last executing test programs: 6.709595939s ago: executing program 4 (id=2882): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000b000000000001190780000000e77a24989e1317ac25f1de84854699c000000000000004e20009c907801000000000000007b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="7a0a0500212b0000440012800b0001006900000000000000000082620000003f14000200fe80000000000000000000000000000f08000100"/72], 0x64}}, 0x24000000) 6.606997885s ago: executing program 4 (id=2885): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r6, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x47) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162bd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000019680)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x25dfdbfc, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x40}}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x4, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 6.405628935s ago: executing program 4 (id=2889): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (fail_nth: 4) 6.171047802s ago: executing program 4 (id=2891): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50afa, 0x70823}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}]}}}]}, 0x48}}, 0x24000800) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) listen(r1, 0x8) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x109000, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000240)=0xfff) r3 = accept4(r1, 0x0, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) socket$key(0xf, 0x3, 0x2) splice(r5, 0x0, r4, 0x0, 0x7ffff000, 0xa) ppoll(0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b0000000000000000000000000400000000080001"], 0x20}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000005380)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmmsg$alg(r3, &(0x7f0000004480)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000500)="2436b43f5c114d3692dde07d5fdb79134853349781dc7e3efe9199c7b440143e4519cec41eccc6f19090c5210b469f72e89bd19ef601d36497896db1d400eb443f0961000e229ab6e7d5158d74dd249e97de9a9e3aae2238bbc54fab6ed223931eb8a07844cd07fcba2631aa3647119ba82a06ae5a5d6db98c411030b7489a28753064a4d146fe215a6570b5b180e467b74c99b9fe95b228ac53f44bb2cf89ad16a7ac282299c11fb04d0d99bcf6e75ad43e7dec37cfd57844bce6fa9717330471565634116be1a1cf5e1a5bd65ed0b9314f53f6d9f4875c981efbe5e12854b1a96fc11c5a12c6f24aaa25b90256a3a91bad7678619943100bf58b3ba19c7b96f2fb05b7567d0ec4f1dca9a354b0ef234c7a579bcfec8eccedee03dd237b590cb4dc737b9f392c27b4b0bee592967925c5509ed271b1d1435b011dff39d69028f3f3a589365042a49d148993906379c7f1f093468bc512ae4e966423e1b25c377534929c231e22be66310aa469f0e308ac8bdd85ba512ac897a0406a51b018f06579c61961e605f4f5914c1f0764308b1743f2b316fdf05dbdf667fa982e30f0e9717ba4986e2ffcb0fabc431ca3a9ae940a2259c645ea40ac5ae2e2283101ad0b960d87be99062186be89fd6ca2407543da6715c08204e8d3a3b2bcecd4765e55351e55d84256ecb7e743e10c4d9fa3a89626c3df98c842b57192079549d634ab2a0e4b21a844f5baefaae3e9a70e6ee43158fe88f79a26b0ace07bea5551f403c416a243f7d03bd191ce7a42869537252254e58fb7ddac667428af84ebf5ddaaf1531e7f8332b99d6a53ed782fbc209071959e31d26121a150f70e6c7de19dfda630ef57d9fba48c2f14c4ff5bc6a48aa9cb1478a25c205000f9bfe57e2f29227b50fb518043bb595dc24bb0f022008b3718bc1b354a9c7e62422120f3a86f94784400d5b0b4d732d384dbd8bdcdc7ce8310b552bba6ebc2ffa52a153f37c86735826726cd41a566dd05192939ccaad7124467e42c53926296ef404506cbb6a5a87f385cbea45f4e4458633dd13b2daaefee1cea8a6b0340ab32f6b096fab54b54bf495ca0b8798fc30a4ffe7da3ab732917451af72189b2a1e942fb1dab7fc43a6569696a996985cb07b7dabb0e834357baf097ca54695acc76afa396373fa6e63faff755a928578b2e2a052895108b216ab5b7c2943eae29a6f48af4c6af1c9529ec1c409752fd4af34cbf5ba12e17544100dce6a5e9938f0c374059687a81fd246a4ea5ca11d10ee68c555ea3f479c04dc1ac23c49ebd765dfb22401915f431c14f0d5dd9e7b107f5d38499ba9a6027bed0c6e85f026e97f7658e34f442fb612034d374790d1dcda40f1bf848e35344ba3db85196d945a64757c9412a32249e2ca54eea204823aeb6f6a57591e2fa985b95354c1b6255b53ff1926dc1259f2593878b1a871bfdfcee4e995a448fbf6ead858e47e164d472a53380002aaf4180b1d6df2118a7483b9e56e43c92ee5a2c5026ec6d526d0d3888f38b501964b861ac9332edb70b509ead83fd423ae0d6cdaa1f48c0985f99e993c374dc5c403b9a6d8b5dfcb74f2d590c909b9962aae07493b1e4b66747fedec5dea21150a4f22ef785f7ac22777b610a4fbdd6908d9dd6e3b3212b523085f9bd6a774b3c4ee6cddecc44dedc62091064d52bdf61a9878ad0f3216e7e7a38a91662506537b741901716a9c28ceb31825cf6c155d87eecc77598d63095ca0d168c898d4a226a5ea3400bbefb0cef3608f2f748ec42b6693c5b47da98869eab65cfd7e94de4265a3f983145e9244e35d99117ae603490a9afdae5423106491ba327048ed022abc442d5d453d0ec4742d98bcf6c4caa02c285e8960232b37b3e377ce45db0f33897d964ace491cda1b1659cc5c4c77ec354a77e961d9ef0f7b683945e1af8f88534951606c001392722a43891401887cf6a52e087827e866af0179b08ad471927e545defd1b7d20ed130595a099b09494fbad1f8e504b157c43f111ade6f5153674dd85db09cb53a9bcb424c3930c5bc86f5082968fd81d8b8baf05eec9f18e7d3fb076ec34b8c17cc42bf6d6bdf2934f0c8290f3fd4fac1f7a3eb99c5029d05a7c1031c43da04166d8f3a3e2e8313f9b2bab65ec2f8299ca6693041438610137e72b8b68a5b38038a6a1385471a3e8444e190f5f19a5ec92e62c3f204ba2a330f2c9e3ae5abc3f2317bfb243fdd6b375f07f7f8e25e9a932ee8a305511977ecea0ef2b3680237ad72af52e2159ee92eed0f26e9af900f32257f0562f3286ed1de8e72e09b1a5b9eef4a5d22db85e87b8f4e21ba54ea1650d99c8d8b8916ac8c8501b29bfa99b26cea58f6d80443f367353356cca6b6eea2d259bf921f1b2154cf5a840527b0757661af1750ff020d5ec031efcce9ba22aed935077989ff04d9662dcdce09247274ae59740a0882c9b6ef2d3625aa39b00bf5b8a0998e70e97867d030888a01fc62781848d7773e0b76d3060c453ef90d1c75f965e1a2d247f25680a78a9cb0be4a3daca692ff4990a89c1b81fadd7242eb8e1bc0389baa85b29d56630b921a5901e154223007524208ff76862badeef864c3aa349408e1f411219308b3d8a31d8e03ae0827941544de80bfc3705cf07c2253df9cc176f3e15ed2d6923b4841e4f28fce807058f671696ccc3cd713bb7eed4911ca960feda0a4cfbcab66e753ae8a8e7259845053c6d8a4e38b12bf25c1664062173ca313777cd4db8e2515b38109c93c160bee96f7569f4743f5ef06cfe0de9ae508f07e8a609811a25bccfd5c94d92cbe2b8b026bfb7e942645f5f18b11861819fede7a15481b4d0d07ed8c38914c5f12aa3497ba293339d9158d3b59b0a189332736c88172b4ab63bce1f43398e7b8459f12788ecee76eba00782e9976f53dfb9332182174a3938a4536698a1f2e4d793c17c4ef767ac65592d09cec50b5ccfdf732a457e9da0292ca05a1f565f3fde853171cdba6cbe7e1dbac024fc3e743ff5bada438b34139665ddb9503f68c6764e3dbb578363073cc83c5a70b035553b0953a733980960b072272e7adb0694445fa637b250facb7b58db581f6cd632187baadc830b0d7a796f314f6c3441593543cdb9c32547bfbc52db514e5b678ceaf19344d68c5e51237ef003a95af2b3bbdc09ee8fa19aec9dbf735d35e363166a84742379ee10d212020dfa85e756a7cf01e42c1e14a8b6209a3bedc2f1afafbf121b555ec8983b74ef0c5f2a1bb6fc8ea3229441741a494784d7704a30ccdff31cf8e1751f4fcb52cb324eaa337c0793804160bdf1091d9b9247ef6758fc7ded707acf13d4756ab4edfa4dd0f5478fea465254e1b3affd657d1b302ce6b6f59df9b256f0f323763628e9c6a4c7d609de6ee954e5cc4ced33443c01e8082125c90009e5178159c937f5eae2ea8ec678783c7e77c8c29071c26a5117b5c616a9dd84edc578c4692b56b8e20d3000a7b7b591bcfe296b160ab17f3f391192713a264db20cceb153b1e370d6f9a177575094ef80fb5b6d59221e95baa7f27eeb0e5c1bdae3f8db9c65a20c34ae46ddcb89afaf89b090033d49843ef46a11eaed781b99321ca4eb61619872f674fd5e8471107dfc8bcbc8bc0d7ad2df795e3805644d1daa0b3b4bf6346e0353ad3a97c398c1abcd1ea12c09912fb12a4a00c295fda78068e2b43ea6d9ee1a6b0b787b1eeda891b9f671a60812fb0dc1b0e9db0edbc25eb2db6b0cfd6538339c5f69bb623a4e8e203b42df690f173daad25d141ab6c2118f6c6b2f06849186aad5a2daecf9b88a7c57dd7e2dbf2365ffb8a8f5eb9557ec66c3f66563ba9d63c5716d1506f42e0ef5bb80e582e748107906096f74e6ac6f6c008a5e7fad6f8e398f787a59e8896308099032b88f7920cb47aad6cc9359e896b39364cd099446c33583f812306e03538c33f3a617bd7e64541b1d10e304598b0dbb9e7eb6b9b68e619e524322bbe853f642ecab1db374c345cf64eb6f62a3c1d2182919e08b6ad689d351ebc041560c3aacd63794f4e26188909dae2d1c35ce460db2ff1c933dacb031566a64ff8bad86f75df4c77429072dfc282add00c4e618be0ae27c01086deccc9fd79c7ee4f3f450865545e910a4e690369a55574670955a92aabcdb498c5505da1bad3704714d5d754ca217d976112d9f58da69335a902c52e9e2ac1eb2cfadf085d6dbaa404777a563c837b993f157230aa3ede164e5afa45cb80f31d71dcde078525596c451cdd64bb3f1ab9021989aa023e892491f8be9fbf0856403b5d6704e44cfd75f5f7624d59073e65d79fc99a2efb45cc9cc519c1efdd0a08c9454c2d5c575c158b479d2a82f36f8ef9ff3108d6a706df521a8959d8e8e8a6d65bc27b4805ee29e1d3f714b38754512c807bf6048dc1c390415483bdaa02890a8665c265ddda6e65e4a4afb835b88a7be9a1fcf85fe32a8517259be8d396a9e048c81993b5afc4fb1e17b175d4fe181cc25d10425ba29ef2e3f47bac4493dbdde7e53ce5c00246512c26323da6d05948c179bd8c32ea0e6268b034e3abc82e4ef8c4c8d006c2329cc373465e4f06ece9caabccb47358e86ab54750b9cfcd318fdadba5e58320e1ca7c519b373f6ba033432e8973b64e5022f80d35bdc399b8032fc859359ae65e9279eb8a81f55841cababc106a630369b55c5dade72f33857cb8e028dd0fda91749b1d484660e49a69604c9a98135e1c1e213f97f17be7088671a4df817cd78778554602517ae59d2183b88ba0d68f59632810d7ae07e387b95c119efce4c2fa96df8bc5ff859057cabc576402ab668b4a2fcc801b439e9e94610de428a6e5229ea3e1d767201fdb06e6978f0fbdf1ccf67dbfb5ba2c8266a551d1092457bc6639b0477dbaea6aac64e7c2c80eb92cf6b72c4c180b7181ab6c6e38200d84fdb27de847fcac364c3b0e017b7298dc4523be8d619b167ed5d5a9a3b8258492b2882d631a9baf5aca0baa833480fb59fa2a4773970d58ebd830f090f4d96cf3fd6325fa4cd7573b6b0adaed25560fc8c08f5167a879b553d0853ca9b3098e151717d12fb28a2152c872aafee98a57ab2628fc7ee0e8c9498e56774767c1cff18f9328eb95eac70c34e922101ba70e1a91798026e5050aa7bb20fa8898acc8ae5c8550d56579deec6dcb2772e6308a42b15fcfa0a16b92f99e59ad16e9b3bb5ec0e1d2d74a4f838ac2889dc579e48b2f86374d17fdbac05fd6e626c951ef84fdd7e390fd82633d1e8daef71157d596e62b5cb78e440527cd736532caaa2895e92782db6bdbf44db3fc0d850e6b207fe0bf72d9937420c032e03c83d61b0f3848a14031d64ed7601486f297f6b40a713731b57c21dec6e0332697f38fb02a410da05b466da5d4a4394510f27a5e810c46f26fdbd63f30832f69a9f3afa5f55cc20b6d42c4adf6c8bc30ca4fe866778cd6fd71dd28706c59fe94484d7694cf1d789cf0955e0a182834e9c19995d0eb880e41a29b362153be60c43818ea695141e46933e37bb166fa62f975dba6a8f31fdc0801d1ae735ca91271da74079bc34064d435eadce8e7dc7783f7b9e9a181d7196adf13127f3bcb6a83590a32950b5162b6fe8c832a4f25b5fcf879df4502b604474b0bb1c5307b20a6370b08b044ca59e0b23c3344338ab8154e219a3eacd40c6461a2a7ebe747ec42806e92e283d765134e16bb6adb40d00de7131b552abd2a0597cde18c0903e27b2c54790fe8623dad6b75b39f99b14aef9b8fb647ced36df457779285b14", 0x1000}, {&(0x7f0000000280)="18f3a9a5c05fa09604813d2db76df5a67bb7f123ec1a1e5c9faa45fb465ae91ea6e080deb1a4f5f1ae4f7b42fb7140a4ecb81f7802917a2d4643c5b6303f065ea629e6f3def757177acd81", 0x4b}, {&(0x7f0000000340)="96b9f253e30792a0263ba9b8be566cadae8361f9eb0271826f3e9319428a4af61851cd96d91f37e668dd0a4dbc5b2215ace0b4f21bb617356ac93caa8fd3647f053a56925e9a315f2dc4725618824f6e0d6e771028c1da112999810712ba42ce8fbcda9f1493a878bb9a062ddaee73d2901b2650b4dfa0b94fe4748fcf77f720a64d055e8776db36d9c506604663b3b17c634a074fada18950da6855054c9178191624dac5ea6ce8d8a54e9b9c8c76734b0125629eeeda7fae0dfc35396d365423359bfea6b1a4cb57cd303bc44931e571bde4dd67e5a8772f22790398bcfd8fca139e122027f224bf4cb3cb3bea452edb", 0xf1}], 0x3, &(0x7f0000001500)=[@iv={0xa0, 0x117, 0x2, 0x88, "dc962e9421a010f9c59116854b11f7b74d1e54d4dec18a0a7e8c36f3ecb339d3b257fb68f4982be230b95281e86163cfe05a8c101b200829343a9c2936e2cbf6c0b67232ebef3edf71b2c6791100d337fb50937d9ebfcbba70c386c9fd2772b878f36cfb2d6d88297e056b28e1a059be9b9146b4693cdc4b69ec36fc545b489af6bb1a48d4bc57b5"}, @iv={0x20, 0x117, 0x2, 0xb, "b9c069d150366741159b83"}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0xc8, 0x117, 0x2, 0xae, "3d8c07a6c18d380539be128104003e577b0ee6fe019585a90dff9bdc8ac6afdf12900bf3fb6983ded437f7c72d1ac94d6c2fa1c6c9377bf4adebfa7c2a1eca27e427f5003838e7e9785732c3e3ef992f13b749d0ab0191c328fb24428f5a2f10a64accfa77a8edc5d7fef32793bb4165a8fa67210ea8bc7cb5735610a90a2ff0d15757e422d6110c78f8ff2507ede5109f54f20ef6a5aef0df86cc4e5f3301c61207c4d208db8c5d1b7969d82754"}], 0x1a0, 0x20000010}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000016c0)="8f12cb61fe7648bc502ab5daad04b913dfb49d24ba84d935d702676414e311dc2dda2560f7f387d263bbb9ccd673922f02d4c5670430df6d62ccc6fed5778006ba00a3eba56fe70b33daacc94fc9e09dbacb1818a5bb54a8cb81f81429ff328c37808008a83febdc8e57b729da42888a4ba6f929437251a6c813ed7ecea8ed267f853a5907f2ebce92478288a640021a01ba06997f4a9d2ad4950eea3e47d09d0823390007dd54a1153a6669201a7d8e2371491244793b4a4af54df659303f27a9751e43e129b209968c", 0xca}], 0x1, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x8001}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x10000}], 0x90, 0x8090}, {0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001880)="f39f821d55089ae50efd55a30158bc2ce8e4e7a9238980c749871da18de7d76b6bda1c91bce66709ef2a834fc677b3f236baea4080ff1dbc0d00e4efafa16a52e57407b056430f501f2945d8fea8af7c574d7e42ab702958cebaa3a9f0c282589026c746862ee4d3ad36aadab583bece1e7e34e945848a54c8c4540b8423dd7f4566efcee59a273eb8d3cdaee8a0f8248ec09bd6dc93208a24c938b136e4cd09c0c3483f9eb908afacd8964d42b955b69b09b9bfa915dcf07d9f01154932aa8882", 0xc1}], 0x1, &(0x7f00000019c0)=[@assoc={0x18, 0x117, 0x4, 0x40}], 0x18, 0x40c0}, {0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000001a00)="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", 0x1000}, {&(0x7f0000002a00)="a352937be13025acf80ae18c3e99965f167d9a990279332a9368cc247f17e397fab014d97b4fa21344b8054302cfed7c94e6e7c4b01686727679b5ac1e51cf82df738e72", 0x44}, {&(0x7f0000002a80)="802356994038baf7d7366ca3008bf4118e1e62622ea838cd40ec99eca3af0a9fcc9db475d26f9ae9f5505ba3aa2780a66fe2cbb7e8d77df0394ecb4e61a0d3bd0fa6ae584a7b654c4f2e4737af5012b4448d20f24aeba52b5b47c1cf54f3f687f88ff9ef3ccd6b3f73c65e492a87410240ec63cdb237780d4ebfb785b685ab80f86209bdea95bef76d18451d852d7fe99346d7da7ca91212bfcda082ded44e0a1ba8094fe890b3fe2792a40d0ee27b5aea73072c3713fe3d3540213aecffad66c4261fa7376300ce6ac1ef6828c2fe650484a765646961427c08ce555d7b4424a091505c3cdba3186a016391a161a3989cee26bb8e10d9", 0xf7}, {&(0x7f0000002b80)="b3615d323829322d2752c7a08dd00fe6870dd64e89e309d4470dc213b0e7482e0ee56bccb2b15d591c98267d63c9477f38ec438ec878bf68b332e476d2e74ca44360909ec1d2a7a516e373211debdc2d263cb8e3badbc043dc07efb655e4a3850c9d4ac305f5ee264053e131fc87fc0bcce36080272243681699ac2e2c5845a392dcc1c993fc557180391b451da02379944543f9c202e71edae2295edfc8993970bfd78ab914ed1cbf5335fee1eced93421349d39fd650a0a314782dfe11a83cfb51554c51f0020b219d271ebd9f6e0fd348b1eae437555f377672a08e89a491cf7e", 0xe2}, {&(0x7f0000002c80)="7336e890174cc8db9700715acf0484870f501e4746de6dfb12da12b64ee49ed4781c335de8fd20", 0x27}, {&(0x7f0000002cc0)="7956eeef7a35f08d7641f90ec2f1d174617903ee067436db14b6d34c5caa10fec6c9a8e8e4ffdc44c52640173e61fac4f89311679331dbbc776df634b3644f7b338b0810a6253448215ac301c5f1a0cb50bc987c11da3bfe17dd1c3fa9ae2c1b0f290c293fd4941351886efc1aff3c7495f870926a20f4c0f8dde908471821a8a1473c03417002de20296911993656efefc7f6e617b6d1a99677245d8faa2ef7e0701f0fea3ffda10d0f0a3eda2a3d33af6297063f5b97664a8fe0e2e36c71d8078525d9964e91dd66d8d4d49f2b0c5f259489cd5c6bdc995e1d210c3197fba2eaae54ab4520", 0xe6}, {&(0x7f0000002dc0)="c30dc05fdb9b65a1f438a4528fa2", 0xe}, {&(0x7f0000002e00)="2fd7916c23a57f1fc4315ff8bfeb235f94fcfc5ec1e208b443ed9ce1f917ad1d795c0f905b9363c9a2c5ed6c79ba83791b3cae9f2619cd1c27242d099f6d9521621cbb56ccfc278935720b2bcdcae332fc070d54c7322f94e93b48d05761707422638e960086535d92e706f4e4", 0x6d}], 0x8, &(0x7f0000002f00)=[@assoc={0x18, 0x117, 0x4, 0xafb0}, @iv={0x108, 0x117, 0x2, 0xf0, "32ed30e9afec60e446bbac813bfe5ae3e05c742bc260db2e64c6ec01d7dac41317a8f5039c8b2e851284162b7fd9a0f27715869d66dbb2744eb3037dbae215df2d23e161f13c3a622648ff92c3182e629e007de33c0e0f3cb2146be346ef6c93a3035ea0f419f2404e85f36bd7828f5f53fb74404780ebfa303412a986de65590ed87961f90ba14bc82fa7b43e0b4329df435b6fe65cd5a3145fa1d075118250fbca0cc187b3ba9bccd0b650652dd2d336594e249019ea9935ed62e28fd9ed60a2614b9ac6e31845a098739c20abab3c5abeb4dcffcf18ce31deb2766dd34783470127cb301d93b03a41891d83647038"}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x110, 0x117, 0x2, 0xf9, "c61871fcd9018fbd24d2de79d7b835f7137101ed4e5ba83e4fbee9cf30369f57ca6b5f75c42ba99852f5117efff85c3803b804627ccf506240afa791b4dbf08ff2a2dd0f89de8f5edd10a7fab7a9f37eac505e0b3b77d7bb406f252d39222297de66eb832631e5535ba7e6885f6f72c32dc7b18d5049303d4de951ef396009e972999ed62a19f211a532b9711e62fa1ce7839fd436de7f77923fbb7d66da902ad33b51cac9477c1ce4c6aa0b5f142d61a3e19626dec6faf2653f1dc298af6d95766f30c2b0e63b1f9cb78ed4faa81ab025585a25beb3aa418cab40733a4ef3b42ce4b3913b3b73b0fe77a8cdcc066f6b60bcc72c7b559342f6"}], 0x278, 0x40440c0}, {0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000003180)="72e1551f9b001a5cda4bf60b837726cb19758dbc431a57d0c78430f5fafd00828ac6726dca8c5dd92c3b31594e575accac251c92f87d55a4bfd296ad8598eb36b492d2cda08039ba5471e882eae99623675b3d", 0x53}, {&(0x7f0000003200)="33843d7c6e7f11197e97c2a0c6c7b28bf7d1553382ab9c761867c6ca52e01262cd4669cdc3f2e1b1768f86d875504a79cdf58f5f14ce514b86dc7dd9bfd9375c277f0a5558e9df05db0d0d104a61067c5be7ff2bb6179e03188c0197fb88672d4ced5d3dc2ad22ebaae1d6bdf01bbce01b4ec92296f32d088194121e64fc7087e3", 0x81}, {&(0x7f00000032c0)="b7839d1a924f2412418934509a148173882b1dc7d17c2de76f82c8482649925bfadef47cc49d2f7c35b12baa9d5551bb7b089aa83743ed38c56e653b988df9fbf6a247dd35dba71945a68a75f809463558777942fe284ebbe3061d05cee6f7b09fa292ac25fe362f0a71f102df56fa0b6cf3ea5591b14e258eabce303e5d8c32eac03b1fe1a99468488b1a98c08242274b9fb6b071480222168bf25c234ac766b182a4f8af1b20cb2ccfaf63c50df5115e77cdd240683163e8ff2fdad7aa05365acb7844ca322ddce5fa", 0xca}, {&(0x7f00000033c0)="68ef2f83910c029db974f9937192ebcfb78fe6b3158611c7", 0x18}, {&(0x7f0000003400)="254bd1976a99d7af2cfb0e2bd51c7b75941a35aff2c0808394b45628246817b2f29adbeffe7592b2481e5e2d44658b75dd0ad0b16c7fdb2b7fe8404b28745dc30e4e48c23a8b88b01e938d62123a0d5f3ee59767ca390cdf8f75b1b4595c9c485d84210f7d25393a6f31f03b9261bf5baa81e1fe25f681ef02247ee8ae5fe516e85f5cb047c4b302d1e50ce1b7111afcc27f22e4710bf8164571c8e2a90493a4442aace88d19a8833d6d3861ebfa1f22258ca572688807721c469cb633fc0f758fe01750355085f8c000d9ffc55c413d5d244c050885e08cbee410b908f4fa0331887f68942b1ceeb844b50e68328d6a9bd57c839256e55dae94aa8a9a605a3bc046fd8abd25eb11914f8c9e788e10a69338ad9fded4679aa10ead84bb5bf5f0c6df9403a481209452e500dd05a242d78b2af7026e08cbea9b28243a3a5275d5d7e3872c986caa91421dec58d72a0b584c767b95b098c94a5d407f3743e9f8fd7bfbc6b3b5935ca3d3bd7e32496b7b0044ce0b056273f0f1be0c4c828ab67400e5dfd17c13a66a091a20eb4f65db475598b0a782f9da1fade0c561d07fe78e50adee2abf39c2c6731fdf1a0025963d5912a965447687159f25844b6d3d921365c9af019e7bafbd5fea96889bdf82b7f27cace5e5372c01259b52acfffdfb8c4bae4f272b5b03914c7fa93aa26a571989af00b9bec6215e07aff46496b8fd9ad6f6b56d3d06d47d31fd64451cd39c8270c6b3a221d4858c9c9336483bba99593c75429b73acd3e5c5126fe0edecedbfddeff5b96badaab77a60ca29ca0f327e27d2dc380f6b5d374e7ba72ac1f4ae4b09476acf57e427525da7c92fb39e2bdd31a31d0ee62f8848f6466b6c5454bf5e8c18b1aab8733616f15729e6a29b601d6e9b1fbd0a7af425380f1d3991e8152c510bb6903efbeed2e9f15a6c14c3c39e56a3e173e20e818b3e406d28740b8d47cd364556f4f946a255e9d194735cc2de9bdd34b9e269b0c184d115bfddcffdeebde6aaae2695fc9ec083687f36fbc4989f52d85d2da9ea2fd20aa734641017f84ecbd0349936531ad6be488ce3a6fefb5eb35be946d86fa49b75e7564f90d820c0629c27d6c50d479a779a1b7818e2111151dd04d7715a7e4c9c6d350d98fbd6b761c247a4f88d60a4aa2228e8e2e7f1f1666f5e4e97c99970bf16d992fc9d9d19fc4f60cb6550bbe6e32632c4214ee90c4f44f48c7ccf39e4ad3367a741afd1706951bcecba9623ea04f3ef27af49af246badb44f3a94ca69d65706eb45dd38a99892222c1245dfc160335774e35deb033592e229aaa5801507deb3443fcf1ceacc1e76237bd8cbe87ebfa56c5d048bc2c9fdf80c8856e975136703dddfd8c22369e8391c565aa180901e984a9444fed39db827c1cdff06b9e16fb8e4114219314ff95a5608c9970f986c78b34b9f68a63df5906e5bfdc739b6d949b27ae3570e0819a05fcded0fc920c05593e2a43de96f633ba386836c3130ff35fafbcfd48dbe37c33b04727f199f496c32092447850789eea3a78adadf4de4c4933ffc71a0f11f2e256ff6d0496423ac918f977494cf698c679fe381b84b28420561a3beb0c0f166c912086ccd1af66f21419bec47b305c469bf9f5c355ae5e1dc146f279e1a251861faf10e2b330022161ec3040a86d0a28d8a4a945a698bf54c232e67336d04e9c751fd0327de3691516f1c00bf08da04a5acc3ce1254ea13fa2bbc91a37374b66c429f47419ef90a9f3efc465d4227f2b4117b92b09ecaaf8060c09609892df622b09fe8f8134d837ba7b098bd12c2dc69d89407d77dc0e08441926c9eeb93ea8ab4fd53b10b4a4ca574597e3442c1fc0a108f71e1dfe09e2590d06123941d8ad0a02444f09aaf3631bf936f27651b656d2533458ac1d3ad7d4a017312563b2225f7c1609928dac86b923b5b25fcda65069413914531bb733d69b057d631f6405174e77df95267a15ae772b5108ec4c9d8249055083b4f03071d18524d0afba9bdf71f43065882cec3c405608d0d7873b02b9461cd410c921fb4bcdd0159e79b07de463177819b50169a0d3bb778629166978ae1b15b46ded301418d6911c5c6be3bd0aed3054411c344dae1fd5027c3f0000c081e99a5e5507c76a6def0645405faf03cf3e4f63e93de4cc4cc9c6c56a0c830b5f0d6c691c24bc39a65db88e65741a47d8697232c3e88cc55359be49f73e09e7366190e282b7e367ce81d7cde5264b10f02ff782a326a8ea4fedbbbde58d0a6de255f52944774d9c5be20c0726d37bd43ddf73a87f91cb2a7b008e7a97e22bffb1772718c424fe949633e9d3a33f3a4ddb106864e55e1a799c73a6c9ac6d5e119adf888629c2abc00734751ffce4aa4a9f451a7820d2c649d5ad7f89e5047d1ff91eb1c160ec035a651ac3b9ee3a6fcddc6f1ee9e22b62851ac6be64e3bea60ff7c9fc3a1b1ba59bdfba8de2ca46e0358fca7ca671f6fed89406ed62f865e980508b8e62125326b78fb226989bee10f383c1ebcbc041481812caf92f2de508f4ba67ed94261c2457f32d08634a79ecb589326681801df4c83a33fe02e931b0fb6d170aa1d57fa1a70c9a95151e11228e0116024ae6628c494be0f1030efcef662adccaff88bf300982e2cd2dd8ff8b99ff273e3ce3bf70d96d781fd294a023f95c19dd8bec88c89509344f3715e7c75700661be17009bcd1e8c253ba74ac26485bd92a4acdf2643ca2de5c53d3aeb19d1b45d2fba213099e4668facbe2501902e6bc8ff25cc0fa077f495f91d9611a86a286cb387a8491b5aa32c124233f738410e81642c08d20eff82a3ab38c223685a51e4401e89246f694bbf72b65034c40b934babd28537c23b933c189426a6a29e5e8b87aae52b93f98674961ab55243dd7a49b0db71c1f182da134b9ad1248106cc41cef0dc6efdfcf79462eccb327f7db4d9043b1a426db69568069e6a63cae2bb16826e6231db17c0f16d4152ee1b467ab745742adccea3842363162bdf0bea47a30a43d6d7b7cc359a8373a6c0ada975b905a519ff9272726068556bee7fc52ce4c9164795e2beec78e36652fcefdb8a1489ea953717b63c08038e0cfcd2678535bcd6166eca42a6e9c41d0ee1c93f3106f1762efaf5580427011af6e3446d26a550f9427fb7517fdb3e7740550cbfdc9af8f6d692937e9940664535d7d4ea4895d0ba0eaf6bd53aef3e710da43c1652da46dd484625e3b19cbf4001f4deb95d3bcdb8fee9d51c128bdb68dbf7a634897aa1956b1bd1e5a6c21279c1b12f09ce69e7d2919a129eedc06186853223fea68fe280aa352cf8a5d5c1065bce8a7b247e4124ab07cbae256b978dfd0269d29ba237a8a0cdaad73a2a7a2b236126576436744a89ac5efa5216164266ba2bb16820e66c051c56e99dbcce2b11721840d0ded20685658335b2528ffb717aa45036d70221116105ab683dc9c5797add013caec3f0125acbd6c54c39f25d035e8033352d47c91706f86e78c75315c781bbb214d42d6e3c91ccd902514c1c3578050bfe641985ccd04b95724d9cf4b5c612219bb1f892a4b11fa3d5e8b1089a5d927cec41afe0527a99baff2d785c2776f0738295670de12a8b735d5be542912349815c609ac89f60cab10ca9717a8461cfa03d024adf86757511b8044570f9f33e8b3395f0a4a09a954299f924aaed8c75e2e7ae6ca51a9e77b8188c113b1fda1dc7d051c65c6d435eea3d00bd349fa1c75d224d1cd334c7314cd045307e663ea1a11511e50b7b2f390e9db0e767e8c0f7f33710c2da02194e7e00a99a5d90efcd1ad51aec48f21c199db9f0f95e3b5d6066b8456452ed79c69cd57f1bb394c157b88223edcde0fd4ffa296264d269eda6243e78041e81e43c93f2ec6d13c371f674b7baee2d00af032d4257bc3a9bfaa5ead415abae678abcc378d99f99e3915027ab85472fa95bed28a763f4adda01e3c739c3581dab9421837e1d3b5a2666a7f765f8c462023a2fb3757851c887fe49efd255a3197ff0e0a6f084e9c787443e699833d9dd72050fb578fe3a1d45e43bd35beea39f1075d485800a06c9e603df5028c4f6b2cafd501478598d061ad8375995884fb0328956eac5a5dcb5dad32b42ffb7b837a5196df45e4a06e1ad700d0a88e8a37f1e191cfa7024351a8be76787d6b8bbf706fbbf233f070468e80c144b5bf9c5f414a041853547eefcc70df9039d60e632fdc4b3f01701a27ddaec268d2cccad9a2bdb5066106bc91ffd1a56c60aaa7e21756b82f8621dfddf2c0341d547bd4054b1366255bc3dc837dfec317cedf6270db313f2fa8d3d521a77e4cdffea9c98a2fb8020396199c1f80c5a3419f5808d7024a4039a4ad23302dbe218bccc926700f4cf133104c19587418d094853ecdb6fe9ca8552f38d789f8d9a66da1b91c57e8e92a9e49e2a06d57bd76027150acef61aaa30d4b2f9672d3fd77761e690d1d8dc5671ad6f5e9b1e29645a94ba3051ee10fc3b629437206017a97368454a973ead1a2b26f9a4bb00d4ecfb409f788d4319b45cb5f394ce23a701c94e35425dd5967eb4d7af5143244306d4e49c22563237738a7e85f27b8d9d8e6b1b50ba341afa2e118436477f08bb7b8d3b9f12d728c964e9ee16f8d2b1e0f50e8dd7cc85813ac3e983a1fc7a8ecff91e16ef33063270cad41b46b69c03944053e9c25249148779b0c879a8f1e7dbce9d4f23d86978a04a7a4a9cc56c2ae5b27f7392fa9f0e556037f586b8e5f674d257d076bbbf68b0f7fd5589c0fc3182e677de5eff9b43faa58efe2b92265b31dec2125f62c16fd97bba504893d7e1d65e9f99eb6d287a8a3b2daff1ed538e93e7cfdc5aaaf3d4120b09e626c127221d73532de95d49d0dff0a22be67efea7a555130c9c1e270944bcd0a32433c200e40fbf562e43189db9ee39dcc0f95db5268651f2122cf428d3e6922d303d575dfd7a5f6a6decd288bc8e5e502461a85561c8d16bd308f2d93467226fcf3c292d78c98516234292f642e65e59134c125e98477ce44693c48c7cf9e7288aa665639be3457910b4271bd3b14f096234b264118d43f14aa88546d93a6ac8c91c25cbd3015cca1cd0739454f0b18bb566e56a453b79891d101b1579d7599a12839712fab6a79e8eb60f709e124db99351f7dc1db36365d5850c4e56eda01b3c7ead9d40fedeadaef705bcf0fab51bea098be43c0b78941a78de4c1e8dd5788125f02f70aca39b6ec2abe7a3263c0ea7bc4868b027bca61ac5cd339b644395b85f1d8c420b2f2e9d629db69ceda16ecd2b083dd84537d460fd393248eac2ecd628279d8d9ee83783e404d07f4494028bcc5b80c1580e199abedbe284f7f0f28744c2bfffd43116b66a479ff45f8d1b148a3dfd19730a258fb086abaa9e9b51eee26fba5f6295b226a3685b0a31d19779cdcba86a6fc7e29c66e65f8e5e30d4fcdec250f37da993ab7ec37f75eabfa0104925e147613dfcdcf4f83cf93edfc8838817c55f53c95156a29156d9635afb968d11670b18cd96d294e9803b722e94702f558c1c719c25b71e9993c807b519c42d65886cde4e02861770a5076a4452e156337096bb7e0a8fba8733ad56835c30671b6501c77c1a562e2a5bdfa07cc5cfa3edca4f27061aa6b508c8d92a626f28dfbb4e6b041e8f915ed17731563de901a50cdf9c78de23428878c46e7599b4da2ab6bb845c7a43e276b816dc882abbc4b2ef79f41586f877e48fbad32723d77086ec671513e0cd35de748b5cc403b24fd78b220dd8ca3969a74e3f9ae47b5c", 0x1000}], 0x5, &(0x7f0000004d00)=[@iv={0xc8, 0x117, 0x2, 0xb1, "55a8de1bcc3b429d5e01d4d12bc823c9d934cf6eeea3edecae5436a4342319c4e87d9c9e58f7e6985a8edd39769daacd78603f6eea3b225798f21496e6b00cdc370fe41a2e0e4fc08ce5a1fcf1ac4a5092dd4bf9afbc328a7b90c92294671a6062e6ce3c6473ce33cf7f35e9f8388ac9a86ad3f9acc596b8f6fab8c6c078ac10459c1baacf010b06f095dfc879161ba9660ad1669fc96d2c5a0f17c77f0b7eb38cdb9fb2035fb579459eedd57dfc4d4ab1"}, @iv={0x1018, 0x117, 0x2, 0x1000, "1ac272e77228f38c8948ea140df99b20d5965244ed1bd9ca59266727f7e9058d5e5b3d1997d1770d1b9fa0b0bca0be45172b1f17bddc378d132e7345417e30d2941079fd33d1dd5714646745ad2a36a3da962a5cd0518472e9243429e9d88ce2eb4b80d69feace3052ed2131e374f3aa51739bdede3699f86333f84ada9fe7e43e4c5774b36f191b379011b4f20711c51a95d9bea987d484504513a18e5eb34c763940205706b36ca55b1c12332e4331593e1b625e786f8b7387e4c4f40e6592bbd95d8ed3dfc85acb3f9ac7c5855fcc35a50375807983d08b1fcc76619b3ead00a86466018723f12f852ee840389fbae7da3b9bc1cb3f6d539c7c1ad944f93946cc676b9309cb525eeada9c4c37e4f83b222db739537e27fd2004691e9cb3235482edd5a01d83f5305beee4424e1830e83dfcb9de667565d86bc7a7cb6255c60df1558186e6bbf2dc7e3291d4d2dc014ac667b7e73477ea37b0dc4668efb3af68480cc411aa7b3a2d6e81ae6dcb4f44f9c8d4aa92639dbda94602a72a5b588265259bbeb64fbd855f7846d8180f7d5c709a115a270346a43d4468dced5caf6005b479551bf4d36c1a91f7684a6d798088b8d79f222cd7df35c824f647029c32d5472ac9b6941ca3af8c4bcd4190acbd89a271b71cb1193ef8750d122804f4490758fd9c67950f6a8097fc038546b66dbb5068f04ba384149e79d6c1c58b324f771965b72c8aedd4d46efcdf01a7805eac15ff36eac9f3c48be9b38207203090bdd1da23b2f21a3fa0aa314905394782245f89dd6b80e6fc0b4b0454ef13b5b7f9566a57c9f62df570561e54826a155926c36a9a2073bb38ee29c9e45e5b69f7c3bdadd9dfdbc1013322c5e93f040f8845ba8dfadfeb75d561959679987258aea036e16b7c0a71b85d4af7be48e8a070ad843c589aedddd0b4d3bd885748e2116ce998442c045b5a08a4891506240089f62f114aa79f67bd914fbbe041d64f65cb088f7689f05c29cc57fa086a3aadeea6702609004f8d80d6a7d7256c2975ea09e016252735cc50ce0a2aff193aca0edfe017a7233c1a60b093398a6139932ca7fc70c0f7ff0f296fba8c09ef09bd8b8d927cc4309b16615bb832f0ee66393c3809a3d316b323be0426b1790866ec6636c1475b9c35c2a55e6c2093e544e6472b88c68b658f7215813a33458d8fce9c9235f22b2209638191ed70f8987ca45c258d2efda4ecc61a23c8c6151c4254a41af074e72c5e02bf22388be385f227640b33902d1862e1a5304f7ad8c7b0a241eb9df0c0d1f16f492424f1c3219dafae610206c23e56dfb94fe765925b344a2cd7d3a18078a3ef920be5eaf205bad368d203f323f422da952c12fe28ab911b492d9fb321da26ae0670cefe2463c3bc1213412fdc58bed5edf81d80ef35e985e5851a3b3e296dda099537e6175cc99ad0c35835329bf7a834f1a7fc83f8dbb91be57e9b93edcede45f194b0d30b8c3c92d3b85c32594c3ec5eda68574819b23c3deaac1c08430f21c341138d97efcb0f3be335daff1aca0423d5b6fa6d99bb1a2989479122ee9a3108f57fcf9d0bfde46b6f7ed1fb610dd37ef8ecd72a019db507125c419c797b15203d64bcd364cd31176f41326da479da2695381911dcc754bc39511fcaefe5fecf135a469ec7d689c9856f4bab6ffe7e09f4378742e36f6d671cc9d2736fa8fcee318cbc3eec42b0ee985ad805b3aa422b4d0ce2af6144319235ffdd30e6af83b2ac28b969b043fbc800e0b2f2c4bdf0b50688d470d033369974f9acac9358f89c0b6a6d73817fbf2cf1d5e684384c7e3ae1e4ded3c5c539000d4a3dcd103b53984ad873d5a4840852474f5248349f8ab9cec9c1b0db87ae303f9c15d82e6cc156cc4ccf19df6862da4f5d0e8f65180c1275e115213490a8fd4d6da81eb0b0c50d677e6d1e06cc8599f085470113e1213ca1b60eb038d4b6bd832bc1dbbcc7138f0227fbbd8da55135915f8dbcdea56b678b450543322b309d2be50b05c9cedfc0f8ae666d50414a0d48920768b2013e027257b32f8ba1afad18a8217c31a8078ce103b11f1d2921c64a0ca4214fd15b297a92ee705426946ff5e6dd9de5df9c65a40b4541c1d794f4cb38d1536ef10298ba49a53473e452b5971cedc219b940430412baee4bdb1956c9e12d920a9efde702549010b8344d3c6709dd70b3216d3c8991152a810c52594f4f898ffac98e14b82d532ce75916d24d796cf4b324f68799b10ffdec9cb8e2432d51a1c58d3c533ecb401db22dc0b47e033f955d05b15f80e766e1bad19cee8090876789440fef8d2fbdeac9988add73a9c423ff08304a77bee6c7840201e233565156afa915fdf75960156fc9d33be1bd57d0cbf078ac7b08ece50e415723d306d425cfdde2a577f30bf0287a7ac344d9b4e5f2f30a238231e4bf1d700d0f2bea93827a15170079b82db2acc22044129ba91d9c54f1889e3776434d854e03a138447217b00631adcd1d12092693de45db03c1395dc015f300e87d0afdadd814e2b85dc087b3447a8b659e5db9323610ac648d4af78d2f73ce837c537922e5973f0f911b055cba396c30767eb29e88591c70602f8e7c2a3d71971360e32127c2f07c21b2b3ea0d007e21e03123363ddbffc9f50abe1937cd9c3ed19d615ab29a648767d1db3093446fcb2cb6e3e19a38be6da792dcdc4ab7f105526ed1fac21cc5f208b379b20f04496fc25f3232317e593e8fb3610fe24ac6734f7dc2942298e03cbcf8c802fe8d903a1175b73e94818b1594d694db5a23d51102ccae046b589bead8c7242fbbd990f22d93d42d902aedc650599da419286565bb57fe07c193a04877c307bc7cdd937ab86e7e2269e8bc3e1e40e7710ed0143a6d635323dc604d43b5c27750426da620741eaaaac680366ef9f5c80494482baa72b77f7f7c42b4cda46e962107c2623ee7a2e7d918cc64dcf570b77b00b57eae025e03b769c13a7fdf6122173673e2a60af7c398c834a0c285eb02f6ee1fbb6c7dbb5a7a001f0991c493f8a52b9c6dbcf715da9db1bc77e54a994f17ca34599a4c39094d30d9b23e686120e194781b2decbb85a4384b89caa52db9f15bb014475c6f0814855ed00af40cffc43ead8ad4356d3e871225c87599c2aa2793d5f471e4f31295bf3508e29ed8d6746879d1bfdaab478b78051cbfd9d1077ea76ac058862f95b660f68c3465f96f8b9b72987ad5753b39f97efb7104683ba43785ba8888f9c591f560bcd20dec339cf8f1dc1462e7de1678b6252346b8dc9ae28452654de42ba9c6a113c8e90f1cc88e5c65de4744d7c39207ebc269f9502ebf3f38b58c7ce0eb8a4110e6e4b576e918ddc290b728e1d1fd44c4fbb92d31381a376c5fa0f8a5abadbaed0e930d9e4761798549ba26ed808aac8396dccc112828ea2fda007038b024e0cc09004fe5f9412664d0190ed791a64d5a226df6dd5b2f060f2e9ecfecad7738c7bb8d6907b701c9e204787f9535f07528d505a2263791daec6c7196c7f11186bd305775034d6bf3911138d8e4bcce6da2b0857bb5212c697f341ebc9619a84e07157353931672e0da82a7b851d734ca250bf7c6f941c661f5d7f8a8195dd2d9bbb869dc6b3a31d7bfdc0e30285a23708651b892c78db0ce02eed110ec496f04910dfa7ae8887473767ff91201bbd4b477741276a335f0e3c22136455c99673250538561b5dcfc52b9e123fa9f5ad4468f2f27cc3675b92d0830040a5cce423a988ace208d73a5b067d07e5ba36c2be419e6f45b12329f9d13f80129a669d34f6a27f572fd28ea8b29078cf849417c99bdb179b7caf6aecfd4773e2cb63162d0cd3983900e13cf11bc1a266268a4d2280b4d96905ff5d6cd265fbfd2f9a554fa16fd690e5751c3ff87e3724c3479ad996bf7c9968ccd71c59ded4a4226158670ac1b11b65d59a947876bffa460de652218bc433d54eec6972836e1bfdce72614c51918e79b37ff51462b45372f3b739b4f558b13f40f002649a4df10d5e79f3c63152a9f172ff7928ded8a289c645e8bc47aef01e98ff334cc0caf9ed872a260f8dd6d72024eb8996e97a6618f461852b364cbc115ed52a6db32dae99c84cb91289d1b5b692f7785417b17e220c574776ddf339acb7ff7f815a5b49a056a1d4facf2e61123908f057b6b4cd8fd3861bf01c4214591ac582330a5846dd3d3929d809276f090e3c471609ba0200ea38627dc8666b4d8184b2b616d12dc0e065fcf269e4b24d7c16f6c06e086ad537441d880f3c98a26704bf3d98853ab0c695a69a26c47bf8fddf3e6a5a6fc11d3cc62e0a31a01ff018c6fb876263bdc41d8172cdd96155af456b8b89ba0a686e5dd6c5ee9cacb4f1f2d02dbbdb7b20d2840b230db96ca8e516002a147828db3cda45531ecf880efb0438976d6ac9a103244b2559137ce72186c70ddc773c501660d3cd76ce0a456c3c8b0ae71573fbfbf521fc41b1d3136fb47b50282d9730343bff541e2d13fe2e919ed7a64128c042b9fda1585584a2c134fe37e780ec7b645ea1e84b3bf79994724744126a1b0a972547ab2129735d7128e0f121454a013c8b81a21cca86ead765a10dcb174a60cee50ee1eb29ab6e4387dd8b30bdfb8b63839fa79a62af95d67775e8354181a2d0726b3bbf07666b6a310fb750b5680acfc88f3182b1c2402a63eadd85de3c3a253469d201a26aa1002d09e1bc29c88947123f0126a64266540db13ef085b73a02c4ad7734c52c91290e31c9acf3ff3f676d5da2e28953d574bd335909e91c4a3c95424f14cfeaeee39598b10e2c640fafea766cb01e4651360eef3a904a92391e88c21f1f085c83f8eb319f6c9b69e6efb32fd6f1996213535fb7e0eb751fa58ead2ec68571d604702e0bc6b57fe3b28688a1b9e80645a33ac1684af7b179d9038f84b176211317be7ffbde2e8cd034fef8aa72e16de584bc47534da44ff4e4c98844932bed803c7ccfdef5247d956c6c262d84bfdf63572543065ee68b069ce205579976c9c3c2cede67cd9fea0e1076568e5c58021cc08630b443c2a8fc454708f1683aa921cc4e66ab01e640e03c255e97e79b670eb72285e0bff88e56896aad0e316b0b5990e36b0372acf8ef8d7147e13686705ecff92ecd6f62312daf05fd13f7c9a6044bd353fb9eb378ab3a8603c44c81b4eeda06aa901f1471e9282c305c44451173f696a19979f49bb30197f44eb1bccbbc4e76c919ed7ae8bc3b6afbd63c905e41482a538acb5913505c7fd4014c950e7fd209a9c578317f21e7d6d1adfbcd65ee662902ce44c23302903ad65cfb7f80677f53498ae3f4a188cc2a20f5ec24b580543938987c7b3c7f281fc9dc62c13febafce1ba685364d3dd8256ac785d94381258c247aeddfd2066bfa84eea3d46d62583516237937baf4a635bd02af85cb5f8ee96621d5890ca938d1c9aa0d33c193f931ef73761830a0af223340821146d6523e0010107df419ba0c0954a9931ba02f07585339b32d9bbf00dd82a13eeddbc90108e51d24ca3bfd77952e96a98be62fafbe30817cf0b2d06ef0d5c5eeeb55ef070f8c4d49dcfb303a6c3283eb8778c70348e08afeacd5b5c5446c8276e95de65ca892c5e17a2824a8c89db9c6e334b5055dac93b4755d8df2c123161c7ffc6368a25bd3a4958ed0d14d3d5e1913b62474193c5e8f546d2018fcf67b03dc04606b85e8f67e5d88788059f6e78586c8d4b4f01983f19be20ed64e8f62d497435cdddae25c041affc460c623b08c1fe6bce6f46f729f59ac0afa7f35"}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x110, 0x117, 0x2, 0xf5, "510608eff39fe02fe41d6b4f1cd53cb4c6247df073c1155dd6fbb3fd10c80fe498f3ae9d0dd64fb7ff62749dfc95445ef69b8490fbc064a2ca7357de6f0e6e25f223c23d11168e3adba45aad62f9b64ca7c52110830569fd6940cb5835955bbf17c15d2dd72f06d7702cfda27874e8cf84dba06665dd499e9d8e45185b3206ba8c83ed3946fca77af3f3d5b956142917f4f70f2a2d21bcc0675fcb2f070900fc600b60b0e490b60ea4cb0b59030ef8c26f458ebdbb002e9283708c094dc60e9231f94256051566aeb247c02a7b2a857363df3b99f37356968745c7cff3273fbc729742f761e2d79b2470546a4d06a35213db2501d5"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0xc0, 0x117, 0x2, 0xa6, "a1e9e6e1577ab4e52c67d86a6214e9f38fd5191394cc53999dbf88546db93002a4a6103c9d781e15e762cc2b6f941be53186c2779dd49143e399292010323ec9a2f08b7fae077738d5af138631e85dad186872ce193ebfa604e997c81b8bd5b46f5ae14db077302ad3c5892409d1d847610d4f0b6f88e9b7034fe07885f84d78f45b736f32f331b92f7520b4863f6eba1ead39247f49b9e0cf9eba5ff9473cbe330ca1c35053"}], 0x12f8, 0x10}], 0x5, 0x24000084) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0x1000006, 0x692}, 0x10) sendto$inet6(r3, &(0x7f0000000040)="78d6", 0x2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071182d000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 5.953148993s ago: executing program 4 (id=2894): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x1c00}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "bee1"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, 0x90656}}, 0x20}, 0x1, 0x0, 0x0, 0x690}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x1c00}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "bee1"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, 0x90656}}, 0x20}, 0x1, 0x0, 0x0, 0x690}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0) (async) 5.36334867s ago: executing program 4 (id=2898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="89f7ee0c7cdad9b4b47380c988cafb141949ac460295b2a66890", 0x1a}, {&(0x7f0000000100)="5d19520f6c0fa83bf4da177009e857097a05c0cf558bf61c2a5312eced1f971821", 0x21}], 0x2) 5.030491413s ago: executing program 1 (id=2903): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}]}}]}, 0x3c}}, 0x0) 4.822482817s ago: executing program 1 (id=2905): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) 3.860198804s ago: executing program 1 (id=2906): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f7dfd315c8f5c6f3", "190edf789c8c0a92bf26c5a3b36718a2", "d69aa2f8", "ae92db21fd6876c5"}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'sit0\x00', 0x0}) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x0, 0x8, r3, 0x9}, 0xc) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, r3, 0x401}, 0xc) 3.143516737s ago: executing program 1 (id=2907): socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x230, 0xb0, 0x0, 0x148, 0xb0, 0x148, 0x198, 0x240, 0x240, 0x198, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x9, 0x7, {0x7}}}}, {{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ah={{0x30}, {[0x2, 0x8], 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f00000003c0), 0x8) sendto(r3, 0x0, 0x3f, 0x4000810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0xfdff}, 0x80) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x17b, 0x0, &(0x7f0000000400)="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", 0x7, 0x0, 0x7}, 0x50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc01000000000000000000000000000000000000000000000200"], 0xc8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f00000002c0), &(0x7f0000000240)=r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000001c0)={'ip_vti0\x00', r5, 0x10, 0x7, 0xfd9, 0x3f, {{0xc, 0x4, 0x3, 0x3a, 0x30, 0x66, 0x0, 0x27, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@cipso={0x86, 0x1b, 0x2, [{0x2, 0x10, "72af7948ce1418465f8279e93b5a"}, {0x7, 0x5, '`02'}]}]}}}}}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 2.653297216s ago: executing program 1 (id=2913): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r3, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) bind$packet(r1, &(0x7f0000000040)={0x11, 0x4, r3, 0x1, 0x3, 0x6, @remote}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) close(0x3) 2.540341084s ago: executing program 1 (id=2914): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x38}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x80000001}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x4000000) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x80000001}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x4000000) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t', @ANYRES32], 0xc) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) (async) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 1.790305628s ago: executing program 2 (id=2919): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d8"], 0x188}}], 0x1, 0x810) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000ffff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x50) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r7 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x0, 0x3, 0x3, 0x1, 0x14}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmmsg$inet(r7, &(0x7f0000002140)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="100000000000000000000000070000001c"], 0x30}}], 0x2, 0x4000800) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000087000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000004008500000086000000bf0900000000000055090100000000009500f7ffffffffffbc0affff000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000bf91000000000000b7020000030000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x3}, 0x94) 1.556391277s ago: executing program 2 (id=2920): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c011}, 0x4040) 1.510562085s ago: executing program 2 (id=2921): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14, 0x80000) r1 = socket$caif_seqpacket(0x25, 0x5, 0x2) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000300)={{r1}, "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"}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) unshare(0x20000400) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x60, &(0x7f0000000c00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00f5c0", 0x2a, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x1}]}}}}}}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f00000005c0)={0x2, 0x4e21, @multicast1}, 0x10) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, &(0x7f00000001c0)=0x9c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x1, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x30000) sendmsg$netlink(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x18, 0x1e, 0x505, 0x0, 0x0, "", [@typed={0x7, 0x12b, 0x0, 0x0, @binary="46c8a6"}]}, 0x18}], 0x1}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r9, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x16}}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000240)={r4, &(0x7f00000000c0)='/dev/net/tun\x00', 0x100, &(0x7f0000000100)={@_ha_fsid={[0x3, 0xffffffff]}, {0x9, 0x5, 0x3, 0x45}}, 0x2, &(0x7f00000001c0), &(0x7f0000000200)}) ioctl$TUNSETOFFLOAD(r10, 0x400454d0, 0x2) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001300)={'pimreg0\x00', 0x7c2}) 1.174101134s ago: executing program 2 (id=2922): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000006c0), 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r7, r4, 0x25, 0x0, @val=@tcx={@void, @value=r7}}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x2, 0xe, 0x78, 0x66, 0x0, 0x6, 0x11, 0x0, @multicast1, @multicast1, {[@rr={0x7, 0x1b, 0x4d, [@local, @multicast2, @rand_addr=0x64010102, @rand_addr=0x64010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x1f}]}]}}, {0xb, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "34eb68e471bc71b0a6023d3697b87b5a0b59262bf663c26a", "7d501a72dc6aa2b3976ad407f42253d94dfe59243d95aa1963225e78f0bda5e5"}}}}}}, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$rds(r0, &(0x7f0000000680)={0x2, 0x4e24, @loopback}, 0x10) 944.071349ms ago: executing program 2 (id=2923): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) socket(0x6, 0x5, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$inet(0x2, 0xb, 0xbf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r7 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt(r5, 0x0, 0x19, 0x0, 0x0) r8 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000007c0)=""/169, 0xa9}, {&(0x7f0000000140)=""/249, 0xf9}, {&(0x7f0000000240)=""/171, 0xab}], 0x3}, 0x79e83a3f607a94f4) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'tunl0\x00'}) 908.815669ms ago: executing program 0 (id=2926): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)='G', 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x7}], 0x10}, 0x41) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e7c8543bcf4c64bd5de303d6"], 0xfdef) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0x411, 0x70bd27, 0x25dfdbbd, {0x0, 0x0, 0x0, 0x0, 0x7059d, 0x40606}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff000000}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24040054}, 0x20048000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) (async) socket$kcm(0xa, 0x5, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)='G', 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x7}], 0x10}, 0x41) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) (async) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e7c8543bcf4c64bd5de303d6"], 0xfdef) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0x411, 0x70bd27, 0x25dfdbbd, {0x0, 0x0, 0x0, 0x0, 0x7059d, 0x40606}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff000000}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24040054}, 0x20048000) (async) 679.829232ms ago: executing program 3 (id=2928): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_FIOGETOWN(r2, 0x80108907, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0xc000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800a1cac9190000240000002400000006000000020000000200000406000000040000000200000001000000030000000300000004000000005f5f002e00", @ANYRES32], &(0x7f0000000f40)=""/4077, 0x42, 0xfed}, 0x28) 679.298801ms ago: executing program 0 (id=2929): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x703d2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x12021}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fff0, 0x40}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x48}, 0x8000002) (fail_nth: 2) 614.163567ms ago: executing program 0 (id=2930): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c011}, 0x4040) 591.965724ms ago: executing program 3 (id=2931): r0 = socket$kcm(0x21, 0x2, 0xa) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0x3ff}], 0x28}, 0xfc40) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3}, 0x8) 480.535515ms ago: executing program 2 (id=2932): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x68, 0x2c, 0x200, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffffff62}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}]}]}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x1}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @remote}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$can_bcm(0x1d, 0x2, 0x2) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r12, 0x84, 0x2, &(0x7f0000000380)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) sendto$inet6(r12, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet6_int(r12, 0x29, 0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r11, 0x50009401, &(0x7f0000001300)={{r7}, "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"}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 480.160441ms ago: executing program 3 (id=2933): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x7c, "b762c29073b26c31da25af16d7f8d433a53e1cc62e266bf593dca0298129dba184da7df4a5bffce5d74213c5e6bb799ff97162686bc7601908030101c246b09d3119696aaadf7a6afbea25c4abb0f2ecdb4066ccdf91dd5f3d66c95e401d63f06711f5a6107ba2e68f7224b1e095918757f4623fcb7e77d6bff5b42c"}, &(0x7f0000000180)=0x84) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x7c, "b762c29073b26c31da25af16d7f8d433a53e1cc62e266bf593dca0298129dba184da7df4a5bffce5d74213c5e6bb799ff97162686bc7601908030101c246b09d3119696aaadf7a6afbea25c4abb0f2ecdb4066ccdf91dd5f3d66c95e401d63f06711f5a6107ba2e68f7224b1e095918757f4623fcb7e77d6bff5b42c"}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x3, 0x3024d57d73b599cd, 0x1, 0x6, 0x7, 0x101, 0x9, r2}, &(0x7f0000000200)=0x20) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x3, 0x3024d57d73b599cd, 0x1, 0x6, 0x7, 0x101, 0x9, r2}, &(0x7f0000000200)=0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRESHEX=r4], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x8, '\x00', r4, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) 440.446675ms ago: executing program 3 (id=2934): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24000010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_getrule={0x1c, 0x22, 0x400, 0x70bd28, 0x25dfdbff, {0x2, 0x14, 0x80, 0x0, 0x3, 0x0, 0x0, 0x2, 0x10010}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4) 417.20528ms ago: executing program 0 (id=2935): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0xa49, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200001a00000000000000000000008500000036000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000cd00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 299.864777ms ago: executing program 3 (id=2936): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3ff}]}}]}, 0x40}}, 0x0) 295.777064ms ago: executing program 0 (id=2937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "a178ffc6770dd0a96db1fb503a35620c7c8b5e5f795f60fa7f3ce7e92d897d1c", "434597a4a1fcf09c5ea15ca652c49dee8b7e608aaf7bc59b0d29b8503e37c901", "3dd83deedd1ccf9d4ac64d3b87eb2ee552c16cfef13788ee3417c84bd7827536", "7c5dabedcfbbfc721f5cd4e5907d93a01a46af2b1c38afaaeb3b3f677aebbf94", "ad3209ed89647d953681d2f2dc4298cd073b15e3f91aebbc15d991a744821255", "6a1bf2938b2404361f8abc8c", 0x7fffffff, 0x0, 0xfffffffb, 0xc, 0x80000000}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1ff, 0x4, 0x0, 0x2, 0xfffffffd, 0x8}}}}]}, 0x4c}}, 0x0) sendto$packet(r2, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040084) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffff, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f00000001c0)=0x69) 252.842396ms ago: executing program 3 (id=2938): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x7c, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x7c}}, 0x20000000) recvmsg(r3, &(0x7f0000000440)={&(0x7f00000001c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/37, 0x25}, {&(0x7f0000000240)=""/197, 0xc5}], 0x2, &(0x7f0000000340)=""/253, 0xfd}, 0x2001) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS(r5, 0x40047459, &(0x7f0000000080)=0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x1b}, 0x13) 0s ago: executing program 0 (id=2939): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f00000000c0)="32a9d08dd68d05d108d1ef45f1c1ebc5f69cc9c7c68282a968f5ab95191eece71b67d616431a66470055d757a4a6be389d5fcb17b46d1f") close(r0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) read(r0, &(0x7f0000000000)=""/31, 0x1f) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/35, 0x23}, {&(0x7f0000000180)=""/214, 0xd6}], 0x2, 0xfaec, 0x1ff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): 4] bond5: left promiscuous mode [ 322.620615][T14194] bridge4: left promiscuous mode [ 322.658327][T14194] bond6: left promiscuous mode [ 322.672708][T14207] netlink: 'syz.1.2149': attribute type 13 has an invalid length. [ 322.747690][T14201] ip6gretap3: entered allmulticast mode [ 322.912357][T14213] netlink: 'syz.4.2154': attribute type 13 has an invalid length. [ 323.177852][T14232] macvtap1: entered promiscuous mode [ 323.195135][T14232] veth1_to_hsr: entered promiscuous mode [ 323.201068][T14232] macvtap1: entered allmulticast mode [ 323.237075][T14232] veth1_to_hsr: entered allmulticast mode [ 323.470157][T14256] tipc: Enabling of bearer rejected, failed to enable media [ 324.025998][ T2572] block nbd3: Possible stuck request ffff888026918000: control (read@0,1024B). Runtime 120 seconds [ 324.037058][ T2572] block nbd3: Possible stuck request ffff888026918200: control (read@1024,1024B). Runtime 120 seconds [ 324.048179][ T2572] block nbd3: Possible stuck request ffff888026918400: control (read@2048,1024B). Runtime 120 seconds [ 324.059265][ T2572] block nbd3: Possible stuck request ffff888026918600: control (read@3072,1024B). Runtime 120 seconds [ 324.288821][T14277] --map-set only usable from mangle table [ 324.683464][T14292] xt_l2tp: v2 sid > 0xffff: 4294967295 [ 324.823874][T14300] __nla_validate_parse: 6 callbacks suppressed [ 324.823894][T14300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'. [ 324.863554][T14298] xt_hashlimit: size too large, truncated to 1048576 [ 324.936653][T14301] syzkaller1: entered promiscuous mode [ 324.942186][T14301] syzkaller1: entered allmulticast mode [ 324.993552][T14301] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c) [ 325.083627][T14314] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2180'. [ 325.111402][T14314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2180'. [ 325.125159][T14314] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2180'. [ 325.341610][T14323] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2183'. [ 325.400351][T14324] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2183'. [ 325.464933][T14330] dvmrp1: entered allmulticast mode [ 325.880353][T14341] netlink: 'syz.4.2188': attribute type 1 has an invalid length. [ 325.888354][T14341] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2188'. [ 326.302316][T14353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2191'. [ 326.607979][ T64] nci: nci_rsp_packet: unknown rsp opcode 0x2b [ 326.846523][T14368] Cannot find del_set index 1536 as target [ 326.927414][T14350] ipvlan3: entered promiscuous mode [ 327.075308][T14371] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 327.117326][T14373] syz0: rxe_newlink: already configured on lo [ 327.615246][T14394] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2203'. [ 327.758580][T14399] lo speed is unknown, defaulting to 1000 [ 327.789595][T14399] lo speed is unknown, defaulting to 1000 [ 328.237158][T14412] netlink: 'syz.4.2207': attribute type 5 has an invalid length. [ 328.591946][T14420] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 329.176710][T14438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2216'. [ 329.216856][T14434] syzkaller0: entered promiscuous mode [ 329.235543][T14434] syzkaller0: entered allmulticast mode [ 329.282929][T14434] tipc: Enabled bearer , priority 0 [ 329.338275][T14433] tipc: Resetting bearer [ 329.376366][T14433] tipc: Disabling bearer [ 329.387482][T14442] netlink: 'syz.2.2217': attribute type 13 has an invalid length. [ 329.430269][T14446] bond6: option min_links: invalid value (18446744073709551612) [ 329.457373][T14446] bond6: option min_links: allowed values 0 - 2147483647 [ 329.476575][T14446] bond6 (unregistering): Released all slaves [ 329.879778][T14461] __nla_validate_parse: 2 callbacks suppressed [ 329.879800][T14461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2222'. [ 329.917658][T14461] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2222'. [ 329.980459][T14474] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2227'. [ 330.040300][T14474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2227'. [ 330.139520][T14484] netlink: 'syz.1.2228': attribute type 11 has an invalid length. [ 330.176975][T14484] netlink: 'syz.1.2228': attribute type 4 has an invalid length. [ 330.192529][T14484] netlink: 199780 bytes leftover after parsing attributes in process `syz.1.2228'. [ 330.265119][T14488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2229'. [ 330.588859][T14511] netlink: 284 bytes leftover after parsing attributes in process `syz.4.2235'. [ 330.599693][T14509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.168257][T14537] pim6reg: entered allmulticast mode [ 331.196698][T14541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.218712][T14537] pim6reg: left allmulticast mode [ 331.345577][T14544] pim6reg: entered allmulticast mode [ 331.569947][T14562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2246'. [ 331.796055][T14569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2248'. [ 331.824783][T14569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2248'. [ 331.858391][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.875115][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.883999][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.955167][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.134965][T14586] 8021q: adding VLAN 0 to HW filter on device bond8 [ 332.252659][T14596] netlink: 'syz.4.2255': attribute type 1 has an invalid length. [ 332.285268][T14596] netlink: 'syz.4.2255': attribute type 2 has an invalid length. [ 332.293193][T14596] netlink: 'syz.4.2255': attribute type 1 has an invalid length. [ 332.394976][T14603] netlink: 'syz.3.2259': attribute type 10 has an invalid length. [ 332.552706][T14618] netlink: 'syz.0.2263': attribute type 1 has an invalid length. [ 332.657032][T14622] netlink: 'syz.0.2265': attribute type 2 has an invalid length. [ 333.171152][T14644] nbd: socks must be embedded in a SOCK_ITEM attr [ 333.185948][T14649] netlink: 'syz.1.2276': attribute type 4 has an invalid length. [ 333.186804][T14644] nbd: device at index 64 is going down [ 333.276908][T14644] lo speed is unknown, defaulting to 1000 [ 333.284336][T14644] lo speed is unknown, defaulting to 1000 [ 333.487640][T14667] syzkaller1: entered promiscuous mode [ 333.493178][T14667] syzkaller1: entered allmulticast mode [ 333.508515][T13660] udevd[13660]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 333.551145][ T5838] udevd[5838]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 334.123055][T14670] ipvlan3: left promiscuous mode [ 334.131296][T14673] hsr_slave_0: left promiscuous mode [ 334.138589][T14673] hsr_slave_1: left promiscuous mode [ 334.500351][T14689] netlink: 'syz.2.2285': attribute type 13 has an invalid length. [ 334.515811][T14688] lo speed is unknown, defaulting to 1000 [ 334.597245][T14688] lo speed is unknown, defaulting to 1000 [ 334.793983][T14705] xt_bpf: check failed: parse error [ 334.917521][T14707] __nla_validate_parse: 10 callbacks suppressed [ 334.917545][T14707] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2291'. [ 335.720237][T14727] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2297'. [ 335.798214][T14730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2298'. [ 336.043551][T14739] lo speed is unknown, defaulting to 1000 [ 336.052438][T14739] lo speed is unknown, defaulting to 1000 [ 337.281763][T14769] veth1_to_hsr: left allmulticast mode [ 337.315501][T14769] veth1_to_hsr: left promiscuous mode [ 337.321545][T14769] macvtap1: left promiscuous mode [ 337.344657][T14769] macvtap1: left allmulticast mode [ 337.427449][T14769] netlink: 'syz.1.2308': attribute type 13 has an invalid length. [ 337.907734][T14788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2314'. [ 338.007123][T14792] lo speed is unknown, defaulting to 1000 [ 338.016191][T14792] lo speed is unknown, defaulting to 1000 [ 338.246194][T14800] x_tables: duplicate underflow at hook 2 [ 338.634064][T14811] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 338.637151][T14813] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:0 [ 338.694420][T14809] netlink: 'syz.4.2321': attribute type 13 has an invalid length. [ 338.708864][T14816] netlink: 'syz.1.2323': attribute type 1 has an invalid length. [ 338.720673][T14816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2323'. [ 338.747024][T14816] netlink: 'syz.1.2323': attribute type 1 has an invalid length. [ 338.896880][T14821] syzkaller1: entered promiscuous mode [ 338.902427][T14821] syzkaller1: entered allmulticast mode [ 338.973216][T14832] syzkaller0: entered promiscuous mode [ 339.015029][T14832] syzkaller0: entered allmulticast mode [ 339.082117][T14836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2330'. [ 339.153546][T14842] netlink: 'syz.3.2328': attribute type 2 has an invalid length. [ 339.204935][T14836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2330'. [ 339.634684][T14850] sctp: [Deprecated]: syz.1.2331 (pid 14850) Use of struct sctp_assoc_value in delayed_ack socket option. [ 339.634684][T14850] Use struct sctp_sack_info instead [ 340.030649][T14876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.691972][T14881] : renamed from team_slave_1 [ 341.345176][T14930] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2355'. [ 341.375346][T14930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2355'. [ 341.503391][T14939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2357'. [ 341.520608][T14944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2358'. [ 341.623157][T14944] 8021q: adding VLAN 0 to HW filter on device bond6 [ 341.646799][T14948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2359'. [ 341.703166][T14951] tipc: Enabling of bearer rejected, failed to enable media [ 341.742918][T14951] tipc: Enabling of bearer rejected, failed to enable media [ 341.763241][T14956] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2359'. [ 341.792153][T14956] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2359'. [ 341.913235][T14966] FAULT_INJECTION: forcing a failure. [ 341.913235][T14966] name failslab, interval 1, probability 0, space 0, times 0 [ 341.935466][T14966] CPU: 0 UID: 0 PID: 14966 Comm: syz.2.2362 Not tainted syzkaller #0 PREEMPT(full) [ 341.935490][T14966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 341.935516][T14966] Call Trace: [ 341.935523][T14966] [ 341.935530][T14966] dump_stack_lvl+0xe8/0x150 [ 341.935555][T14966] should_fail_ex+0x412/0x560 [ 341.935578][T14966] should_failslab+0xa8/0x100 [ 341.935605][T14966] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 341.935622][T14966] ? __kernel_text_address+0xd/0x30 [ 341.935637][T14966] ? __get_vm_area_node+0x13f/0x300 [ 341.935650][T14966] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 341.935669][T14966] __get_vm_area_node+0x13f/0x300 [ 341.935687][T14966] __vmalloc_node_range_noprof+0x372/0x1730 [ 341.935702][T14966] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 341.935717][T14966] ? __pfx_stack_trace_save+0x10/0x10 [ 341.935734][T14966] ? stack_depot_save_flags+0x33/0x810 [ 341.935752][T14966] ? format_decode+0xd0/0xe10 [ 341.935772][T14966] ? kasan_save_free_info+0x46/0x50 [ 341.935791][T14966] ? __kasan_slab_free+0x5c/0x80 [ 341.935810][T14966] ? register_lock_class+0x31/0x2e0 [ 341.935831][T14966] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 341.935858][T14966] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 341.935870][T14966] __vmalloc_noprof+0xd2/0x120 [ 341.935885][T14966] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 341.935901][T14966] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 341.935919][T14966] bpf_prog_alloc+0x3c/0x1a0 [ 341.935935][T14966] __get_filter+0xff/0x400 [ 341.935959][T14966] sk_attach_filter+0x24/0x140 [ 341.935978][T14966] tun_attach+0x3a3/0x1590 [ 341.935995][T14966] ? do_vfs_ioctl+0x1166/0x1530 [ 341.936014][T14966] ? __tun_chr_ioctl+0x3bc/0x1e10 [ 341.936039][T14966] ? full_name_hash+0x92/0xe0 [ 341.936061][T14966] ? tun_not_capable+0x14d/0x1f0 [ 341.936076][T14966] tun_set_iff+0x468/0xf00 [ 341.936104][T14966] __tun_chr_ioctl+0x7bb/0x1e10 [ 341.936129][T14966] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 341.936153][T14966] ? __fget_files+0x2a/0x420 [ 341.936173][T14966] ? __fget_files+0x3a0/0x420 [ 341.936192][T14966] ? __fget_files+0x2a/0x420 [ 341.936213][T14966] ? bpf_lsm_file_ioctl+0x9/0x20 [ 341.936232][T14966] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 341.936251][T14966] __se_sys_ioctl+0xfc/0x170 [ 341.936269][T14966] do_syscall_64+0x14d/0xf80 [ 341.936289][T14966] ? trace_irq_disable+0x3b/0x150 [ 341.936308][T14966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.936322][T14966] ? clear_bhb_loop+0x40/0x90 [ 341.936340][T14966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.936354][T14966] RIP: 0033:0x7f165059c799 [ 341.936368][T14966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.936381][T14966] RSP: 002b:00007f16514bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.936397][T14966] RAX: ffffffffffffffda RBX: 00007f1650815fa0 RCX: 00007f165059c799 [ 341.936407][T14966] RDX: 0000200000000080 RSI: 00000000400454ca RDI: 0000000000000004 [ 341.936416][T14966] RBP: 00007f16514bf090 R08: 0000000000000000 R09: 0000000000000000 [ 341.936425][T14966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.936433][T14966] R13: 00007f1650816038 R14: 00007f1650815fa0 R15: 00007fffe49c1bb8 [ 341.936457][T14966] [ 341.936765][T14966] syz.2.2362: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 342.270667][T14984] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2367'. [ 342.274092][T14966] ,cpuset= [ 342.295226][T14984] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2367'. [ 342.318381][T14966] /,mems_allowed=0-1 [ 342.323682][T14966] CPU: 0 UID: 0 PID: 14966 Comm: syz.2.2362 Not tainted syzkaller #0 PREEMPT(full) [ 342.323705][T14966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 342.323716][T14966] Call Trace: [ 342.323723][T14966] [ 342.323731][T14966] dump_stack_lvl+0xe8/0x150 [ 342.323761][T14966] warn_alloc+0x249/0x340 [ 342.323788][T14966] ? __pfx_warn_alloc+0x10/0x10 [ 342.323810][T14966] ? __get_vm_area_node+0x13f/0x300 [ 342.323832][T14966] ? __get_vm_area_node+0x2b5/0x300 [ 342.323854][T14966] __vmalloc_node_range_noprof+0x397/0x1730 [ 342.323870][T14966] ? __pfx_stack_trace_save+0x10/0x10 [ 342.323888][T14966] ? stack_depot_save_flags+0x33/0x810 [ 342.323906][T14966] ? format_decode+0xd0/0xe10 [ 342.323927][T14966] ? kasan_save_free_info+0x46/0x50 [ 342.323947][T14966] ? __kasan_slab_free+0x5c/0x80 [ 342.323966][T14966] ? register_lock_class+0x31/0x2e0 [ 342.323987][T14966] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 342.324014][T14966] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 342.324026][T14966] __vmalloc_noprof+0xd2/0x120 [ 342.324042][T14966] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 342.324058][T14966] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 342.324076][T14966] bpf_prog_alloc+0x3c/0x1a0 [ 342.324091][T14966] __get_filter+0xff/0x400 [ 342.324116][T14966] sk_attach_filter+0x24/0x140 [ 342.324137][T14966] tun_attach+0x3a3/0x1590 [ 342.324154][T14966] ? do_vfs_ioctl+0x1166/0x1530 [ 342.324172][T14966] ? __tun_chr_ioctl+0x3bc/0x1e10 [ 342.324198][T14966] ? full_name_hash+0x92/0xe0 [ 342.324220][T14966] ? tun_not_capable+0x14d/0x1f0 [ 342.324254][T14966] tun_set_iff+0x468/0xf00 [ 342.324282][T14966] __tun_chr_ioctl+0x7bb/0x1e10 [ 342.324307][T14966] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 342.324331][T14966] ? __fget_files+0x2a/0x420 [ 342.324350][T14966] ? __fget_files+0x3a0/0x420 [ 342.324369][T14966] ? __fget_files+0x2a/0x420 [ 342.324391][T14966] ? bpf_lsm_file_ioctl+0x9/0x20 [ 342.324409][T14966] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 342.324429][T14966] __se_sys_ioctl+0xfc/0x170 [ 342.324447][T14966] do_syscall_64+0x14d/0xf80 [ 342.324467][T14966] ? trace_irq_disable+0x3b/0x150 [ 342.324486][T14966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.324500][T14966] ? clear_bhb_loop+0x40/0x90 [ 342.324523][T14966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.324538][T14966] RIP: 0033:0x7f165059c799 [ 342.324561][T14966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.324576][T14966] RSP: 002b:00007f16514bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 342.324595][T14966] RAX: ffffffffffffffda RBX: 00007f1650815fa0 RCX: 00007f165059c799 [ 342.324608][T14966] RDX: 0000200000000080 RSI: 00000000400454ca RDI: 0000000000000004 [ 342.324619][T14966] RBP: 00007f16514bf090 R08: 0000000000000000 R09: 0000000000000000 [ 342.324630][T14966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.324642][T14966] R13: 00007f1650816038 R14: 00007f1650815fa0 R15: 00007fffe49c1bb8 [ 342.324673][T14966] [ 342.629009][T14966] Mem-Info: [ 342.632183][T14966] active_anon:6778 inactive_anon:0 isolated_anon:0 [ 342.632183][T14966] active_file:3399 inactive_file:40048 isolated_file:0 [ 342.632183][T14966] unevictable:785 dirty:183 writeback:0 [ 342.632183][T14966] slab_reclaimable:12688 slab_unreclaimable:115347 [ 342.632183][T14966] mapped:30648 shmem:1363 pagetables:1425 [ 342.632183][T14966] sec_pagetables:0 bounce:0 [ 342.632183][T14966] kernel_misc_reclaimable:0 [ 342.632183][T14966] free:1285594 free_pcp:23386 free_cma:0 [ 342.678595][T14966] Node 0 active_anon:27112kB inactive_anon:0kB active_file:13596kB inactive_file:159996kB unevictable:1604kB isolated(anon):0kB isolated(file):0kB mapped:122592kB dirty:732kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14360kB pagetables:5568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 342.711867][T14966] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 342.743719][T14966] Node 0 DMA free:11228kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:16kB free_cma:0kB [ 342.779845][T14966] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 342.789399][T14966] Node 0 DMA32 free:1265428kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26880kB inactive_anon:0kB active_file:13596kB inactive_file:159996kB unevictable:1604kB writepending:736kB zspages:0kB present:3129332kB managed:2552564kB mlocked:68kB bounce:0kB free_pcp:36284kB local_pcp:15672kB free_cma:0kB [ 342.848179][T14966] lowmem_reserve[]: 0 0 0 0 0 [ 342.853138][T14966] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 342.888171][T14966] lowmem_reserve[]: 0 0 0 0 0 [ 342.893947][T14966] Node 1 Normal free:3865656kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:57352kB local_pcp:31188kB free_cma:0kB [ 342.927057][T14966] lowmem_reserve[]: 0 0 0 0 0 [ 342.931913][T14966] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11228kB [ 342.948415][T14966] Node 0 DMA32: 4857*4kB (UME) 3968*8kB (UME) 2467*16kB (UME) 916*32kB (UME) 698*64kB (UM) 606*128kB (UME) 533*256kB (UME) 426*512kB (UM) 305*1024kB (UME) 174*2048kB (U) 0*4096kB = 1265428kB [ 342.967741][T14966] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 342.980175][T14966] Node 1 Normal: 2*4kB (U) 14*8kB (UM) 12*16kB (UM) 10*32kB (UM) 7*64kB (UM) 6*128kB (UM) 3*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 941*4096kB (M) = 3865656kB [ 342.998052][T14966] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 343.009363][T14966] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 343.019503][T14966] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 343.029548][T14966] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 343.055492][T14966] 44806 total pagecache pages [ 343.060439][T14966] 0 pages in swap cache [ 343.065802][T14966] Free swap = 124996kB [ 343.070053][T14966] Total swap = 124996kB [ 343.074374][T14966] 2097051 pages RAM [ 343.079451][T14966] 0 pages HighMem/MovableOnly [ 343.084227][T14966] 427074 pages reserved [ 343.089324][T14966] 0 pages cma reserved [ 343.099587][T14999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2369'. [ 343.161486][T14999] 8021q: VLANs not supported on vxcan1 [ 343.482092][T15020] xt_recent: Unsupported userspace flags (000000b1) [ 343.603919][T15024] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 343.976328][T15038] syzkaller1: entered promiscuous mode [ 343.985551][T15038] syzkaller1: entered allmulticast mode [ 344.172857][T15050] syzkaller0: create flow: hash 3383274753 index 1 [ 344.209463][ T6998] syzkaller0: tun_net_xmit 76 [ 344.215214][ T6998] syzkaller0: tun_net_xmit 48 [ 344.234768][ T10] syzkaller0: tun_net_xmit 76 [ 344.299971][T15054] xfrm1: entered promiscuous mode [ 344.305401][T15054] xfrm1: entered allmulticast mode [ 344.315951][T15043] syzkaller0: delete flow: hash 3383274753 index 1 [ 344.629631][T15072] No such timeout policy "syz1" [ 345.147289][ T2531] block nbd0: Possible stuck request ffff888026828000: control (read@0,1024B). Runtime 150 seconds [ 345.158745][ T2531] block nbd0: Possible stuck request ffff888026828200: control (read@1024,1024B). Runtime 150 seconds [ 345.170351][ T2531] block nbd0: Possible stuck request ffff888026828400: control (read@2048,1024B). Runtime 150 seconds [ 345.181539][ T2531] block nbd0: Possible stuck request ffff888026828600: control (read@3072,1024B). Runtime 150 seconds [ 346.076701][T15058] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 346.238783][T15085] netlink: 'syz.4.2396': attribute type 1 has an invalid length. [ 346.257118][T15085] netlink: 'syz.4.2396': attribute type 11 has an invalid length. [ 346.387184][T15094] __nla_validate_parse: 14 callbacks suppressed [ 346.387203][T15094] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2400'. [ 346.410346][T15100] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2401'. [ 346.511060][T15102] lo speed is unknown, defaulting to 1000 [ 346.546304][T15105] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 346.570948][T15102] lo speed is unknown, defaulting to 1000 [ 346.591178][T15111] netlink: 'syz.4.2406': attribute type 7 has an invalid length. [ 346.791573][ T8817] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x9e [ 347.070398][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2412'. [ 347.103462][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2412'. [ 347.285469][T15150] xfrm1: left promiscuous mode [ 347.304933][T15150] xfrm1: left allmulticast mode [ 347.318651][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2414'. [ 347.714262][T15160] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 348.060340][T15174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2421'. [ 348.191488][T15174] 8021q: adding VLAN 0 to HW filter on device bond6 [ 348.510833][T15180] netlink: 'syz.0.2423': attribute type 11 has an invalid length. [ 348.912800][T15198] lo speed is unknown, defaulting to 1000 [ 348.921291][T15198] lo speed is unknown, defaulting to 1000 [ 349.000670][T15201] FAULT_INJECTION: forcing a failure. [ 349.000670][T15201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.037461][T15201] CPU: 0 UID: 0 PID: 15201 Comm: syz.3.2431 Not tainted syzkaller #0 PREEMPT(full) [ 349.037488][T15201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 349.037500][T15201] Call Trace: [ 349.037507][T15201] [ 349.037515][T15201] dump_stack_lvl+0xe8/0x150 [ 349.037545][T15201] should_fail_ex+0x412/0x560 [ 349.037574][T15201] _copy_from_user+0x2d/0xb0 [ 349.037601][T15201] ___sys_sendmsg+0x1c6/0x360 [ 349.037625][T15201] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.037676][T15201] ? __fget_files+0x2a/0x420 [ 349.037700][T15201] ? __fget_files+0x3a0/0x420 [ 349.037734][T15201] __x64_sys_sendmsg+0x1bd/0x2a0 [ 349.037755][T15201] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.037783][T15201] ? __pfx_ksys_write+0x10/0x10 [ 349.037814][T15201] do_syscall_64+0x14d/0xf80 [ 349.037838][T15201] ? trace_irq_disable+0x3b/0x150 [ 349.037862][T15201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.037880][T15201] ? clear_bhb_loop+0x40/0x90 [ 349.037902][T15201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.037920][T15201] RIP: 0033:0x7fc7c639c799 [ 349.037944][T15201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.037959][T15201] RSP: 002b:00007fc7c72a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.037979][T15201] RAX: ffffffffffffffda RBX: 00007fc7c6615fa0 RCX: 00007fc7c639c799 [ 349.037992][T15201] RDX: 0000000028008841 RSI: 0000200000001640 RDI: 0000000000000003 [ 349.038004][T15201] RBP: 00007fc7c72a0090 R08: 0000000000000000 R09: 0000000000000000 [ 349.038015][T15201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.038025][T15201] R13: 00007fc7c6616038 R14: 00007fc7c6615fa0 R15: 00007fffac4cc8c8 [ 349.038055][T15201] [ 349.418892][T15207] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2432'. [ 350.075301][T15221] : entered promiscuous mode [ 350.332990][T15227] netlink: 'syz.1.2437': attribute type 2 has an invalid length. [ 350.341156][T15227] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2437'. [ 350.525902][T15231] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32) [ 350.762051][T15244] sock: sock_timestamping_bind_phc: sock not bind to device [ 351.091008][T15252] FAULT_INJECTION: forcing a failure. [ 351.091008][T15252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.183459][T15252] CPU: 1 UID: 0 PID: 15252 Comm: syz.3.2443 Not tainted syzkaller #0 PREEMPT(full) [ 351.183486][T15252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 351.183496][T15252] Call Trace: [ 351.183504][T15252] [ 351.183512][T15252] dump_stack_lvl+0xe8/0x150 [ 351.183542][T15252] should_fail_ex+0x412/0x560 [ 351.183571][T15252] _copy_from_user+0x2d/0xb0 [ 351.183598][T15252] __copy_msghdr+0x3c5/0x5b0 [ 351.183620][T15252] ___sys_sendmsg+0x213/0x360 [ 351.183643][T15252] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.183694][T15252] ? __fget_files+0x2a/0x420 [ 351.183717][T15252] ? __fget_files+0x3a0/0x420 [ 351.183751][T15252] __x64_sys_sendmsg+0x1bd/0x2a0 [ 351.183772][T15252] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.183806][T15252] ? __pfx_ksys_write+0x10/0x10 [ 351.183836][T15252] do_syscall_64+0x14d/0xf80 [ 351.183859][T15252] ? trace_irq_disable+0x3b/0x150 [ 351.183884][T15252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.183902][T15252] ? clear_bhb_loop+0x40/0x90 [ 351.183920][T15252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.183935][T15252] RIP: 0033:0x7fc7c639c799 [ 351.183948][T15252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.183960][T15252] RSP: 002b:00007fc7c72a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.183975][T15252] RAX: ffffffffffffffda RBX: 00007fc7c6615fa0 RCX: 00007fc7c639c799 [ 351.183987][T15252] RDX: 0000000028008841 RSI: 0000200000001640 RDI: 0000000000000003 [ 351.183999][T15252] RBP: 00007fc7c72a0090 R08: 0000000000000000 R09: 0000000000000000 [ 351.184010][T15252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.184019][T15252] R13: 00007fc7c6616038 R14: 00007fc7c6615fa0 R15: 00007fffac4cc8c8 [ 351.184046][T15252] [ 351.210692][T15255] geneve3: entered promiscuous mode [ 351.383175][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2445'. [ 351.394363][T15255] geneve3: entered allmulticast mode [ 351.401050][T15259] tipc: Enabling of bearer rejected, failed to enable media [ 351.456989][T15258] ip6tnl2: entered allmulticast mode [ 351.793346][T15266] netlink: 'syz.3.2446': attribute type 16 has an invalid length. [ 351.802370][T15266] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2446'. [ 352.196913][ T2531] block nbd1: Possible stuck request ffff888026859c00: control (read@0,1024B). Runtime 120 seconds [ 352.214762][ T2531] block nbd1: Possible stuck request ffff888026859e00: control (read@1024,1024B). Runtime 120 seconds [ 352.231782][ T2531] block nbd1: Possible stuck request ffff88802685a000: control (read@2048,1024B). Runtime 120 seconds [ 352.247793][ T2531] block nbd1: Possible stuck request ffff88802685a200: control (read@3072,1024B). Runtime 120 seconds [ 352.502730][T15276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2449'. [ 352.611551][T15281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2450'. [ 352.705326][T15285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2452'. [ 352.719467][T15285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2452'. [ 352.841253][T15293] veth0_vlan: left promiscuous mode [ 352.854359][T15293] bond5: left promiscuous mode [ 352.860933][T15293] gretap2: left promiscuous mode [ 352.868206][T15293] gretap2: left allmulticast mode [ 352.873666][T15293] ip6gretap3: left allmulticast mode [ 353.131564][T15298] syzkaller0: entered promiscuous mode [ 353.137794][T15298] syzkaller0: entered allmulticast mode [ 353.703366][T15325] vti0: entered promiscuous mode [ 354.107558][ T2572] block nbd3: Possible stuck request ffff888026918000: control (read@0,1024B). Runtime 150 seconds [ 354.119150][ T2572] block nbd3: Possible stuck request ffff888026918200: control (read@1024,1024B). Runtime 150 seconds [ 354.130873][ T2572] block nbd3: Possible stuck request ffff888026918400: control (read@2048,1024B). Runtime 150 seconds [ 354.143032][ T2572] block nbd3: Possible stuck request ffff888026918600: control (read@3072,1024B). Runtime 150 seconds [ 354.309149][T15346] netlink: 'syz.4.2462': attribute type 2 has an invalid length. [ 354.741939][T15358] x_tables: ip_tables: esp match: only valid for protocol 50 [ 354.790659][T15359] syzkaller0: entered promiscuous mode [ 354.811996][T15359] syzkaller0: entered allmulticast mode [ 354.835711][T15359] netlink: 'syz.3.2466': attribute type 1 has an invalid length. [ 354.844273][T15359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2466'. [ 355.093001][T15244] Set syz1 is full, maxelem 65536 reached [ 355.167683][T15372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2470'. [ 355.290689][T15378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2472'. [ 355.430839][T15390] FAULT_INJECTION: forcing a failure. [ 355.430839][T15390] name failslab, interval 1, probability 0, space 0, times 0 [ 355.446743][T15390] CPU: 0 UID: 0 PID: 15390 Comm: syz.3.2477 Not tainted syzkaller #0 PREEMPT(full) [ 355.446770][T15390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 355.446780][T15390] Call Trace: [ 355.446787][T15390] [ 355.446796][T15390] dump_stack_lvl+0xe8/0x150 [ 355.446826][T15390] should_fail_ex+0x412/0x560 [ 355.446850][T15390] should_failslab+0xa8/0x100 [ 355.446871][T15390] __kmalloc_cache_noprof+0x88/0x660 [ 355.446891][T15390] ? sctp_add_bind_addr+0x8c/0x370 [ 355.446908][T15390] ? __pfx_sctp_get_port_local+0x10/0x10 [ 355.446936][T15390] sctp_add_bind_addr+0x8c/0x370 [ 355.446953][T15390] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 355.446979][T15390] sctp_do_bind+0x5b2/0x9d0 [ 355.447013][T15390] sctp_connect_new_asoc+0x270/0x6b0 [ 355.447038][T15390] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 355.447067][T15390] ? __local_bh_enable_ip+0xd0/0x130 [ 355.447088][T15390] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 355.447109][T15390] ? security_sctp_bind_connect+0x7e/0x2c0 [ 355.447131][T15390] sctp_sendmsg+0x1528/0x2c10 [ 355.447169][T15390] ? __pfx_sctp_sendmsg+0x10/0x10 [ 355.447193][T15390] ? aa_sk_perm+0x6d5/0x900 [ 355.447224][T15390] ? __pfx_aa_sk_perm+0x10/0x10 [ 355.447248][T15390] ? sock_rps_record_flow+0x19/0x350 [ 355.447274][T15390] ? inet_sendmsg+0x2f4/0x370 [ 355.447300][T15390] ____sys_sendmsg+0x80a/0x9f0 [ 355.447325][T15390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.447350][T15390] ? import_iovec+0x73/0xa0 [ 355.447379][T15390] ___sys_sendmsg+0x2a5/0x360 [ 355.447403][T15390] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.447454][T15390] ? __fget_files+0x2a/0x420 [ 355.447478][T15390] ? __fget_files+0x3a0/0x420 [ 355.447511][T15390] __x64_sys_sendmsg+0x1bd/0x2a0 [ 355.447531][T15390] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 355.447558][T15390] ? __pfx_ksys_write+0x10/0x10 [ 355.447587][T15390] do_syscall_64+0x14d/0xf80 [ 355.447610][T15390] ? trace_irq_disable+0x3b/0x150 [ 355.447632][T15390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.447650][T15390] ? clear_bhb_loop+0x40/0x90 [ 355.447670][T15390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.447687][T15390] RIP: 0033:0x7fc7c639c799 [ 355.447703][T15390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.447718][T15390] RSP: 002b:00007fc7c72a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.447745][T15390] RAX: ffffffffffffffda RBX: 00007fc7c6615fa0 RCX: 00007fc7c639c799 [ 355.447759][T15390] RDX: 0000000028008841 RSI: 0000200000001640 RDI: 0000000000000003 [ 355.447772][T15390] RBP: 00007fc7c72a0090 R08: 0000000000000000 R09: 0000000000000000 [ 355.447783][T15390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.447794][T15390] R13: 00007fc7c6616038 R14: 00007fc7c6615fa0 R15: 00007fffac4cc8c8 [ 355.447825][T15390] [ 355.452891][T15389] tipc: New replicast peer: 255.255.255.255 [ 355.749774][T15389] tipc: Enabled bearer , priority 6 [ 355.869423][T15402] FAULT_INJECTION: forcing a failure. [ 355.869423][T15402] name failslab, interval 1, probability 0, space 0, times 0 [ 355.885416][T15402] CPU: 0 UID: 0 PID: 15402 Comm: syz.1.2480 Not tainted syzkaller #0 PREEMPT(full) [ 355.885437][T15402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 355.885445][T15402] Call Trace: [ 355.885452][T15402] [ 355.885459][T15402] dump_stack_lvl+0xe8/0x150 [ 355.885489][T15402] should_fail_ex+0x412/0x560 [ 355.885515][T15402] should_failslab+0xa8/0x100 [ 355.885536][T15402] __kmalloc_noprof+0xe8/0x760 [ 355.885552][T15402] ? l2tp_v3_session_get+0x60d/0x7c0 [ 355.885572][T15402] ? l2tp_session_create+0x42/0xd40 [ 355.885593][T15402] ? l2tp_v3_session_get+0x96/0x7c0 [ 355.885618][T15402] l2tp_session_create+0x42/0xd40 [ 355.885651][T15402] pppol2tp_connect+0xc96/0x17c0 [ 355.885685][T15402] ? __pfx_pppol2tp_connect+0x10/0x10 [ 355.885716][T15402] ? __pfx_aa_sk_perm+0x10/0x10 [ 355.885743][T15402] ? hook_socket_connect+0x107/0x190 [ 355.885769][T15402] ? bpf_lsm_socket_connect+0x9/0x20 [ 355.885794][T15402] __sys_connect+0x312/0x450 [ 355.885822][T15402] ? __pfx___sys_connect+0x10/0x10 [ 355.885856][T15402] ? __pfx_ksys_write+0x10/0x10 [ 355.885882][T15402] __x64_sys_connect+0x7a/0x90 [ 355.885908][T15402] do_syscall_64+0x14d/0xf80 [ 355.885932][T15402] ? trace_irq_disable+0x3b/0x150 [ 355.885957][T15402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.885976][T15402] ? clear_bhb_loop+0x40/0x90 [ 355.885998][T15402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.886016][T15402] RIP: 0033:0x7fc86a39c799 [ 355.886034][T15402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.886049][T15402] RSP: 002b:00007fc86b21e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 355.886069][T15402] RAX: ffffffffffffffda RBX: 00007fc86a615fa0 RCX: 00007fc86a39c799 [ 355.886082][T15402] RDX: 000000000000002e RSI: 0000200000000100 RDI: 0000000000000008 [ 355.886094][T15402] RBP: 00007fc86b21e090 R08: 0000000000000000 R09: 0000000000000000 [ 355.886105][T15402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.886116][T15402] R13: 00007fc86a616038 R14: 00007fc86a615fa0 R15: 00007ffd1521e648 [ 355.886147][T15402] [ 356.424873][T15396] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 356.520009][T15411] lo speed is unknown, defaulting to 1000 [ 356.554251][T15411] lo speed is unknown, defaulting to 1000 [ 356.610649][T15415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2484'. [ 356.864645][ T6921] tipc: Node number set to 2918429108 [ 356.865006][T15426] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2487'. [ 357.028506][T15431] FAULT_INJECTION: forcing a failure. [ 357.028506][T15431] name failslab, interval 1, probability 0, space 0, times 0 [ 357.076303][T15431] CPU: 0 UID: 0 PID: 15431 Comm: syz.3.2488 Not tainted syzkaller #0 PREEMPT(full) [ 357.076335][T15431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 357.076347][T15431] Call Trace: [ 357.076356][T15431] [ 357.076365][T15431] dump_stack_lvl+0xe8/0x150 [ 357.076397][T15431] should_fail_ex+0x412/0x560 [ 357.076428][T15431] should_failslab+0xa8/0x100 [ 357.076454][T15431] __kmalloc_cache_noprof+0x88/0x660 [ 357.076474][T15431] ? sctp_v6_to_sk_saddr+0x100/0x1c0 [ 357.076498][T15431] ? sctp_association_new+0x89/0x25e0 [ 357.076522][T15431] ? __asan_memcpy+0x40/0x70 [ 357.076544][T15431] sctp_association_new+0x89/0x25e0 [ 357.076569][T15431] ? sctp_do_bind+0x661/0x9d0 [ 357.076606][T15431] sctp_connect_new_asoc+0x2e4/0x6b0 [ 357.076642][T15431] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 357.076673][T15431] ? __local_bh_enable_ip+0xd0/0x130 [ 357.076698][T15431] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 357.076720][T15431] ? security_sctp_bind_connect+0x7e/0x2c0 [ 357.076751][T15431] sctp_sendmsg+0x1528/0x2c10 [ 357.076792][T15431] ? __pfx_sctp_sendmsg+0x10/0x10 [ 357.076820][T15431] ? aa_sk_perm+0x6d5/0x900 [ 357.076851][T15431] ? __pfx_aa_sk_perm+0x10/0x10 [ 357.076877][T15431] ? sock_rps_record_flow+0x19/0x350 [ 357.076908][T15431] ? inet_sendmsg+0x2f4/0x370 [ 357.076939][T15431] ____sys_sendmsg+0x80a/0x9f0 [ 357.076969][T15431] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.076998][T15431] ? import_iovec+0x73/0xa0 [ 357.077029][T15431] ___sys_sendmsg+0x2a5/0x360 [ 357.077055][T15431] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.077116][T15431] ? __fget_files+0x2a/0x420 [ 357.077141][T15431] ? __fget_files+0x3a0/0x420 [ 357.077177][T15431] __x64_sys_sendmsg+0x1bd/0x2a0 [ 357.077200][T15431] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.077230][T15431] ? __pfx_ksys_write+0x10/0x10 [ 357.077263][T15431] do_syscall_64+0x14d/0xf80 [ 357.077289][T15431] ? trace_irq_disable+0x3b/0x150 [ 357.077315][T15431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.077334][T15431] ? clear_bhb_loop+0x40/0x90 [ 357.077357][T15431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.077376][T15431] RIP: 0033:0x7fc7c639c799 [ 357.077396][T15431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.077412][T15431] RSP: 002b:00007fc7c72a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.077434][T15431] RAX: ffffffffffffffda RBX: 00007fc7c6615fa0 RCX: 00007fc7c639c799 [ 357.077448][T15431] RDX: 0000000028008841 RSI: 0000200000001640 RDI: 0000000000000003 [ 357.077460][T15431] RBP: 00007fc7c72a0090 R08: 0000000000000000 R09: 0000000000000000 [ 357.077472][T15431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.077484][T15431] R13: 00007fc7c6616038 R14: 00007fc7c6615fa0 R15: 00007fffac4cc8c8 [ 357.077515][T15431] [ 357.382399][T15436] FAULT_INJECTION: forcing a failure. [ 357.382399][T15436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.404823][T15436] CPU: 1 UID: 0 PID: 15436 Comm: syz.0.2491 Not tainted syzkaller #0 PREEMPT(full) [ 357.404850][T15436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 357.404861][T15436] Call Trace: [ 357.404868][T15436] [ 357.404877][T15436] dump_stack_lvl+0xe8/0x150 [ 357.404908][T15436] should_fail_ex+0x412/0x560 [ 357.404941][T15436] _copy_to_user+0x31/0xb0 [ 357.404970][T15436] simple_read_from_buffer+0xe1/0x170 [ 357.405001][T15436] proc_fail_nth_read+0x1bb/0x230 [ 357.405030][T15436] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 357.405057][T15436] ? rw_verify_area+0x2a6/0x4d0 [ 357.405083][T15436] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 357.405110][T15436] vfs_read+0x20c/0xa70 [ 357.405127][T15436] ? fdget_pos+0x246/0x320 [ 357.405151][T15436] ? __pfx_aa_sk_perm+0x10/0x10 [ 357.405177][T15436] ? __pfx___mutex_lock+0x10/0x10 [ 357.405202][T15436] ? __pfx_vfs_read+0x10/0x10 [ 357.405225][T15436] ? __fget_files+0x2a/0x420 [ 357.405253][T15436] ? __fget_files+0x3a0/0x420 [ 357.405274][T15436] ? __fget_files+0x2a/0x420 [ 357.405302][T15436] ksys_read+0x150/0x270 [ 357.405322][T15436] ? __pfx_ksys_read+0x10/0x10 [ 357.405347][T15436] do_syscall_64+0x14d/0xf80 [ 357.405367][T15436] ? trace_irq_disable+0x3b/0x150 [ 357.405388][T15436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.405405][T15436] ? clear_bhb_loop+0x40/0x90 [ 357.405426][T15436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.405442][T15436] RIP: 0033:0x7fe33fb5cfce [ 357.405459][T15436] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 357.405474][T15436] RSP: 002b:00007fe340a34fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 357.405491][T15436] RAX: ffffffffffffffda RBX: 00007fe340a356c0 RCX: 00007fe33fb5cfce [ 357.405504][T15436] RDX: 000000000000000f RSI: 00007fe340a350a0 RDI: 0000000000000009 [ 357.405515][T15436] RBP: 00007fe340a35090 R08: 0000000000000000 R09: 0000000000000000 [ 357.405526][T15436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.405536][T15436] R13: 00007fe33fe16038 R14: 00007fe33fe15fa0 R15: 00007ffe41268db8 [ 357.405562][T15436] [ 357.743038][T15445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2494'. [ 357.777115][T15441] 8021q: adding VLAN 0 to HW filter on device bond7 [ 357.815585][T15449] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2495'. [ 357.991701][T15447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2493'. [ 358.023730][T15462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2499'. [ 358.173384][T15467] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2500'. [ 358.369766][T15469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2500'. [ 358.422721][T15469] xfrm1: entered promiscuous mode [ 358.430223][T15469] xfrm1: entered allmulticast mode [ 358.438337][T15469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2500'. [ 358.605949][T15490] Bluetooth: MGMT ver 1.23 [ 359.003150][T15467] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 359.164294][T15505] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 359.296274][T15513] FAULT_INJECTION: forcing a failure. [ 359.296274][T15513] name failslab, interval 1, probability 0, space 0, times 0 [ 359.310428][T15513] CPU: 0 UID: 0 PID: 15513 Comm: syz.3.2514 Not tainted syzkaller #0 PREEMPT(full) [ 359.310454][T15513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 359.310465][T15513] Call Trace: [ 359.310472][T15513] [ 359.310480][T15513] dump_stack_lvl+0xe8/0x150 [ 359.310509][T15513] should_fail_ex+0x412/0x560 [ 359.310538][T15513] should_failslab+0xa8/0x100 [ 359.310562][T15513] __kmalloc_cache_noprof+0x88/0x660 [ 359.310584][T15513] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 359.310604][T15513] ? __genradix_ptr+0x1e1/0x220 [ 359.310626][T15513] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 359.310657][T15513] sctp_association_new+0x15d3/0x25e0 [ 359.310697][T15513] sctp_connect_new_asoc+0x2e4/0x6b0 [ 359.310724][T15513] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 359.310754][T15513] ? __local_bh_enable_ip+0xd0/0x130 [ 359.310775][T15513] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 359.310797][T15513] ? security_sctp_bind_connect+0x7e/0x2c0 [ 359.310820][T15513] sctp_sendmsg+0x1528/0x2c10 [ 359.310859][T15513] ? __pfx_sctp_sendmsg+0x10/0x10 [ 359.310893][T15513] ? aa_sk_perm+0x6d5/0x900 [ 359.310921][T15513] ? __pfx_aa_sk_perm+0x10/0x10 [ 359.310945][T15513] ? sock_rps_record_flow+0x19/0x350 [ 359.310972][T15513] ? inet_sendmsg+0x2f4/0x370 [ 359.311001][T15513] ____sys_sendmsg+0x80a/0x9f0 [ 359.311028][T15513] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.311056][T15513] ? import_iovec+0x73/0xa0 [ 359.311085][T15513] ___sys_sendmsg+0x2a5/0x360 [ 359.311108][T15513] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.311162][T15513] ? __fget_files+0x2a/0x420 [ 359.311187][T15513] ? __fget_files+0x3a0/0x420 [ 359.311221][T15513] __x64_sys_sendmsg+0x1bd/0x2a0 [ 359.311243][T15513] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.311272][T15513] ? __pfx_ksys_write+0x10/0x10 [ 359.311302][T15513] do_syscall_64+0x14d/0xf80 [ 359.311327][T15513] ? trace_irq_disable+0x3b/0x150 [ 359.311350][T15513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.311368][T15513] ? clear_bhb_loop+0x40/0x90 [ 359.311389][T15513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.311405][T15513] RIP: 0033:0x7fc7c639c799 [ 359.311420][T15513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.311432][T15513] RSP: 002b:00007fc7c72a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.311448][T15513] RAX: ffffffffffffffda RBX: 00007fc7c6615fa0 RCX: 00007fc7c639c799 [ 359.311459][T15513] RDX: 0000000028008841 RSI: 0000200000001640 RDI: 0000000000000003 [ 359.311468][T15513] RBP: 00007fc7c72a0090 R08: 0000000000000000 R09: 0000000000000000 [ 359.311476][T15513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.311485][T15513] R13: 00007fc7c6616038 R14: 00007fc7c6615fa0 R15: 00007fffac4cc8c8 [ 359.311508][T15513] [ 359.685339][T15521] netlink: 'syz.0.2516': attribute type 1 has an invalid length. [ 359.766842][T15523] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 359.786684][T15523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2518'. [ 359.807152][T15521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2516'. [ 359.823035][T15525] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 359.856621][T15525] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 359.927962][T15521] bond6: (slave bridge3): Enslaving as an active interface with a down link [ 359.950826][T15534] macsec0: entered promiscuous mode [ 359.991839][T15521] 8021q: adding VLAN 0 to HW filter on device bond6 [ 360.142065][T15541] bpq0: entered allmulticast mode [ 360.151608][T15541] netlink: 'syz.0.2523': attribute type 11 has an invalid length. [ 360.160291][T15541] netlink: 'syz.0.2523': attribute type 23 has an invalid length. [ 360.300114][T15541] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 360.312320][T15553] netlink: 'syz.3.2525': attribute type 3 has an invalid length. [ 360.470579][T15565] FAULT_INJECTION: forcing a failure. [ 360.470579][T15565] name failslab, interval 1, probability 0, space 0, times 0 [ 360.478123][T15569] C: renamed from team_slave_0 [ 360.492824][T15565] CPU: 0 UID: 0 PID: 15565 Comm: syz.0.2528 Not tainted syzkaller #0 PREEMPT(full) [ 360.492850][T15565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 360.492861][T15565] Call Trace: [ 360.492868][T15565] [ 360.492875][T15565] dump_stack_lvl+0xe8/0x150 [ 360.492905][T15565] should_fail_ex+0x412/0x560 [ 360.492933][T15565] should_failslab+0xa8/0x100 [ 360.492957][T15565] __kmalloc_cache_noprof+0x88/0x660 [ 360.492978][T15565] ? sctp_add_bind_addr+0x8c/0x370 [ 360.493004][T15565] sctp_add_bind_addr+0x8c/0x370 [ 360.493028][T15565] sctp_copy_local_addr_list+0x314/0x4f0 [ 360.493051][T15565] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 360.493071][T15565] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 360.493092][T15565] ? sctp_v6_is_any+0x64/0x80 [ 360.493113][T15565] ? sctp_copy_one_addr+0x93/0x360 [ 360.493136][T15565] sctp_bind_addr_copy+0xb3/0x3c0 [ 360.493155][T15565] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 360.493185][T15565] sctp_connect_new_asoc+0x2ff/0x6b0 [ 360.493212][T15565] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 360.493240][T15565] ? __local_bh_enable_ip+0xd0/0x130 [ 360.493260][T15565] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 360.493281][T15565] ? security_sctp_bind_connect+0x7e/0x2c0 [ 360.493304][T15565] sctp_sendmsg+0x1528/0x2c10 [ 360.493342][T15565] ? __pfx_sctp_sendmsg+0x10/0x10 [ 360.493368][T15565] ? aa_sk_perm+0x6d5/0x900 [ 360.493398][T15565] ? __pfx_aa_sk_perm+0x10/0x10 [ 360.493420][T15565] ? sock_rps_record_flow+0x19/0x350 [ 360.493449][T15565] ? inet_sendmsg+0x2f4/0x370 [ 360.493478][T15565] ____sys_sendmsg+0x80a/0x9f0 [ 360.493506][T15565] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.493533][T15565] ? import_iovec+0x73/0xa0 [ 360.493563][T15565] ___sys_sendmsg+0x2a5/0x360 [ 360.493588][T15565] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.493643][T15565] ? __fget_files+0x2a/0x420 [ 360.493667][T15565] ? __fget_files+0x3a0/0x420 [ 360.493702][T15565] __x64_sys_sendmsg+0x1bd/0x2a0 [ 360.493730][T15565] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 360.493758][T15565] ? __pfx_ksys_write+0x10/0x10 [ 360.493790][T15565] do_syscall_64+0x14d/0xf80 [ 360.493814][T15565] ? trace_irq_disable+0x3b/0x150 [ 360.493841][T15565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.493859][T15565] ? clear_bhb_loop+0x40/0x90 [ 360.493881][T15565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.493898][T15565] RIP: 0033:0x7fe33fb9c799 [ 360.493916][T15565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.493930][T15565] RSP: 002b:00007fe340a35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.493950][T15565] RAX: ffffffffffffffda RBX: 00007fe33fe15fa0 RCX: 00007fe33fb9c799 [ 360.493963][T15565] RDX: 0000000028008841 RSI: 0000200000001640 RDI: 0000000000000003 [ 360.493975][T15565] RBP: 00007fe340a35090 R08: 0000000000000000 R09: 0000000000000000 [ 360.493986][T15565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.493996][T15565] R13: 00007fe33fe16038 R14: 00007fe33fe15fa0 R15: 00007ffe41268db8 [ 360.494026][T15565] [ 360.806321][T15569] netlink: 'syz.3.2529': attribute type 8 has an invalid length. [ 360.814140][T15569] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 361.681182][T15625] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 361.702095][T15615] lo speed is unknown, defaulting to 1000 [ 361.730382][T15615] lo speed is unknown, defaulting to 1000 [ 361.840701][T15634] netlink: 'syz.0.2546': attribute type 1 has an invalid length. [ 361.943075][T15643] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 362.073113][T15649] tc_dump_action: action bad kind [ 362.209539][T15656] __nla_validate_parse: 9 callbacks suppressed [ 362.209558][T15656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2553'. [ 362.306864][T15656] xt_hashlimit: max too large, truncated to 1048576 [ 362.324003][T15656] xt_hashlimit: overflow, try lower: 18446744073709551608/8 [ 362.437307][T15660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2553'. [ 362.763929][T15675] FAULT_INJECTION: forcing a failure. [ 362.763929][T15675] name failslab, interval 1, probability 0, space 0, times 0 [ 362.829467][T15675] CPU: 0 UID: 0 PID: 15675 Comm: syz.0.2558 Not tainted syzkaller #0 PREEMPT(full) [ 362.829493][T15675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 362.829503][T15675] Call Trace: [ 362.829509][T15675] [ 362.829517][T15675] dump_stack_lvl+0xe8/0x150 [ 362.829546][T15675] should_fail_ex+0x412/0x560 [ 362.829584][T15675] should_failslab+0xa8/0x100 [ 362.829608][T15675] __kmalloc_cache_noprof+0x88/0x660 [ 362.829630][T15675] ? sctp_add_bind_addr+0x8c/0x370 [ 362.829656][T15675] sctp_add_bind_addr+0x8c/0x370 [ 362.829680][T15675] sctp_copy_local_addr_list+0x314/0x4f0 [ 362.829703][T15675] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 362.829723][T15675] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 362.829745][T15675] ? sctp_v6_is_any+0x64/0x80 [ 362.829767][T15675] ? sctp_copy_one_addr+0x93/0x360 [ 362.829789][T15675] sctp_bind_addr_copy+0xb3/0x3c0 [ 362.829810][T15675] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 362.829840][T15675] sctp_connect_new_asoc+0x2ff/0x6b0 [ 362.829867][T15675] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 362.829896][T15675] ? __local_bh_enable_ip+0xd0/0x130 [ 362.829918][T15675] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 362.829939][T15675] ? security_sctp_bind_connect+0x7e/0x2c0 [ 362.829962][T15675] sctp_sendmsg+0x1528/0x2c10 [ 362.830000][T15675] ? __pfx_sctp_sendmsg+0x10/0x10 [ 362.830026][T15675] ? aa_sk_perm+0x6d5/0x900 [ 362.830056][T15675] ? __pfx_aa_sk_perm+0x10/0x10 [ 362.830079][T15675] ? sock_rps_record_flow+0x19/0x350 [ 362.830108][T15675] ? inet_sendmsg+0x2f4/0x370 [ 362.830137][T15675] ____sys_sendmsg+0x80a/0x9f0 [ 362.830165][T15675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.830193][T15675] ? import_iovec+0x73/0xa0 [ 362.830222][T15675] ___sys_sendmsg+0x2a5/0x360 [ 362.830247][T15675] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.830301][T15675] ? __fget_files+0x2a/0x420 [ 362.830326][T15675] ? __fget_files+0x3a0/0x420 [ 362.830360][T15675] __x64_sys_sendmsg+0x1bd/0x2a0 [ 362.830382][T15675] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 362.830409][T15675] ? __pfx_ksys_write+0x10/0x10 [ 362.830445][T15675] do_syscall_64+0x14d/0xf80 [ 362.830469][T15675] ? trace_irq_disable+0x3b/0x150 [ 362.830492][T15675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.830510][T15675] ? clear_bhb_loop+0x40/0x90 [ 362.830532][T15675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.830549][T15675] RIP: 0033:0x7fe33fb9c799 [ 362.830566][T15675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.830589][T15675] RSP: 002b:00007fe340a35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.830609][T15675] RAX: ffffffffffffffda RBX: 00007fe33fe15fa0 RCX: 00007fe33fb9c799 [ 362.830622][T15675] RDX: 0000000028008841 RSI: 0000200000001640 RDI: 0000000000000003 [ 362.830633][T15675] RBP: 00007fe340a35090 R08: 0000000000000000 R09: 0000000000000000 [ 362.830644][T15675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 362.830654][T15675] R13: 00007fe33fe16038 R14: 00007fe33fe15fa0 R15: 00007ffe41268db8 [ 362.830683][T15675] [ 363.236346][T15687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2562'. [ 363.253523][T15690] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 363.267304][T15682] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2561'. [ 363.345715][T15687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2562'. [ 363.600815][T15707] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2568'. [ 363.617084][T15695] lo speed is unknown, defaulting to 1000 [ 363.634461][T15707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2568'. [ 363.654906][T15695] lo speed is unknown, defaulting to 1000 [ 363.694901][T15710] netlink: 41 bytes leftover after parsing attributes in process `syz.0.2570'. [ 363.716358][T15710] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2570'. [ 363.873575][T15710] netlink: 41 bytes leftover after parsing attributes in process `syz.0.2570'. [ 364.032769][T15725] FAULT_INJECTION: forcing a failure. [ 364.032769][T15725] name failslab, interval 1, probability 0, space 0, times 0 [ 364.056617][T15725] CPU: 1 UID: 0 PID: 15725 Comm: syz.2.2574 Not tainted syzkaller #0 PREEMPT(full) [ 364.056644][T15725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 364.056655][T15725] Call Trace: [ 364.056662][T15725] [ 364.056670][T15725] dump_stack_lvl+0xe8/0x150 [ 364.056701][T15725] should_fail_ex+0x412/0x560 [ 364.056731][T15725] should_failslab+0xa8/0x100 [ 364.056755][T15725] __kmalloc_cache_noprof+0x88/0x660 [ 364.056777][T15725] ? sctp_add_bind_addr+0x8c/0x370 [ 364.056803][T15725] sctp_add_bind_addr+0x8c/0x370 [ 364.056828][T15725] sctp_copy_local_addr_list+0x314/0x4f0 [ 364.056852][T15725] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 364.056872][T15725] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 364.056901][T15725] ? sctp_v6_is_any+0x64/0x80 [ 364.056924][T15725] ? sctp_copy_one_addr+0x93/0x360 [ 364.056947][T15725] sctp_bind_addr_copy+0xb3/0x3c0 [ 364.056968][T15725] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 364.056999][T15725] sctp_connect_new_asoc+0x2ff/0x6b0 [ 364.057026][T15725] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 364.057056][T15725] ? __local_bh_enable_ip+0xd0/0x130 [ 364.057078][T15725] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 364.057098][T15725] ? security_sctp_bind_connect+0x7e/0x2c0 [ 364.057122][T15725] sctp_sendmsg+0x1528/0x2c10 [ 364.057161][T15725] ? __pfx_sctp_sendmsg+0x10/0x10 [ 364.057185][T15725] ? aa_sk_perm+0x6d5/0x900 [ 364.057213][T15725] ? __pfx_aa_sk_perm+0x10/0x10 [ 364.057235][T15725] ? sock_rps_record_flow+0x19/0x350 [ 364.057261][T15725] ? inet_sendmsg+0x2f4/0x370 [ 364.057289][T15725] ____sys_sendmsg+0x80a/0x9f0 [ 364.057313][T15725] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.057342][T15725] ? import_iovec+0x73/0xa0 [ 364.057372][T15725] ___sys_sendmsg+0x2a5/0x360 [ 364.057396][T15725] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.057451][T15725] ? __fget_files+0x2a/0x420 [ 364.057476][T15725] ? __fget_files+0x3a0/0x420 [ 364.057511][T15725] __x64_sys_sendmsg+0x1bd/0x2a0 [ 364.057533][T15725] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 364.057561][T15725] ? __pfx_ksys_write+0x10/0x10 [ 364.057593][T15725] do_syscall_64+0x14d/0xf80 [ 364.057617][T15725] ? trace_irq_disable+0x3b/0x150 [ 364.057638][T15725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.057656][T15725] ? clear_bhb_loop+0x40/0x90 [ 364.057677][T15725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.057693][T15725] RIP: 0033:0x7f165059c799 [ 364.057708][T15725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.057721][T15725] RSP: 002b:00007f16514bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.057739][T15725] RAX: ffffffffffffffda RBX: 00007f1650815fa0 RCX: 00007f165059c799 [ 364.057751][T15725] RDX: 0000000028008841 RSI: 0000200000001640 RDI: 0000000000000003 [ 364.057762][T15725] RBP: 00007f16514bf090 R08: 0000000000000000 R09: 0000000000000000 [ 364.057772][T15725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 364.057781][T15725] R13: 00007f1650816038 R14: 00007f1650815fa0 R15: 00007fffe49c1bb8 [ 364.057808][T15725] [ 364.454182][T15730] vti0: left promiscuous mode [ 364.471514][T15730] xfrm1: left promiscuous mode [ 364.514651][T15730] xfrm1: left allmulticast mode [ 364.647094][T15732] netlink: 'syz.0.2575': attribute type 13 has an invalid length. [ 364.686724][T15732] gretap0: refused to change device tx_queue_len [ 364.703797][T15732] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 364.840756][T15741] syzkaller0: entered promiscuous mode [ 364.846971][T15741] syzkaller0: entered allmulticast mode [ 366.430228][T15746] vlan4: entered promiscuous mode [ 366.436037][T15746] team0: entered promiscuous mode [ 366.885665][ T8829] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 367.041902][T15782] netlink: 'syz.1.2587': attribute type 3 has an invalid length. [ 367.062516][T15788] tipc: Enabling of bearer rejected, failed to enable media [ 367.141388][T15773] syzkaller1: entered promiscuous mode [ 367.148395][T15773] syzkaller1: entered allmulticast mode [ 367.293024][T15792] rdma_rxe: rxe_newlink: failed to add bond0 [ 367.307278][T15792] __nla_validate_parse: 2 callbacks suppressed [ 367.307297][T15792] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2590'. [ 367.363990][T15787] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2590'. [ 367.487740][T15792] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 367.562471][T15792] bond0 (unregistering): Released all slaves [ 367.603051][T15813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2594'. [ 367.623416][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2594'. [ 367.706221][T15813] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2594'. [ 367.807591][T15817] netlink: 'syz.0.2596': attribute type 13 has an invalid length. [ 367.823153][T15817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2596'. [ 368.043016][T15829] lo speed is unknown, defaulting to 1000 [ 368.067008][T15829] lo speed is unknown, defaulting to 1000 [ 368.148365][T15827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2600'. [ 368.151625][T15838] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2601'. [ 368.353609][T15845] SET target dimension over the limit! [ 368.362998][T15846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2604'. [ 368.393487][T15846] macvtap0: entered promiscuous mode [ 368.411344][T15848] tipc: Enabling not permitted [ 368.418650][T15848] tipc: Enabling of bearer rejected, failed to enable media [ 368.446087][T15848] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2603'. [ 368.552862][T15852] netlink: 'syz.4.2606': attribute type 13 has an invalid length. [ 368.562098][T15852] gretap0: refused to change device tx_queue_len [ 368.568791][T15852] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 368.790751][T15836] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 368.798061][T15836] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 368.850417][T15836] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 368.858620][T15836] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 368.913224][T15836] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 368.922990][T15836] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 368.943181][T15836] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 368.960739][T15836] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 369.048848][T15871] ip6gre3: entered promiscuous mode [ 369.054105][T15871] ip6gre3: entered allmulticast mode [ 369.130970][T15876] macvtap0: left promiscuous mode [ 369.171465][T15876] netlink: 'syz.0.2614': attribute type 13 has an invalid length. [ 369.357519][T15887] lo speed is unknown, defaulting to 1000 [ 369.391968][T15887] lo speed is unknown, defaulting to 1000 [ 369.542653][T15894] netlink: 'syz.2.2618': attribute type 1 has an invalid length. [ 369.795403][T15905] xt_hashlimit: size too large, truncated to 1048576 [ 369.847289][T15907] veth4: entered allmulticast mode [ 369.889237][T15909] x9: renamed from bridge_slave_0 [ 370.126041][T15878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.456047][T15931] .70: left allmulticast mode [ 370.460887][T15931] hsr_slave_0: left allmulticast mode [ 370.471581][T15931] hsr_slave_1: left allmulticast mode [ 370.514239][T15933] netlink: 'syz.0.2631': attribute type 10 has an invalid length. [ 370.555234][T15931] ip6tnl2: left allmulticast mode [ 370.590880][ T8829] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.606617][ T8829] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.636181][ T8829] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.646517][ T8829] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.674248][T15931] netlink: 'syz.3.2632': attribute type 13 has an invalid length. [ 370.722586][T15948] netlink: 'syz.2.2635': attribute type 58 has an invalid length. [ 370.898553][T15953] vlan0: entered allmulticast mode [ 370.919183][T15953] erspan0: entered allmulticast mode [ 371.390753][T15975] lo speed is unknown, defaulting to 1000 [ 371.401238][T15975] lo speed is unknown, defaulting to 1000 [ 371.536655][T15992] FAULT_INJECTION: forcing a failure. [ 371.536655][T15992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.553460][T15992] CPU: 1 UID: 0 PID: 15992 Comm: syz.3.2646 Not tainted syzkaller #0 PREEMPT(full) [ 371.553487][T15992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 371.553502][T15992] Call Trace: [ 371.553509][T15992] [ 371.553517][T15992] dump_stack_lvl+0xe8/0x150 [ 371.553547][T15992] should_fail_ex+0x412/0x560 [ 371.553575][T15992] _copy_from_user+0x2d/0xb0 [ 371.553603][T15992] do_sock_getsockopt+0x165/0x3f0 [ 371.553633][T15992] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 371.553660][T15992] ? __fget_files+0x3a0/0x420 [ 371.553685][T15992] ? __fget_files+0x2a/0x420 [ 371.553716][T15992] __x64_sys_getsockopt+0x1a4/0x240 [ 371.553743][T15992] do_syscall_64+0x14d/0xf80 [ 371.553767][T15992] ? trace_irq_disable+0x3b/0x150 [ 371.553792][T15992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.553810][T15992] ? clear_bhb_loop+0x40/0x90 [ 371.553833][T15992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.553854][T15992] RIP: 0033:0x7fc7c639c799 [ 371.553871][T15992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.553887][T15992] RSP: 002b:00007fc7c72a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 371.553906][T15992] RAX: ffffffffffffffda RBX: 00007fc7c6615fa0 RCX: 00007fc7c639c799 [ 371.553919][T15992] RDX: 0000000000000005 RSI: 0000000000000029 RDI: 0000000000000003 [ 371.553930][T15992] RBP: 00007fc7c72a0090 R08: 0000200000000240 R09: 0000000000000000 [ 371.553942][T15992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.553953][T15992] R13: 00007fc7c6616038 R14: 00007fc7c6615fa0 R15: 00007fffac4cc8c8 [ 371.553983][T15992] [ 371.753042][T15988] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 371.816453][T15988] bond6 (unregistering): Released all slaves [ 372.081780][T16002] netlink: 'syz.0.2648': attribute type 13 has an invalid length. [ 372.113155][T16002] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 372.482152][T16031] __nla_validate_parse: 23 callbacks suppressed [ 372.482175][T16031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2658'. [ 372.717942][T16037] FAULT_INJECTION: forcing a failure. [ 372.717942][T16037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.779406][T16037] CPU: 0 UID: 0 PID: 16037 Comm: syz.2.2660 Not tainted syzkaller #0 PREEMPT(full) [ 372.779431][T16037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 372.779442][T16037] Call Trace: [ 372.779449][T16037] [ 372.779457][T16037] dump_stack_lvl+0xe8/0x150 [ 372.779486][T16037] should_fail_ex+0x412/0x560 [ 372.779515][T16037] _copy_from_user+0x2d/0xb0 [ 372.779541][T16037] do_ipv6_getsockopt+0x2d9/0x2610 [ 372.779576][T16037] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 372.779607][T16037] ? aa_label_sk_perm+0x532/0x6e0 [ 372.779633][T16037] ? kstrtoull+0x12f/0x1d0 [ 372.779656][T16037] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 372.779676][T16037] ? kstrtouint+0x6e/0xe0 [ 372.779703][T16037] ? get_pid_task+0x20/0x1f0 [ 372.779735][T16037] ? __lock_acquire+0x6b5/0x2cf0 [ 372.779776][T16037] ? aa_sk_perm+0x6d5/0x900 [ 372.779803][T16037] ipv6_getsockopt+0xbd/0x2b0 [ 372.779832][T16037] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 372.779861][T16037] ? sctp_getsockopt+0x9b/0xb90 [ 372.779882][T16037] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 372.779908][T16037] do_sock_getsockopt+0x2d3/0x3f0 [ 372.779937][T16037] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 372.779965][T16037] ? __fget_files+0x3a0/0x420 [ 372.779990][T16037] ? __fget_files+0x2a/0x420 [ 372.780021][T16037] __x64_sys_getsockopt+0x1a4/0x240 [ 372.780048][T16037] do_syscall_64+0x14d/0xf80 [ 372.780072][T16037] ? trace_irq_disable+0x3b/0x150 [ 372.780096][T16037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.780114][T16037] ? clear_bhb_loop+0x40/0x90 [ 372.780135][T16037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.780152][T16037] RIP: 0033:0x7f165059c799 [ 372.780169][T16037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.780184][T16037] RSP: 002b:00007f16514bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 372.780203][T16037] RAX: ffffffffffffffda RBX: 00007f1650815fa0 RCX: 00007f165059c799 [ 372.780216][T16037] RDX: 0000000000000005 RSI: 0000000000000029 RDI: 0000000000000003 [ 372.780226][T16037] RBP: 00007f16514bf090 R08: 0000200000000240 R09: 0000000000000000 [ 372.780239][T16037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.780249][T16037] R13: 00007f1650816038 R14: 00007f1650815fa0 R15: 00007fffe49c1bb8 [ 372.780279][T16037] [ 373.713396][T16055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2665'. [ 373.896662][T16058] netlink: 'syz.4.2665': attribute type 11 has an invalid length. [ 373.920842][T16058] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.2665'. [ 374.048676][T16060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2666'. [ 374.070144][T16055] vlan2: entered promiscuous mode [ 374.084882][T16055] bridge0: entered promiscuous mode [ 374.610204][T16072] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2669'. [ 374.707318][T16078] FAULT_INJECTION: forcing a failure. [ 374.707318][T16078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.762041][T16078] CPU: 0 UID: 0 PID: 16078 Comm: syz.4.2672 Not tainted syzkaller #0 PREEMPT(full) [ 374.762069][T16078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 374.762081][T16078] Call Trace: [ 374.762088][T16078] [ 374.762099][T16078] dump_stack_lvl+0xe8/0x150 [ 374.762129][T16078] should_fail_ex+0x412/0x560 [ 374.762158][T16078] _copy_to_user+0x31/0xb0 [ 374.762186][T16078] do_ipv6_getsockopt+0x1154/0x2610 [ 374.762222][T16078] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 374.762245][T16078] ? aa_label_sk_perm+0x532/0x6e0 [ 374.762272][T16078] ? kstrtoull+0x12f/0x1d0 [ 374.762294][T16078] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 374.762315][T16078] ? kstrtouint+0x6e/0xe0 [ 374.762341][T16078] ? get_pid_task+0x20/0x1f0 [ 374.762380][T16078] ? __lock_acquire+0x6b5/0x2cf0 [ 374.762421][T16078] ? aa_sk_perm+0x6d5/0x900 [ 374.762449][T16078] ipv6_getsockopt+0xbd/0x2b0 [ 374.762478][T16078] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 374.762507][T16078] ? sctp_getsockopt+0x9b/0xb90 [ 374.762528][T16078] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 374.762554][T16078] do_sock_getsockopt+0x2d3/0x3f0 [ 374.762584][T16078] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 374.762610][T16078] ? __fget_files+0x3a0/0x420 [ 374.762633][T16078] ? __fget_files+0x2a/0x420 [ 374.762664][T16078] __x64_sys_getsockopt+0x1a4/0x240 [ 374.762691][T16078] do_syscall_64+0x14d/0xf80 [ 374.762715][T16078] ? trace_irq_disable+0x3b/0x150 [ 374.762739][T16078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.762758][T16078] ? clear_bhb_loop+0x40/0x90 [ 374.762780][T16078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.762797][T16078] RIP: 0033:0x7fb71299c799 [ 374.762815][T16078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.762830][T16078] RSP: 002b:00007fb713781028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 374.762851][T16078] RAX: ffffffffffffffda RBX: 00007fb712c15fa0 RCX: 00007fb71299c799 [ 374.762863][T16078] RDX: 0000000000000005 RSI: 0000000000000029 RDI: 0000000000000003 [ 374.762874][T16078] RBP: 00007fb713781090 R08: 0000200000000240 R09: 0000000000000000 [ 374.762886][T16078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.762897][T16078] R13: 00007fb712c16038 R14: 00007fb712c15fa0 R15: 00007fff758114b8 [ 374.762926][T16078] [ 375.220763][T16086] tipc: Enabling of bearer rejected, failed to enable media [ 375.255580][ T2531] block nbd0: Possible stuck request ffff888026828000: control (read@0,1024B). Runtime 180 seconds [ 375.267662][ T2531] block nbd0: Possible stuck request ffff888026828200: control (read@1024,1024B). Runtime 180 seconds [ 375.279041][ T2531] block nbd0: Possible stuck request ffff888026828400: control (read@2048,1024B). Runtime 180 seconds [ 375.290570][ T2531] block nbd0: Possible stuck request ffff888026828600: control (read@3072,1024B). Runtime 180 seconds [ 375.522956][T16094] bond7: entered promiscuous mode [ 375.561824][T16094] 8021q: adding VLAN 0 to HW filter on device bond7 [ 375.757031][T16106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2680'. [ 375.836727][T16110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2680'. [ 375.921970][T16111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2682'. [ 376.103954][T16117] lo speed is unknown, defaulting to 1000 [ 376.106672][T16114] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2683'. [ 376.125610][T16117] lo speed is unknown, defaulting to 1000 [ 376.171622][T16121] FAULT_INJECTION: forcing a failure. [ 376.171622][T16121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.215511][T16121] CPU: 0 UID: 0 PID: 16121 Comm: syz.1.2684 Not tainted syzkaller #0 PREEMPT(full) [ 376.215537][T16121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 376.215548][T16121] Call Trace: [ 376.215555][T16121] [ 376.215562][T16121] dump_stack_lvl+0xe8/0x150 [ 376.215593][T16121] should_fail_ex+0x412/0x560 [ 376.215619][T16121] _copy_to_user+0x31/0xb0 [ 376.215647][T16121] do_ipv6_getsockopt+0x11f7/0x2610 [ 376.215682][T16121] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 376.215705][T16121] ? aa_label_sk_perm+0x532/0x6e0 [ 376.215730][T16121] ? kstrtoull+0x12f/0x1d0 [ 376.215752][T16121] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 376.215772][T16121] ? kstrtouint+0x6e/0xe0 [ 376.215798][T16121] ? get_pid_task+0x20/0x1f0 [ 376.215830][T16121] ? __lock_acquire+0x6b5/0x2cf0 [ 376.215870][T16121] ? aa_sk_perm+0x6d5/0x900 [ 376.215898][T16121] ipv6_getsockopt+0xbd/0x2b0 [ 376.215927][T16121] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 376.215955][T16121] ? sctp_getsockopt+0x9b/0xb90 [ 376.215980][T16121] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 376.216006][T16121] do_sock_getsockopt+0x2d3/0x3f0 [ 376.216035][T16121] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 376.216063][T16121] ? __fget_files+0x3a0/0x420 [ 376.216087][T16121] ? __fget_files+0x2a/0x420 [ 376.216117][T16121] __x64_sys_getsockopt+0x1a4/0x240 [ 376.216142][T16121] do_syscall_64+0x14d/0xf80 [ 376.216166][T16121] ? trace_irq_disable+0x3b/0x150 [ 376.216190][T16121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.216216][T16121] ? clear_bhb_loop+0x40/0x90 [ 376.216237][T16121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.216255][T16121] RIP: 0033:0x7fc86a39c799 [ 376.216272][T16121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.216287][T16121] RSP: 002b:00007fc86b21e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 376.216307][T16121] RAX: ffffffffffffffda RBX: 00007fc86a615fa0 RCX: 00007fc86a39c799 [ 376.216320][T16121] RDX: 0000000000000005 RSI: 0000000000000029 RDI: 0000000000000003 [ 376.216331][T16121] RBP: 00007fc86b21e090 R08: 0000200000000240 R09: 0000000000000000 [ 376.216342][T16121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.216353][T16121] R13: 00007fc86a616038 R14: 00007fc86a615fa0 R15: 00007ffd1521e648 [ 376.216382][T16121] [ 376.680545][T16128] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2685'. [ 376.797561][T16132] netlink: 'syz.3.2686': attribute type 1 has an invalid length. [ 376.797818][T16125] xt_CT: You must specify a L4 protocol and not use inversions on it [ 376.970063][T16136] netlink: 'syz.1.2688': attribute type 1 has an invalid length. [ 377.090046][T16136] bond9: entered promiscuous mode [ 377.107396][T16136] 8021q: adding VLAN 0 to HW filter on device bond9 [ 377.297702][T16148] lo speed is unknown, defaulting to 1000 [ 377.304639][T16154] bond9: left promiscuous mode [ 377.328752][T16148] lo speed is unknown, defaulting to 1000 [ 377.382254][T16154] netlink: 'syz.1.2693': attribute type 13 has an invalid length. [ 377.451017][T16154] netlink: 'syz.1.2693': attribute type 27 has an invalid length. [ 377.538020][T16160] __nla_validate_parse: 2 callbacks suppressed [ 377.538039][T16160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2696'. [ 377.587228][T16158] lo speed is unknown, defaulting to 1000 [ 377.596923][T16161] lo speed is unknown, defaulting to 1000 [ 377.629590][T16158] lo speed is unknown, defaulting to 1000 [ 377.757717][T16168] FAULT_INJECTION: forcing a failure. [ 377.757717][T16168] name failslab, interval 1, probability 0, space 0, times 0 [ 377.775190][T16168] CPU: 1 UID: 0 PID: 16168 Comm: syz.1.2698 Not tainted syzkaller #0 PREEMPT(full) [ 377.775217][T16168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 377.775229][T16168] Call Trace: [ 377.775237][T16168] [ 377.775245][T16168] dump_stack_lvl+0xe8/0x150 [ 377.775277][T16168] should_fail_ex+0x412/0x560 [ 377.775306][T16168] should_failslab+0xa8/0x100 [ 377.775331][T16168] __kmalloc_cache_noprof+0x88/0x660 [ 377.775351][T16168] ? sctp_add_bind_addr+0x8c/0x370 [ 377.775374][T16168] sctp_add_bind_addr+0x8c/0x370 [ 377.775396][T16168] sctp_copy_local_addr_list+0x314/0x4f0 [ 377.775418][T16168] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 377.775437][T16168] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 377.775458][T16168] ? sctp_v6_is_any+0x64/0x80 [ 377.775478][T16168] ? sctp_copy_one_addr+0x93/0x360 [ 377.775502][T16168] sctp_bind_addr_copy+0xb3/0x3c0 [ 377.775522][T16168] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 377.775561][T16168] sctp_connect_new_asoc+0x2ff/0x6b0 [ 377.775588][T16168] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 377.775619][T16168] ? __local_bh_enable_ip+0xd0/0x130 [ 377.775641][T16168] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 377.775662][T16168] ? security_sctp_bind_connect+0x7e/0x2c0 [ 377.775685][T16168] sctp_sendmsg+0x1528/0x2c10 [ 377.775724][T16168] ? __pfx_sctp_sendmsg+0x10/0x10 [ 377.775750][T16168] ? aa_sk_perm+0x6d5/0x900 [ 377.775781][T16168] ? __pfx_aa_sk_perm+0x10/0x10 [ 377.775806][T16168] ? sock_rps_record_flow+0x19/0x350 [ 377.775835][T16168] ? inet_sendmsg+0x2f4/0x370 [ 377.775864][T16168] ____sys_sendmsg+0x80a/0x9f0 [ 377.775881][T16168] ? irqentry_exit+0x59e/0x620 [ 377.775905][T16168] ? trace_irq_disable+0x3b/0x150 [ 377.775938][T16168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.775961][T16168] ? ___sys_sendmsg+0x28a/0x360 [ 377.775981][T16168] ? ____sys_sendmsg+0x10/0x9f0 [ 377.776004][T16168] ___sys_sendmsg+0x2a5/0x360 [ 377.776028][T16168] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.776082][T16168] ? __fget_files+0x2a/0x420 [ 377.776107][T16168] ? __fget_files+0x3a0/0x420 [ 377.776142][T16168] __x64_sys_sendmsg+0x1bd/0x2a0 [ 377.776163][T16168] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 377.776192][T16168] ? __pfx_ksys_write+0x10/0x10 [ 377.776225][T16168] do_syscall_64+0x14d/0xf80 [ 377.776249][T16168] ? trace_irq_disable+0x3b/0x150 [ 377.776273][T16168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.776291][T16168] ? clear_bhb_loop+0x40/0x90 [ 377.776314][T16168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.776332][T16168] RIP: 0033:0x7fc86a39c799 [ 377.776349][T16168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.776365][T16168] RSP: 002b:00007fc86b21e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.776385][T16168] RAX: ffffffffffffffda RBX: 00007fc86a615fa0 RCX: 00007fc86a39c799 [ 377.776398][T16168] RDX: 0000000028008841 RSI: 0000200000001640 RDI: 0000000000000003 [ 377.776409][T16168] RBP: 00007fc86b21e090 R08: 0000000000000000 R09: 0000000000000000 [ 377.776420][T16168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 377.776431][T16168] R13: 00007fc86a616038 R14: 00007fc86a615fa0 R15: 00007ffd1521e648 [ 377.776461][T16168] [ 378.378881][T16161] lo speed is unknown, defaulting to 1000 [ 378.712072][T16180] netlink: 13886 bytes leftover after parsing attributes in process `syz.1.2700'. [ 378.734866][T16178] netlink: 13886 bytes leftover after parsing attributes in process `syz.1.2700'. [ 378.783913][T16178] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2700'. [ 378.818019][T16178] bond0 (unregistering): Released all slaves [ 379.009058][T16176] rdma_rxe: rxe_newlink: failed to add bond0 [ 379.301331][T16185] netlink: 1100 bytes leftover after parsing attributes in process `syz.1.2702'. [ 379.403122][T16186] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2702'. [ 379.462191][T16185] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2702'. [ 379.471528][T16185] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2702'. [ 379.772638][T16199] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2704'. [ 379.792500][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2704'. [ 380.384090][T16215] FAULT_INJECTION: forcing a failure. [ 380.384090][T16215] name failslab, interval 1, probability 0, space 0, times 0 [ 380.385065][T16206] lo speed is unknown, defaulting to 1000 [ 380.403035][T16215] CPU: 0 UID: 0 PID: 16215 Comm: syz.2.2709 Not tainted syzkaller #0 PREEMPT(full) [ 380.403060][T16215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 380.403070][T16215] Call Trace: [ 380.403077][T16215] [ 380.403086][T16215] dump_stack_lvl+0xe8/0x150 [ 380.403115][T16215] should_fail_ex+0x412/0x560 [ 380.403144][T16215] should_failslab+0xa8/0x100 [ 380.403168][T16215] __kmalloc_cache_noprof+0x88/0x660 [ 380.403190][T16215] ? sctp_add_bind_addr+0x8c/0x370 [ 380.403215][T16215] sctp_add_bind_addr+0x8c/0x370 [ 380.403240][T16215] sctp_copy_local_addr_list+0x314/0x4f0 [ 380.403264][T16215] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 380.403284][T16215] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 380.403313][T16215] ? sctp_v6_is_any+0x64/0x80 [ 380.403335][T16215] ? sctp_copy_one_addr+0x93/0x360 [ 380.403358][T16215] sctp_bind_addr_copy+0xb3/0x3c0 [ 380.403377][T16215] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 380.403406][T16215] sctp_connect_new_asoc+0x2ff/0x6b0 [ 380.403433][T16215] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 380.403462][T16215] ? __local_bh_enable_ip+0xd0/0x130 [ 380.403484][T16215] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 380.403503][T16215] ? security_sctp_bind_connect+0x7e/0x2c0 [ 380.403525][T16215] sctp_sendmsg+0x1528/0x2c10 [ 380.403561][T16215] ? __pfx_sctp_sendmsg+0x10/0x10 [ 380.403587][T16215] ? aa_sk_perm+0x6d5/0x900 [ 380.403616][T16215] ? __pfx_aa_sk_perm+0x10/0x10 [ 380.403640][T16215] ? sock_rps_record_flow+0x19/0x350 [ 380.403667][T16215] ? inet_sendmsg+0x2f4/0x370 [ 380.403696][T16215] ____sys_sendmsg+0x80a/0x9f0 [ 380.403723][T16215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.403750][T16215] ? import_iovec+0x73/0xa0 [ 380.403778][T16215] ___sys_sendmsg+0x2a5/0x360 [ 380.403801][T16215] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.403854][T16215] ? __fget_files+0x2a/0x420 [ 380.403877][T16215] ? __fget_files+0x3a0/0x420 [ 380.403911][T16215] __x64_sys_sendmsg+0x1bd/0x2a0 [ 380.403932][T16215] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 380.403959][T16215] ? __pfx_ksys_write+0x10/0x10 [ 380.403989][T16215] do_syscall_64+0x14d/0xf80 [ 380.404013][T16215] ? trace_irq_disable+0x3b/0x150 [ 380.404036][T16215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.404054][T16215] ? clear_bhb_loop+0x40/0x90 [ 380.404075][T16215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.404091][T16215] RIP: 0033:0x7f165059c799 [ 380.404108][T16215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.404122][T16215] RSP: 002b:00007f16514bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.404142][T16215] RAX: ffffffffffffffda RBX: 00007f1650815fa0 RCX: 00007f165059c799 [ 380.404155][T16215] RDX: 0000000028008841 RSI: 0000200000001640 RDI: 0000000000000003 [ 380.404166][T16215] RBP: 00007f16514bf090 R08: 0000000000000000 R09: 0000000000000000 [ 380.404177][T16215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 380.404188][T16215] R13: 00007f1650816038 R14: 00007f1650815fa0 R15: 00007fffe49c1bb8 [ 380.404217][T16215] [ 380.781883][T16206] lo speed is unknown, defaulting to 1000 [ 381.366442][T16247] lo speed is unknown, defaulting to 1000 [ 381.423042][T16247] lo speed is unknown, defaulting to 1000 [ 381.547847][T16259] netlink: 'syz.0.2721': attribute type 1 has an invalid length. [ 381.577503][T16259] netlink: 'syz.0.2721': attribute type 2 has an invalid length. [ 382.067789][T16272] xt_bpf: check failed: parse error [ 382.268053][ T2531] block nbd1: Possible stuck request ffff888026859c00: control (read@0,1024B). Runtime 150 seconds [ 382.280002][ T2531] block nbd1: Possible stuck request ffff888026859e00: control (read@1024,1024B). Runtime 150 seconds [ 382.291515][ T2531] block nbd1: Possible stuck request ffff88802685a000: control (read@2048,1024B). Runtime 150 seconds [ 382.302857][ T2531] block nbd1: Possible stuck request ffff88802685a200: control (read@3072,1024B). Runtime 150 seconds [ 382.689725][T16272] siw: device registration error -23 [ 382.951730][T16301] __nla_validate_parse: 4 callbacks suppressed [ 382.951749][T16301] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.2733'. [ 383.124291][T16301] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2733'. [ 383.392932][T16319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2736'. [ 383.573888][T16323] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2738'. [ 383.596825][T16324] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2738'. [ 383.642688][T16317] lo speed is unknown, defaulting to 1000 [ 383.836083][T16317] lo speed is unknown, defaulting to 1000 [ 383.873375][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2742'. [ 384.185380][ T2572] block nbd3: Possible stuck request ffff888026918000: control (read@0,1024B). Runtime 180 seconds [ 384.197070][ T2572] block nbd3: Possible stuck request ffff888026918200: control (read@1024,1024B). Runtime 180 seconds [ 384.209386][ T2572] block nbd3: Possible stuck request ffff888026918400: control (read@2048,1024B). Runtime 180 seconds [ 384.209658][T16342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2742'. [ 384.221060][ T2572] block nbd3: Possible stuck request ffff888026918600: control (read@3072,1024B). Runtime 180 seconds [ 385.327888][T16361] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2746'. [ 385.355381][T16361] 8021q: VLANs not supported on ip6gre0 [ 385.375835][T16361] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2746'. [ 385.722681][T16370] netlink: 58 bytes leftover after parsing attributes in process `syz.2.2748'. [ 385.786697][T16373] 8021q: VLANs not supported on wlan1 [ 386.866878][T16403] xt_hashlimit: size too large, truncated to 1048576 [ 386.884040][T16403] xt_hashlimit: invalid interval [ 386.934111][T16403] xt_HMARK: spi-set and port-set can't be combined [ 387.557420][T16416] xt_TCPMSS: Only works on TCP SYN packets [ 387.846747][T16425] FAULT_INJECTION: forcing a failure. [ 387.846747][T16425] name failslab, interval 1, probability 0, space 0, times 0 [ 387.861553][T16425] CPU: 0 UID: 0 PID: 16425 Comm: syz.3.2765 Not tainted syzkaller #0 PREEMPT(full) [ 387.861580][T16425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 387.861590][T16425] Call Trace: [ 387.861598][T16425] [ 387.861606][T16425] dump_stack_lvl+0xe8/0x150 [ 387.861636][T16425] should_fail_ex+0x412/0x560 [ 387.861665][T16425] should_failslab+0xa8/0x100 [ 387.861689][T16425] __kmalloc_cache_noprof+0x88/0x660 [ 387.861711][T16425] ? sctp_add_bind_addr+0x8c/0x370 [ 387.861737][T16425] sctp_add_bind_addr+0x8c/0x370 [ 387.861761][T16425] sctp_copy_local_addr_list+0x314/0x4f0 [ 387.861786][T16425] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 387.861806][T16425] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 387.861828][T16425] ? sctp_v6_is_any+0x64/0x80 [ 387.861851][T16425] ? sctp_copy_one_addr+0x93/0x360 [ 387.861874][T16425] sctp_bind_addr_copy+0xb3/0x3c0 [ 387.861895][T16425] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 387.861925][T16425] sctp_connect_new_asoc+0x2ff/0x6b0 [ 387.861952][T16425] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 387.861983][T16425] ? __local_bh_enable_ip+0xd0/0x130 [ 387.862005][T16425] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 387.862042][T16425] ? security_sctp_bind_connect+0x7e/0x2c0 [ 387.862066][T16425] sctp_sendmsg+0x1528/0x2c10 [ 387.862104][T16425] ? __pfx_sctp_sendmsg+0x10/0x10 [ 387.862131][T16425] ? aa_sk_perm+0x6d5/0x900 [ 387.862162][T16425] ? __pfx_aa_sk_perm+0x10/0x10 [ 387.862186][T16425] ? sock_rps_record_flow+0x19/0x350 [ 387.862215][T16425] ? inet_sendmsg+0x2f4/0x370 [ 387.862245][T16425] ____sys_sendmsg+0x80a/0x9f0 [ 387.862273][T16425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.862298][T16425] ? import_iovec+0x73/0xa0 [ 387.862329][T16425] ___sys_sendmsg+0x2a5/0x360 [ 387.862353][T16425] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.862409][T16425] ? __fget_files+0x2a/0x420 [ 387.862432][T16425] ? __fget_files+0x3a0/0x420 [ 387.862467][T16425] __x64_sys_sendmsg+0x1bd/0x2a0 [ 387.862489][T16425] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.862521][T16425] ? __pfx_ksys_write+0x10/0x10 [ 387.862553][T16425] do_syscall_64+0x14d/0xf80 [ 387.862578][T16425] ? trace_irq_disable+0x3b/0x150 [ 387.862601][T16425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.862620][T16425] ? clear_bhb_loop+0x40/0x90 [ 387.862642][T16425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.862661][T16425] RIP: 0033:0x7fc7c639c799 [ 387.862678][T16425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.862694][T16425] RSP: 002b:00007fc7c72a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.862714][T16425] RAX: ffffffffffffffda RBX: 00007fc7c6615fa0 RCX: 00007fc7c639c799 [ 387.862727][T16425] RDX: 0000000028008841 RSI: 0000200000001640 RDI: 0000000000000003 [ 387.862739][T16425] RBP: 00007fc7c72a0090 R08: 0000000000000000 R09: 0000000000000000 [ 387.862751][T16425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 387.862761][T16425] R13: 00007fc7c6616038 R14: 00007fc7c6615fa0 R15: 00007fffac4cc8c8 [ 387.862792][T16425] [ 388.431401][T16445] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 388.458238][T16444] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 388.522497][T16449] delete_channel: no stack [ 388.721688][T16436] ipvlan1: entered promiscuous mode [ 388.852755][T16464] FAULT_INJECTION: forcing a failure. [ 388.852755][T16464] name failslab, interval 1, probability 0, space 0, times 0 [ 388.868721][T16464] CPU: 1 UID: 0 PID: 16464 Comm: syz.1.2778 Not tainted syzkaller #0 PREEMPT(full) [ 388.868747][T16464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 388.868759][T16464] Call Trace: [ 388.868766][T16464] [ 388.868773][T16464] dump_stack_lvl+0xe8/0x150 [ 388.868803][T16464] should_fail_ex+0x412/0x560 [ 388.868830][T16464] should_failslab+0xa8/0x100 [ 388.868855][T16464] __kmalloc_cache_noprof+0x88/0x660 [ 388.868877][T16464] ? sctp_add_bind_addr+0x8c/0x370 [ 388.868903][T16464] sctp_add_bind_addr+0x8c/0x370 [ 388.868927][T16464] sctp_copy_local_addr_list+0x314/0x4f0 [ 388.868960][T16464] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 388.868981][T16464] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 388.869004][T16464] ? sctp_v6_is_any+0x64/0x80 [ 388.869026][T16464] ? sctp_copy_one_addr+0x93/0x360 [ 388.869050][T16464] sctp_bind_addr_copy+0xb3/0x3c0 [ 388.869070][T16464] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 388.869101][T16464] sctp_connect_new_asoc+0x2ff/0x6b0 [ 388.869128][T16464] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 388.869163][T16464] ? __local_bh_enable_ip+0xd0/0x130 [ 388.869183][T16464] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 388.869204][T16464] ? security_sctp_bind_connect+0x7e/0x2c0 [ 388.869226][T16464] sctp_sendmsg+0x1528/0x2c10 [ 388.869268][T16464] ? __pfx_sctp_sendmsg+0x10/0x10 [ 388.869293][T16464] ? aa_sk_perm+0x6d5/0x900 [ 388.869322][T16464] ? __pfx_aa_sk_perm+0x10/0x10 [ 388.869346][T16464] ? sock_rps_record_flow+0x19/0x350 [ 388.869373][T16464] ? inet_sendmsg+0x2f4/0x370 [ 388.869398][T16464] ____sys_sendmsg+0x80a/0x9f0 [ 388.869422][T16464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.869447][T16464] ? import_iovec+0x73/0xa0 [ 388.869474][T16464] ___sys_sendmsg+0x2a5/0x360 [ 388.869496][T16464] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.869545][T16464] ? __fget_files+0x2a/0x420 [ 388.869568][T16464] ? __fget_files+0x3a0/0x420 [ 388.869600][T16464] __x64_sys_sendmsg+0x1bd/0x2a0 [ 388.869618][T16464] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.869643][T16464] ? __pfx_ksys_write+0x10/0x10 [ 388.869671][T16464] do_syscall_64+0x14d/0xf80 [ 388.869693][T16464] ? trace_irq_disable+0x3b/0x150 [ 388.869717][T16464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.869735][T16464] ? clear_bhb_loop+0x40/0x90 [ 388.869756][T16464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.869772][T16464] RIP: 0033:0x7fc86a39c799 [ 388.869788][T16464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.869802][T16464] RSP: 002b:00007fc86b21e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.869820][T16464] RAX: ffffffffffffffda RBX: 00007fc86a615fa0 RCX: 00007fc86a39c799 [ 388.869832][T16464] RDX: 0000000028008841 RSI: 0000200000001640 RDI: 0000000000000003 [ 388.869844][T16464] RBP: 00007fc86b21e090 R08: 0000000000000000 R09: 0000000000000000 [ 388.869854][T16464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 388.869863][T16464] R13: 00007fc86a616038 R14: 00007fc86a615fa0 R15: 00007ffd1521e648 [ 388.869891][T16464] [ 389.233919][T16462] syzkaller0: entered promiscuous mode [ 389.240124][T16462] syzkaller0: entered allmulticast mode [ 389.704003][T16477] netlink: 'syz.3.2781': attribute type 13 has an invalid length. [ 391.181773][T16467] gretap0: entered promiscuous mode [ 391.190368][T16467] gretap0: left promiscuous mode [ 391.445316][T16487] __nla_validate_parse: 1 callbacks suppressed [ 391.445334][T16487] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2784'. [ 391.474972][T16487] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2784'. [ 391.499594][T16487] tipc: Invalid UDP bearer configuration [ 391.499646][T16487] tipc: Enabling of bearer rejected, failed to enable media [ 391.546176][T16487] netlink: 'syz.4.2784': attribute type 1 has an invalid length. [ 391.712510][T16503] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2786'. [ 391.730567][T16503] netlink: 560 bytes leftover after parsing attributes in process `syz.0.2786'. [ 391.833677][T16507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2789'. [ 391.920805][T16505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2789'. [ 391.957287][T16505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2789'. [ 391.991338][T16505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2789'. [ 392.028601][T16505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2789'. [ 392.060283][T16505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2789'. [ 392.327050][T16519] netlink: 'syz.3.2793': attribute type 13 has an invalid length. [ 392.672783][T16521] xt_CT: No such helper "pptp" [ 393.585451][T16552] netlink: 'syz.1.2805': attribute type 13 has an invalid length. [ 394.171994][T16571] netlink: 'syz.3.2812': attribute type 9 has an invalid length. [ 394.514050][T16577] lo speed is unknown, defaulting to 1000 [ 394.522397][T16577] lo speed is unknown, defaulting to 1000 [ 394.540605][T16576] netlink: 'syz.0.2813': attribute type 1 has an invalid length. [ 394.566798][T16576] xt_hashlimit: size too large, truncated to 1048576 [ 394.856029][T16591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.892058][T16590] netlink: 'syz.1.2818': attribute type 13 has an invalid length. [ 395.477817][T16609] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 396.547656][T16633] __nla_validate_parse: 6 callbacks suppressed [ 396.547676][T16633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2828'. [ 397.015396][T16651] netlink: 'syz.3.2836': attribute type 8 has an invalid length. [ 397.045606][T16654] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 397.066183][T16656] netlink: 'syz.3.2836': attribute type 2 has an invalid length. [ 397.148356][T16657] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2838'. [ 397.271735][T16665] FAULT_INJECTION: forcing a failure. [ 397.271735][T16665] name failslab, interval 1, probability 0, space 0, times 0 [ 397.307221][T16665] CPU: 1 UID: 0 PID: 16665 Comm: syz.1.2842 Not tainted syzkaller #0 PREEMPT(full) [ 397.307250][T16665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 397.307261][T16665] Call Trace: [ 397.307268][T16665] [ 397.307276][T16665] dump_stack_lvl+0xe8/0x150 [ 397.307306][T16665] should_fail_ex+0x412/0x560 [ 397.307335][T16665] should_failslab+0xa8/0x100 [ 397.307360][T16665] __kmalloc_cache_noprof+0x88/0x660 [ 397.307381][T16665] ? sctp_add_bind_addr+0x8c/0x370 [ 397.307408][T16665] sctp_add_bind_addr+0x8c/0x370 [ 397.307433][T16665] sctp_copy_local_addr_list+0x314/0x4f0 [ 397.307457][T16665] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 397.307478][T16665] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 397.307500][T16665] ? sctp_v6_is_any+0x64/0x80 [ 397.307523][T16665] ? sctp_copy_one_addr+0x93/0x360 [ 397.307546][T16665] sctp_bind_addr_copy+0xb3/0x3c0 [ 397.307567][T16665] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 397.307597][T16665] sctp_connect_new_asoc+0x2ff/0x6b0 [ 397.307634][T16665] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 397.307664][T16665] ? __local_bh_enable_ip+0xd0/0x130 [ 397.307686][T16665] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 397.307708][T16665] ? security_sctp_bind_connect+0x7e/0x2c0 [ 397.307732][T16665] sctp_sendmsg+0x1528/0x2c10 [ 397.307770][T16665] ? __pfx_sctp_sendmsg+0x10/0x10 [ 397.307797][T16665] ? aa_sk_perm+0x6d5/0x900 [ 397.307827][T16665] ? __pfx_aa_sk_perm+0x10/0x10 [ 397.307852][T16665] ? sock_rps_record_flow+0x19/0x350 [ 397.307882][T16665] ? inet_sendmsg+0x2f4/0x370 [ 397.307911][T16665] ____sys_sendmsg+0x80a/0x9f0 [ 397.307939][T16665] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.307967][T16665] ? import_iovec+0x73/0xa0 [ 397.307998][T16665] ___sys_sendmsg+0x2a5/0x360 [ 397.308023][T16665] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.308077][T16665] ? __fget_files+0x2a/0x420 [ 397.308101][T16665] ? __fget_files+0x3a0/0x420 [ 397.308136][T16665] __x64_sys_sendmsg+0x1bd/0x2a0 [ 397.308157][T16665] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 397.308186][T16665] ? __pfx_ksys_write+0x10/0x10 [ 397.308217][T16665] do_syscall_64+0x14d/0xf80 [ 397.308242][T16665] ? trace_irq_disable+0x3b/0x150 [ 397.308266][T16665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.308284][T16665] ? clear_bhb_loop+0x40/0x90 [ 397.308307][T16665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.308325][T16665] RIP: 0033:0x7fc86a39c799 [ 397.308343][T16665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.308359][T16665] RSP: 002b:00007fc86b21e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.308377][T16665] RAX: ffffffffffffffda RBX: 00007fc86a615fa0 RCX: 00007fc86a39c799 [ 397.308391][T16665] RDX: 0000000028008841 RSI: 0000200000001640 RDI: 0000000000000003 [ 397.308403][T16665] RBP: 00007fc86b21e090 R08: 0000000000000000 R09: 0000000000000000 [ 397.308415][T16665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 397.308426][T16665] R13: 00007fc86a616038 R14: 00007fc86a615fa0 R15: 00007ffd1521e648 [ 397.308457][T16665] [ 397.695705][T16670] netlink: 'syz.2.2844': attribute type 10 has an invalid length. [ 397.781972][T16670] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2844'. [ 397.850397][T16675] netlink: 'syz.1.2845': attribute type 30 has an invalid length. [ 397.881836][T16676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2846'. [ 398.357567][T16699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2851'. [ 398.442004][T16701] netlink: 'syz.1.2853': attribute type 12 has an invalid length. [ 398.463534][T16705] netlink: 'syz.1.2853': attribute type 12 has an invalid length. [ 398.626406][T16713] FAULT_INJECTION: forcing a failure. [ 398.626406][T16713] name failslab, interval 1, probability 0, space 0, times 0 [ 398.641630][T16679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2847'. [ 398.685391][T16713] CPU: 0 UID: 0 PID: 16713 Comm: syz.0.2855 Not tainted syzkaller #0 PREEMPT(full) [ 398.685417][T16713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 398.685428][T16713] Call Trace: [ 398.685435][T16713] [ 398.685444][T16713] dump_stack_lvl+0xe8/0x150 [ 398.685475][T16713] should_fail_ex+0x412/0x560 [ 398.685514][T16713] should_failslab+0xa8/0x100 [ 398.685538][T16713] __kmalloc_cache_noprof+0x88/0x660 [ 398.685560][T16713] ? sctp_add_bind_addr+0x8c/0x370 [ 398.685587][T16713] sctp_add_bind_addr+0x8c/0x370 [ 398.685611][T16713] sctp_copy_local_addr_list+0x314/0x4f0 [ 398.685636][T16713] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 398.685656][T16713] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 398.685679][T16713] ? sctp_v6_is_any+0x64/0x80 [ 398.685701][T16713] ? sctp_copy_one_addr+0x93/0x360 [ 398.685725][T16713] sctp_bind_addr_copy+0xb3/0x3c0 [ 398.685746][T16713] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 398.685777][T16713] sctp_connect_new_asoc+0x2ff/0x6b0 [ 398.685805][T16713] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 398.685836][T16713] ? __local_bh_enable_ip+0xd0/0x130 [ 398.685857][T16713] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 398.685878][T16713] ? security_sctp_bind_connect+0x7e/0x2c0 [ 398.685901][T16713] sctp_sendmsg+0x1528/0x2c10 [ 398.685940][T16713] ? __pfx_sctp_sendmsg+0x10/0x10 [ 398.685967][T16713] ? aa_sk_perm+0x6d5/0x900 [ 398.685997][T16713] ? __pfx_aa_sk_perm+0x10/0x10 [ 398.686020][T16713] ? sock_rps_record_flow+0x19/0x350 [ 398.686048][T16713] ? inet_sendmsg+0x2f4/0x370 [ 398.686078][T16713] ____sys_sendmsg+0x80a/0x9f0 [ 398.686107][T16713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.686135][T16713] ? import_iovec+0x73/0xa0 [ 398.686165][T16713] ___sys_sendmsg+0x2a5/0x360 [ 398.686191][T16713] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.686246][T16713] ? __fget_files+0x2a/0x420 [ 398.686271][T16713] ? __fget_files+0x3a0/0x420 [ 398.686306][T16713] __x64_sys_sendmsg+0x1bd/0x2a0 [ 398.686328][T16713] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.686357][T16713] ? __pfx_ksys_write+0x10/0x10 [ 398.686390][T16713] do_syscall_64+0x14d/0xf80 [ 398.686415][T16713] ? trace_irq_disable+0x3b/0x150 [ 398.686438][T16713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.686457][T16713] ? clear_bhb_loop+0x40/0x90 [ 398.686484][T16713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.686503][T16713] RIP: 0033:0x7fe33fb9c799 [ 398.686521][T16713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.686536][T16713] RSP: 002b:00007fe340a35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.686557][T16713] RAX: ffffffffffffffda RBX: 00007fe33fe15fa0 RCX: 00007fe33fb9c799 [ 398.686570][T16713] RDX: 0000000028008841 RSI: 0000200000001640 RDI: 0000000000000003 [ 398.686583][T16713] RBP: 00007fe340a35090 R08: 0000000000000000 R09: 0000000000000000 [ 398.686593][T16713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 398.686604][T16713] R13: 00007fe33fe16038 R14: 00007fe33fe15fa0 R15: 00007ffe41268db8 [ 398.686635][T16713] [ 398.833066][T16720] lo speed is unknown, defaulting to 1000 [ 399.017056][T16720] lo speed is unknown, defaulting to 1000 [ 399.138634][T16729] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 399.209780][T16736] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2859'. [ 399.221513][T16736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2859'. [ 399.236543][T16732] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2860'. [ 399.307817][T16732] netlink: 'syz.2.2860': attribute type 2 has an invalid length. [ 399.335475][T16732] netlink: 1696 bytes leftover after parsing attributes in process `syz.2.2860'. [ 399.610285][T16745] lo speed is unknown, defaulting to 1000 [ 399.782007][T16751] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 399.802482][T16751] bond8 (unregistering): Released all slaves [ 399.834139][T16745] lo speed is unknown, defaulting to 1000 [ 400.060945][T16761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.072382][T16759] delete_channel: no stack [ 400.146706][T16765] FAULT_INJECTION: forcing a failure. [ 400.146706][T16765] name failslab, interval 1, probability 0, space 0, times 0 [ 400.160962][T16765] CPU: 1 UID: 0 PID: 16765 Comm: syz.4.2869 Not tainted syzkaller #0 PREEMPT(full) [ 400.160988][T16765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 400.161000][T16765] Call Trace: [ 400.161007][T16765] [ 400.161015][T16765] dump_stack_lvl+0xe8/0x150 [ 400.161045][T16765] should_fail_ex+0x412/0x560 [ 400.161072][T16765] should_failslab+0xa8/0x100 [ 400.161094][T16765] __kmalloc_cache_noprof+0x88/0x660 [ 400.161116][T16765] ? sctp_add_bind_addr+0x8c/0x370 [ 400.161141][T16765] sctp_add_bind_addr+0x8c/0x370 [ 400.161166][T16765] sctp_copy_local_addr_list+0x314/0x4f0 [ 400.161190][T16765] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 400.161210][T16765] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 400.161232][T16765] ? sctp_v6_is_any+0x64/0x80 [ 400.161254][T16765] ? sctp_copy_one_addr+0x93/0x360 [ 400.161277][T16765] sctp_bind_addr_copy+0xb3/0x3c0 [ 400.161297][T16765] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 400.161338][T16765] sctp_connect_new_asoc+0x2ff/0x6b0 [ 400.161365][T16765] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 400.161393][T16765] ? __local_bh_enable_ip+0xd0/0x130 [ 400.161415][T16765] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 400.161437][T16765] ? security_sctp_bind_connect+0x7e/0x2c0 [ 400.161460][T16765] sctp_sendmsg+0x1528/0x2c10 [ 400.161498][T16765] ? __pfx_sctp_sendmsg+0x10/0x10 [ 400.161522][T16765] ? aa_sk_perm+0x6d5/0x900 [ 400.161553][T16765] ? __pfx_aa_sk_perm+0x10/0x10 [ 400.161577][T16765] ? sock_rps_record_flow+0x19/0x350 [ 400.161607][T16765] ? inet_sendmsg+0x2f4/0x370 [ 400.161636][T16765] ____sys_sendmsg+0x80a/0x9f0 [ 400.161667][T16765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.161695][T16765] ? import_iovec+0x73/0xa0 [ 400.161725][T16765] ___sys_sendmsg+0x2a5/0x360 [ 400.161750][T16765] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.161806][T16765] ? __fget_files+0x2a/0x420 [ 400.161829][T16765] ? __fget_files+0x3a0/0x420 [ 400.161864][T16765] __x64_sys_sendmsg+0x1bd/0x2a0 [ 400.161886][T16765] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.161915][T16765] ? __pfx_ksys_write+0x10/0x10 [ 400.161948][T16765] do_syscall_64+0x14d/0xf80 [ 400.161972][T16765] ? trace_irq_disable+0x3b/0x150 [ 400.161996][T16765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.162014][T16765] ? clear_bhb_loop+0x40/0x90 [ 400.162037][T16765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.162054][T16765] RIP: 0033:0x7fb71299c799 [ 400.162073][T16765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.162087][T16765] RSP: 002b:00007fb713781028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.162106][T16765] RAX: ffffffffffffffda RBX: 00007fb712c15fa0 RCX: 00007fb71299c799 [ 400.162120][T16765] RDX: 0000000028008841 RSI: 0000200000001640 RDI: 0000000000000003 [ 400.162132][T16765] RBP: 00007fb713781090 R08: 0000000000000000 R09: 0000000000000000 [ 400.162143][T16765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 400.162153][T16765] R13: 00007fb712c16038 R14: 00007fb712c15fa0 R15: 00007fff758114b8 [ 400.162185][T16765] [ 400.676841][ T8817] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.695632][ T8817] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.005056][ T8817] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.013326][ T8817] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.164482][T16786] netlink: 'syz.3.2875': attribute type 3 has an invalid length. [ 401.439371][T16794] syzkaller0: entered promiscuous mode [ 401.456246][T16794] syzkaller0: entered allmulticast mode [ 401.473873][T16799] FAULT_INJECTION: forcing a failure. [ 401.473873][T16799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.512845][T16799] CPU: 0 UID: 0 PID: 16799 Comm: syz.3.2878 Not tainted syzkaller #0 PREEMPT(full) [ 401.512874][T16799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 401.512885][T16799] Call Trace: [ 401.512892][T16799] [ 401.512900][T16799] dump_stack_lvl+0xe8/0x150 [ 401.512930][T16799] should_fail_ex+0x412/0x560 [ 401.512958][T16799] _copy_from_user+0x2d/0xb0 [ 401.512985][T16799] __tun_chr_ioctl+0x1ed/0x1e10 [ 401.513019][T16799] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 401.513049][T16799] ? __fget_files+0x2a/0x420 [ 401.513073][T16799] ? __fget_files+0x3a0/0x420 [ 401.513096][T16799] ? __fget_files+0x2a/0x420 [ 401.513123][T16799] ? bpf_lsm_file_ioctl+0x9/0x20 [ 401.513154][T16799] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 401.513178][T16799] __se_sys_ioctl+0xfc/0x170 [ 401.513202][T16799] do_syscall_64+0x14d/0xf80 [ 401.513227][T16799] ? trace_irq_disable+0x3b/0x150 [ 401.513251][T16799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.513270][T16799] ? clear_bhb_loop+0x40/0x90 [ 401.513292][T16799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.513309][T16799] RIP: 0033:0x7fc7c639c799 [ 401.513326][T16799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.513342][T16799] RSP: 002b:00007fc7c72a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.513361][T16799] RAX: ffffffffffffffda RBX: 00007fc7c6615fa0 RCX: 00007fc7c639c799 [ 401.513375][T16799] RDX: 0000200000000080 RSI: 00000000400454ca RDI: 0000000000000003 [ 401.513387][T16799] RBP: 00007fc7c72a0090 R08: 0000000000000000 R09: 0000000000000000 [ 401.513398][T16799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.513409][T16799] R13: 00007fc7c6616038 R14: 00007fc7c6615fa0 R15: 00007fffac4cc8c8 [ 401.513439][T16799] [ 401.793598][T16802] FAULT_INJECTION: forcing a failure. [ 401.793598][T16802] name failslab, interval 1, probability 0, space 0, times 0 [ 401.808038][T16802] CPU: 1 UID: 0 PID: 16802 Comm: syz.4.2880 Not tainted syzkaller #0 PREEMPT(full) [ 401.808065][T16802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 401.808077][T16802] Call Trace: [ 401.808085][T16802] [ 401.808093][T16802] dump_stack_lvl+0xe8/0x150 [ 401.808122][T16802] should_fail_ex+0x412/0x560 [ 401.808150][T16802] should_failslab+0xa8/0x100 [ 401.808178][T16802] __kmalloc_cache_noprof+0x88/0x660 [ 401.808199][T16802] ? sctp_add_bind_addr+0x8c/0x370 [ 401.808225][T16802] sctp_add_bind_addr+0x8c/0x370 [ 401.808249][T16802] sctp_copy_local_addr_list+0x314/0x4f0 [ 401.808274][T16802] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 401.808295][T16802] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 401.808317][T16802] ? sctp_v6_is_any+0x64/0x80 [ 401.808339][T16802] ? sctp_copy_one_addr+0x93/0x360 [ 401.808363][T16802] sctp_bind_addr_copy+0xb3/0x3c0 [ 401.808384][T16802] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 401.808414][T16802] sctp_connect_new_asoc+0x2ff/0x6b0 [ 401.808441][T16802] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 401.808472][T16802] ? __local_bh_enable_ip+0xd0/0x130 [ 401.808492][T16802] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 401.808510][T16802] ? security_sctp_bind_connect+0x7e/0x2c0 [ 401.808531][T16802] sctp_sendmsg+0x1528/0x2c10 [ 401.808565][T16802] ? __pfx_sctp_sendmsg+0x10/0x10 [ 401.808588][T16802] ? aa_sk_perm+0x6d5/0x900 [ 401.808613][T16802] ? __pfx_aa_sk_perm+0x10/0x10 [ 401.808645][T16802] ? sock_rps_record_flow+0x19/0x350 [ 401.808673][T16802] ? inet_sendmsg+0x2f4/0x370 [ 401.808701][T16802] ____sys_sendmsg+0x80a/0x9f0 [ 401.808729][T16802] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.808753][T16802] ? import_iovec+0x73/0xa0 [ 401.808779][T16802] ___sys_sendmsg+0x2a5/0x360 [ 401.808803][T16802] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.808856][T16802] ? __fget_files+0x2a/0x420 [ 401.808878][T16802] ? __fget_files+0x3a0/0x420 [ 401.808909][T16802] __x64_sys_sendmsg+0x1bd/0x2a0 [ 401.808931][T16802] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 401.808959][T16802] ? __pfx_ksys_write+0x10/0x10 [ 401.808991][T16802] do_syscall_64+0x14d/0xf80 [ 401.809015][T16802] ? trace_irq_disable+0x3b/0x150 [ 401.809039][T16802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.809057][T16802] ? clear_bhb_loop+0x40/0x90 [ 401.809080][T16802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.809098][T16802] RIP: 0033:0x7fb71299c799 [ 401.809116][T16802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.809131][T16802] RSP: 002b:00007fb713781028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.809151][T16802] RAX: ffffffffffffffda RBX: 00007fb712c15fa0 RCX: 00007fb71299c799 [ 401.809163][T16802] RDX: 0000000028008841 RSI: 0000200000001640 RDI: 0000000000000003 [ 401.809175][T16802] RBP: 00007fb713781090 R08: 0000000000000000 R09: 0000000000000000 [ 401.809185][T16802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.809196][T16802] R13: 00007fb712c16038 R14: 00007fb712c15fa0 R15: 00007fff758114b8 [ 401.809226][T16802] [ 402.137266][T16807] netlink: 'syz.1.2881': attribute type 1 has an invalid length. [ 402.156058][T16807] sctp: [Deprecated]: syz.1.2881 (pid 16807) Use of struct sctp_assoc_value in delayed_ack socket option. [ 402.156058][T16807] Use struct sctp_sack_info instead [ 402.290946][T16816] __nla_validate_parse: 4 callbacks suppressed [ 402.290965][T16816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2884'. [ 402.343042][T16820] syzkaller0: entered promiscuous mode [ 402.348653][T16820] syzkaller0: entered allmulticast mode [ 402.351724][T16816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2884'. [ 402.492440][T16825] lo speed is unknown, defaulting to 1000 [ 402.500362][T16825] lo speed is unknown, defaulting to 1000 [ 402.581248][T16830] netlink: 'syz.2.2888': attribute type 1 has an invalid length. [ 402.996775][T16849] netlink: 'syz.4.2894': attribute type 1 has an invalid length. [ 402.999385][T16847] 8021q: adding VLAN 0 to HW filter on device bond10 [ 403.236867][T16849] 8021q: adding VLAN 0 to HW filter on device bond8 [ 403.317760][T16828] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 403.345921][T16852] bond8: entered allmulticast mode [ 403.389173][T16857] lo speed is unknown, defaulting to 1000 [ 403.424284][T16857] lo speed is unknown, defaulting to 1000 [ 403.519316][T16856] netlink: 'syz.1.2895': attribute type 7 has an invalid length. [ 403.713800][T16879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2900'. [ 403.732175][T16873] syzkaller0: entered promiscuous mode [ 403.738748][T16873] syzkaller0: entered allmulticast mode [ 403.746502][T16870] tipc: Enabled bearer , priority 0 [ 403.897923][T16870] syzkaller0: entered promiscuous mode [ 403.897979][T16885] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 403.918046][T16870] syzkaller0: entered allmulticast mode [ 403.924230][T16870] tipc: Resetting bearer [ 403.932746][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2901'. [ 403.975559][T16869] tipc: Resetting bearer [ 405.314105][ T2531] block nbd0: Possible stuck request ffff888026828000: control (read@0,1024B). Runtime 210 seconds [ 405.325317][ T2531] block nbd0: Possible stuck request ffff888026828200: control (read@1024,1024B). Runtime 210 seconds [ 405.336495][ T2531] block nbd0: Possible stuck request ffff888026828400: control (read@2048,1024B). Runtime 210 seconds [ 405.347860][ T2531] block nbd0: Possible stuck request ffff888026828600: control (read@3072,1024B). Runtime 210 seconds [ 405.608065][T16869] tipc: Disabling bearer [ 405.620341][ T10] tipc: Node number set to 4116094132 [ 405.627873][T16903] sit0: entered allmulticast mode [ 405.640348][T16904] pim6reg: entered allmulticast mode [ 405.780473][T16907] bridge0: entered allmulticast mode [ 405.848975][T16910] netlink: 'syz.2.2909': attribute type 4 has an invalid length. [ 405.857429][T16910] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2909'. [ 406.037609][ T5146] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 406.048707][ T5146] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 406.060875][ T5146] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 406.069330][ T5146] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 406.077607][ T5146] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 406.114189][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 406.121779][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 406.136853][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 406.147970][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 406.156563][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 406.564844][T16917] lo speed is unknown, defaulting to 1000 [ 406.680848][T16917] lo speed is unknown, defaulting to 1000 [ 406.948812][T16940] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2917'. [ 407.419132][T16952] xt_hashlimit: size too large, truncated to 1048576 [ 407.505149][T16955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2921'. [ 407.670455][T16917] chnl_net:caif_netlink_parms(): no params data found [ 407.850067][T16917] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.881842][T16917] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.895002][T16917] bridge_slave_0: entered allmulticast mode [ 407.914749][T16917] bridge_slave_0: entered promiscuous mode [ 407.946410][T16917] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.953674][T16917] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.975181][T16917] bridge_slave_1: entered allmulticast mode [ 407.984476][T16917] bridge_slave_1: entered promiscuous mode [ 408.059384][T16917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.089499][T16917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.132681][T16981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2923'. [ 408.185281][ T5146] Bluetooth: hci5: command tx timeout [ 408.241930][T16917] team0: Port device team_slave_0 added [ 408.269237][T16917] team0: Port device team_slave_1 added [ 408.337743][T16917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.355262][T16917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.383132][T16917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.407830][T16917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.431253][T16917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.483481][T16917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.523235][T17004] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 408.536590][T17004] bond0 (unregistering): Released all slaves [ 408.684824][T16917] hsr_slave_0: entered promiscuous mode [ 408.696311][T17018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2937'. [ 408.707375][T16917] hsr_slave_1: entered promiscuous mode [ 408.886280][T16917] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.946404][T17016] [ 408.948783][T17016] ====================================================== [ 408.955804][T17016] WARNING: possible circular locking dependency detected [ 408.962843][T17016] syzkaller #0 Not tainted [ 408.967248][T17016] ------------------------------------------------------ [ 408.974249][T17016] syz.3.2938/17016 is trying to acquire lock: [ 408.980294][T17016] ffff8880263d2bc0 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 408.989680][T17016] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 408.989680][T17016] but task is already holding lock: [ 408.997030][T17016] ffff8880263d2680 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 409.007290][T17016] [ 409.007290][T17016] which lock already depends on the new lock. [ 409.007290][T17016] [ 409.017692][T17016] [ 409.017692][T17016] the existing dependency chain (in reverse order) is: [ 409.026736][T17016] [ 409.026736][T17016] -> #6 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 409.035344][T17016] blk_alloc_queue+0x546/0x680 [ 409.040636][T17016] __blk_mq_alloc_disk+0x197/0x390 [ 409.046266][T17016] nbd_dev_add+0x499/0xb50 [ 409.051210][T17016] nbd_init+0x168/0x1f0 [ 409.055876][T17016] do_one_initcall+0x250/0x8d0 [ 409.061159][T17016] do_initcall_level+0x104/0x190 [ 409.066613][T17016] do_initcalls+0x59/0xa0 [ 409.071451][T17016] kernel_init_freeable+0x2a6/0x3e0 [ 409.077159][T17016] kernel_init+0x1d/0x1d0 [ 409.082003][T17016] ret_from_fork+0x51e/0xb90 [ 409.087107][T17016] ret_from_fork_asm+0x1a/0x30 [ 409.092390][T17016] [ 409.092390][T17016] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 409.099609][T17016] fs_reclaim_acquire+0x71/0x100 [ 409.105070][T17016] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 409.111383][T17016] __alloc_skb+0x1d0/0x7d0 [ 409.116317][T17016] __ip6_append_data+0x2a44/0x3c50 [ 409.121943][T17016] ip6_append_data+0x10f/0x280 [ 409.127216][T17016] rawv6_sendmsg+0x12d3/0x18e0 [ 409.132498][T17016] ____sys_sendmsg+0x80a/0x9f0 [ 409.137772][T17016] ___sys_sendmsg+0x2a5/0x360 [ 409.142958][T17016] __x64_sys_sendmsg+0x1bd/0x2a0 [ 409.148404][T17016] do_syscall_64+0x14d/0xf80 [ 409.153521][T17016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.159925][T17016] [ 409.159925][T17016] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 409.167658][T17016] lock_sock_nested+0x41/0x100 [ 409.172942][T17016] inet_shutdown+0x6a/0x390 [ 409.177968][T17016] nbd_mark_nsock_dead+0x2e9/0x560 [ 409.183597][T17016] sock_shutdown+0x15e/0x260 [ 409.188706][T17016] nbd_clear_sock+0x24/0x170 [ 409.193804][T17016] nbd_config_put+0x2dd/0x580 [ 409.199083][T17016] nbd_genl_connect+0x19d5/0x1cf0 [ 409.204628][T17016] genl_family_rcv_msg_doit+0x22a/0x330 [ 409.210691][T17016] genl_rcv_msg+0x61c/0x7a0 [ 409.215705][T17016] netlink_rcv_skb+0x232/0x4b0 [ 409.220983][T17016] genl_rcv+0x28/0x40 [ 409.225473][T17016] netlink_unicast+0x80f/0x9b0 [ 409.230749][T17016] netlink_sendmsg+0x813/0xb40 [ 409.236028][T17016] ____sys_sendmsg+0x972/0x9f0 [ 409.241302][T17016] ___sys_sendmsg+0x2a5/0x360 [ 409.246485][T17016] __x64_sys_sendmsg+0x1bd/0x2a0 [ 409.251939][T17016] do_syscall_64+0x14d/0xf80 [ 409.257044][T17016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.263451][T17016] [ 409.263451][T17016] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 409.271091][T17016] __mutex_lock+0x19f/0x1300 [ 409.276202][T17016] nbd_queue_rq+0x37b/0x1100 [ 409.281308][T17016] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 409.287360][T17016] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 409.294201][T17016] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 409.300691][T17016] blk_mq_run_hw_queue+0x348/0x4f0 [ 409.306320][T17016] blk_mq_dispatch_list+0xd16/0xe10 [ 409.312030][T17016] blk_mq_flush_plug_list+0x48d/0x570 [ 409.317909][T17016] __blk_flush_plug+0x3ed/0x4d0 [ 409.323268][T17016] __submit_bio+0x28d/0x580 [ 409.328275][T17016] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 409.334414][T17016] block_read_full_folio+0x599/0x830 [ 409.340209][T17016] filemap_read_folio+0x137/0x3b0 [ 409.345746][T17016] do_read_cache_folio+0x358/0x590 [ 409.351382][T17016] read_part_sector+0xb6/0x2b0 [ 409.356659][T17016] adfspart_check_ICS+0xa5/0xa40 [ 409.362104][T17016] bdev_disk_changed+0x7ba/0x1550 [ 409.367634][T17016] blkdev_get_whole+0x380/0x510 [ 409.372993][T17016] bdev_open+0x31e/0xd30 [ 409.377741][T17016] blkdev_open+0x470/0x610 [ 409.382669][T17016] do_dentry_open+0x785/0x14e0 [ 409.387944][T17016] vfs_open+0x3b/0x340 [ 409.392527][T17016] path_openat+0x2e08/0x3860 [ 409.397625][T17016] do_file_open+0x23e/0x4a0 [ 409.402641][T17016] do_sys_openat2+0x113/0x200 [ 409.407833][T17016] __x64_sys_openat+0x138/0x170 [ 409.413201][T17016] do_syscall_64+0x14d/0xf80 [ 409.418307][T17016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.424710][T17016] [ 409.424710][T17016] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 409.431922][T17016] __mutex_lock+0x19f/0x1300 [ 409.437033][T17016] nbd_queue_rq+0xc6/0x1100 [ 409.442056][T17016] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 409.448109][T17016] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 409.454950][T17016] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 409.461448][T17016] blk_mq_run_hw_queue+0x348/0x4f0 [ 409.467075][T17016] blk_mq_dispatch_list+0xd16/0xe10 [ 409.472782][T17016] blk_mq_flush_plug_list+0x48d/0x570 [ 409.478661][T17016] __blk_flush_plug+0x3ed/0x4d0 [ 409.484019][T17016] __submit_bio+0x28d/0x580 [ 409.489030][T17016] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 409.495168][T17016] block_read_full_folio+0x599/0x830 [ 409.500966][T17016] filemap_read_folio+0x137/0x3b0 [ 409.506500][T17016] do_read_cache_folio+0x358/0x590 [ 409.512118][T17016] read_part_sector+0xb6/0x2b0 [ 409.517393][T17016] adfspart_check_ICS+0xa5/0xa40 [ 409.522840][T17016] bdev_disk_changed+0x7ba/0x1550 [ 409.528372][T17016] blkdev_get_whole+0x380/0x510 [ 409.533739][T17016] bdev_open+0x31e/0xd30 [ 409.538491][T17016] blkdev_open+0x470/0x610 [ 409.543416][T17016] do_dentry_open+0x785/0x14e0 [ 409.548694][T17016] vfs_open+0x3b/0x340 [ 409.553277][T17016] path_openat+0x2e08/0x3860 [ 409.558381][T17016] do_file_open+0x23e/0x4a0 [ 409.563394][T17016] do_sys_openat2+0x113/0x200 [ 409.568582][T17016] __x64_sys_openat+0x138/0x170 [ 409.573949][T17016] do_syscall_64+0x14d/0xf80 [ 409.579053][T17016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.585460][T17016] [ 409.585460][T17016] -> #1 (set->srcu){.+.+}-{0:0}: [ 409.592573][T17016] __synchronize_srcu+0xca/0x3e0 [ 409.598022][T17016] elevator_switch+0x1e8/0x7a0 [ 409.603294][T17016] elevator_change+0x2cc/0x450 [ 409.608573][T17016] elevator_set_default+0x36c/0x430 [ 409.614297][T17016] blk_register_queue+0x366/0x430 [ 409.619851][T17016] __add_disk+0x677/0xd50 [ 409.624702][T17016] add_disk_fwnode+0xfb/0x480 [ 409.629901][T17016] nbd_dev_add+0x72c/0xb50 [ 409.634833][T17016] nbd_init+0x168/0x1f0 [ 409.639511][T17016] do_one_initcall+0x250/0x8d0 [ 409.644793][T17016] do_initcall_level+0x104/0x190 [ 409.650244][T17016] do_initcalls+0x59/0xa0 [ 409.655090][T17016] kernel_init_freeable+0x2a6/0x3e0 [ 409.660794][T17016] kernel_init+0x1d/0x1d0 [ 409.665633][T17016] ret_from_fork+0x51e/0xb90 [ 409.670734][T17016] ret_from_fork_asm+0x1a/0x30 [ 409.676012][T17016] [ 409.676012][T17016] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 409.683822][T17016] __lock_acquire+0x15a5/0x2cf0 [ 409.689187][T17016] lock_acquire+0xf0/0x2e0 [ 409.694112][T17016] __mutex_lock+0x19f/0x1300 [ 409.699216][T17016] elevator_change+0x1b3/0x450 [ 409.704490][T17016] elevator_set_none+0xb5/0x140 [ 409.709854][T17016] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 409.716172][T17016] nbd_start_device+0x17f/0xb10 [ 409.721540][T17016] nbd_genl_connect+0x165b/0x1cf0 [ 409.727082][T17016] genl_family_rcv_msg_doit+0x22a/0x330 [ 409.733141][T17016] genl_rcv_msg+0x61c/0x7a0 [ 409.738152][T17016] netlink_rcv_skb+0x232/0x4b0 [ 409.743435][T17016] genl_rcv+0x28/0x40 [ 409.747924][T17016] netlink_unicast+0x80f/0x9b0 [ 409.753199][T17016] netlink_sendmsg+0x813/0xb40 [ 409.758479][T17016] ____sys_sendmsg+0x972/0x9f0 [ 409.763752][T17016] ___sys_sendmsg+0x2a5/0x360 [ 409.768937][T17016] __x64_sys_sendmsg+0x1bd/0x2a0 [ 409.774380][T17016] do_syscall_64+0x14d/0xf80 [ 409.779483][T17016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.785885][T17016] [ 409.785885][T17016] other info that might help us debug this: [ 409.785885][T17016] [ 409.796100][T17016] Chain exists of: [ 409.796100][T17016] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#54 [ 409.796100][T17016] [ 409.809832][T17016] Possible unsafe locking scenario: [ 409.809832][T17016] [ 409.817267][T17016] CPU0 CPU1 [ 409.822616][T17016] ---- ---- [ 409.827964][T17016] lock(&q->q_usage_counter(io)#54); [ 409.833343][T17016] lock(fs_reclaim); [ 409.839835][T17016] lock(&q->q_usage_counter(io)#54); [ 409.847722][T17016] lock(&q->elevator_lock); [ 409.852300][T17016] [ 409.852300][T17016] *** DEADLOCK *** [ 409.852300][T17016] [ 409.860434][T17016] 6 locks held by syz.3.2938/17016: [ 409.865616][T17016] #0: ffffffff8fc35450 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 409.873796][T17016] #1: ffffffff8fc35288 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 409.882763][T17016] #2: ffff8880263f71d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60 [ 409.894187][T17016] #3: ffff8880263f70d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60 [ 409.905159][T17016] #4: ffff8880263d2680 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 409.915798][T17016] #5: ffff8880263d26b8 (&q->q_usage_counter(queue)#38){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 409.926679][T17016] [ 409.926679][T17016] stack backtrace: [ 409.932554][T17016] CPU: 1 UID: 0 PID: 17016 Comm: syz.3.2938 Not tainted syzkaller #0 PREEMPT(full) [ 409.932573][T17016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 409.932583][T17016] Call Trace: [ 409.932592][T17016] [ 409.932601][T17016] dump_stack_lvl+0xe8/0x150 [ 409.932625][T17016] print_circular_bug+0x2e1/0x300 [ 409.932652][T17016] check_noncircular+0x12e/0x150 [ 409.932677][T17016] __lock_acquire+0x15a5/0x2cf0 [ 409.932706][T17016] lock_acquire+0xf0/0x2e0 [ 409.932724][T17016] ? elevator_change+0x1b3/0x450 [ 409.932743][T17016] __mutex_lock+0x19f/0x1300 [ 409.932767][T17016] ? elevator_change+0x1b3/0x450 [ 409.932782][T17016] ? rcu_is_watching+0x15/0xb0 [ 409.932806][T17016] ? elevator_change+0x1b3/0x450 [ 409.932821][T17016] ? __pfx___mutex_lock+0x10/0x10 [ 409.932849][T17016] ? enable_work+0x17f/0x230 [ 409.932872][T17016] ? lockdep_hardirqs_on+0x7a/0x110 [ 409.932898][T17016] ? __cancel_work_sync+0xf7/0x110 [ 409.932921][T17016] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 409.932940][T17016] elevator_change+0x1b3/0x450 [ 409.932958][T17016] elevator_set_none+0xb5/0x140 [ 409.932972][T17016] ? __pfx_elevator_set_none+0x10/0x10 [ 409.932989][T17016] ? xa_load+0x1db/0x210 [ 409.933015][T17016] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 409.933039][T17016] ? kernfs_add_one+0x477/0x5c0 [ 409.933062][T17016] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 409.933086][T17016] ? sysfs_add_file_mode_ns+0x259/0x300 [ 409.933108][T17016] nbd_start_device+0x17f/0xb10 [ 409.933135][T17016] ? device_create_file+0xf4/0x1b0 [ 409.933150][T17016] nbd_genl_connect+0x165b/0x1cf0 [ 409.933173][T17016] ? __pfx___nla_validate_parse+0x10/0x10 [ 409.933199][T17016] ? __pfx_nbd_genl_connect+0x10/0x10 [ 409.933224][T17016] ? rcu_is_watching+0x15/0xb0 [ 409.933244][T17016] ? trace_kmalloc+0x2a/0x110 [ 409.933262][T17016] ? __nla_parse+0x40/0x60 [ 409.933285][T17016] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 409.933303][T17016] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 409.933324][T17016] genl_family_rcv_msg_doit+0x22a/0x330 [ 409.933344][T17016] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 409.933367][T17016] ? __lock_acquire+0x6b5/0x2cf0 [ 409.933388][T17016] genl_rcv_msg+0x61c/0x7a0 [ 409.933406][T17016] ? __pfx_genl_rcv_msg+0x10/0x10 [ 409.933421][T17016] ? __pfx_nbd_genl_connect+0x10/0x10 [ 409.933443][T17016] ? __lock_acquire+0x6b5/0x2cf0 [ 409.933466][T17016] netlink_rcv_skb+0x232/0x4b0 [ 409.933488][T17016] ? __pfx_genl_rcv_msg+0x10/0x10 [ 409.933504][T17016] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 409.933531][T17016] ? down_read+0x272/0x2e0 [ 409.933544][T17016] ? genl_rcv+0xd/0x40 [ 409.933559][T17016] genl_rcv+0x28/0x40 [ 409.933573][T17016] netlink_unicast+0x80f/0x9b0 [ 409.933596][T17016] ? __pfx_netlink_unicast+0x10/0x10 [ 409.933615][T17016] ? netlink_sendmsg+0x650/0xb40 [ 409.933635][T17016] ? skb_put+0x11b/0x210 [ 409.933659][T17016] netlink_sendmsg+0x813/0xb40 [ 409.933684][T17016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.933707][T17016] ? aa_sock_msg_perm+0xf1/0x1b0 [ 409.933728][T17016] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 409.933747][T17016] ____sys_sendmsg+0x972/0x9f0 [ 409.933762][T17016] ? futex_unqueue+0x211/0x240 [ 409.933783][T17016] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.933801][T17016] ? import_iovec+0x73/0xa0 [ 409.933825][T17016] ___sys_sendmsg+0x2a5/0x360 [ 409.933847][T17016] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.933865][T17016] ? futex_wait+0x29a/0x380 [ 409.933897][T17016] ? __fget_files+0x2a/0x420 [ 409.933919][T17016] ? __fget_files+0x3a0/0x420 [ 409.933945][T17016] __x64_sys_sendmsg+0x1bd/0x2a0 [ 409.933961][T17016] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 409.933980][T17016] ? rcu_is_watching+0x15/0xb0 [ 409.934005][T17016] do_syscall_64+0x14d/0xf80 [ 409.934032][T17016] ? trace_irq_disable+0x3b/0x150 [ 409.934055][T17016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.934071][T17016] ? clear_bhb_loop+0x40/0x90 [ 409.934088][T17016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.934104][T17016] RIP: 0033:0x7fc7c639c799 [ 409.934120][T17016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.934135][T17016] RSP: 002b:00007fc7c72a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.934152][T17016] RAX: ffffffffffffffda RBX: 00007fc7c6615fa0 RCX: 00007fc7c639c799 [ 409.934164][T17016] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 409.934175][T17016] RBP: 00007fc7c6432c99 R08: 0000000000000000 R09: 0000000000000000 [ 409.934185][T17016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.934195][T17016] R13: 00007fc7c6616038 R14: 00007fc7c6615fa0 R15: 00007fffac4cc8c8 [ 409.934213][T17016] [ 410.390439][T16917] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.395012][T16926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 410.414972][ T5146] Bluetooth: hci5: command tx timeout [ 410.464494][T17026] bond8: ARP target 9.0.0.0 is already present [ 410.472187][T17026] bond8: option arp_ip_target: invalid value (9) [ 410.482781][T17026] bond8 (unregistering): Released all slaves [ 410.565543][ T5146] block nbd5: Receive control failed (result -32) [ 410.572948][ T5146] block nbd5: Receive control failed (result -32) [ 410.580790][ T5146] block nbd5: Receive control failed (result -32) [ 410.588932][ T5146] block nbd5: Receive control failed (result -32) [ 410.590132][ T5833] block nbd5: Receive control failed (result -32) [ 410.617410][T17016] nbd5: detected capacity change from 0 to 63 [ 410.658344][ T5838] block nbd5: Dead connection, failed to find a fallback [ 410.687312][ T5838] block nbd5: shutting down sockets [ 410.692562][ T5838] blk_print_req_error: 136 callbacks suppressed [ 410.692577][ T5838] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.745126][ T5838] buffer_io_error: 138 callbacks suppressed [ 410.745145][ T5838] Buffer I/O error on dev nbd5, logical block 0, async page read [ 410.759019][ T5838] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.759789][T16917] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.768975][ T5838] Buffer I/O error on dev nbd5, logical block 1, async page read [ 410.769038][ T5838] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.769058][ T5838] Buffer I/O error on dev nbd5, logical block 2, async page read [ 410.769087][ T5838] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.769105][ T5838] Buffer I/O error on dev nbd5, logical block 3, async page read [ 410.769148][ T5838] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.769168][ T5838] Buffer I/O error on dev nbd5, logical block 0, async page read [ 410.769195][ T5838] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.848697][ T5838] Buffer I/O error on dev nbd5, logical block 1, async page read [ 410.856546][ T5838] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.866929][ T5838] Buffer I/O error on dev nbd5, logical block 2, async page read [ 410.874767][ T5838] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.884241][ T5838] Buffer I/O error on dev nbd5, logical block 3, async page read [ 410.892249][ T5838] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.924912][ T5838] Buffer I/O error on dev nbd5, logical block 0, async page read [ 410.932735][ T5838] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.964639][ T5838] Buffer I/O error on dev nbd5, logical block 1, async page read [ 410.976139][T16917] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.995436][ T5838] ldm_validate_partition_table(): Disk read failed. [ 411.025212][ T5838] Dev nbd5: unable to read RDB block 0 [ 411.031151][ T5838] nbd5: unable to read partition table [ 411.049902][ T5838] ldm_validate_partition_table(): Disk read failed. [ 411.058818][ T5838] Dev nbd5: unable to read RDB block 0 [ 411.087836][ T5838] nbd5: unable to read partition table [ 411.339022][ T64] dvmrp0: left allmulticast mode [ 411.377646][ T64] sit0 (unregistering): left allmulticast mode [ 411.617628][ T64] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 411.767136][ T64] bond1 (unregistering): Released all slaves [ 411.775922][ T64] bond2 (unregistering): Released all slaves [ 411.784443][ T64] bond3 (unregistering): Released all slaves [ 411.793182][ T64] bond4 (unregistering): Released all slaves [ 411.802436][ T64] bond5 (unregistering): Released all slaves [ 411.811981][ T64] bond6 (unregistering): Released all slaves [ 411.822160][ T64] bond7 (unregistering): Released all slaves [ 411.832944][ T64] bond8 (unregistering): Released all slaves [ 411.843119][ T64] bond9 (unregistering): Released all slaves [ 411.863381][ T64] bond0 (unregistering): Released all slaves [ 411.872384][ T64] bond10 (unregistering): Released all slaves [ 411.955717][ T64] !9: left promiscuous mode [ 411.979981][ T64] m1Ie5: left promiscuous mode [ 412.075183][ T64] tipc: Disabling bearer [ 412.083724][ T64] tipc: Left network mode [ 412.344973][ T2531] block nbd1: Possible stuck request ffff888026859c00: control (read@0,1024B). Runtime 180 seconds [ 412.359825][ T2531] block nbd1: Possible stuck request ffff888026859e00: control (read@1024,1024B). Runtime 180 seconds [ 412.370873][ T2531] block nbd1: Possible stuck request ffff88802685a000: control (read@2048,1024B). Runtime 180 seconds [ 412.381917][ T2531] block nbd1: Possible stuck request ffff88802685a200: control (read@3072,1024B). Runtime 180 seconds [ 412.578676][ T64] hsr_slave_0: left promiscuous mode [ 412.587297][ T64] hsr_slave_1: left promiscuous mode [ 412.600886][ T64] pim6reg (unregistering): left allmulticast mode [ 413.105323][ T64] IPVS: stop unused estimator thread 0... [ 413.507037][ T64] bridge_slave_1: left allmulticast mode [ 413.516932][ T64] bridge_slave_1: left promiscuous mode [ 413.522649][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.531090][ T64] bridge_slave_0: left allmulticast mode [ 413.537237][ T64] bridge_slave_0: left promiscuous mode [ 413.542881][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.555155][ T64] dvmrp1: left allmulticast mode [ 413.603221][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.613292][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.623158][ T64] bond0 (unregistering): Released all slaves [ 413.758175][ T64] bond4 (unregistering): (slave bridge1): Releasing active interface [ 413.796671][ T64] bond4 (unregistering): (slave bridge2): Releasing active interface [ 413.876697][ T64] bond1 (unregistering): Released all slaves [ 413.885350][ T64] bond2 (unregistering): Released all slaves [ 413.896126][ T64] bond3 (unregistering): Released all slaves [ 413.904979][ T64] bond4 (unregistering): Released all slaves [ 413.913849][ T64] bond5 (unregistering): Released all slaves [ 413.922864][ T64] bond6 (unregistering): Released all slaves [ 414.011917][ T64] tipc: Left network mode [ 414.264713][ T2572] block nbd3: Possible stuck request ffff888026918000: control (read@0,1024B). Runtime 210 seconds [ 414.275838][ T2572] block nbd3: Possible stuck request ffff888026918200: control (read@1024,1024B). Runtime 210 seconds [ 414.287701][ T2572] block nbd3: Possible stuck request ffff888026918400: control (read@2048,1024B). Runtime 210 seconds [ 414.298913][ T2572] block nbd3: Possible stuck request ffff888026918600: control (read@3072,1024B). Runtime 210 seconds [ 414.497384][ T64] hsr_slave_0: left promiscuous mode [ 414.503336][ T64] hsr_slave_1: left promiscuous mode [ 414.516880][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.538143][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.621465][ T64] team0 (unregistering): Port device team_slave_1 removed [ 414.637333][ T64] team0 (unregistering): Port device team_slave_0 removed [ 414.703765][ T64] pim6reg (unregistering): left allmulticast mode [ 418.274722][ T5195] udevd[5195]: worker [5835] /devices/virtual/block/nbd0 timeout; kill it [ 418.283340][ T5195] udevd[5195]: seq 16236 '/devices/virtual/block/nbd0' killed [ 418.291355][ T5195] udevd[5195]: worker [6046] /devices/virtual/block/nbd3 timeout; kill it [ 418.300086][ T5195] udevd[5195]: seq 16526 '/devices/virtual/block/nbd3' killed [ 418.307799][ T5195] udevd[5195]: worker [5829] /devices/virtual/block/nbd1 timeout; kill it [ 418.316512][ T5195] udevd[5195]: seq 17879 '/devices/virtual/block/nbd1' killed