dump_stack_lvl+0xe8/0x150 [ 516.762833][T19777] warn_alloc+0x24d/0x270 [ 516.762855][T19777] ? stack_depot_save_flags+0x33/0x810 [ 516.762890][T19777] ? __pfx_warn_alloc+0x10/0x10 [ 516.762911][T19777] ? kasan_save_track+0x4f/0x80 [ 516.762936][T19777] ? __kasan_kmalloc+0x93/0xb0 [ 516.762963][T19777] ? xsk_init_queue+0x8a/0xe0 [ 516.762983][T19777] ? xsk_setsockopt+0x52a/0x960 [ 516.763004][T19777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.763038][T19777] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 516.763090][T19777] ? rcu_is_watching+0x16/0xb0 [ 516.763124][T19777] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 516.763146][T19777] ? __kmalloc_cache_noprof+0x31c/0x600 [ 516.763170][T19777] ? __kmalloc_cache_noprof+0x148/0x600 [ 516.763193][T19777] ? xskq_create+0x56/0x220 [ 516.763220][T19777] xskq_create+0x148/0x220 [ 516.763248][T19777] ? xsk_init_queue+0x8a/0xe0 [ 516.763273][T19777] xsk_init_queue+0x8a/0xe0 [ 516.763297][T19777] xsk_setsockopt+0x52a/0x960 [ 516.763321][T19777] ? __pfx_xsk_setsockopt+0x10/0x10 [ 516.763343][T19777] ? __pfx_aa_sk_perm+0x10/0x10 [ 516.763378][T19777] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 516.763411][T19777] ? __pfx_xsk_setsockopt+0x10/0x10 [ 516.763433][T19777] do_sock_setsockopt+0x17c/0x1b0 [ 516.763457][T19777] __x64_sys_setsockopt+0x13d/0x1b0 [ 516.763480][T19777] do_syscall_64+0x166/0x520 [ 516.763503][T19777] ? trace_irq_disable+0x3b/0x140 [ 516.763528][T19777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.763548][T19777] ? clear_bhb_loop+0x70/0xc0 [ 516.763572][T19777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.763592][T19777] RIP: 0033:0x7f7e0d1a8f19 [ 516.763610][T19777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.763627][T19777] RSP: 002b:00007f7e0b3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 516.763645][T19777] RAX: ffffffffffffffda RBX: 00007f7e0d426270 RCX: 00007f7e0d1a8f19 [ 516.763658][T19777] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 516.763668][T19777] RBP: 00007f7e0d237f6d R08: 0000000000000004 R09: 0000000000000000 [ 516.763679][T19777] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 516.763689][T19777] R13: 00007f7e0d426308 R14: 00007f7e0d426270 R15: 00007ffc31e58038 [ 516.763721][T19777] [ 516.763746][T19777] Mem-Info: [ 516.763754][T19777] active_anon:5990 inactive_anon:0 isolated_anon:0 [ 516.763754][T19777] active_file:2 inactive_file:43264 isolated_file:0 [ 516.763754][T19777] unevictable:0 dirty:44 writeback:0 [ 516.763754][T19777] slab_reclaimable:12237 slab_unreclaimable:123504 [ 516.763754][T19777] mapped:29282 shmem:529 pagetables:3490 [ 516.763754][T19777] sec_pagetables:0 bounce:0 [ 516.763754][T19777] kernel_misc_reclaimable:0 [ 516.763754][T19777] free:1290767 free_pcp:9035 free_cma:0 [ 516.763810][T19777] Node 0 active_anon:23960kB inactive_anon:0kB active_file:8kB inactive_file:172852kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117128kB dirty:176kB writeback:0kB shmem:2116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15948kB pagetables:13828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 516.763863][T19777] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 516.763909][T19777] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 516.763965][T19777] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 516.763999][T19777] Node 0 DMA32 free:1212144kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23960kB inactive_anon:0kB active_file:8kB inactive_file:172852kB unevictable:0kB writepending:176kB zspages:0kB present:3129332kB managed:2522828kB mlocked:0kB bounce:0kB free_pcp:33872kB local_pcp:19968kB free_cma:0kB [ 516.764056][T19777] lowmem_reserve[]: 0 0 1 1 1 [ 516.764084][T19777] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 516.764135][T19777] lowmem_reserve[]: 0 0 0 0 0 [ 516.764165][T19777] Node 1 Normal free:3935564kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2264kB local_pcp:2264kB free_cma:0kB [ 516.764218][T19777] lowmem_reserve[]: 0 [ 516.978019][T19782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3386'. [ 517.082301][T19777] 0 0 0 0 [ 517.082333][T19777] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 517.082456][T19777] Node 0 DMA32: 1048*4kB (ME) 644*8kB (ME) 109*16kB (UM) 33*32kB (UM) 218*64kB (UME) 464*128kB (UME) 371*256kB (UM) 235*512kB (UM) 154*1024kB (UM) 8*2048kB (UME) 180*4096kB (UM) = 1212144kB [ 517.082596][T19777] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 517.082683][T19777] Node 1 Normal: 2*4kB (M) 2*8kB (UM) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 959*4096kB (M) = 3935816kB [ 517.082821][T19777] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 517.082836][T19777] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 517.082851][T19777] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 517.082865][T19777] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 517.082879][T19777] 43791 total pagecache pages [ 517.082890][T19777] 0 pages in swap cache [ 517.082895][T19777] Free swap = 124996kB [ 517.082902][T19777] Total swap = 124996kB [ 517.082909][T19777] 2097051 pages RAM [ 517.082915][T19777] 0 pages HighMem/MovableOnly [ 517.082922][T19777] 434380 pages reserved [ 517.082928][T19777] 0 pages cma reserved [ 517.678698][T19799] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 517.843820][T19680] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.844000][T19680] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.844130][T19680] bridge_slave_0: entered allmulticast mode [ 517.845961][T19680] bridge_slave_0: entered promiscuous mode [ 517.878374][T19680] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.878601][T19680] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.879063][T19680] bridge_slave_1: entered allmulticast mode [ 517.904863][T19680] bridge_slave_1: entered promiscuous mode [ 517.946156][T19680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.949519][T19680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.036071][T19680] team0: Port device team_slave_0 added [ 518.045846][T19680] team0: Port device team_slave_1 added [ 518.119736][T19680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.119754][T19680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.119779][T19680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.167478][T19680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.167502][T19680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.167528][T19680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.261217][ T5648] Bluetooth: hci4: command tx timeout [ 518.267201][T19680] hsr_slave_0: entered promiscuous mode [ 518.268281][T19680] hsr_slave_1: entered promiscuous mode [ 518.504078][T19680] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.504112][T19680] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.504134][T19680] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 56723 - 0 [ 518.632131][T19680] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.632167][T19680] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.632193][T19680] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 56723 - 0 [ 518.751910][T19680] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.751947][T19680] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.751972][T19680] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 56723 - 0 [ 519.597926][T19775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 519.692486][T19680] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 519.774122][T19680] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 519.783737][T19680] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 519.851869][T19680] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 519.852742][T19817] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3394'. [ 519.856541][T19680] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 519.960312][T19680] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 519.985172][T19680] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 520.005102][T19680] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 520.340384][ T5648] Bluetooth: hci4: command tx timeout [ 520.645442][T19849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3400'. [ 520.738363][T19680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.978707][T19680] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.028461][T12262] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.028598][T12262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.079484][T12269] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.079594][T12269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.160945][T19874] netlink: 'syz.0.3404': attribute type 12 has an invalid length. [ 521.201968][T19870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3403'. [ 521.244553][T19870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3403'. [ 521.288335][T19870] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 521.514104][T19875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3404'. [ 521.518682][T19878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3405'. [ 521.740867][T19880] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3406'. [ 521.797573][T19882] xt_TCPMSS: Only works on TCP SYN packets [ 521.833700][T19886] netlink: 872 bytes leftover after parsing attributes in process `syz.4.3410'. [ 522.069108][T19898] netlink: 404 bytes leftover after parsing attributes in process `syz.0.3409'. [ 522.069135][T19898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3409'. [ 522.069153][T19898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3409'. [ 522.069168][T19898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3409'. [ 522.266037][T19905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3413'. [ 522.420374][ T5648] Bluetooth: hci4: command tx timeout [ 522.466508][T19910] x_tables: duplicate underflow at hook 3 [ 522.487889][T19918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3415'. [ 522.729884][T19680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.903171][T19680] veth0_vlan: entered promiscuous mode [ 522.933669][T19680] veth1_vlan: entered promiscuous mode [ 523.134181][T19936] netlink: 'syz.4.3420': attribute type 32 has an invalid length. [ 523.185306][T19680] veth0_macvtap: entered promiscuous mode [ 523.205736][T19680] veth1_macvtap: entered promiscuous mode [ 523.254475][T19680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.299593][T19680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.431950][T12267] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.431998][T12267] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.432029][T12267] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.432063][T12267] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.610768][T12261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.610790][T12261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.756262][ T7718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.756285][ T7718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.405337][T19963] syzkaller0: entered promiscuous mode [ 524.405361][T19963] syzkaller0: entered allmulticast mode [ 524.491689][T19971] netlink: 'syz.2.3356': attribute type 1 has an invalid length. [ 524.934898][T19977] netlink: 'syz.3.3431': attribute type 1 has an invalid length. [ 524.937718][T19978] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 524.977506][T19977] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 525.597008][T19985] syzkaller1: entered promiscuous mode [ 525.597187][T19985] syzkaller1: entered allmulticast mode [ 525.893563][T20001] ip6tnl0: Caught tx_queue_len zero misconfig [ 526.601819][T20021] __nla_validate_parse: 36 callbacks suppressed [ 526.601842][T20021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3442'. [ 526.602232][T20021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3442'. [ 526.603730][T20021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3442'. [ 526.604029][T20021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3442'. [ 526.795373][T20028] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 526.913361][T20032] syzkaller0: entered promiscuous mode [ 526.913384][T20032] syzkaller0: entered allmulticast mode [ 527.166532][T20037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3447'. [ 527.202128][T12262] IPVS: starting estimator thread 0... [ 527.251504][T20036] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3447'. [ 527.304181][T20039] IPVS: using max 28 ests per chain, 67200 per kthread [ 527.360734][T20041] netlink: 'syz.4.3450': attribute type 1 has an invalid length. [ 527.481812][T20041] bond1: (slave gretap1): making interface the new active one [ 527.483898][T20041] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 527.732974][T20051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3453'. [ 528.328717][T20066] vlan1: entered promiscuous mode [ 528.336328][T20066] vlan1: entered allmulticast mode [ 528.336352][T20066] veth0_vlan: entered allmulticast mode [ 528.745656][T20077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3460'. [ 528.855264][T20071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3456'. [ 529.331272][T20086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3463'. [ 530.897221][T20114] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 531.283420][T20142] netlink: 'syz.0.3478': attribute type 2 has an invalid length. [ 531.405555][T20145] netlink: 'syz.0.3478': attribute type 2 has an invalid length. [ 531.516666][T20157] netlink: 'syz.1.3481': attribute type 3 has an invalid length. [ 531.675650][T20162] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 531.711216][T20162] bond6 (unregistering): Released all slaves [ 531.722429][T20166] netlink: 'syz.0.3483': attribute type 32 has an invalid length. [ 531.722449][T20166] __nla_validate_parse: 3 callbacks suppressed [ 531.722458][T20166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3483'. [ 531.925393][T20175] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3486'. [ 532.047628][T20166] bond3: Setting coupled_control to off (0) [ 532.339640][T20193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3489'. [ 533.228453][T20225] netlink: 'syz.3.3497': attribute type 1 has an invalid length. [ 533.228476][T20225] netlink: 'syz.3.3497': attribute type 7 has an invalid length. [ 533.228489][T20225] netlink: 'syz.3.3497': attribute type 8 has an invalid length. [ 533.228507][T20225] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3497'. [ 533.228523][T20225] NCSI netlink: No device for ifindex 65584 [ 533.443336][T20231] IPv6: NLM_F_REPLACE set, but no existing node found! [ 533.843991][T20243] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 534.214580][T20254] ip_tables: iptables: counters copy to user failed while replacing table [ 534.321560][T20254] batman_adv: batadv0: Adding interface: syzkaller0 [ 534.321579][T20254] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.375549][T20254] batman_adv: batadv0: Interface activated: syzkaller0 [ 534.493031][T20260] batadv_slave_1: entered promiscuous mode [ 534.494741][T20260] batadv_slave_1: left promiscuous mode [ 534.570482][T20254] netlink: 'syz.1.3510': attribute type 10 has an invalid length. [ 534.664471][T20252] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 534.746315][T20252] batman_adv: batadv0: Removing interface: syzkaller0 [ 534.786769][T20278] syzkaller0: entered promiscuous mode [ 534.786801][T20278] syzkaller0: entered allmulticast mode [ 535.133849][T20289] veth1_vlan: entered allmulticast mode [ 535.235330][T20297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3520'. [ 535.345571][T20303] FAULT_INJECTION: forcing a failure. [ 535.345571][T20303] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 535.345601][T20303] CPU: 1 UID: 0 PID: 20303 Comm: syz.0.3518 Not tainted syzkaller #0 PREEMPT(full) [ 535.345623][T20303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 535.345635][T20303] Call Trace: [ 535.345642][T20303] [ 535.345651][T20303] dump_stack_lvl+0xe8/0x150 [ 535.345686][T20303] should_fail_ex+0x3eb/0x540 [ 535.345715][T20303] _copy_from_user+0x2d/0xb0 [ 535.345748][T20303] __copy_msghdr+0x390/0x590 [ 535.345776][T20303] ___sys_sendmsg+0x213/0x360 [ 535.345795][T20303] ? __lock_acquire+0x747/0x2de0 [ 535.345824][T20303] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.345884][T20303] ? __fget_files+0x3a2/0x420 [ 535.345907][T20303] ? __fget_files+0x2a/0x420 [ 535.345939][T20303] __x64_sys_sendmsg+0x1b1/0x290 [ 535.345964][T20303] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 535.346008][T20303] do_syscall_64+0x166/0x520 [ 535.346031][T20303] ? trace_irq_disable+0x3b/0x140 [ 535.346059][T20303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.346079][T20303] ? clear_bhb_loop+0x70/0xc0 [ 535.346102][T20303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.346121][T20303] RIP: 0033:0x7f7e0d1a8f19 [ 535.346138][T20303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.346155][T20303] RSP: 002b:00007f7e0b3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.346175][T20303] RAX: ffffffffffffffda RBX: 00007f7e0d426270 RCX: 00007f7e0d1a8f19 [ 535.346189][T20303] RDX: 0000000020004801 RSI: 0000200000000540 RDI: 0000000000000005 [ 535.346201][T20303] RBP: 00007f7e0b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 535.346213][T20303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.346224][T20303] R13: 00007f7e0d426308 R14: 00007f7e0d426270 R15: 00007ffc31e58038 [ 535.346256][T20303] [ 535.645975][T20301] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3521'. [ 535.666094][T20301] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3521'. [ 535.722775][T20316] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3522'. [ 536.014921][T20321] netlink: 'syz.2.3524': attribute type 5 has an invalid length. [ 536.447800][T20338] ip_tables: iptables: counters copy to user failed while replacing table [ 536.648335][T20338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3529'. [ 536.854707][T20352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3531'. [ 537.505342][T20368] xt_l2tp: missing protocol rule (udp|l2tpip) [ 537.803379][T20378] syzkaller0: entered promiscuous mode [ 537.803403][T20378] syzkaller0: entered allmulticast mode [ 537.824253][T20378] FAULT_INJECTION: forcing a failure. [ 537.824253][T20378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.824281][T20378] CPU: 1 UID: 0 PID: 20378 Comm: syz.0.3538 Not tainted syzkaller #0 PREEMPT(full) [ 537.824303][T20378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 537.824314][T20378] Call Trace: [ 537.824321][T20378] [ 537.824330][T20378] dump_stack_lvl+0xe8/0x150 [ 537.824364][T20378] should_fail_ex+0x3eb/0x540 [ 537.824394][T20378] _copy_from_iter+0x1d3/0x1680 [ 537.824415][T20378] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 537.824451][T20378] ? __pfx__copy_from_iter+0x10/0x10 [ 537.824477][T20378] ? dev_get_by_index+0x22/0x2d0 [ 537.824502][T20378] ? dev_get_by_index+0x22/0x2d0 [ 537.824533][T20378] packet_sendmsg+0x31be/0x5330 [ 537.824560][T20378] ? aa_label_sk_perm+0x532/0x6e0 [ 537.824585][T20378] ? up_write+0x19d/0x4a0 [ 537.824617][T20378] ? __lock_acquire+0x747/0x2de0 [ 537.824649][T20378] ? __pfx_process_measurement+0x10/0x10 [ 537.824679][T20378] ? lock_acquire+0x115/0x350 [ 537.824707][T20378] ? __lock_acquire+0x747/0x2de0 [ 537.824740][T20378] ? __pfx_packet_sendmsg+0x10/0x10 [ 537.824763][T20378] ? aa_sk_perm+0x6ff/0x8f0 [ 537.824787][T20378] ? __lock_acquire+0x747/0x2de0 [ 537.824815][T20378] ? __pfx_lock_chain_count+0x10/0x10 [ 537.824837][T20378] ? __pfx_aa_sk_perm+0x10/0x10 [ 537.824867][T20378] ? aa_sock_msg_perm+0x144/0x210 [ 537.824901][T20378] ? apparmor_socket_sendmsg+0x26d/0x360 [ 537.824929][T20378] ? __pfx_packet_sendmsg+0x10/0x10 [ 537.824952][T20378] sock_sendmsg_nosec+0x14e/0x190 [ 537.824982][T20378] ____sys_sendmsg+0x54e/0x850 [ 537.825009][T20378] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.825047][T20378] ? import_iovec+0x73/0xa0 [ 537.825074][T20378] ___sys_sendmsg+0x2a5/0x360 [ 537.825093][T20378] ? __lock_acquire+0x747/0x2de0 [ 537.825121][T20378] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.825182][T20378] ? __fget_files+0x3a2/0x420 [ 537.825205][T20378] ? __fget_files+0x2a/0x420 [ 537.825238][T20378] __x64_sys_sendmsg+0x1b1/0x290 [ 537.825262][T20378] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 537.825307][T20378] do_syscall_64+0x166/0x520 [ 537.825330][T20378] ? trace_irq_disable+0x3b/0x140 [ 537.825355][T20378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.825374][T20378] ? clear_bhb_loop+0x70/0xc0 [ 537.825397][T20378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.825416][T20378] RIP: 0033:0x7f7e0d1a8f19 [ 537.825434][T20378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.825450][T20378] RSP: 002b:00007f7e0dfb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.825470][T20378] RAX: ffffffffffffffda RBX: 00007f7e0d426090 RCX: 00007f7e0d1a8f19 [ 537.825484][T20378] RDX: 0000000020004801 RSI: 0000200000000540 RDI: 0000000000000006 [ 537.825496][T20378] RBP: 00007f7e0dfb0090 R08: 0000000000000000 R09: 0000000000000000 [ 537.825508][T20378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.825519][T20378] R13: 00007f7e0d426128 R14: 00007f7e0d426090 R15: 00007ffc31e58038 [ 537.825556][T20378] [ 538.229030][T20391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3544'. [ 539.004739][T20411] ieee802154 phy0 wpan0: encryption failed: -22 [ 539.099472][T20416] team0: No ports can be present during mode change [ 539.117114][T20415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3549'. [ 539.379615][T20427] netlink: 'syz.1.3554': attribute type 3 has an invalid length. [ 539.379641][T20427] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3554'. [ 539.908802][T20455] netlink: 'syz.3.3564': attribute type 1 has an invalid length. [ 539.992809][T20463] ip_tables: iptables: counters copy to user failed while replacing table [ 540.061588][T20455] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3564'. [ 540.085752][T20458] bond6: (slave bridge4): Enslaving as a backup interface with an up link [ 540.184593][T20467] syzkaller0: entered promiscuous mode [ 540.184619][T20467] syzkaller0: entered allmulticast mode [ 540.284441][T20474] ip_tables: iptables: counters copy to user failed while replacing table [ 543.409712][T20455] 8021q: adding VLAN 0 to HW filter on device bond6 [ 543.418985][T20463] syzkaller1: entered promiscuous mode [ 543.419172][T20463] syzkaller1: entered allmulticast mode [ 543.426457][T12259] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 543.577289][T12269] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 543.941773][ T2008] block nbd0: Possible stuck request ffff8880282de000: control (read@0,1024B). Runtime 240 seconds [ 543.941814][ T2008] block nbd0: Possible stuck request ffff8880282de1c0: control (read@1024,3072B). Runtime 240 seconds [ 544.089451][T20500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3576'. [ 544.089491][T20500] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3576'. [ 544.159502][T20505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3576'. [ 544.159530][T20505] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3576'. [ 544.307472][T20516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3575'. [ 544.959034][T20533] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3581'. [ 544.968942][T20533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3581'. [ 545.477958][T20544] syzkaller0: entered promiscuous mode [ 545.477981][T20544] syzkaller0: entered allmulticast mode [ 545.748758][T20557] netlink: 'syz.4.3587': attribute type 4 has an invalid length. [ 545.749440][T20556] syzkaller0: entered promiscuous mode [ 545.749459][T20556] syzkaller0: entered allmulticast mode [ 545.809164][T20556] FAULT_INJECTION: forcing a failure. [ 545.809164][T20556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.809197][T20556] CPU: 1 UID: 0 PID: 20556 Comm: syz.0.3585 Not tainted syzkaller #0 PREEMPT(full) [ 545.809219][T20556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 545.809231][T20556] Call Trace: [ 545.809238][T20556] [ 545.809246][T20556] dump_stack_lvl+0xe8/0x150 [ 545.809289][T20556] should_fail_ex+0x3eb/0x540 [ 545.809319][T20556] _copy_from_iter+0x1d3/0x1680 [ 545.809343][T20556] ? sock_alloc_send_pskb+0xc87/0xd90 [ 545.809377][T20556] ? __pfx__copy_from_iter+0x10/0x10 [ 545.809407][T20556] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 545.809434][T20556] skb_copy_datagram_from_iter+0xe6/0x720 [ 545.809460][T20556] ? dev_get_by_index+0x22/0x2d0 [ 545.809485][T20556] ? skb_put+0x112/0x210 [ 545.809508][T20556] packet_sendmsg+0x390b/0x5330 [ 545.809563][T20556] ? __pfx_process_measurement+0x10/0x10 [ 545.809593][T20556] ? lock_acquire+0x115/0x350 [ 545.809619][T20556] ? __lock_acquire+0x747/0x2de0 [ 545.809651][T20556] ? __pfx_packet_sendmsg+0x10/0x10 [ 545.809674][T20556] ? aa_sk_perm+0x6ff/0x8f0 [ 545.809699][T20556] ? __lock_acquire+0x747/0x2de0 [ 545.809727][T20556] ? lock_chain_count+0xe/0x20 [ 545.809749][T20556] ? __pfx_aa_sk_perm+0x10/0x10 [ 545.809777][T20556] ? aa_sock_msg_perm+0x144/0x210 [ 545.809806][T20556] ? apparmor_socket_sendmsg+0x26d/0x360 [ 545.809831][T20556] ? __pfx_packet_sendmsg+0x10/0x10 [ 545.809853][T20556] sock_sendmsg_nosec+0x14e/0x190 [ 545.809878][T20556] ____sys_sendmsg+0x54e/0x850 [ 545.809903][T20556] ? __pfx_____sys_sendmsg+0x10/0x10 [ 545.809932][T20556] ? import_iovec+0x73/0xa0 [ 545.809956][T20556] ___sys_sendmsg+0x2a5/0x360 [ 545.809974][T20556] ? __lock_acquire+0x747/0x2de0 [ 545.810000][T20556] ? __pfx____sys_sendmsg+0x10/0x10 [ 545.810058][T20556] ? __fget_files+0x3a2/0x420 [ 545.810082][T20556] ? __fget_files+0x2a/0x420 [ 545.810114][T20556] __x64_sys_sendmsg+0x1b1/0x290 [ 545.810139][T20556] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 545.810182][T20556] do_syscall_64+0x166/0x520 [ 545.810206][T20556] ? trace_irq_disable+0x3b/0x140 [ 545.810231][T20556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.810248][T20556] ? clear_bhb_loop+0x70/0xc0 [ 545.810277][T20556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.810294][T20556] RIP: 0033:0x7f7e0d1a8f19 [ 545.810312][T20556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.810328][T20556] RSP: 002b:00007f7e0dfb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.810349][T20556] RAX: ffffffffffffffda RBX: 00007f7e0d426090 RCX: 00007f7e0d1a8f19 [ 545.810363][T20556] RDX: 0000000020004801 RSI: 0000200000000540 RDI: 0000000000000006 [ 545.810376][T20556] RBP: 00007f7e0dfb0090 R08: 0000000000000000 R09: 0000000000000000 [ 545.810388][T20556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.810399][T20556] R13: 00007f7e0d426128 R14: 00007f7e0d426090 R15: 00007ffc31e58038 [ 545.810431][T20556] [ 546.248845][T20574] netlink: 'syz.4.3591': attribute type 21 has an invalid length. [ 546.248900][T20574] netlink: 'syz.4.3591': attribute type 6 has an invalid length. [ 546.248912][T20574] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3591'. [ 546.259722][T20575] netlink: 'syz.4.3591': attribute type 21 has an invalid length. [ 546.259775][T20575] netlink: 'syz.4.3591': attribute type 6 has an invalid length. [ 546.295492][T20575] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3591'. [ 546.438576][T20581] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 546.465402][T20591] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 546.483779][T20579] nbd: must specify a device to reconfigure [ 546.616437][T20595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3596'. [ 547.062017][T20609] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 547.067681][T20609] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 547.069507][T20609] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 547.373352][T20622] x_tables: duplicate underflow at hook 1 [ 548.377494][T20646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 548.512426][T20648] ipt_REJECT: TCP_RESET invalid for non-tcp [ 548.765946][T20655] netlink: 'syz.4.3613': attribute type 1 has an invalid length. [ 548.767072][T20655] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 549.251471][T20662] syzkaller0: entered promiscuous mode [ 549.251499][T20662] syzkaller0: entered allmulticast mode [ 549.253700][T20666] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 549.257989][T20666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 549.351722][T20665] macsec1: entered allmulticast mode [ 549.356977][T20665] batman_adv: batadv0: Adding interface: macsec1 [ 549.356992][T20665] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.357019][T20665] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 549.634788][T20672] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 549.634873][T20672] gretap1: entered promiscuous mode [ 549.634918][T20672] gretap1: entered allmulticast mode [ 552.606569][T20684] macsec1: entered allmulticast mode [ 552.607440][T20684] batman_adv: batadv0: Adding interface: macsec1 [ 552.607453][T20684] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.607480][T20684] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 552.952439][T20698] __nla_validate_parse: 5 callbacks suppressed [ 552.952459][T20698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3626'. [ 553.098226][T20712] ip6tnl0: Caught tx_queue_len zero misconfig [ 553.712821][T20733] syzkaller0: entered promiscuous mode [ 553.712863][T20733] syzkaller0: entered allmulticast mode [ 553.724693][T20734] syzkaller0: entered promiscuous mode [ 553.724716][T20734] syzkaller0: entered allmulticast mode [ 554.227339][T20758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3641'. [ 554.802121][T20771] netlink: 'syz.1.3647': attribute type 1 has an invalid length. [ 554.832163][ T5648] Bluetooth: hci5: command 0x0406 tx timeout [ 554.845847][T20771] 8021q: adding VLAN 0 to HW filter on device bond1 [ 554.863823][T20771] bond1: (slave geneve2): making interface the new active one [ 554.866264][T20771] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 555.561360][T20805] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3653'. [ 555.562706][T19682] Bluetooth: hci5: unexpected cc 0x1003 length: 67 > 9 [ 555.562737][T19682] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 555.564003][T20805] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3653'. [ 555.569120][T20805] netlink: 'syz.3.3653': attribute type 1 has an invalid length. [ 557.515014][T20825] syzkaller0: entered promiscuous mode [ 557.515046][T20825] syzkaller0: entered allmulticast mode [ 557.829472][T20775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 558.538112][T20853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3663'. [ 558.657535][T20854] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3664'. [ 559.468369][T20873] lo: Caught tx_queue_len zero misconfig [ 559.677130][T20878] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3671'. [ 559.677154][T20878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3671'. [ 559.735119][T20881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3673'. [ 559.760292][T20888] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3673'. [ 559.942803][T20893] syzkaller0: entered promiscuous mode [ 559.942827][T20893] syzkaller0: entered allmulticast mode [ 560.088387][T20892] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3674'. [ 561.217161][T20935] FAULT_INJECTION: forcing a failure. [ 561.217161][T20935] name failslab, interval 1, probability 0, space 0, times 0 [ 561.217191][T20935] CPU: 0 UID: 0 PID: 20935 Comm: syz.0.3685 Not tainted syzkaller #0 PREEMPT(full) [ 561.217213][T20935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 561.217225][T20935] Call Trace: [ 561.217233][T20935] [ 561.217241][T20935] dump_stack_lvl+0xe8/0x150 [ 561.217276][T20935] should_fail_ex+0x3eb/0x540 [ 561.217303][T20935] ? __alloc_skb+0x1db/0x7a0 [ 561.217322][T20935] should_failslab+0xa8/0x100 [ 561.217352][T20935] ? __alloc_skb+0x1db/0x7a0 [ 561.217370][T20935] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 561.217394][T20935] ? __alloc_skb+0x18d/0x7a0 [ 561.217413][T20935] ? __alloc_skb+0x1db/0x7a0 [ 561.217438][T20935] __alloc_skb+0x1db/0x7a0 [ 561.217460][T20935] netlink_sendmsg+0x5cd/0xb20 [ 561.217496][T20935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.217528][T20935] ? aa_sock_msg_perm+0x144/0x210 [ 561.217561][T20935] ? apparmor_socket_sendmsg+0x98/0x360 [ 561.217589][T20935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.217616][T20935] sock_sendmsg_nosec+0x14e/0x190 [ 561.217645][T20935] ____sys_sendmsg+0x54e/0x850 [ 561.217673][T20935] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.217709][T20935] ? import_iovec+0x73/0xa0 [ 561.217737][T20935] ___sys_sendmsg+0x2a5/0x360 [ 561.217756][T20935] ? __lock_acquire+0x747/0x2de0 [ 561.217786][T20935] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.217813][T20935] ? kstrtouint+0x6e/0xe0 [ 561.217861][T20935] ? __fget_files+0x3a2/0x420 [ 561.217884][T20935] ? __fget_files+0x2a/0x420 [ 561.217915][T20935] __sys_sendmmsg+0x273/0x4e0 [ 561.217941][T20935] ? __pfx___sys_sendmmsg+0x10/0x10 [ 561.217971][T20935] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 561.218007][T20935] ? ksys_write+0x242/0x270 [ 561.218033][T20935] ? __pfx_ksys_write+0x10/0x10 [ 561.218064][T20935] __x64_sys_sendmmsg+0xa0/0xc0 [ 561.218088][T20935] do_syscall_64+0x166/0x520 [ 561.218111][T20935] ? trace_irq_disable+0x3b/0x140 [ 561.218136][T20935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.218155][T20935] ? clear_bhb_loop+0x70/0xc0 [ 561.218179][T20935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.218197][T20935] RIP: 0033:0x7f7e0d1a8f19 [ 561.218215][T20935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.218232][T20935] RSP: 002b:00007f7e0dfd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 561.218252][T20935] RAX: ffffffffffffffda RBX: 00007f7e0d425fa0 RCX: 00007f7e0d1a8f19 [ 561.218266][T20935] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 561.218279][T20935] RBP: 00007f7e0dfd1090 R08: 0000000000000000 R09: 0000000000000000 [ 561.218291][T20935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.218302][T20935] R13: 00007f7e0d426038 R14: 00007f7e0d425fa0 R15: 00007ffc31e58038 [ 561.218335][T20935] [ 561.686513][T20942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3686'. [ 561.724372][T20941] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3686'. [ 561.839231][T20949] veth0: entered promiscuous mode [ 561.839420][T20949] veth0: left promiscuous mode [ 561.861772][T20949] netlink: 'syz.3.3689': attribute type 11 has an invalid length. [ 561.861794][T20949] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3689'. [ 562.585920][T20964] syzkaller0: entered promiscuous mode [ 562.585943][T20964] syzkaller0: entered allmulticast mode [ 562.984399][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.183846][T12271] IPVS: starting estimator thread 0... [ 563.200927][T20990] lo: Caught tx_queue_len zero misconfig [ 563.277910][T20993] IPVS: using max 31 ests per chain, 74400 per kthread [ 563.712675][T20997] team0: Device xfrm0 is of different type [ 563.779740][T20999] tipc: Enabled bearer , priority 0 [ 564.128854][T21020] syzkaller0: entered promiscuous mode [ 564.128877][T21020] syzkaller0: entered allmulticast mode [ 564.383856][T21032] netlink: 'syz.3.3707': attribute type 2 has an invalid length. [ 564.702476][T21038] lo: entered promiscuous mode [ 564.726074][T21038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 564.753748][T21038] __nla_validate_parse: 1 callbacks suppressed [ 564.753767][T21038] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3709'. [ 564.828472][T21044] netlink: 488 bytes leftover after parsing attributes in process `syz.0.3712'. [ 564.828512][T21044] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3712'. [ 565.102438][T21016] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3703'. [ 565.131791][T21019] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3703'. [ 565.930369][T21060] syzkaller0: entered promiscuous mode [ 565.930394][T21060] syzkaller0: entered allmulticast mode [ 566.338043][T21083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3721'. [ 566.656333][T21089] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 567.051362][T21099] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3725'. [ 569.717591][T21105] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 569.727520][T21104] veth1_macvtap: left promiscuous mode [ 569.838183][T21104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3727'. [ 569.853673][T21104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3727'. [ 569.948237][T21110] syzkaller0: entered promiscuous mode [ 569.948260][T21110] syzkaller0: entered allmulticast mode [ 570.072146][T21121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3729'. [ 570.120520][T21119] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3731'. [ 570.195430][T21117] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3729'. [ 570.407070][T21113] bridge0: port 3(veth0) entered blocking state [ 570.407277][T21113] bridge0: port 3(veth0) entered disabled state [ 570.407446][T21113] veth0: entered allmulticast mode [ 570.444371][T21113] veth0: entered promiscuous mode [ 570.447859][T21113] bridge0: port 3(veth0) entered blocking state [ 570.447975][T21113] bridge0: port 3(veth0) entered forwarding state [ 571.040831][T21139] ipvlan0: Caught tx_queue_len zero misconfig [ 571.250657][T21149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3735'. [ 571.371889][T21134] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3733'. [ 571.399541][T21134] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3733'. [ 571.479014][T21153] netlink: 'syz.2.3738': attribute type 1 has an invalid length. [ 571.521878][T21154] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3738'. [ 571.557376][T21162] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3739'. [ 571.564441][T21153] bond1: entered promiscuous mode [ 571.568378][T21153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 571.590337][T21154] bond1: entered allmulticast mode [ 571.671460][T21157] bond1: (slave bridge1): making interface the new active one [ 571.671485][T21157] bridge1: entered promiscuous mode [ 571.671659][T21157] bridge1: entered allmulticast mode [ 571.698648][T21157] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 571.712433][T21161] netlink: 'syz.3.3740': attribute type 30 has an invalid length. [ 571.936400][T21165] bond0: (slave bond_slave_1): Releasing backup interface [ 572.972651][T21229] netlink: 'syz.4.3746': attribute type 3 has an invalid length. [ 573.094867][T21231] lo speed is unknown, defaulting to 1000 [ 573.094934][T21231] lo speed is unknown, defaulting to 1000 [ 573.097786][T21231] lo speed is unknown, defaulting to 1000 [ 573.125714][T21231] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 573.125751][T21231] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 573.125815][T21231] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 573.295919][T21231] lo speed is unknown, defaulting to 1000 [ 573.315994][T21231] lo speed is unknown, defaulting to 1000 [ 573.364240][T21231] lo speed is unknown, defaulting to 1000 [ 573.383055][T19682] Bluetooth: hci4: connection err: -111 [ 573.399546][T21231] lo speed is unknown, defaulting to 1000 [ 573.417491][T21231] lo speed is unknown, defaulting to 1000 [ 573.436786][T21231] lo speed is unknown, defaulting to 1000 [ 573.499130][T21231] lo speed is unknown, defaulting to 1000 [ 573.516858][T21231] lo speed is unknown, defaulting to 1000 [ 573.536135][T21237] netlink: 'syz.0.3748': attribute type 83 has an invalid length. [ 573.579414][T21231] lo speed is unknown, defaulting to 1000 [ 574.512734][ T2008] block nbd0: Possible stuck request ffff8880282de000: control (read@0,1024B). Runtime 270 seconds [ 574.512775][ T2008] block nbd0: Possible stuck request ffff8880282de1c0: control (read@1024,3072B). Runtime 270 seconds [ 574.842555][T21268] __nla_validate_parse: 9 callbacks suppressed [ 574.842576][T21268] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3754'. [ 574.842950][T21269] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3754'. [ 575.251808][T21287] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3757'. [ 577.027444][T21342] ip_tables: iptables: counters copy to user failed while replacing table [ 577.941824][T21362] netlink: 'syz.3.3770': attribute type 64 has an invalid length. [ 577.941845][T21362] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3770'. [ 578.648118][T21382] netlink: 'syz.3.3774': attribute type 2 has an invalid length. [ 578.992197][T21396] netlink: 'syz.3.3778': attribute type 1 has an invalid length. [ 579.077750][T21397] veth0: Caught tx_queue_len zero misconfig [ 579.345730][T21409] IPVS: ip_vs_add_dest(): server weight less than zero [ 579.524611][T21417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3781'. [ 579.604476][T21417] bond0: entered promiscuous mode [ 579.604500][T21417] bond_slave_0: entered promiscuous mode [ 579.604701][T21417] bond_slave_1: entered promiscuous mode [ 579.605875][T21407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3781'. [ 579.605898][T21407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3781'. [ 579.605913][T21407] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3781'. [ 579.909601][T21428] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3784'. [ 580.599340][T21468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3796'. [ 580.599373][T21468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3796'. [ 580.766587][T21471] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3799'. [ 580.766613][T21471] veth0_to_bond: default FDB implementation only supports local addresses [ 580.767032][T21467] netlink: 'syz.2.3797': attribute type 4 has an invalid length. [ 580.767049][T21467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3797'. [ 581.015096][T21481] x_tables: duplicate underflow at hook 2 [ 581.367227][T21506] netlink: 'syz.4.3807': attribute type 2 has an invalid length. [ 581.432491][T21506] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 581.467956][T21508] lo: left promiscuous mode [ 581.468157][T21508] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 581.590893][T21508] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3808'. [ 582.089366][T21539] xt_hashlimit: size too large, truncated to 1048576 [ 582.107267][T21540] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 582.220851][T21538] netlink: 'syz.0.3819': attribute type 1 has an invalid length. [ 582.378003][T21552] Cannot find add_set index 0 as target [ 582.808117][T21562] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3825'. [ 582.839421][T21565] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3824'. [ 582.864154][T21565] gretap0: entered promiscuous mode [ 583.155170][T21573] netlink: 'syz.1.3826': attribute type 3 has an invalid length. [ 583.303329][T21583] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3828'. [ 583.585862][T21592] ipip0: entered promiscuous mode [ 583.704677][T21594] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 583.736963][T21552] infiniband syz2: set active [ 583.739858][T21552] infiniband syz2: added bridge_slave_1 [ 583.783492][T21552] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 583.827493][T21552] infiniband syz2: Couldn't open port 1 [ 583.827743][T21552] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 583.827773][T21552] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 583.827818][T21552] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 583.930324][T21552] RDS/IB: syz2: added [ 583.930387][T21552] smc: adding ib device syz2 with port count 1 [ 583.930700][T21552] smc: ib device syz2 port 1 has pnetid S (user defined) [ 584.060213][T21594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3832'. [ 584.067444][T21594] hsr_slave_0: left promiscuous mode [ 584.097467][T21594] hsr_slave_1: left promiscuous mode [ 584.158935][T21601] netlink: 'syz.2.3834': attribute type 8 has an invalid length. [ 584.619181][T21607] veth1_to_bond: entered promiscuous mode [ 584.637374][T21606] FAULT_INJECTION: forcing a failure. [ 584.637374][T21606] name failslab, interval 1, probability 0, space 0, times 0 [ 584.637408][T21606] CPU: 1 UID: 0 PID: 21606 Comm: syz.3.3836 Not tainted syzkaller #0 PREEMPT(full) [ 584.637430][T21606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 584.637441][T21606] Call Trace: [ 584.637449][T21606] [ 584.637457][T21606] dump_stack_lvl+0xe8/0x150 [ 584.637492][T21606] should_fail_ex+0x3eb/0x540 [ 584.637522][T21606] should_failslab+0xa8/0x100 [ 584.637551][T21606] ? skb_clone+0x212/0x3a0 [ 584.637573][T21606] kmem_cache_alloc_noprof+0x9c/0x600 [ 584.637599][T21606] ? skb_clone+0x212/0x3a0 [ 584.637628][T21606] skb_clone+0x212/0x3a0 [ 584.637655][T21606] __netlink_deliver_tap+0x355/0x6e0 [ 584.637696][T21606] ? netlink_deliver_tap+0x2e/0x1b0 [ 584.637726][T21606] netlink_deliver_tap+0x19c/0x1b0 [ 584.637755][T21606] netlink_sendskb+0x68/0x140 [ 584.637783][T21606] netlink_rcv_skb+0x2a4/0x4a0 [ 584.637811][T21606] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 584.637834][T21606] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 584.637875][T21606] ? netlink_deliver_tap+0x2e/0x1b0 [ 584.637902][T21606] ? netlink_deliver_tap+0x2e/0x1b0 [ 584.637935][T21606] netlink_unicast+0x8ef/0xa80 [ 584.637979][T21606] netlink_sendmsg+0x7f0/0xb20 [ 584.638012][T21606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.638044][T21606] ? aa_sock_msg_perm+0x144/0x210 [ 584.638078][T21606] ? apparmor_socket_sendmsg+0x98/0x360 [ 584.638106][T21606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.638133][T21606] sock_sendmsg_nosec+0x14e/0x190 [ 584.638162][T21606] ____sys_sendmsg+0x54e/0x850 [ 584.638189][T21606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 584.638220][T21606] ? import_iovec+0x73/0xa0 [ 584.638248][T21606] ___sys_sendmsg+0x2a5/0x360 [ 584.638267][T21606] ? __lock_acquire+0x747/0x2de0 [ 584.638302][T21606] ? __pfx____sys_sendmsg+0x10/0x10 [ 584.638322][T21606] ? __lock_acquire+0x747/0x2de0 [ 584.638350][T21606] ? kstrtouint+0x6e/0xe0 [ 584.638413][T21606] __sys_sendmmsg+0x273/0x4e0 [ 584.638441][T21606] ? __pfx___sys_sendmmsg+0x10/0x10 [ 584.638472][T21606] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 584.638515][T21606] ? ksys_write+0x242/0x270 [ 584.638543][T21606] ? __pfx_ksys_write+0x10/0x10 [ 584.638577][T21606] __x64_sys_sendmmsg+0xa0/0xc0 [ 584.638600][T21606] do_syscall_64+0x166/0x520 [ 584.638622][T21606] ? trace_irq_disable+0x3b/0x140 [ 584.638656][T21606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.638675][T21606] ? clear_bhb_loop+0x70/0xc0 [ 584.638697][T21606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.638716][T21606] RIP: 0033:0x7fa36aba8f19 [ 584.638734][T21606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.638751][T21606] RSP: 002b:00007fa368df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 584.638771][T21606] RAX: ffffffffffffffda RBX: 00007fa36ae25fa0 RCX: 00007fa36aba8f19 [ 584.638785][T21606] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 584.638798][T21606] RBP: 00007fa368df6090 R08: 0000000000000000 R09: 0000000000000000 [ 584.638810][T21606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 584.638821][T21606] R13: 00007fa36ae26038 R14: 00007fa36ae25fa0 R15: 00007fff95467ca8 [ 584.638854][T21606] [ 584.680412][T21604] syzkaller1: entered promiscuous mode [ 584.680583][T21604] syzkaller1: entered allmulticast mode [ 585.885421][T21631] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 585.937381][T21635] __nla_validate_parse: 1 callbacks suppressed [ 585.937402][T21635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3843'. [ 585.939028][T21637] sctp: [Deprecated]: syz.0.3844 (pid 21637) Use of struct sctp_assoc_value in delayed_ack socket option. [ 585.939028][T21637] Use struct sctp_sack_info instead [ 586.084100][T21639] netlink: 'syz.1.3843': attribute type 11 has an invalid length. [ 586.462456][T21649] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3847'. [ 586.736671][T21660] openvswitch: netlink: Flow key attr not present in new flow. [ 586.917887][T21658] veth0: mtu less than device minimum [ 587.667925][T21671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3853'. [ 587.667952][T21671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3853'. [ 587.856247][T21671] syzkaller0: entered promiscuous mode [ 587.856270][T21671] syzkaller0: entered allmulticast mode [ 588.028570][T21677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3856'. [ 588.043903][T21677] netlink: 'syz.3.3856': attribute type 12 has an invalid length. [ 588.043926][T21677] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3856'. [ 588.105411][T21677] ip6erspan0: entered promiscuous mode [ 588.938716][T21697] smc: net device team0 applied user defined pnetid SYZ2 [ 589.720078][T21722] netlink: 'syz.2.3869': attribute type 1 has an invalid length. [ 589.720104][T21722] netlink: 'syz.2.3869': attribute type 2 has an invalid length. [ 589.764700][T21722] IPv6: addrconf: prefix option has invalid lifetime [ 589.961067][T21726] syzkaller1: entered promiscuous mode [ 589.961260][T21726] syzkaller1: entered allmulticast mode [ 590.619467][T21741] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3872'. [ 590.746805][T21753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3874'. [ 590.764540][T21746] xt_hashlimit: size too large, truncated to 1048576 [ 591.818290][T21772] bond7 (unregistering): Released all slaves [ 591.982204][T21776] nbd: must specify a device to reconfigure [ 592.015755][T21783] ieee802154 phy0 wpan0: encryption failed: -22 [ 592.483908][T21792] ip_tables: iptables: counters copy to user failed while replacing table [ 593.254372][T21824] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3892'. [ 593.670381][T21848] netlink: 'syz.0.3896': attribute type 1 has an invalid length. [ 593.812276][T21848] 8021q: adding VLAN 0 to HW filter on device bond6 [ 593.830461][T21856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3898'. [ 593.937736][T21849] bond6: (slave gretap1): making interface the new active one [ 593.955458][T21849] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 594.094510][T21860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3899'. [ 594.155882][T21860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3899'. [ 594.412550][T21888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3902'. [ 594.526370][T21892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3904'. [ 594.526394][T21892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3904'. [ 594.879649][T21909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3908'. [ 594.879721][T21909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3908'. [ 594.884697][T21903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3907'. [ 594.976630][T21917] netlink: 'syz.4.3909': attribute type 1 has an invalid length. [ 595.139005][T21914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.856088][T21968] bond2: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 596.875734][T21968] bond2 (unregistering): Released all slaves [ 597.107793][T21970] erspan0: entered promiscuous mode [ 597.355166][ T7718] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.355669][ T7718] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.355708][ T7718] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.369284][T12266] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.596606][T21997] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 597.596630][T21997] syzkaller1: Linktype set failed because interface is up [ 597.615864][ T5795] syzkaller1: tun_net_xmit 90 [ 597.901252][ T5795] syzkaller1: tun_net_xmit 90 [ 598.785603][T22024] openvswitch: netlink: Port 536870913 exceeds max allowable 65535 [ 599.064307][T22037] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 599.118575][T22038] __nla_validate_parse: 137 callbacks suppressed [ 599.118598][T22038] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3943'. [ 599.506480][T22032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3940'. [ 599.508048][T22050] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 599.539774][ T30] audit: type=1804 audit(1794287195.645:9): pid=22049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3945" name="/newroot/164/memory.events" dev="tmpfs" ino=855 res=1 errno=0 [ 599.543088][ T30] audit: type=1800 audit(1794287195.655:10): pid=22049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3945" name="memory.events" dev="tmpfs" ino=855 res=0 errno=-22 [ 599.544257][ T30] audit: type=1804 audit(1794287195.655:11): pid=22048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3945" name="/newroot/164/memory.events" dev="tmpfs" ino=855 res=1 errno=0 [ 599.643387][T22032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3940'. [ 599.734434][T22032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3940'. [ 600.058687][T22065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3950'. [ 600.517995][T22080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3956'. [ 600.767894][T22088] sock: sock_timestamping_bind_phc: sock not bind to device [ 600.837704][T22100] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 600.871703][T22103] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3962'. [ 600.876754][T22104] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 601.088831][T22114] netlink: 1744 bytes leftover after parsing attributes in process `syz.0.3964'. [ 601.324204][T22118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3966'. [ 601.415660][T22122] ip_tables: iptables: counters copy to user failed while replacing table [ 601.752648][ T5648] block nbd1: Receive control failed (result -32) [ 601.752778][T19682] block nbd1: Receive control failed (result -32) [ 602.187537][T22135] tc action pedit 'at' offset 5 out of bounds [ 602.187562][T22135] tc action pedit 'at' offset 5 out of bounds [ 602.187573][T22135] tc action pedit 'at' offset 5 out of bounds [ 602.187583][T22135] tc action pedit 'at' offset 5 out of bounds [ 602.187594][T22135] tc action pedit 'at' offset 5 out of bounds [ 602.187603][T22135] tc action pedit 'at' offset 5 out of bounds [ 602.187614][T22135] tc action pedit 'at' offset 5 out of bounds [ 602.187624][T22135] tc action pedit 'at' offset 5 out of bounds [ 602.187635][T22135] tc action pedit 'at' offset 5 out of bounds [ 602.187645][T22135] tc action pedit 'at' offset 5 out of bounds [ 602.187666][T22135] 0: reclassify loop, rule prio 0, protocol 800 [ 602.824887][T22176] netlink: 'syz.1.3981': attribute type 1 has an invalid length. [ 602.924302][T22178] netlink: 'syz.1.3981': attribute type 1 has an invalid length. [ 602.995634][T22181] netlink: 'syz.3.3982': attribute type 2 has an invalid length. [ 602.996964][T22181] netlink: 312 bytes leftover after parsing attributes in process `syz.3.3982'. [ 603.633571][T22208] tc_dump_action: action bad kind [ 603.649106][T22196] netlink: 'syz.0.3986': attribute type 7 has an invalid length. [ 603.660590][T22198] x_tables: duplicate underflow at hook 3 [ 603.660979][T22198] x_tables: duplicate underflow at hook 3 [ 603.661376][T22198] x_tables: duplicate underflow at hook 3 [ 603.661753][T22198] x_tables: duplicate underflow at hook 3 [ 603.662141][T22198] x_tables: duplicate underflow at hook 3 [ 603.662553][T22198] x_tables: duplicate underflow at hook 3 [ 603.662926][T22198] x_tables: duplicate underflow at hook 3 [ 603.665073][T22198] x_tables: duplicate underflow at hook 3 [ 603.665564][T22198] x_tables: duplicate underflow at hook 3 [ 603.665947][T22198] x_tables: duplicate underflow at hook 3 [ 604.359768][T22233] __nla_validate_parse: 4 callbacks suppressed [ 604.360086][T22233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3996'. [ 604.581144][ T2008] block nbd0: Possible stuck request ffff8880282de000: control (read@0,1024B). Runtime 300 seconds [ 604.581184][ T2008] block nbd0: Possible stuck request ffff8880282de1c0: control (read@1024,3072B). Runtime 300 seconds [ 604.663521][T22246] ip_tables: iptables: counters copy to user failed while replacing table [ 605.229291][T22262] sctp_setsockopt_maxburst: 55 callbacks suppressed [ 605.229313][T22262] sctp: [Deprecated]: syz.3.4000 (pid 22262) Use of int in max_burst socket option deprecated. [ 605.229313][T22262] Use struct sctp_assoc_value instead [ 605.607077][T22273] batman_adv: batadv0: Adding interface: syzkaller0 [ 605.607096][T22273] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.607127][T22273] batman_adv: batadv0: Interface activated: syzkaller0 [ 605.811667][T22271] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 605.853652][T22291] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 605.874747][T22289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4006'. [ 605.880601][T22288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4006'. [ 605.901596][T22291] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 605.904039][T22271] batman_adv: batadv0: Removing interface: syzkaller0 [ 605.972679][T22296] netlink: 300 bytes leftover after parsing attributes in process `syz.2.4008'. [ 606.127964][T22291] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4008'. [ 606.264506][T22303] 8021q: VLANs not supported on ip_vti0 [ 606.300094][T22303] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 606.531293][T22306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.666746][T22314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.502212][T22354] netlink: 'syz.4.4021': attribute type 13 has an invalid length. [ 607.550393][T22354] syzkaller1: entered promiscuous mode [ 607.550416][T22354] syzkaller1: entered allmulticast mode [ 607.713841][T22353] rxe_eth0 speed is unknown, defaulting to 1000 [ 608.071017][T22381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4027'. [ 608.076768][T22363] can: request_module (can-proto-0) failed. [ 608.827920][T22353] C speed is unknown, defaulting to 1000 [ 609.027351][T22404] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4035'. [ 609.528994][T22353] lo speed is unknown, defaulting to 1000 [ 609.639568][T22428] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4041'. [ 609.652298][T22428] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4041'. [ 609.652322][T22428] openvswitch: netlink: Flow key attr not present in new flow. [ 610.517687][T22463] netlink: 'syz.4.4050': attribute type 12 has an invalid length. [ 610.517708][T22463] netlink: 'syz.4.4050': attribute type 29 has an invalid length. [ 610.517720][T22463] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4050'. [ 610.517745][T22463] netlink: 59 bytes leftover after parsing attributes in process `syz.4.4050'. [ 610.985253][T19682] Bluetooth: hci3: command 0x0419 tx timeout [ 612.126773][T22509] veth1_to_bond: entered allmulticast mode [ 613.039012][T22507] veth1_to_bond: left allmulticast mode [ 613.355343][T22544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4069'. [ 613.466018][T22544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4069'. [ 613.477629][T22543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4069'. [ 613.484471][T22545] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4069'. [ 613.509171][T22544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4069'. [ 613.534084][T22550] netlink: 'syz.2.4068': attribute type 1 has an invalid length. [ 613.536567][T22544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4069'. [ 613.603711][T22545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.674173][T22545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.772651][T22559] tunl0: Caught tx_queue_len zero misconfig [ 613.775508][T22561] netlink: 'syz.2.4070': attribute type 10 has an invalid length. [ 613.974875][T22569] netlink: 'syz.3.4073': attribute type 6 has an invalid length. [ 613.998429][T22561] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 614.330816][T22577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.547640][T22588] netlink: 'syz.3.4076': attribute type 10 has an invalid length. [ 614.651046][T22577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.716410][T22594] netlink: 'syz.3.4076': attribute type 10 has an invalid length. [ 614.797119][T22579] 8021q: adding VLAN 0 to HW filter on device bond2 [ 614.889552][T22588] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.905020][T22588] team0: entered promiscuous mode [ 614.905043][T22588] team_slave_0: entered promiscuous mode [ 614.905911][T22588] team_slave_1: entered promiscuous mode [ 614.929330][T22588] bond0: (slave team0): Enslaving as an active interface with an up link [ 615.212166][T22608] sctp: [Deprecated]: syz.4.4082 (pid 22608) Use of int in max_burst socket option. [ 615.212166][T22608] Use struct sctp_assoc_value instead [ 615.244461][T22610] netlink: 'syz.3.4083': attribute type 4 has an invalid length. [ 615.312006][T22613] netlink: 'syz.3.4083': attribute type 4 has an invalid length. [ 615.386748][T22610] ip_tables: iptables: counters copy to user failed while replacing table [ 615.689790][T22623] __nla_validate_parse: 124 callbacks suppressed [ 615.690092][T22623] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.4088'. [ 615.690361][T22623] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 615.717619][T22623] 0ªX¹¦Dö»: entered allmulticast mode [ 615.730887][T22623] netlink: 'syz.1.4088': attribute type 58 has an invalid length. [ 615.730908][T22623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4088'. [ 615.804732][T22629] netlink: zone id is out of range [ 615.804747][T22629] netlink: zone id is out of range [ 615.804756][T22629] netlink: zone id is out of range [ 615.804762][T22629] netlink: zone id is out of range [ 615.804770][T22629] netlink: zone id is out of range [ 615.804777][T22629] netlink: zone id is out of range [ 615.804783][T22629] netlink: zone id is out of range [ 615.804790][T22629] netlink: zone id is out of range [ 615.804798][T22629] netlink: zone id is out of range [ 615.858417][T22629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4091'. [ 615.858451][T22629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4091'. [ 615.927479][T22629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4091'. [ 615.927512][T22629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4091'. [ 615.941760][T12259] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.941806][T12259] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.941836][T12259] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.941867][T12259] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.084610][T22636] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 616.098244][T22639] netlink: 'syz.1.4095': attribute type 1 has an invalid length. [ 616.098267][T22639] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4095'. [ 616.158826][T22638] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4093'. [ 616.270444][T22575] Bluetooth: hci3: command 0x0419 tx timeout [ 616.270485][T22575] Bluetooth: hci1: command 0x0406 tx timeout [ 616.488186][T22648] netlink: 'syz.3.4099': attribute type 2 has an invalid length. [ 616.553465][T22651] netlink: 'syz.3.4099': attribute type 2 has an invalid length. [ 617.222277][T22671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4105'. [ 617.659684][ T5648] Bluetooth: hci5: unexpected event for opcode 0x0403 [ 618.266412][T22694] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4113'. [ 618.405871][T22696] syzkaller1: entered promiscuous mode [ 618.406055][T22696] syzkaller1: entered allmulticast mode [ 618.656568][T22707] xt_CONNSECMARK: invalid mode: 0 [ 620.485948][T22765] syzkaller1: entered promiscuous mode [ 620.486142][T22765] syzkaller1: entered allmulticast mode [ 620.758266][T22779] __nla_validate_parse: 102 callbacks suppressed [ 620.758288][T22779] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4134'. [ 620.768199][T22778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4134'. [ 621.069560][T22794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4136'. [ 621.182896][T22797] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4139'. [ 623.947453][T22787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 623.962114][T22823] netlink: 'syz.1.4147': attribute type 9 has an invalid length. [ 623.962138][T22823] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.4147'. [ 624.326507][T22835] batman_adv: batadv0: Adding interface: syzkaller0 [ 624.326526][T22835] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.326560][T22835] batman_adv: batadv0: Interface activated: syzkaller0 [ 624.380061][T22834] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 624.427667][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.486451][T22845] netlink: 'syz.1.4154': attribute type 10 has an invalid length. [ 624.486473][T22845] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4154'. [ 624.528399][T22834] batman_adv: batadv0: Removing interface: syzkaller0 [ 624.636114][T22845] veth1_vlan (unregistering): left allmulticast mode [ 625.218829][T22876] net_ratelimit: 26 callbacks suppressed [ 625.218850][T22876] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 625.284848][T22869] netlink: 'syz.1.4157': attribute type 11 has an invalid length. [ 625.324875][T22870] bond2: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 625.355500][T22870] bond2 (unregistering): Released all slaves [ 625.523753][T22880] syzkaller0: entered promiscuous mode [ 625.523774][T22880] syzkaller0: entered allmulticast mode [ 625.831852][T22894] netlink: 21792 bytes leftover after parsing attributes in process `syz.0.4163'. [ 625.977689][T22901] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4165'. [ 626.107361][T22910] netlink: 'syz.0.4168': attribute type 10 has an invalid length. [ 626.108691][T22910] tipc: Resetting bearer [ 626.134025][T22910] tipc: Resetting bearer [ 626.137934][T22910] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.155184][T22910] bond0: (slave team0): Enslaving as an active interface with an up link [ 626.237532][T22916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4170'. [ 626.808852][T22929] netlink: 'syz.0.4174': attribute type 1 has an invalid length. [ 627.308905][T22944] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4178'. [ 628.597591][T22889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 628.940375][T22959] netlink: 'syz.4.4180': attribute type 83 has an invalid length. [ 629.166412][T22971] netlink: 272 bytes leftover after parsing attributes in process `syz.1.4179'. [ 629.167846][T22972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4181'. [ 629.724824][T22983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4184'. [ 630.074885][T22993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4185'. [ 630.319537][T22993] ip6gre3: entered promiscuous mode [ 630.319560][T22993] ip6gre3: entered allmulticast mode [ 630.651430][T23012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4190'. [ 630.699983][T23012] lo: entered allmulticast mode [ 630.787355][T23012] netlink: 'syz.4.4190': attribute type 4 has an invalid length. [ 630.787379][T23012] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4190'. [ 630.877720][T23020] netlink: 'syz.4.4190': attribute type 1 has an invalid length. [ 631.473983][T23032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4198'. [ 631.655125][T12259] nci: nci_rx_work: unknown MT 0x1 [ 631.684394][T23044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4200'. [ 631.684418][T23044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4200'. [ 631.793977][T23052] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4202'. [ 632.475844][T23078] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4208'. [ 632.531756][T23078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 633.288206][T23099] ip_tables: iptables: counters copy to user failed while replacing table [ 634.496857][T23037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 634.542567][T23100] netlink: 'syz.4.4215': attribute type 2 has an invalid length. [ 634.617437][T23103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4216'. [ 634.663361][ T2008] block nbd0: Possible stuck request ffff8880282de000: control (read@0,1024B). Runtime 330 seconds [ 634.663404][ T2008] block nbd0: Possible stuck request ffff8880282de1c0: control (read@1024,3072B). Runtime 330 seconds [ 635.262612][T23117] netlink: 'syz.1.4220': attribute type 1 has an invalid length. [ 635.343463][T23127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4221'. [ 635.372811][T23128] netlink: 'syz.1.4220': attribute type 1 has an invalid length. [ 635.584853][T23134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4222'. [ 635.698873][T23140] netlink: 'syz.0.4223': attribute type 4 has an invalid length. [ 635.714277][T23141] netlink: 'syz.0.4223': attribute type 4 has an invalid length. [ 635.759525][T23143] netlink: 'syz.0.4223': attribute type 4 has an invalid length. [ 636.186923][T23155] netlink: 'syz.3.4225': attribute type 1 has an invalid length. [ 636.285676][T23160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4228'. [ 636.308428][T23160] ip6gre1: entered promiscuous mode [ 636.308452][T23160] ip6gre1: entered allmulticast mode [ 636.608843][T23175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4234'. [ 636.742642][T23182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4236'. [ 636.958861][T23190] syzkaller1: entered promiscuous mode [ 636.958883][T23190] syzkaller1: entered allmulticast mode [ 637.122250][T23199] batman_adv: batadv0: Adding interface: syzkaller0 [ 637.122270][T23199] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.122301][T23199] batman_adv: batadv0: Interface activated: syzkaller0 [ 637.469226][T23199] ovs-dp0: entered promiscuous mode [ 637.477902][T23194] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 637.521812][T23194] batman_adv: batadv0: Removing interface: syzkaller0 [ 637.666311][T23221] Unsupported ieee802154 address type: 0 [ 637.887332][T23209] syzkaller0: entered promiscuous mode [ 637.887358][T23209] syzkaller0: entered allmulticast mode [ 637.951077][T23225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4244'. [ 637.956739][T23229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4245'. [ 638.632711][T23248] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4250'. [ 638.686217][T23248] netlink: 'syz.1.4250': attribute type 1 has an invalid length. [ 639.599564][T23265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4251'. [ 641.627687][T23248] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 641.659482][T23264] tipc: Enabling of bearer rejected, failed to enable media [ 641.697573][T23265] veth1_to_team: entered promiscuous mode [ 641.845148][T23265] veth1_to_team: left promiscuous mode [ 642.214398][T23281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4256'. [ 642.474933][T23290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4258'. [ 642.503766][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.503789][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.503801][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.503812][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.505051][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.505069][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.505080][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.505092][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.506223][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.506238][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.506249][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.506260][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.507438][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.507453][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.507464][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.507476][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.508762][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.508776][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.508786][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.508795][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.509917][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.509932][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.509943][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.509954][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.513892][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.513913][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.513923][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.513934][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.515003][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.515015][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.515025][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.515036][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.516218][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.516230][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.516240][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.516250][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.523986][T23292] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4258'. [ 642.524009][T23292] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4258'. [ 642.524828][T23292] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4258'. [ 642.524846][T23292] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4258'. [ 642.525641][T23292] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4258'. [ 642.525655][T23292] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4258'. [ 642.526366][T23292] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4258'. [ 642.526381][T23292] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4258'. [ 642.536313][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.536332][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.536343][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.536354][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.537510][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.537523][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.537533][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.537544][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.538680][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.538693][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.538703][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.538714][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.552138][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.552157][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.552169][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.552180][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.553325][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.553337][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.553348][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.553358][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.559018][T23291] syzkaller0: entered promiscuous mode [ 642.559195][T23291] syzkaller0: entered allmulticast mode [ 642.640603][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.640625][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.640637][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.640649][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.645327][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.645345][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.645356][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.645366][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.716283][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.716303][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.716314][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.716325][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.717516][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.717530][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.718312][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.718325][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.721732][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.721749][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.721759][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.721770][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.736405][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.736422][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.736434][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.736445][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.748046][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.748064][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.748075][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.748086][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.761851][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.761870][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.761887][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.761898][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.766340][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.766359][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.766371][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.766381][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.773798][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.773815][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.773826][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.773838][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.786400][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.786418][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.786429][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.786441][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.787634][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.787647][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.787657][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.787668][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.814665][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.814687][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.814698][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.814709][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.818041][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.818056][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.818067][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.818078][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.827436][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.827454][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.827465][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.827476][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.840275][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.840296][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.840307][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.840318][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.841422][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.841436][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.841445][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.841456][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.845154][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.845172][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.845183][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.845194][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.848778][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.848794][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.848804][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.848815][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.856142][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.856158][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.856169][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.856178][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.859767][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.859783][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.861342][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.861357][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.865876][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.865892][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.865903][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.865914][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.867117][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.867130][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.867140][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.867150][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.870703][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.870719][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.870730][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.870741][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.874722][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.874737][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.874747][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.874758][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.877522][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.877537][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.877547][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.877557][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.880978][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.880994][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.881006][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.881017][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.885768][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.885783][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.885794][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.885805][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.891973][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.891989][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.892000][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.892010][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.894480][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.894494][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.894505][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.894516][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.900801][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.900820][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.900831][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.900842][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.904356][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.904379][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.904390][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.904401][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.908510][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.913890][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.913906][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.913917][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.947219][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.947241][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.947252][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.947263][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.951730][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.951747][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.951757][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.951769][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.956834][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.956850][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.956861][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.956872][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.961177][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.961193][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.961203][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.961215][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.965368][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.965384][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.965395][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.965406][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.966463][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.966476][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.966486][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.966497][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.973546][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.973563][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 642.973574][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 642.973585][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 643.034684][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 643.034702][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 643.034713][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 643.034725][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 643.035898][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 643.035911][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 643.035921][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 643.035931][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 643.037065][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 643.037077][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 643.037087][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 643.037097][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 643.038270][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 643.038282][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 643.038292][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 643.038302][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 643.039437][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 643.039450][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 643.039460][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 643.039471][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 643.111831][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 643.111851][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 643.111863][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 643.111875][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 643.113052][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 643.113065][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 643.113076][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 643.113086][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 643.114217][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 643.114229][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 643.114239][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 643.114249][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 643.117641][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 643.117661][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 643.117672][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 643.117683][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 643.120832][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 643.120849][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 643.120860][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 643.120871][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 643.135549][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 643.135568][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 643.135579][T23293] Bluetooth: hci0: unsupported parameter 5135 [ 643.135590][T23293] Bluetooth: hci0: unsupported parameter 8192 [ 645.445382][T23337] team0: No ports can be present during mode change [ 645.574827][ T32] INFO: task udevd:12652 blocked in I/O wait for more than 143 seconds. [ 645.574855][ T32] Not tainted syzkaller #0 [ 645.574865][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 645.574874][ ** replaying previous printk message ** [ 645.574874][ T32] task:udevd state:D stack:25312 pid:12652 tgid:12652 ppid:5004 task_flags:0x400140 flags:0x00080002 [ 645.574928][ T32] Call Trace: [ 645.574936][ T32] [ 645.574949][ T32] __schedule+0x17dd/0x5830 [ 645.574995][ T32] ? __lock_acquire+0x747/0x2de0 [ 645.575031][ T32] ? __pfx___schedule+0x10/0x10 [ 645.575063][ T32] ? schedule+0x90/0x2b0 [ 645.575089][ T32] schedule+0x164/0x2b0 [ 645.575114][ T32] io_schedule+0x7f/0xd0 [ 645.575139][ T32] folio_wait_bit_common+0x6d0/0xcf0 [ 645.575184][ T32] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 645.575210][ T32] ? __pfx_wake_page_function+0x10/0x10 [ 645.575235][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 645.575261][ T32] ? __filemap_get_folio_mpol+0x7c3/0xff0 [ 645.575295][ T32] do_read_cache_folio+0x1ac/0x590 [ 645.575325][ T32] ? __pfx_blkdev_read_folio+0x10/0x10 [ 645.575350][ T32] read_part_sector+0xb6/0x2b0 [ 645.575383][ T32] adfspart_check_POWERTEC+0x9a/0x7a0 [ 645.575404][ T32] ? rcu_is_watching+0x16/0xb0 [ 645.575436][ T32] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 645.575456][ T32] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 645.575476][ T32] ? __kmalloc_cache_noprof+0x148/0x600 [ 645.575500][ T32] ? bdev_disk_changed+0x56c/0x1680 [ 645.575527][ T32] ? bdev_disk_changed+0x56c/0x1680 [ 645.575562][ T32] bdev_disk_changed+0x851/0x1680 [ 645.575614][ T32] ? __pfx_bdev_disk_changed+0x10/0x10 [ 645.575655][ T32] blkdev_get_whole+0x372/0x510 [ 645.575689][ T32] bdev_open+0x324/0xd70 [ 645.575735][ T32] blkdev_open+0x461/0x600 [ 645.575758][ T32] ? __pfx_blkdev_open+0x10/0x10 [ 645.575777][ T32] do_dentry_open+0x80e/0x1360 [ 645.575810][ T32] vfs_open_consume+0x4a/0x350 [ 645.575830][ T32] ? path_openat+0x16e1/0x20f0 [ 645.575860][ T32] path_openat+0x16fc/0x20f0 [ 645.575908][ T32] do_file_open+0x23e/0x4a0 [ 645.575942][ T32] ? __pfx_do_file_open+0x10/0x10 [ 645.575993][ T32] ? _raw_spin_unlock+0x28/0x50 [ 645.576013][ T32] ? alloc_fd+0x6af/0x760 [ 645.576048][ T32] do_sys_openat2+0x115/0x200 [ 645.576074][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 645.576094][ T32] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 645.576138][ T32] __x64_sys_openat+0x138/0x170 [ 645.576166][ T32] do_syscall_64+0x166/0x520 [ 645.576189][ T32] ? trace_irq_disable+0x3b/0x140 [ 645.576210][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.576228][ T32] ? clear_bhb_loop+0x70/0xc0 [ 645.576253][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.576272][ T32] RIP: 0033:0x7fb5e96a7407 [ 645.576290][ T32] RSP: 002b:00007ffdf4e377d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 645.605644][ T32] RAX: ffffffffffffffda RBX: 00007fb5e9d70880 RCX: 00007fb5e96a7407 [ 645.605665][ T32] RDX: 00000000000a0800 RSI: 000055a3bf1744a0 RDI: ffffffffffffff9c [ 645.605679][ T32] RBP: 000055a3bf167910 R08: 0000000000000000 R09: 0000000000000000 [ 645.605692][ T32] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a3bf17fe00 [ 645.605703][ T32] R13: 000055a3bf175190 R14: 0000000000000000 R15: 000055a3bf17fe00 [ 645.605737][ T32] [ 645.605817][ T32] [ 645.605817][ T32] Showing all locks held in the system: [ 645.605827][ T32] locks held by pr/ttyS0/31: 3, last CPU#1: [ 645.605841][ T32] #0: ffffffff90033d58 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 645.605904][ T32] #1: ffffc90000a08ce0 ((&q->adapt_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 645.605947][ T32] #2: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: fq_pie_timer+0x4d/0x5a0 [ 645.605997][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 645.606011][ T32] #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 645.606078][ T32] locks held by getty/5390: 2, on CPU#1: [ 645.606091][ T32] #0: ffff888036f140a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 645.606133][ T32] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 645.606185][ T32] locks held by udevd/12652: 1, on CPU#0: [ 645.606204][ T32] #0: ffff8880281a9350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 645.606256][ T32] locks held by syz-executor/17443: 4, last CPU#0: [ 645.606268][ T32] #0: ffffffff9023a610 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0xf6/0x640 [ 645.606316][ T32] #1: ffff88803b91ccc0 (&mm->mmap_lock){++++}-{4:4}, at: copy_mm+0x110/0x640 [ 645.606361][ T32] #2: ffff88807b82c080 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1f6/0x1c80 [ 645.606410][ T32] #3: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 645.606454][ T32] locks held by syz-executor/18168: 4, last CPU#0: [ 645.606467][ T32] #0: ffffffff9023a610 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0xf6/0x640 [ 645.606509][ T32] #1: ffff88802986a800 (&mm->mmap_lock){++++}-{4:4}, at: copy_mm+0x110/0x640 [ 645.606558][ T32] #2: ffff88807b82a800 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1f6/0x1c80 [ 645.606606][ T32] #3: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 645.606656][ T32] locks held by syz.4.4260/23296: 1, last CPU#0: [ 645.606669][ T32] #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: find_lock_entries+0x12a/0xad0 [ 645.606715][ T32] locks held by syz.1.4271/23347: 2, last CPU#0: [ 645.606726][ T32] #0: ffffffff916742e0 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5eb/0x7e0 [ 645.606768][ T32] #1: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630 [ 645.606817][ T32] [ 645.606822][ T32] ============================================= [ 645.606822][ T32] [ 645.606837][ T32] NMI backtrace for cpu 0 [ 645.606850][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 645.606870][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 645.606881][ T32] Call Trace: [ 645.606888][ T32] [ 645.606896][ T32] dump_stack_lvl+0xe8/0x150 [ 645.606927][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 645.606948][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 645.606972][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 645.606996][ T32] sys_info+0x135/0x170 [ 645.607012][ T32] watchdog+0x1073/0x10f0 [ 645.607045][ T32] ? watchdog+0x209/0x10f0 [ 645.607076][ T32] kthread+0x38b/0x480 [ 645.607096][ T32] ? __pfx_watchdog+0x10/0x10 [ 645.607116][ T32] ? __pfx_kthread+0x10/0x10 [ 645.607137][ T32] ret_from_fork+0x514/0xb70 [ 645.607160][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 645.607180][ T32] ? __switch_to+0xc78/0x1410 [ 645.607238][ T32] ? __pfx_kthread+0x10/0x10 [ 645.607260][ T32] ret_from_fork_asm+0x1a/0x30 [ 645.607296][ T32] [ 645.607303][ T32] Sending NMI from CPU 0 to CPUs 1: [ 645.607331][ C1] NMI backtrace for cpu 1 [ 645.607343][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 645.607364][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 645.607375][ C1] RIP: 0010:unwind_next_frame+0x9a0/0x2550 [ 645.607402][ C1] Code: 03 42 80 3c 20 00 74 08 48 89 df e8 ca 17 c8 00 48 8b 3b 48 85 ff 0f 84 db 0d 00 00 48 83 c7 50 e9 2d 01 00 00 48 8b 44 24 38 <42> 80 3c 20 00 74 0c 48 89 ef e8 a1 17 c8 00 49 8d 55 04 4c 8b 45 [ 645.607418][ C1] RSP: 0018:ffffc900001d7660 EFLAGS: 00000246 [ 645.607434][ C1] RAX: 1ffff9200003aee8 RBX: 0000000000000003 RCX: ffffffff9234e270 [ 645.607447][ C1] RDX: ffffffff92e39560 RSI: ffffffff92e3955c RDI: ffffffff8c8ea120 [ 645.607461][ C1] RBP: ffffc900001d7740 R08: 0000000000000001 R09: 0000000000000000 [ 645.607472][ C1] R10: ffffc900001d7758 R11: ffffffff81b3a390 R12: dffffc0000000000 [ 645.607486][ C1] R13: ffffffff92e3955c R14: ffffc900001d7708 R15: 1ffff9200003aee1 [ 645.607500][ C1] FS: 0000000000000000(0000) GS:ffff88812350a000(0000) knlGS:0000000000000000 [ 645.607515][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 645.607527][ C1] CR2: 00007f7e0df556c8 CR3: 000000007a268000 CR4: 00000000003526f0 [ 645.607543][ C1] Call Trace: [ 645.607549][ C1] [ 645.607559][ C1] ? dst_destroy+0x22f/0x340 [ 645.607584][ C1] ? unwind_next_frame+0x8f/0x2550 [ 645.607609][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 645.607633][ C1] arch_stack_walk+0x11b/0x150 [ 645.607659][ C1] ? dst_destroy+0x22f/0x340 [ 645.607686][ C1] stack_trace_save+0xa9/0x100 [ 645.607734][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 645.607759][ C1] ? __lock_acquire+0x747/0x2de0 [ 645.607783][ C1] kasan_save_track+0x3e/0x80 [ 645.607807][ C1] ? kasan_save_track+0x3e/0x80 [ 645.607829][ C1] ? kasan_save_free_info+0x40/0x50 [ 645.607849][ C1] ? __kasan_slab_free+0x5c/0x80 [ 645.607872][ C1] ? kmem_cache_free+0x182/0x650 [ 645.607895][ C1] ? dst_destroy+0x22f/0x340 [ 645.607945][ C1] ? dst_destroy+0x22f/0x340 [ 645.607968][ C1] kasan_save_free_info+0x40/0x50 [ 645.607987][ C1] __kasan_slab_free+0x5c/0x80 [ 645.608013][ C1] kmem_cache_free+0x182/0x650 [ 645.608040][ C1] dst_destroy+0x22f/0x340 [ 645.608063][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 645.608088][ C1] ? rcu_core+0x8b0/0x1230 [ 645.608112][ C1] rcu_core+0x92e/0x1230 [ 645.608144][ C1] ? __pfx_rcu_core+0x10/0x10 [ 645.608176][ C1] handle_softirqs+0x265/0x8d0 [ 645.608207][ C1] run_ksoftirqd+0x36/0x60 [ 645.608233][ C1] smpboot_thread_fn+0x5f8/0xb30 [ 645.608253][ C1] ? smpboot_thread_fn+0x4e/0xb30 [ 645.608276][ C1] kthread+0x38b/0x480 [ 645.608296][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 645.608316][ C1] ? __pfx_kthread+0x10/0x10 [ 645.608337][ C1] ret_from_fork+0x514/0xb70 [ 645.608358][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 645.608377][ C1] ? __switch_to+0xc78/0x1410 [ 645.608405][ C1] ? __pfx_kthread+0x10/0x10 [ 645.608426][ C1] ret_from_fork_asm+0x1a/0x30 [ 645.608453][ C1] [ 645.609341][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 646.553429][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 646.562527][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 646.572575][ T32] Call Trace: [ 646.575844][ T32] [ 646.578763][ T32] vpanic+0x26f/0x710 [ 646.582738][ T32] panic+0xc5/0xd0 [ 646.586445][ T32] ? __pfx_panic+0x10/0x10 [ 646.590855][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 646.595872][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 646.602016][ T32] watchdog+0x10e7/0x10f0 [ 646.606346][ T32] ? watchdog+0x209/0x10f0 [ 646.610760][ T32] kthread+0x38b/0x480 [ 646.614818][ T32] ? __pfx_watchdog+0x10/0x10 [ 646.619479][ T32] ? __pfx_kthread+0x10/0x10 [ 646.624063][ T32] ret_from_fork+0x514/0xb70 [ 646.628650][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 646.633752][ T32] ? __switch_to+0xc78/0x1410 [ 646.638424][ T32] ? __pfx_kthread+0x10/0x10 [ 646.643006][ T32] ret_from_fork_asm+0x1a/0x30 [ 646.647770][ T32] [ 646.651043][ T32] Kernel Offset: disabled [ 646.655359][ T32] Rebooting in 86400 seconds..