last executing test programs: 2.980125917s ago: executing program 2 (id=2024): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000140)={0x2b, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x1, 0x100, 0x100, 0x2, 0x0, 0x3}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 2.784400316s ago: executing program 0 (id=2026): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000f7ff8c0b080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, r1}, 0xc) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r7, 0x106, 0x1, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) (async) writev(r0, &(0x7f0000010b40)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000010a40)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfffd}, {&(0x7f0000000540)="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", 0xdea}, {&(0x7f0000000240)="b0c089c1c3e1216756615dde8fd8e358908803df4459f506479ab9cf61eb0266", 0x20}, {&(0x7f0000010b00)="534f13aae2f684103d7b99c8da97c70c6fabc31168c297e1b3124ec1156a8415ef3c45b66dcdb8346c00e85245877c04779c49b78e9cbc61499a1727"}], 0x6) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 2.705717878s ago: executing program 0 (id=2028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200affd14000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005880)={&(0x7f0000005780)=ANY=[@ANYBLOB="9feb01001800000000000000090000000c00"], 0x0, 0x29, 0x0, 0x1, 0x4}, 0x28) 2.31156667s ago: executing program 0 (id=2032): socket$can_bcm(0x1d, 0x2, 0x2) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='wg2\x00') connect$can_bcm(r0, &(0x7f0000000000), 0x10) socket(0xf, 0x800, 0x6) (async) socket(0xf, 0x800, 0x6) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x4, 0x0, 0x400, {}, {}, {}, 0x1, @can={{}, 0x1, 0x0, 0x4, 0x0, "63bad47c2fbf2948"}}, 0x48}}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x4, 0x0, 0x400, {}, {}, {}, 0x1, @can={{}, 0x1, 0x0, 0x4, 0x0, "63bad47c2fbf2948"}}, 0x48}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x9, 0x0, 0xfbfd, 0x2, 0x0, 0x20, 0x3c, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010100, 0x0, 0x6c}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="95ab8caad55817c0450000000000000085100000feffffff9500000000000000"], &(0x7f0000000280)='GPL\x00', 0x4, 0xdf, &(0x7f00000002c0)=""/223, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0xc, 0x0, 0x2, 0x10, &(0x7f00000004c0), 0x10}, 0x80) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000140008"], 0x34}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000140008"], 0x34}}, 0x0) 2.211361058s ago: executing program 3 (id=2033): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @none}, &(0x7f0000000280)=0xe, 0x80800) bind$bt_l2cap(r6, &(0x7f0000000340)={0x1f, 0x7ff, @none, 0x9, 0x1}, 0xe) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040) recvfrom$packet(r2, &(0x7f0000000040)=""/53, 0x35, 0x2, &(0x7f0000000080)={0x11, 0x7, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x85, 0x0, 0x0, 0xc7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4094}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @none}, &(0x7f0000000280)=0xe, 0x80800) (async) bind$bt_l2cap(r6, &(0x7f0000000340)={0x1f, 0x7ff, @none, 0x9, 0x1}, 0xe) (async) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040) (async) recvfrom$packet(r2, &(0x7f0000000040)=""/53, 0x35, 0x2, &(0x7f0000000080)={0x11, 0x7, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14) (async) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x85, 0x0, 0x0, 0xc7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4094}, 0x800) (async) 1.768252144s ago: executing program 3 (id=2035): syz_emit_ethernet(0xe, &(0x7f0000000180)={@empty, @multicast, @void, {@generic={0x88f5}}}, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000240)=0x8003, 0x4) (async) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000001740)={0x200, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x74}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x987}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x12000000000000}]}, @TIPC_NLA_BEARER={0x138, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x30b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @mcast2, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x10, @mcast2, 0xffffff81}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x55a108b3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @loopback, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xc, @empty, 0x5}}}}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xda}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r2) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071124f000000000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0xd42c142798a188e2, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400003}, 0x94) (async) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c080}, 0x4040040) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local}) pread64(r3, &(0x7f0000002200)=""/89, 0x59, 0x10000) (async) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0x241) (async, rerun: 64) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 1.764195705s ago: executing program 0 (id=2036): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x1005, 0x80005, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={r0, &(0x7f0000000000)='veth1\x00', 0x400, &(0x7f0000000040)={@align=0x1, {0x800, 0x0, 0x360, 0x5}}, 0x7fffffff, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x6}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x7, 0x20, 0x2, 0x9, {{0x12, 0x4, 0x1, 0x5, 0x48, 0x65, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x11}, {[@end, @lsrr={0x83, 0xb, 0x78, [@dev={0xac, 0x14, 0x14, 0x1b}, @dev={0xac, 0x14, 0x14, 0x41}]}, @ra={0x94, 0x4, 0x1}, @end, @ra={0x94, 0x4}, @end, @timestamp={0x44, 0x1c, 0x23, 0x0, 0xd, [0x9, 0xd737, 0x7, 0x0, 0x7, 0xfffffffc]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xc4, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0xc4}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) 1.549334198s ago: executing program 2 (id=2039): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14, &(0x7f0000000080)={&(0x7f0000000040)="ecee38eeed675acaf76e039d83c649b53b33b4bcca50a53dfa2cfcaaaeab673727f945902d", 0x25}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000000) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f0000000440)={{&(0x7f0000000100)=[{0x2, 0x9, 0x8, {0x67d}, 0x9, 0x8, 0xe74}, {0x7, 0x9, 0x0, {0x0, 0x1}, 0x3, 0x8, 0x27a}, {0x7ff, 0x81, 0x1, {0x8, 0x7d}, 0x1, 0x6, 0x101}, {0x8a0, 0x8, 0x7, {0x392, 0x81}, 0x2, 0x1, 0x40}], 0x4, 0x40, 0x1, 0x1}, {&(0x7f0000000200)=[{0x9}, {0x40, 0x7}, {0xa4400}, {0x8, 0x8}, {0x0, 0x1c}, {0x8, 0x7b}, {0x2, 0xd03}, {0x80000000, 0x7}], 0x8, 0x10, 0x7f, 0x3}, {&(0x7f0000000280)=[0x0, 0x401, 0x5, 0xb, 0x0, 0x4, 0x3, 0x2], 0x8, 0x8, 0x0, 0x9}, {&(0x7f00000002c0)=[{0x10000, 0xd5, 0x9, 0x5, 0x8fe}, {0x4, 0x9, 0x7, 0x2, 0x9}, {0xfffffffffffffff9, 0x9, 0x8, 0x200, 0x6}, {0x1, 0x6, 0x1, 0x5b24, 0x5eb1}, {0x0, 0x7f, 0x2, 0xb14, 0x200}, {0x2, 0xa, 0x1, 0x1}, {0x0, 0x6, 0x4, 0x7, 0x3}, {0x5, 0xfa9, 0x66, 0x9, 0x3}], 0x8, 0x28, 0xfff9, 0x9}, {&(0x7f0000000400)=[0xdc, 0xc], 0x2, 0x8, 0x63da, 0x4495}}) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f00000004c0)='$-:9\x00', 0x5) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000540)=@add_del={0x2, &(0x7f0000000500)='batadv_slave_1\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xf7}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xf}, @IPSET_ATTR_MARK={0x8}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000080) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000b00)={{r2, &(0x7f0000000700)='^+\x00', 0x101081, &(0x7f0000000740)={@align=0xa8f, {0x7, 0x2, 0x80000001, 0x2}}, 0x3, &(0x7f0000000780), &(0x7f00000007c0)=0x1}, 0x3, &(0x7f0000000a80)=[{0x1, 0x3, &(0x7f0000000800)='\\*W:^\',},\x00', &(0x7f0000000840)="a37372ca2123295ec8348cc9939f62aeeaf722026572c34ce895ccfc6870ee05274fe52c0e594d76ef1d051203a942720f562f8486c73a5d0388afa08b9b6a8f4f140a61035515ea311a3796f84060a549b9ae2bfea8bbf9b58e68d96c8b2e086e97817fb82f6423741b72128cdf17c71300c5c976475e2365cc6b9b374a39ed423199e13fa1852d3203996cca64b9f7b09b2d43e58717b5a8bce9f4421994d0571a812d67752cab451acf73a5a084662098a431b7a650fb022f3dc6d1496b25b0da3d286e433e1e327fed5db50413827e", 0xd1, 0x8}, {0x1, 0x8, &(0x7f0000000940)='\x00', &(0x7f0000000980)="29652e4d218b48551f35ed4cd8847254b07cee2c1079cfe0d12dde921bbef25c5b9c99a47c93f8de09b4887d4b79703e76bfd3eb1c0ca7ddd51220f2cfbe98c285991c88d66be466d5d9", 0x4a, 0x22}, {0x3, 0x8, &(0x7f0000000a00)='batadv_slave_1\x00', &(0x7f0000000a40)="dbe509d6", 0x4, 0xa}]}) syz_genetlink_get_family_id$wireguard(&(0x7f00000006c0), r3) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, &(0x7f0000000b80)=0xfd, 0x4) bind$bt_hci(r3, &(0x7f0000000bc0)={0x1f, 0x1, 0x2}, 0x6) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c00)={r3, r3, 0x3, 0x0, @void}, 0x10) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000c40)={r4}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d80)={@fallback=r4, 0x31, 0x0, 0x5, &(0x7f0000000c80)=[0x0], 0x1, 0x0, &(0x7f0000000cc0)=[0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000dc0)={@cgroup=r3, r5, 0x20, 0x10, r5, @void, @value=r3, @void, @void, r7}, 0x20) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000e00)={0x0, 0x6}, &(0x7f0000000e40)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000e80)=@assoc_value={r8, 0x2d9f}, 0x8) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000ec0)={0x0, 0x5}, 0x8) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000f40)='ns/cgroup\x00') sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x50, 0x1402, 0x301, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r10}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x50}}, 0x4000) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f00000010c0)={{r4}, 0x3, &(0x7f0000001080)=[0x3, 0x400, 0x7], 0x10000, 0x3, 0x1}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockname$packet(r5, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001180)=0x14) r11 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_int(r11, 0x0, 0x5, &(0x7f00000011c0), &(0x7f0000001200)=0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r9, 0x6628) sendmsg$inet6(r3, &(0x7f0000001580)={&(0x7f0000001240)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0xcd}, 0x1c, &(0x7f0000001440)=[{&(0x7f0000001280)="c90207cc4373d4e1249024c7b3cba43ab9a3d5b1d25c57721d547ddf7997688e863087e97c81c55fb74d6fc543be565da6e23c9c7a2c4d0daca417c2eb3c2182773e69d2d6c4d8750a9b95643f9ae8861a049619b870a0792456c65c398811a92c3ede6273f6c9e3a93eb152668e97ebb66a00acacc6a374a6985fac8c317e55606c6a5be6790eac1c5b4c31138916aa63e13b9f3d1ba30cf3026459a4ea52a3a9f4d76d62d63d793f048de586264a800c99d6c4b8e12585d4", 0xb9}, {&(0x7f0000001340)="4f7f70bb91c183326104fbf2c98d6d0f412d19cf4eb4d36fb3ab2eecfd3cd1e51a8ce7a421fde65108bc1fe16d212f1f188e41fe4765855fdd6dfc66107e44dc5ca97ffba87fb751", 0x48}, {&(0x7f00000013c0)="f87cc35d9bf2fa13bda02ab2eb4804cd8f282c1f400ad9490d5e36e1128a214588cab6cfc598398fce70fc07652f6007268f6ff304ab4365d479769b59bd61839335be5aac331d63719d07cf14d8ed90aec460ce54121ff7714850503fcc9c891912faf95c82e8fede161dbe6f939e5ee1ab8ea9", 0x74}], 0x3, &(0x7f0000001480)=[@rthdr={{0x48, 0x29, 0x39, {0x6c, 0x6, 0x0, 0xf3, 0x0, [@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @private2]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x4e, 0x1, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @dstopts={{0x30, 0x29, 0x37, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x3c, 0x6, 0x1, 0x1e, 0x0, [@private1, @empty, @local]}}}], 0x100}, 0x20008000) 1.349519301s ago: executing program 2 (id=2040): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x10, {0x0, 0x0, 0x4a00, 0x0, 0x8020}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x840) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)=ANY=[@ANYBLOB="3000000040fb06012dbd7000fedbdf25047c00081c00c28018000980120091002f6465760f717274722d74756e000000"], 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x40, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xa}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d9a", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "00000000000000000000000200000000000000000000000000008879e66485201a0015ca837400000000000000000000001c0000000000"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x1f, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r10 = socket(0x10, 0x803, 0x0) ioctl$SIOCX25SCALLUSERDATA(r6, 0x89e5, &(0x7f0000000380)={0x5, "9b2bfd996c0be5abb43cb3b0dbe99f3a7926b4b8e032ee19cb719817a88a825ea1816942b4e9322bc95288a463141e5ac63db6b8a145be31b7616743ed728bb8f3bae936e132cf4d5bf66ad646ff4ccef51ec743af93382a56162bbefd23448915341fcaf41f1d0862316ab3dd7d1de6f02814ca5f5c03d29189749fef86a658"}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x210}]}, 0x34}}, 0x8000) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1.280445205s ago: executing program 0 (id=2041): r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x34000004}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = socket(0x40000000015, 0x5, 0x0) bind$inet(r9, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r9, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010000, 0x0) sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000180)=0x4c, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000410007012bbd70000000000003"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x4c090) 1.228524684s ago: executing program 3 (id=2042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200affd14000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005880)={&(0x7f0000005780)=ANY=[@ANYBLOB="9feb01001800000000000000090000000c00"], 0x0, 0x29, 0x0, 0x1, 0x4}, 0x28) 1.110668012s ago: executing program 4 (id=2043): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0xffff) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x3c, 0x18, 0x1, 0x70b92c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x8d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 971.979634ms ago: executing program 1 (id=2044): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@deltfilter={0x24, 0x2d, 0x20, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff2}, {0xe, 0x10}, {0x0, 0x2}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x10, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xa, 0xc}, {0x8, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x1d}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x44}}, 0x2000c010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0, @ANYRES16], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65445}, 0x4000840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x82, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x84000000, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 954.438869ms ago: executing program 4 (id=2045): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085fcf2491eb3b77c390100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x5, 0x0) listen(r2, 0x1) (async) sendmsg$inet_sctp(r2, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000", @ANYRES8=r2], 0x20, 0x4000040}, 0x4000000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4) shutdown(r4, 0x0) (async) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={r6, @in6={{0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={r6, 0xd}, 0x8) (rerun: 32) 874.074658ms ago: executing program 3 (id=2046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010028bd70004000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x39) 812.619803ms ago: executing program 1 (id=2047): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) (async) r3 = socket(0x1d, 0x80802, 0x6) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, 0x0, 0xfffffffffffffffd, {0x0, 0x1, 0x3}, 0xfd}, 0x18) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 772.726608ms ago: executing program 4 (id=2048): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="5daa000000000000611010000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="20002abd9200fcdbdf25060c24a00000000000000000cc19981ac77aa75cbdb2ce5ad0b4807d84b1c2d5fa815f6f95a2290e2690c8fa0b6deaa4c7f760cf804664acbbd4365f27842997708319bf8bc697d2b2b13e7c4eb14854640aaa4648c646e1cb40c824e1a8716ffba3daba1611da70c8d03706db0e3fc61fe4cecab9ecde65d492aa94c8b386d0e2e897a99e21b9c501b8a483765ff9c36b0ee5bf5259f726a05480dd8dc76c6639d8307fd0438a6aeeabeeda3cefee05601622ab99a7c22590960946a93b4b24a1ebcf23b733ea0f1fc56a321aaa"], 0x1c}}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="5daa000000000000611010000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="20002abd9200fcdbdf25060c24a00000000000000000cc19981ac77aa75cbdb2ce5ad0b4807d84b1c2d5fa815f6f95a2290e2690c8fa0b6deaa4c7f760cf804664acbbd4365f27842997708319bf8bc697d2b2b13e7c4eb14854640aaa4648c646e1cb40c824e1a8716ffba3daba1611da70c8d03706db0e3fc61fe4cecab9ecde65d492aa94c8b386d0e2e897a99e21b9c501b8a483765ff9c36b0ee5bf5259f726a05480dd8dc76c6639d8307fd0438a6aeeabeeda3cefee05601622ab99a7c22590960946a93b4b24a1ebcf23b733ea0f1fc56a321aaa"], 0x1c}}, 0x8000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) 672.618668ms ago: executing program 3 (id=2049): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x9, 0x4) (async, rerun: 32) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x2003208, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010104}, 0x10) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, 0x0, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) (rerun: 32) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000004100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) 593.366106ms ago: executing program 1 (id=2050): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c810) 577.311926ms ago: executing program 2 (id=2051): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x104b}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x500}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0xb, 0x0, 0xdad1124f55525059, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41100}, 0x94) 545.676443ms ago: executing program 1 (id=2052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x6}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x7}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200ff8d00"}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xc3}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = accept$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @empty}, &(0x7f0000000300)=0x10) sendto$inet(r6, &(0x7f0000000340)="e3490c3acc9033bf574f202f03831a3da63a4f7ae63f7105e9bf9bebde", 0x1d, 0x10, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000000b0108000000000000000002000008080002400000000408000340000000013a2c5c000000000000000000000008000240000000010800034000e0ff000800024000000000080003400000000100"/96], 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008004) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r8, 0x0, 0x3, &(0x7f0000000040)=""/1, &(0x7f0000000140)=0x1) setsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000380)=0x3, 0x4) 452.212931ms ago: executing program 3 (id=2053): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30010000100003052bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0004020010680500140012800c0001006d6163766c616e000400028008000500", @ANYRES32, @ANYBLOB="080004007f0000008c0018"], 0x130}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050009000000000005"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x3}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)=@newtfilter={0x478, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {}, {0x8, 0x7799f32dac09f25c}}, [@filter_kind_options=@f_flow={{0x9}, {0x448, 0x2, [@TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xcb, 0xf, 0x4, 0x7ff, 0x1, 0x8000, 0xffffeff5, 0x7ff, 0x3676, 0x8de, 0x2, 0x0, 0xc8, 0x7, 0xe14e, 0x2, 0xffff086b, 0x6372, 0x0, 0x200, 0x200, 0x4, 0x3, 0xbf, 0xfffffff9, 0x4, 0x180, 0x94, 0x4, 0x80000000, 0xf0, 0x6, 0x4, 0x7ff, 0x204, 0x6cc7, 0x7, 0x9, 0x16f, 0x5, 0xfffffffa, 0x2, 0x80000001, 0x401, 0x3, 0x832d, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x5, 0x1f12, 0x2, 0x2, 0x6, 0x3, 0x2, 0x56e23768, 0x4, 0x0, 0xfef, 0x2, 0x3ff, 0x2, 0xfffffff8, 0x7fff, 0x85, 0x693b, 0x8, 0xffffffff, 0x6, 0x0, 0x9, 0x2, 0x5, 0x2, 0x3, 0x6, 0x8, 0x80000001, 0x8b1, 0x7, 0xafd6, 0x80, 0x9, 0x5, 0xa225, 0x477, 0x7, 0x357, 0x800, 0x4, 0x4, 0x4df, 0xfffffffe, 0x7, 0xfffffba5, 0x6, 0x100, 0x400, 0x93ad, 0x2, 0x2, 0xfffffff9, 0x2, 0x7f, 0xff, 0xffffff7f, 0xa1e9, 0x5, 0xffff7fff, 0x6, 0x4, 0x61, 0x1, 0x1382, 0xc, 0x2, 0x5, 0x8, 0x9, 0x1, 0x2, 0x5, 0x74, 0x9, 0x4, 0x24000000, 0xd87, 0xb, 0x4, 0x5, 0x2, 0x1ff, 0x1ff, 0x3, 0xa, 0x4, 0x1ff, 0x0, 0xfffffffa, 0x33d0, 0x2, 0x4, 0xfffffffc, 0x1f8, 0xc, 0x0, 0x8, 0xca8, 0x10, 0x4, 0x7, 0x7, 0x10001, 0x5, 0x4, 0x6, 0x6, 0xa2987dbc, 0x9, 0xc, 0x6717, 0x47bf, 0x9, 0x6000000, 0x1f0f, 0x5e8, 0x9, 0x7, 0x17, 0x8, 0x4da0, 0x8, 0x9, 0x0, 0xffffffff, 0xffffffff, 0x5, 0xd, 0x3, 0x5, 0x2, 0x6, 0xf, 0xc00, 0x4, 0x10, 0x6a, 0x1, 0x401, 0xec, 0x4, 0xfffffffd, 0xf8f63b5, 0xeb, 0x204000, 0x8, 0x3, 0x967, 0xfffffffd, 0x6fdd5f04, 0x7, 0xc69c, 0x0, 0x6, 0x5, 0x6, 0x4, 0x4, 0x1000, 0x401, 0x7, 0x5, 0x3, 0xfffffff9, 0xb617, 0x3, 0x8, 0x3, 0x2, 0x8, 0x4, 0x40, 0x4c4, 0x7, 0xffff8274, 0x0, 0x2, 0x7f, 0x5, 0x2, 0x5, 0x5, 0x7, 0x80000000, 0x1, 0x5, 0x1, 0x5, 0x5, 0x1, 0xffffff38, 0x3, 0xdd9, 0x0, 0x4, 0x9, 0x1, 0x5, 0x0, 0x2, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x1, 0xaa5, 0x80000001, 0x7, {0x7, 0x1, 0x688, 0x5, 0x4, 0xfffffff8}, {0x6, 0x1, 0x2000, 0x0, 0x2}, 0x101, 0x7fff, 0xf}}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x4008814}, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x26020480) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000080)=""/12}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000006d0500000200000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000580), 0xc30, r10}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r10}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000100)=0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000031401002abd700001dcdf250900020073797a300000000008001c007278650014003300626f6e643000000000000000000000002005569da679fdc2e283ec027fd8c495a5a49ba4a346e76570c27f22a20421f05fde02f3dcaf2c19eae0c72b793501294fa98506b7c0adfcca5ed8706ba600d5dcd66e72b3b60184e4ef9acf0e7a155ccd82da2072361aaa3ed3f2004d0e996911bd65a67c30707560d862d5aa10b1d89c11e56777fb89c7c3d59d2fe815ccb87a28f6de777271a736bcf780c96f04d977630d1e96fd7b22bb7dddbc3a2da3c7"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) 451.389215ms ago: executing program 2 (id=2054): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), 0x0}, 0x20) (rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x50) (async) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x87, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae0dd3d3a415cb19b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a8563e43c12f461560a2972063700000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed", 0x40}], 0x1) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES16, @ANYBLOB="00000000000000004400128009100100626f6e6400000000340002800500010004000000010016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x4008001}, 0x0) (async) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff064}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000008000017000000840006803c00040067636d286165ffff000000000000000000000000000000b324f08940000000000000002c08a514000000e3de3d7b4cd07ec3ee777de774fc7987cca41989d7be63"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 437.091141ms ago: executing program 4 (id=2055): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4}) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async) r6 = accept4(r5, 0x0, 0x0, 0x800) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r8) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES16=r10, @ANYRES64=r10, @ANYRES16=r10, @ANYRESDEC=r10, @ANYRESHEX=r10, @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0xc1912f8aef324a93}, 0x20008000) 380.20458ms ago: executing program 1 (id=2056): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000440), &(0x7f0000000480)='%pi6 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) r2 = socket(0x2, 0x3, 0x81) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000effffff00000000000000008500000041000000850000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt(r2, 0xff, 0x1, 0x0, 0x26) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r4, 0x1, 0x3b, &(0x7f0000000080)=""/63, &(0x7f0000000100)=0x3f) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x2}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x80}}, 0x80) 292.651416ms ago: executing program 2 (id=2057): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) sendfile(r0, r3, 0x0, 0x20000000002) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380100001800400030008"], 0x44}}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000011300000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073797a32000000000900010073797a300000000008000a40000000042c000000080a01080000000000000000010000000900020073797a32000004000900010073797a30"], 0xa8}}, 0x0) 221.422329ms ago: executing program 4 (id=2058): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x18, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x2, 0x0, 0xdad1124f55525059, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x94}, 0x94) ioctl$NILFS_IOCTL_SYNC(r2, 0x80086e8a, &(0x7f0000000140)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f00000001c0)) 185.065486ms ago: executing program 0 (id=2059): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00e9ffffff0000000000000000000000000000000000000000000000ff6ebceb8db3d3d2da2942ae1d4fc2458a4002d1fbc3cedc0b35dc0614a75f01483f0e58b35d578989855d50b6aacbb8aee8b400e5c6b411e3749d48ec3b884357958f90a14da1a90800000000000000345b8e5b7f2f89077e620dd3f34359ff15391807cc9a35f5529f55028684268b4ed0475f6f4fb4569cc78372b7cccf5216b63f9551a0f410"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000090400000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000400002400128009000100626f6e64000000001400028004001f0004000000080007"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000019c0)={{0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x100, &(0x7f00000000c0)={@align=0x5, {0x5, 0x3, 0x9, 0x3}}, 0x10000, &(0x7f0000000100), &(0x7f0000000180)=0x7}, 0x6, &(0x7f0000001900)=[{0x2, 0xfff, &(0x7f00000003c0)='\'+]\x00', &(0x7f0000000400)="717038bdd9caa23c177d8a2c6798557616f5732b58956e7e401c55cfecdc264ab5bc33d29282c0a86ae603136264e1bb9ab63e837783ba48efccb481846791edfbc5ea7c5d77b698028ed1f5a9ff979267", 0x51, 0x8}, {0x3, 0x7, &(0x7f0000000480)='syzkaller\x00', &(0x7f00000004c0)="1e46259af049170f52346015e71f41fb339e8d66acef42864f55a5e7cb86978bafc3101e7a316efd7ce437dcb1dbe65b114b1cf67c6f9e5f1ea7b24be908ed0d8179a4e314996f6a1e51e73474bb8d383b0873481359bf37833a795289477cdde8e76371e88804acd0f9bfce33c5d0d9dad5c40146ca4d86a2e3b52143992d7c24e7d2ee4922a19610f61431f494e01190e2906f27cf5a49abe3880816190a74d6d62ec7f140bcc4e36d131c5954412e5d06d5f7917983bb2a48834bb4eab3d46faedb671e430d88bc4ba197a9b982ad75fa07c65386ec77439ab92b4931590ef5", 0xe1, 0x28}, {0x1, 0x3, &(0x7f00000005c0)='\x00', &(0x7f0000000600)="02bbbaf4d6949a1fb6d71bdddcba1b5e8f96165760b3d31ed07dab36f441c739ee59efd2823a92fd", 0x28}, {0x2, 0x3, &(0x7f0000000640)='\x00', &(0x7f0000000700)="0f7b9a63e6e551422cbd00880c5d77ba4ce760112d15432e57c706ef37d09fac67eae5b6885a729e7747756fa78c31601a3046bb6272b37c0f407e3a69c64a89006c21bcb3463ff0a4a8d6eed877b083acd89491438a22d7678e0f0175effb1be17ac7dd06da0a6ff662c0a11fb72d42c4111c2b6d49d5fa1eb75a83970159d8e69b59e9419a5eab3cb05a05c2f2b46a0bee89075e23f5f3e0f01bd61402c6950816", 0xa2, 0x10}, {0x3, 0x8cbd, &(0x7f00000007c0)='syzkaller\x00', &(0x7f0000000800)="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", 0x1000}, {0x3, 0x867, &(0x7f0000001800)='+\x00', &(0x7f0000001840)="d5b03e7f5dc669fbd050cc7403831731a5aff4a9e58e5d6f75af021476e5fa38410e18ec6d73e84b5b6fad0c46c6fade0ece24ae9949ff56c1e053b5758f7de3636d6c6e4db48c4ddfc6f043a3a51ef9089e33d6e7b9816dd249796c938185ad1b1bd1b78598b24dda3f7493ab1b9a6493bc104d9253e8f30ef4ff5cafe46d9a69448073054e6b59f9be", 0x8a, 0x2}]}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001a80), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x2c, r5, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4001) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x215}, 0x50) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x94d392ac73f4c2cd, 0x100010, r3, 0x93e9c000) 183.912006ms ago: executing program 1 (id=2060): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) read$nci(r0, &(0x7f0000000100)=""/125, 0x7d) vmsplice(r1, &(0x7f0000000940)=[{&(0x7f0000000040)="1333", 0x2}, {&(0x7f0000000000)="90", 0x1}, {&(0x7f00000000c0)="008e777f9d", 0x5}], 0x3, 0xe) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x58, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) pwritev(r4, &(0x7f0000001e80)=[{&(0x7f00000001c0)="2a75cabaedc599d78103e900f96d0c430629c390d91f6326d8918a1880052cc9bf3e311b4609bc9fb9c432df40032f97c2096ab8fe5acf8e09dc9a268fc8d4d1b035c6703d1b79ff1c8122e757710148889da3d11ddd86", 0x57}, {&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)="162833127be0185ee2e2f6", 0xb}, {&(0x7f0000001e40)="ad3bc2dc1dc0a1c6e62803e44ca29b2c141081a6239bd38406b8f386430be42e", 0x20}], 0x4, 0x5, 0x6ba) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x0, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x30f0, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0xff, 0x1003, 0x0, 0x8ba, 0xa3, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x8000, 0x8, 0x255, 0x7, 0xa, 0xd81, 0x0, 0xa, 0xa, 0x7, 0x6, 0x2, 0x480, 0x1, 0x5, 0xb97, 0x7, 0x0, 0xffffffff, 0x200, 0x23, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x8, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0x5, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x7fffffff, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x52, 0x3, 0x9e, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x1, 0x6, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x8, 0x5, 0x6cdf13a3, 0x7, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x2, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x10000, 0x9486, 0x80, 0x2, 0x7ffffffc, 0xdb, 0x3, 0x83, 0xffff8000, 0x5, 0x5, 0x7, 0x1, 0x2, 0x8, 0x6, 0x0, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0x3, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x3d, 0x7, 0x80000001, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0xfffd, 0xcbf, 0x4010000, 0x101, 0x9, 0xfffffff6, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x8, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x5, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff8, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0x9, 0xfffffffb, 0x6, 0x2, 0x7, 0x20000005, 0x5, 0x9, 0x2, 0xfffff803, 0x0, 0x5, 0x2, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x105, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x7, 0x400, 0xffffffff, 0x1, 0x800, 0x6000, 0xfe000000, 0x7]}]}}]}, 0x468}}, 0x0) close(r0) 0s ago: executing program 4 (id=2061): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000640)=[0x0], 0x0, 0x25a, 0x1ffffffffffffddb, 0x1}}, 0x40) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000e00), 0x12) bind$x25(r4, &(0x7f0000000080), 0x12) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0xc4}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100"], 0x90}}, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYRESDEC=r3], 0xe4) kernel console output (not intermixed with test programs): [ T8782] tipc: Resetting bearer [ 261.649629][ T8782] tipc: Disabling bearer [ 262.024454][ T8812] netlink: 20 bytes leftover after parsing attributes in process `syz.1.758'. [ 262.681970][ T8825] xt_hashlimit: size too large, truncated to 1048576 [ 262.750175][ T8830] netlink: 'syz.2.763': attribute type 83 has an invalid length. [ 263.181327][ T8839] lo speed is unknown, defaulting to 1000 [ 263.729063][ T8864] netlink: 36 bytes leftover after parsing attributes in process `syz.4.771'. [ 264.114467][ T8862] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 265.970146][ T8911] debugfs: 'netdev:dvmrp1' already exists in 'phy3' [ 266.021683][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'. [ 266.031449][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'. [ 266.443751][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.787'. [ 266.459346][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.787'. [ 266.806858][ T8931] vxcan3: entered allmulticast mode [ 267.033415][ T8938] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.104696][ T8932] netlink: 48 bytes leftover after parsing attributes in process `syz.2.788'. [ 267.180692][ T5282] veth0_vlan: left promiscuous mode [ 267.303595][ T6903] veth0_vlan: entered promiscuous mode [ 267.339192][ T8938] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.458879][ T8938] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.626422][ T8938] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.873927][ T8963] netlink: 'syz.0.797': attribute type 1 has an invalid length. [ 267.947418][ T8966] netlink: 20 bytes leftover after parsing attributes in process `syz.4.799'. [ 268.298212][ T8963] bond5: option mode: invalid value (8) [ 268.345610][ T8963] bond5 (unregistering): Released all slaves [ 268.660349][ T6172] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.769263][ T6169] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.875532][ T6169] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.003265][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.802'. [ 269.088686][ T8999] xt_hashlimit: size too large, truncated to 1048576 [ 269.145612][ T62] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.192137][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.802'. [ 269.237731][ T9001] xt_CT: No such helper "pptp" [ 269.348051][ T9011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.804'. [ 269.442117][ T9014] netlink: 'syz.4.805': attribute type 6 has an invalid length. [ 269.749175][ T9020] Cannot find map_set index 65532 as target [ 269.803156][ T9020] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 269.856162][ T9020] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 269.908274][ T9020] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 269.931936][ T9026] lo speed is unknown, defaulting to 1000 [ 270.978668][ T9051] netlink: 'syz.3.810': attribute type 2 has an invalid length. [ 270.986784][ T9051] netlink: 228 bytes leftover after parsing attributes in process `syz.3.810'. [ 271.326674][ T9058] netlink: 'syz.2.815': attribute type 13 has an invalid length. [ 271.394615][ T6903] IPVS: starting estimator thread 0... [ 271.401519][ T9060] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 271.512987][ T9061] IPVS: using max 29 ests per chain, 69600 per kthread [ 271.530673][ T9060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.815'. [ 271.726039][ T9069] netlink: 20 bytes leftover after parsing attributes in process `syz.4.818'. [ 271.882850][ T9072] netlink: 68 bytes leftover after parsing attributes in process `syz.3.819'. [ 271.990923][ T9076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.265606][ T9075] syzkaller1: entered promiscuous mode [ 272.286321][ T9075] syzkaller1: entered allmulticast mode [ 272.316041][ T1630] block nbd1: Possible stuck request ffff888027667000: control (read@0,1024B). Runtime 60 seconds [ 272.329342][ T1630] block nbd1: Possible stuck request ffff8880276671c0: control (read@1024,1024B). Runtime 60 seconds [ 272.342822][ T1630] block nbd1: Possible stuck request ffff888027667380: control (read@2048,1024B). Runtime 60 seconds [ 272.353992][ T1630] block nbd1: Possible stuck request ffff888027667540: control (read@3072,1024B). Runtime 60 seconds [ 272.720713][ T9089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.113604][ T5646] Bluetooth: hci1: command 0x0406 tx timeout [ 273.123484][ T5651] Bluetooth: hci2: command 0x0406 tx timeout [ 273.129792][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 273.254641][ T9097] netlink: 36 bytes leftover after parsing attributes in process `syz.0.825'. [ 273.693111][ T9111] netlink: 20 bytes leftover after parsing attributes in process `syz.1.830'. [ 273.760802][ T9113] netlink: 'syz.0.829': attribute type 13 has an invalid length. [ 273.831866][ T9113] netlink: 'syz.0.829': attribute type 17 has an invalid length. [ 273.900783][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 274.241349][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.835'. [ 274.310138][ T9113] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 274.382457][ T9127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.471532][ T9109] lo speed is unknown, defaulting to 1000 [ 275.075775][ T9115] netlink: 732 bytes leftover after parsing attributes in process `syz.3.831'. [ 275.165604][ T9115] netlink: 732 bytes leftover after parsing attributes in process `syz.3.831'. [ 275.746723][ T9147] syzkaller0: tun_chr_ioctl cmd 35108 [ 276.111605][ T9179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.842'. [ 276.976968][ T9202] netlink: 20 bytes leftover after parsing attributes in process `syz.3.843'. [ 276.994214][ T9163] lo speed is unknown, defaulting to 1000 [ 277.826867][ T5970] udevd[5970]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 277.896277][ T5741] udevd[5741]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 277.950639][ T9224] vxcan3: entered allmulticast mode [ 278.383390][ T9233] netlink: 'syz.4.850': attribute type 4 has an invalid length. [ 278.414119][ T9233] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.850'. [ 278.430145][ T9164] netlink: 2 bytes leftover after parsing attributes in process `syz.1.841'. [ 278.503426][ T9235] IPVS: sed: FWM 3 0x00000003 - no destination available [ 278.526093][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 278.562924][ T9164] netlink: 2 bytes leftover after parsing attributes in process `syz.1.841'. [ 278.839144][ T9238] netlink: 132 bytes leftover after parsing attributes in process `syz.2.851'. [ 279.133737][ T9247] netlink: 16 bytes leftover after parsing attributes in process `syz.3.855'. [ 279.160277][ T9246] netlink: 20 bytes leftover after parsing attributes in process `syz.0.853'. [ 279.182950][ T9248] netlink: 52 bytes leftover after parsing attributes in process `syz.2.854'. [ 279.520499][ T9260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.856'. [ 279.770297][ T9264] vlan3: entered allmulticast mode [ 279.801780][ T9264] bridge4: entered allmulticast mode [ 279.841113][ T9260] bridge4: port 1(erspan0) entered blocking state [ 279.853794][ T9260] bridge4: port 1(erspan0) entered disabled state [ 280.173905][ T5653] block nbd2: Receive control failed (result -32) [ 280.187475][ T5650] block nbd2: Receive control failed (result -32) [ 280.196755][ T5658] block nbd2: Receive control failed (result -32) [ 280.310129][ T9271] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.388869][ T9271] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.676397][ T9286] netlink: 'syz.2.859': attribute type 1 has an invalid length. [ 280.870975][ T9286] veth7: entered allmulticast mode [ 281.039142][ T9288] vxcan5: entered allmulticast mode [ 281.429706][ T9292] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 281.478902][ T9299] syzkaller0: entered promiscuous mode [ 281.491739][ T9292] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 281.504511][ T9299] syzkaller0: entered allmulticast mode [ 281.739082][ T9302] syzkaller0: entered promiscuous mode [ 281.766186][ T9302] syzkaller0: entered allmulticast mode [ 282.077737][ T9313] bridge2: entered allmulticast mode [ 282.273145][ T9321] __nla_validate_parse: 2 callbacks suppressed [ 282.273162][ T9321] netlink: 20 bytes leftover after parsing attributes in process `syz.4.867'. [ 282.330345][ T9317] vxcan3: entered allmulticast mode [ 282.638019][ T9334] veth1_to_bond: entered promiscuous mode [ 282.651360][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'. [ 282.702068][ T9334] veth1_to_bond (unregistering): left promiscuous mode [ 282.758107][ T9334] bond0: (slave bond_slave_1): Releasing backup interface [ 283.122746][ T9342] netlink: 32 bytes leftover after parsing attributes in process `syz.1.872'. [ 283.190464][ T9342] netlink: 108 bytes leftover after parsing attributes in process `syz.1.872'. [ 283.254392][ T9342] netlink: 108 bytes leftover after parsing attributes in process `syz.1.872'. [ 283.302991][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.872'. [ 283.837532][ T9363] lo speed is unknown, defaulting to 1000 [ 283.910520][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.876'. [ 283.930582][ T9370] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 285.538520][ T9403] batman_adv: batadv0: Adding interface: gretap1 [ 285.578753][ T9403] batman_adv: batadv0: Interface activated: gretap1 [ 286.375155][ T9426] veth0: entered promiscuous mode [ 286.409131][ T9426] ip6tnl2: entered allmulticast mode [ 286.776964][ T9425] veth0: left promiscuous mode [ 286.795574][ T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 286.841767][ T5771] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 286.864110][ T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 287.200822][ T9438] netlink: 748 bytes leftover after parsing attributes in process `syz.3.896'. [ 287.312723][ T5762] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 287.341319][ T9450] netlink: 24 bytes leftover after parsing attributes in process `syz.4.898'. [ 287.601664][ T5762] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 287.768427][ T9455] openvswitch: netlink: EtherType 50a is less than min 600 [ 287.856704][ T9455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.900'. [ 288.602153][ T9481] tipc: Enabling of bearer rejected, failed to enable media [ 288.623494][ T5771] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 288.982655][ T5748] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 289.148715][ T9485] netlink: 76 bytes leftover after parsing attributes in process `syz.2.906'. [ 289.194893][ T9485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.906'. [ 289.241511][ T9485] netlink: 'syz.2.906': attribute type 1 has an invalid length. [ 289.744988][ T9495] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 289.765739][ T9495] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 289.797734][ T9495] bridge1: left promiscuous mode [ 289.817957][ T9495] bridge1: left allmulticast mode [ 289.851746][ T9495] erspan0: left allmulticast mode [ 289.872582][ T9495] erspan0: left promiscuous mode [ 289.887923][ T9495] macvtap1: left promiscuous mode [ 289.907351][ T9495] macvtap1: left allmulticast mode [ 289.962714][ T9495] ip6gre1: left promiscuous mode [ 289.982986][ T9495] ip6gre1: left allmulticast mode [ 290.014339][ T9495] vlan2: left allmulticast mode [ 290.039928][ T9495] bond0: left allmulticast mode [ 290.070215][ T9495] bond_slave_0: left allmulticast mode [ 290.155593][ T9485] geneve3: entered promiscuous mode [ 290.552487][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 291.203773][ T9539] netlink: 20 bytes leftover after parsing attributes in process `syz.3.913'. [ 291.613594][ T9545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.637956][ T9545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.692746][ T9545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.707991][ T9545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.728069][ T9545] batman_adv: batadv0: Removing interface: macvtap1 [ 292.248523][ T9559] x_tables: duplicate underflow at hook 1 [ 293.093547][ T9573] netlink: 'syz.4.920': attribute type 10 has an invalid length. [ 293.180486][ T9577] netlink: 'syz.2.919': attribute type 1 has an invalid length. [ 295.148117][ T9550] tipc: Enabling of bearer rejected, failed to enable media [ 295.184958][ T9573] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 295.212223][ T9573] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 295.437705][ T9600] netlink: 44 bytes leftover after parsing attributes in process `syz.3.924'. [ 295.900457][ T9615] sctp: [Deprecated]: syz.2.928 (pid 9615) Use of int in maxseg socket option. [ 295.900457][ T9615] Use struct sctp_assoc_value instead [ 297.160291][ T9639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.933'. [ 297.213194][ T9644] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.935'. [ 297.258888][ T9644] netlink: 'syz.3.935': attribute type 13 has an invalid length. [ 297.277560][ T9644] netlink: 'syz.3.935': attribute type 17 has an invalid length. [ 297.511334][ T9649] xt_connbytes: Forcing CT accounting to be enabled [ 297.520353][ T9649] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 297.548033][ T9651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.936'. [ 297.566820][ T9639] bond3: entered promiscuous mode [ 297.575293][ T9639] 8021q: adding VLAN 0 to HW filter on device bond3 [ 297.603572][ T9652] netlink: 40 bytes leftover after parsing attributes in process `syz.2.936'. [ 297.714957][ T9644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.737107][ T9644] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.784250][ T9644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.888132][ T9644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.912562][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 297.926778][ T9644] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 297.938263][ T9644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.953779][ T9644] veth1_macvtap: left promiscuous mode [ 297.962109][ T9644] veth0_macvtap: left promiscuous mode [ 297.971139][ T9644] veth0_macvtap: entered promiscuous mode [ 298.001914][ T9644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 298.021994][ T9644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 298.037241][ T9644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 298.060468][ T9644] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 298.120247][ T9646] vlan4: entered allmulticast mode [ 298.143353][ T9646] bond3: entered allmulticast mode [ 298.171585][ T7193] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.179878][ T7193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.467074][ T9651] 8021q: adding VLAN 0 to HW filter on device bond10 [ 298.534969][ T6169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.562037][ T6169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.607752][ T6169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.006373][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.943'. [ 299.052946][ T9685] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.944'. [ 299.427073][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.947'. [ 299.505711][ T9693] bond4: entered promiscuous mode [ 299.514698][ T9693] 8021q: adding VLAN 0 to HW filter on device bond4 [ 299.542867][ T9698] smc: net device vlan1 applied user defined pnetid SYZ2 [ 299.634717][ T9694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.947'. [ 299.867741][ T9693] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 299.895320][ T5762] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 300.074847][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.954'. [ 300.523049][ T9729] netlink: 96 bytes leftover after parsing attributes in process `syz.3.958'. [ 300.591651][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.957'. [ 300.675404][ T9731] lo speed is unknown, defaulting to 1000 [ 300.703260][ T9736] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 300.712077][ T9736] syzkaller0: entered promiscuous mode [ 300.719867][ T9736] syzkaller0: entered allmulticast mode [ 302.293544][ T9740] netlink: 'syz.1.960': attribute type 1 has an invalid length. [ 302.301573][ T9740] netlink: 'syz.1.960': attribute type 8 has an invalid length. [ 302.399443][ T1630] block nbd1: Possible stuck request ffff888027667000: control (read@0,1024B). Runtime 90 seconds [ 302.410401][ T1630] block nbd1: Possible stuck request ffff8880276671c0: control (read@1024,1024B). Runtime 90 seconds [ 302.422144][ T1630] block nbd1: Possible stuck request ffff888027667380: control (read@2048,1024B). Runtime 90 seconds [ 302.433707][ T1630] block nbd1: Possible stuck request ffff888027667540: control (read@3072,1024B). Runtime 90 seconds [ 303.402341][ T9723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.849747][ T9753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.963'. [ 303.911537][ T9755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.964'. [ 304.133168][ T9760] netlink: 'syz.0.965': attribute type 23 has an invalid length. [ 304.137348][ T7189] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.191820][ T7189] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.264464][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'. [ 304.325080][ T7189] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.445181][ T9764] dummy0: entered promiscuous mode [ 304.584482][ T7189] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.795084][ T9778] netlink: 'syz.3.970': attribute type 5 has an invalid length. [ 304.971272][ T9778] ip6erspan0: entered allmulticast mode [ 305.245143][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.974'. [ 305.340593][ T9793] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 305.475140][ T9804] netlink: 32 bytes leftover after parsing attributes in process `syz.3.974'. [ 305.534685][ T9796] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 305.568864][ T9798] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 306.027793][ T9829] sctp: [Deprecated]: syz.3.979 (pid 9829) Use of int in maxseg socket option. [ 306.027793][ T9829] Use struct sctp_assoc_value instead [ 306.064750][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.978'. [ 306.158173][ T9833] syzkaller0: entered promiscuous mode [ 306.179164][ T9833] syzkaller0: entered allmulticast mode [ 306.319558][ T9838] netlink: 'syz.0.983': attribute type 12 has an invalid length. [ 306.373126][ T9810] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 306.616712][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'. [ 306.721961][ T9852] netlink: 24 bytes leftover after parsing attributes in process `syz.1.987'. [ 306.750811][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.987'. [ 307.004479][ T9855] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.070487][ T9855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.201033][ T9856] macsec0: entered promiscuous mode [ 307.263599][ T7189] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.286344][ T9856] macsec0: left promiscuous mode [ 307.313676][ T7189] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.348647][ T7189] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.598049][ T5658] Bluetooth: hci2: command 0x0406 tx timeout [ 307.739448][ T9882] netlink: 'syz.4.991': attribute type 1 has an invalid length. [ 307.769606][ T9882] netlink: 200 bytes leftover after parsing attributes in process `syz.4.991'. [ 307.779946][ T9876] bond2 (unregistering): Released all slaves [ 307.793385][ T9882] netlink: 'syz.4.991': attribute type 1 has an invalid length. [ 307.827418][ T9882] netlink: 29 bytes leftover after parsing attributes in process `syz.4.991'. [ 308.097818][ T9888] syzkaller1: entered promiscuous mode [ 308.138959][ T9888] syzkaller1: entered allmulticast mode [ 308.398750][ T9898] tipc: Enabled bearer , priority 0 [ 308.448543][ T9898] syzkaller0: entered promiscuous mode [ 308.461744][ T9898] syzkaller0: entered allmulticast mode [ 308.493081][ T9898] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 308.590223][ T9898] tipc: Resetting bearer [ 308.651661][ T9897] tipc: Resetting bearer [ 308.701692][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1000'. [ 308.720521][ T9897] tipc: Disabling bearer [ 308.800398][ T9909] openvswitch: netlink: Message has 8 unknown bytes. [ 308.812865][ T9909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.067035][ T9911] syzkaller0: entered promiscuous mode [ 309.080962][ T9911] syzkaller0: entered allmulticast mode [ 311.992763][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 312.541871][ T9961] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 312.661169][ T9965] ip_vti0: entered promiscuous mode [ 312.694395][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1012'. [ 312.725586][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1012'. [ 312.774452][ T9973] block nbd3: server does not support multiple connections per device. [ 312.807794][ T9973] block nbd3: shutting down sockets [ 312.855928][ T9964] lo speed is unknown, defaulting to 1000 [ 312.936964][ T9981] FAULT_INJECTION: forcing a failure. [ 312.936964][ T9981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.001967][ T9981] CPU: 1 UID: 0 PID: 9981 Comm: syz.4.1016 Not tainted syzkaller #0 PREEMPT(full) [ 313.001999][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 313.002025][ T9981] Call Trace: [ 313.002035][ T9981] [ 313.002044][ T9981] dump_stack_lvl+0xe8/0x150 [ 313.002084][ T9981] should_fail_ex+0x40c/0x560 [ 313.002116][ T9981] _copy_from_user+0x2d/0xb0 [ 313.002152][ T9981] do_ip_setsockopt+0x40a/0x2e30 [ 313.002195][ T9981] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 313.002234][ T9981] ? aa_sk_perm+0x6d5/0x900 [ 313.002267][ T9981] ? __fget_files+0x2a/0x420 [ 313.002301][ T9981] ? __pfx_aa_sk_perm+0x10/0x10 [ 313.002336][ T9981] ? __fget_files+0x2a/0x420 [ 313.002363][ T9981] ? aa_sock_opt_perm+0xff/0x1a0 [ 313.002388][ T9981] ip_setsockopt+0x66/0x110 [ 313.002408][ T9981] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 313.002439][ T9981] do_sock_setsockopt+0x17c/0x1b0 [ 313.002478][ T9981] __x64_sys_setsockopt+0x13d/0x1b0 [ 313.002513][ T9981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.002538][ T9981] do_syscall_64+0x174/0x580 [ 313.002570][ T9981] ? trace_irq_disable+0x3b/0x140 [ 313.002598][ T9981] ? clear_bhb_loop+0x40/0x90 [ 313.002625][ T9981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.002647][ T9981] RIP: 0033:0x7f2dc7f9de59 [ 313.002668][ T9981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.002687][ T9981] RSP: 002b:00007f2dc8e1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 313.002709][ T9981] RAX: ffffffffffffffda RBX: 00007f2dc8225fa0 RCX: 00007f2dc7f9de59 [ 313.002733][ T9981] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000003 [ 313.002745][ T9981] RBP: 00007f2dc8e1e090 R08: 0000000000000001 R09: 0000000000000000 [ 313.002758][ T9981] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 313.002771][ T9981] R13: 00007f2dc8226038 R14: 00007f2dc8225fa0 R15: 00007ffd1816b748 [ 313.002806][ T9981] [ 313.758390][ T9992] pimreg: entered allmulticast mode [ 313.935417][ T9989] pimreg: left allmulticast mode [ 315.188821][T10027] can: request_module (can-proto-0) failed. [ 316.138588][T10034] FAULT_INJECTION: forcing a failure. [ 316.138588][T10034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.156254][T10034] CPU: 1 UID: 0 PID: 10034 Comm: syz.1.1030 Not tainted syzkaller #0 PREEMPT(full) [ 316.156282][T10034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.156294][T10034] Call Trace: [ 316.156303][T10034] [ 316.156311][T10034] dump_stack_lvl+0xe8/0x150 [ 316.156350][T10034] should_fail_ex+0x40c/0x560 [ 316.156380][T10034] _copy_to_user+0x31/0xb0 [ 316.156424][T10034] simple_read_from_buffer+0xe1/0x170 [ 316.156459][T10034] proc_fail_nth_read+0x1bb/0x230 [ 316.156493][T10034] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 316.156526][T10034] ? rw_verify_area+0x24a/0x4c0 [ 316.156561][T10034] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 316.156589][T10034] vfs_read+0x213/0xa80 [ 316.156628][T10034] ? __pfx___mutex_lock+0x10/0x10 [ 316.156661][T10034] ? __pfx_vfs_read+0x10/0x10 [ 316.156695][T10034] ? __fget_files+0x2a/0x420 [ 316.156728][T10034] ? __fget_files+0x3a2/0x420 [ 316.156755][T10034] ? __fget_files+0x2a/0x420 [ 316.156793][T10034] ksys_read+0x150/0x270 [ 316.156829][T10034] ? __pfx_ksys_read+0x10/0x10 [ 316.156867][T10034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.156891][T10034] do_syscall_64+0x174/0x580 [ 316.156930][T10034] ? trace_irq_disable+0x3b/0x140 [ 316.156958][T10034] ? clear_bhb_loop+0x40/0x90 [ 316.156983][T10034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.157004][T10034] RIP: 0033:0x7f5bbb75e68e [ 316.157024][T10034] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 316.157041][T10034] RSP: 002b:00007f5bbc6aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 316.157063][T10034] RAX: ffffffffffffffda RBX: 00007f5bbc6af6c0 RCX: 00007f5bbb75e68e [ 316.157078][T10034] RDX: 000000000000000f RSI: 00007f5bbc6af0a0 RDI: 0000000000000004 [ 316.157091][T10034] RBP: 00007f5bbc6af090 R08: 0000000000000000 R09: 0000000000000000 [ 316.157103][T10034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.157114][T10034] R13: 00007f5bbba26038 R14: 00007f5bbba25fa0 R15: 00007fff583748d8 [ 316.157146][T10034] [ 316.680421][T10041] pim6reg1: entered promiscuous mode [ 316.686359][T10041] pim6reg1: entered allmulticast mode [ 316.706959][ T9996] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 317.105614][T10051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1034'. [ 317.123100][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.260641][T10055] netlink: 'syz.3.1037': attribute type 1 has an invalid length. [ 317.387745][T10055] bond1: entered promiscuous mode [ 317.403247][T10055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.508365][T10063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1038'. [ 317.671765][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1039'. [ 317.684146][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1039'. [ 317.694602][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1039'. [ 317.746002][T10057] bond1: (slave veth3): making interface the new active one [ 317.783461][T10057] veth3: entered promiscuous mode [ 317.848577][T10057] bond1: (slave veth3): Enslaving as an active interface with an up link [ 317.873387][T10078] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1038'. [ 318.099209][T10080] lo speed is unknown, defaulting to 1000 [ 318.303623][T10088] syzkaller0: entered promiscuous mode [ 318.316995][T10088] syzkaller0: entered allmulticast mode [ 318.444383][T10069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 318.821021][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1044'. [ 318.850652][T10097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1043'. [ 318.985015][T10101] netlink: 'syz.0.1043': attribute type 10 has an invalid length. [ 318.996481][T10101] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1043'. [ 319.769426][T10111] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1047'. [ 321.078792][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1049'. [ 321.606490][T10128] netlink: 'syz.0.1052': attribute type 4 has an invalid length. [ 321.660393][T10133] netlink: 'syz.0.1052': attribute type 4 has an invalid length. [ 322.050090][T10126] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 323.038826][T10172] tipc: Enabling of bearer rejected, failed to enable media [ 323.553894][T10192] syzkaller0: entered promiscuous mode [ 323.590745][T10192] syzkaller0: entered allmulticast mode [ 323.868128][T10204] syzkaller0: tun_chr_ioctl cmd 35108 [ 324.196282][T10224] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1074'. [ 324.566955][ T6169] tipc: Subscription rejected, illegal request [ 324.866477][T10241] tipc: Enabled bearer , priority 10 [ 325.302148][T10248] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1083'. [ 325.685088][T10254] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1086'. [ 325.985226][ T9864] tipc: Node number set to 2125883389 [ 326.135801][T10270] lo speed is unknown, defaulting to 1000 [ 326.492728][T10287] SET target dimension over the limit! [ 326.579843][T10289] netlink: 'syz.3.1098': attribute type 1 has an invalid length. [ 326.729500][T10289] bond2: entered promiscuous mode [ 326.753625][T10289] 8021q: adding VLAN 0 to HW filter on device bond2 [ 327.035007][T10296] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1099'. [ 327.260823][T10303] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1103'. [ 327.533809][T10314] netlink: 'syz.3.1104': attribute type 1 has an invalid length. [ 327.627275][T10315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1104'. [ 327.666762][T10319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1105'. [ 328.176605][T10333] netlink: 'syz.3.1106': attribute type 13 has an invalid length. [ 328.776118][T10350] SET target dimension over the limit! [ 328.937866][T10354] syzkaller0: entered promiscuous mode [ 328.967982][T10354] syzkaller0: entered allmulticast mode [ 328.978243][T10359] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1115'. [ 329.217521][T10366] netlink: 'syz.1.1117': attribute type 1 has an invalid length. [ 329.388995][T10366] bond6: entered promiscuous mode [ 329.411315][T10366] 8021q: adding VLAN 0 to HW filter on device bond6 [ 329.474096][T10372] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 329.493670][T10372] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 329.504526][T10372] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 329.820578][T10386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1121'. [ 329.874532][T10358] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 329.886951][T10354] tipc: Enabling of bearer rejected, failed to enable media [ 329.987672][T10386] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1121'. [ 330.356837][T10403] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1127'. [ 330.388752][T10402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1125'. [ 330.414649][T10408] SET target dimension over the limit! [ 330.490445][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 330.599042][T10414] netlink: 'syz.3.1126': attribute type 13 has an invalid length. [ 330.657593][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1126'. [ 331.285012][T10430] xt_hashlimit: size too large, truncated to 1048576 [ 331.332816][T10433] netlink: 'syz.0.1131': attribute type 1 has an invalid length. [ 331.623013][T10433] gretap1: entered allmulticast mode [ 331.666166][T10433] bond5: (slave gretap1): making interface the new active one [ 331.721441][T10433] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 332.136873][T10451] openvswitch: netlink: IPv4 tunnel dst address is zero [ 332.500902][ T1630] block nbd1: Possible stuck request ffff888027667000: control (read@0,1024B). Runtime 120 seconds [ 332.511890][ T1630] block nbd1: Possible stuck request ffff8880276671c0: control (read@1024,1024B). Runtime 120 seconds [ 332.523450][ T1630] block nbd1: Possible stuck request ffff888027667380: control (read@2048,1024B). Runtime 120 seconds [ 332.534563][ T1630] block nbd1: Possible stuck request ffff888027667540: control (read@3072,1024B). Runtime 120 seconds [ 332.762343][T10465] syzkaller0: entered promiscuous mode [ 332.787793][T10465] syzkaller0: entered allmulticast mode [ 333.055605][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1144'. [ 333.491354][T10485] tipc: Enabled bearer , priority 0 [ 333.530474][T10485] syzkaller0: entered promiscuous mode [ 333.562484][T10485] syzkaller0: entered allmulticast mode [ 333.610669][T10490] veth1: Caught tx_queue_len zero misconfig [ 333.656726][T10490] sch_tbf: burst 255 is lower than device veth1 mtu (1514) ! [ 333.894467][T10485] can: request_module (can-proto-0) failed. [ 334.191126][T10484] tipc: Resetting bearer [ 334.245611][T10484] tipc: Disabling bearer [ 334.621218][T10521] bond6: option fail_over_mac: invalid value (127) [ 334.661354][T10521] bond6 (unregistering): Released all slaves [ 334.984238][T10545] netlink: 'syz.4.1160': attribute type 2 has an invalid length. [ 335.045997][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1160'. [ 335.136590][T10551] x_tables: duplicate entry at hook 1 [ 335.816111][T10545] ¿: entered promiscuous mode [ 338.552899][T10586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1169'. [ 338.631550][T10588] xt_CT: You must specify a L4 protocol and not use inversions on it [ 338.655866][T10589] tc action pedit offset must be on 32 bit boundaries [ 338.674820][T10588] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 338.783108][T10589] sctp: [Deprecated]: syz.3.1171 (pid 10589) Use of int in maxseg socket option. [ 338.783108][T10589] Use struct sctp_assoc_value instead [ 338.961398][T10599] netlink: 'syz.2.1173': attribute type 1 has an invalid length. [ 338.987764][T10601] tipc: Can't bind to reserved service type 1 [ 339.124500][T10603] bond11: (slave gretap1): making interface the new active one [ 339.165035][T10603] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 339.443734][T10606] smc: removing ib device syz1 [ 339.512451][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 340.081131][T10606] smbdirect: ib_dev[syz1] removed [ 340.226772][T10643] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1181'. [ 340.347405][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1181'. [ 340.386729][T10643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1181'. [ 340.427529][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1181'. [ 340.458606][T10645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1181'. [ 340.747244][T10651] openvswitch: netlink: Actions may not be safe on all matching packets [ 341.379405][T10664] netlink: 'syz.2.1187': attribute type 1 has an invalid length. [ 341.605019][T10664] 8021q: adding VLAN 0 to HW filter on device bond12 [ 342.341025][T10698] batadv_slave_0: Caught tx_queue_len zero misconfig [ 343.245296][T10727] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1200'. [ 344.241512][T10749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1203'. [ 344.568932][T10751] bond2: Removing last arp target with arp_interval on [ 345.816478][T10800] xt_hashlimit: size too large, truncated to 1048576 [ 346.526756][T10815] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1217'. [ 346.551353][T10822] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1219'. [ 346.608182][T10815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1217'. [ 346.652960][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 349.762133][T10835] syzkaller0: entered promiscuous mode [ 349.798453][T10835] syzkaller0: entered allmulticast mode [ 350.635190][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1227'. [ 350.689239][T10863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1227'. [ 352.352791][T10913] nbd: couldn't find a device at index 0 [ 352.426791][T10909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1237'. [ 352.467516][T10909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1237'. [ 352.840651][T10930] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1241'. [ 353.143242][T10930] bond13: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 353.161597][T10930] bond13 (unregistering): Released all slaves [ 353.803294][T10947] syzkaller1: entered promiscuous mode [ 353.819998][T10947] syzkaller1: entered allmulticast mode [ 353.848286][T10959] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 354.051171][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1247'. [ 354.421731][T10975] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1249'. [ 354.540777][T10982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1251'. [ 354.570188][T10982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1251'. [ 354.626350][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'. [ 354.678564][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'. [ 354.900119][T10993] netlink: 'syz.3.1253': attribute type 1 has an invalid length. [ 354.986775][T10998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1256'. [ 355.391095][ T5741] block nbd2: NBD_DISCONNECT [ 355.419735][ T5741] block nbd2: Send disconnect failed -32 [ 355.468437][ T5741] block nbd2: Send disconnect failed -32 [ 355.488394][ T5741] block nbd2: Send disconnect failed -32 [ 355.496147][T11020] Bluetooth: MGMT ver 1.23 [ 355.513869][ T5741] block nbd2: shutting down sockets [ 356.243470][ T5741] udevd[5741]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 356.899906][T11051] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 357.341110][T11056] netlink: 'syz.2.1270': attribute type 1 has an invalid length. [ 357.821525][T11068] ip6tnl0: Caught tx_queue_len zero misconfig [ 358.211106][T11078] netlink: 'syz.3.1277': attribute type 8 has an invalid length. [ 358.244978][T11078] __nla_validate_parse: 9 callbacks suppressed [ 358.245000][T11078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1277'. [ 358.743460][T11094] syzkaller1: entered promiscuous mode [ 358.757889][T11094] syzkaller1: entered allmulticast mode [ 359.511823][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1289'. [ 359.587598][T11120] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1290'. [ 359.736385][T11122] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 359.817067][T11122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1291'. [ 359.962822][T11122] 8021q: adding VLAN 0 to HW filter on device bond7 [ 360.139940][T11134] bond7: (slave macvlan1): Enslaving as an active interface with an up link [ 360.331760][T11105] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 360.669123][T11154] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1295'. [ 361.171859][T11175] x_tables: duplicate underflow at hook 1 [ 361.247742][T11153] bridge0: port 3(veth1_to_bridge) entered blocking state [ 361.307020][T11153] bridge0: port 3(veth1_to_bridge) entered disabled state [ 361.400884][T11153] veth1_to_bridge: entered allmulticast mode [ 361.475432][T11153] veth1_to_bridge: entered promiscuous mode [ 361.611430][T11171] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1296'. [ 361.642627][T11171] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1296'. [ 361.729354][T11172] syzkaller0: entered promiscuous mode [ 361.772456][T11172] syzkaller0: entered allmulticast mode [ 362.087499][T11201] syzkaller0: entered promiscuous mode [ 362.104141][T11198] netlink: 'syz.3.1303': attribute type 1 has an invalid length. [ 362.124982][T11201] syzkaller0: entered allmulticast mode [ 362.559310][ T1630] block nbd1: Possible stuck request ffff888027667000: control (read@0,1024B). Runtime 150 seconds [ 362.570491][ T1630] block nbd1: Possible stuck request ffff8880276671c0: control (read@1024,1024B). Runtime 150 seconds [ 362.581740][ T1630] block nbd1: Possible stuck request ffff888027667380: control (read@2048,1024B). Runtime 150 seconds [ 362.592997][ T1630] block nbd1: Possible stuck request ffff888027667540: control (read@3072,1024B). Runtime 150 seconds [ 362.707233][T11214] xt_hashlimit: size too large, truncated to 1048576 [ 362.776592][T11215] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.816589][T11218] netlink: 'syz.0.1310': attribute type 11 has an invalid length. [ 362.901678][T11218] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1310'. [ 362.944763][T11215] bridge_slave_0 (unregistering): left allmulticast mode [ 362.970480][T11223] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1310'. [ 363.012178][T11215] bridge_slave_0 (unregistering): left promiscuous mode [ 363.057957][T11215] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.672335][T11243] netlink: 'syz.2.1314': attribute type 361 has an invalid length. [ 364.154647][T11261] bond0: (slave ip6tnl0): refused to change device type [ 365.772036][T11305] dvmrp0: left allmulticast mode [ 366.174837][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1327'. [ 366.268300][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1327'. [ 366.369728][T11327] netlink: 'syz.0.1331': attribute type 4 has an invalid length. [ 366.448303][T11327] netlink: 'syz.0.1331': attribute type 4 has an invalid length. [ 366.871240][T11343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 367.273216][T11344] dvmrp0: entered allmulticast mode [ 367.534642][T11352] netlink: 'syz.0.1334': attribute type 32 has an invalid length. [ 367.576422][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1334'. [ 367.827142][T11352] bond6: Setting coupled_control to off (0) [ 367.860249][T11354] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.026503][T11354] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1334'. [ 368.655580][T11377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1339'. [ 369.021759][T11378] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1339'. [ 369.053657][T11380] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1341'. [ 369.106029][T11380] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1341'. [ 369.138530][T11380] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1341'. [ 370.684072][T11438] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 371.712437][T11459] syzkaller0: entered promiscuous mode [ 371.736878][T11459] syzkaller0: entered allmulticast mode [ 371.773365][T11462] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 371.805731][T11454] can: request_module (can-proto-0) failed. [ 371.814440][T11462] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 371.908660][T11459] __nla_validate_parse: 1 callbacks suppressed [ 371.908681][T11459] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1359'. [ 371.966634][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1361'. [ 372.075776][T11459] ip6gre1: entered promiscuous mode [ 372.096286][T11459] ip6gre1: entered allmulticast mode [ 372.439572][ T7193] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.448662][ T7193] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.462568][ T9865] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.615189][ T9865] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.278880][ T9865] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.975573][T11494] netlink: zone id is out of range [ 373.980815][T11494] netlink: zone id is out of range [ 373.986958][T11494] netlink: zone id is out of range [ 373.992158][T11494] netlink: zone id is out of range [ 373.998000][T11494] netlink: zone id is out of range [ 374.003583][T11494] netlink: zone id is out of range [ 374.018636][T11494] netlink: zone id is out of range [ 374.024884][T11494] netlink: get zone limit has 4 unknown bytes [ 374.195432][T11498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1369'. [ 375.326206][T11498] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 375.417333][T11505] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1370'. [ 375.578333][T11507] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.655985][T11505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1370'. [ 375.741504][T11511] vlan2: entered promiscuous mode [ 375.748666][T11516] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1372'. [ 375.772455][T11511] bridge0: entered promiscuous mode [ 375.975684][T11521] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1375'. [ 376.018185][T11521] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1375'. [ 376.552491][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 377.241773][T11562] veth1_to_hsr: entered promiscuous mode [ 377.422104][T11562] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1386'. [ 377.445995][T11562] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 377.506266][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1386'. [ 377.516833][ T7189] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 377.571511][T11562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1386'. [ 377.627330][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1386'. [ 377.670984][T11569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1386'. [ 377.729413][ T6176] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 377.786952][ T6176] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 377.831390][ T6176] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 377.878640][T11591] FAULT_INJECTION: forcing a failure. [ 377.878640][T11591] name failslab, interval 1, probability 0, space 0, times 0 [ 377.898133][ T6176] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 377.923571][T11591] CPU: 0 UID: 0 PID: 11591 Comm: syz.2.1392 Not tainted syzkaller #0 PREEMPT(full) [ 377.923605][T11591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 377.923626][T11591] Call Trace: [ 377.923635][T11591] [ 377.923644][T11591] dump_stack_lvl+0xe8/0x150 [ 377.923817][T11591] should_fail_ex+0x40c/0x560 [ 377.923950][T11591] should_failslab+0xa8/0x100 [ 377.924012][T11591] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 377.924043][T11591] ? local_lock_release+0x9c/0x160 [ 377.924147][T11591] ? __alloc_skb+0x1d7/0x7a0 [ 377.924197][T11591] ? __alloc_skb+0x1d7/0x7a0 [ 377.924234][T11591] __alloc_skb+0x1d7/0x7a0 [ 377.924268][T11591] netlink_sendmsg+0x5d4/0xb40 [ 377.924346][T11591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.924373][T11591] ? aa_sock_msg_perm+0xf1/0x1b0 [ 377.924450][T11591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.924471][T11591] sock_sendmsg_nosec+0x13a/0x180 [ 377.924528][T11591] ____sys_sendmsg+0x54e/0x850 [ 377.924656][T11591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.924725][T11591] ? import_iovec+0x73/0xa0 [ 377.924816][T11591] ___sys_sendmsg+0x2a5/0x360 [ 377.924853][T11591] ? __lock_acquire+0x683/0x2cf0 [ 377.924913][T11591] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.924982][T11591] ? __fget_files+0x2a/0x420 [ 377.925032][T11591] ? __fget_files+0x3a2/0x420 [ 377.925071][T11591] __x64_sys_sendmsg+0x1b1/0x290 [ 377.925107][T11591] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 377.925156][T11591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.925193][T11591] do_syscall_64+0x174/0x580 [ 377.925316][T11591] ? trace_irq_disable+0x3b/0x140 [ 377.925358][T11591] ? clear_bhb_loop+0x40/0x90 [ 377.925385][T11591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.925407][T11591] RIP: 0033:0x7f4a6479de59 [ 377.925426][T11591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.925444][T11591] RSP: 002b:00007f4a656de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.925467][T11591] RAX: ffffffffffffffda RBX: 00007f4a64a25fa0 RCX: 00007f4a6479de59 [ 377.925482][T11591] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 377.925496][T11591] RBP: 00007f4a656de090 R08: 0000000000000000 R09: 0000000000000000 [ 377.925509][T11591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.925522][T11591] R13: 00007f4a64a26038 R14: 00007f4a64a25fa0 R15: 00007ffe8bc1b528 [ 377.925556][T11591] [ 378.249694][T11596] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1394'. [ 378.553941][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.626956][T11611] syzkaller0: entered promiscuous mode [ 378.651728][T11611] syzkaller0: entered allmulticast mode [ 378.697945][T11616] pim6reg: entered allmulticast mode [ 378.708994][T11616] syzkaller0: entered promiscuous mode [ 378.714526][T11616] syzkaller0: entered allmulticast mode [ 378.725058][T11616] tipc: Enabled bearer , priority 0 [ 378.739575][T11615] tipc: Resetting bearer [ 378.841600][T11615] tipc: Disabling bearer [ 378.853247][T11619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1400'. [ 379.123740][T11632] FAULT_INJECTION: forcing a failure. [ 379.123740][T11632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.136836][T11632] CPU: 0 UID: 0 PID: 11632 Comm: syz.4.1405 Not tainted syzkaller #0 PREEMPT(full) [ 379.136865][T11632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 379.136879][T11632] Call Trace: [ 379.136888][T11632] [ 379.136898][T11632] dump_stack_lvl+0xe8/0x150 [ 379.136945][T11632] should_fail_ex+0x40c/0x560 [ 379.136977][T11632] _copy_from_iter+0x1d3/0x1660 [ 379.137004][T11632] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 379.137034][T11632] ? rcu_is_watching+0x15/0xb0 [ 379.137097][T11632] ? trace_kmem_cache_alloc+0x29/0xe0 [ 379.137126][T11632] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 379.137153][T11632] ? __pfx__copy_from_iter+0x10/0x10 [ 379.137180][T11632] ? __alloc_skb+0x276/0x7a0 [ 379.137208][T11632] ? __alloc_skb+0x276/0x7a0 [ 379.137245][T11632] ? netlink_sendmsg+0x650/0xb40 [ 379.137266][T11632] ? skb_put+0x112/0x210 [ 379.137300][T11632] netlink_sendmsg+0x6c0/0xb40 [ 379.137334][T11632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.137360][T11632] ? aa_sock_msg_perm+0xf1/0x1b0 [ 379.137389][T11632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.137410][T11632] sock_sendmsg_nosec+0x13a/0x180 [ 379.137440][T11632] ____sys_sendmsg+0x54e/0x850 [ 379.137481][T11632] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.137524][T11632] ? import_iovec+0x73/0xa0 [ 379.137560][T11632] ___sys_sendmsg+0x2a5/0x360 [ 379.137591][T11632] ? __lock_acquire+0x683/0x2cf0 [ 379.137627][T11632] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.137700][T11632] ? __fget_files+0x2a/0x420 [ 379.137728][T11632] ? __fget_files+0x3a2/0x420 [ 379.137768][T11632] __x64_sys_sendmsg+0x1b1/0x290 [ 379.137804][T11632] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 379.137855][T11632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.137881][T11632] do_syscall_64+0x174/0x580 [ 379.137912][T11632] ? trace_irq_disable+0x3b/0x140 [ 379.137948][T11632] ? clear_bhb_loop+0x40/0x90 [ 379.137976][T11632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.137998][T11632] RIP: 0033:0x7f2dc7f9de59 [ 379.138019][T11632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.138038][T11632] RSP: 002b:00007f2dc8e1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.138061][T11632] RAX: ffffffffffffffda RBX: 00007f2dc8225fa0 RCX: 00007f2dc7f9de59 [ 379.138077][T11632] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 379.138090][T11632] RBP: 00007f2dc8e1e090 R08: 0000000000000000 R09: 0000000000000000 [ 379.138104][T11632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.138116][T11632] R13: 00007f2dc8226038 R14: 00007f2dc8225fa0 R15: 00007ffd1816b748 [ 379.138150][T11632] [ 379.584245][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1408'. [ 379.906233][T11659] netlink: 558 bytes leftover after parsing attributes in process `syz.4.1410'. [ 380.619480][T11675] FAULT_INJECTION: forcing a failure. [ 380.619480][T11675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.650840][T11675] CPU: 1 UID: 0 PID: 11675 Comm: syz.2.1417 Not tainted syzkaller #0 PREEMPT(full) [ 380.650870][T11675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 380.650883][T11675] Call Trace: [ 380.650892][T11675] [ 380.650901][T11675] dump_stack_lvl+0xe8/0x150 [ 380.650938][T11675] should_fail_ex+0x40c/0x560 [ 380.650968][T11675] _copy_from_iter+0x1d3/0x1660 [ 380.650995][T11675] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 380.651023][T11675] ? rcu_is_watching+0x15/0xb0 [ 380.651056][T11675] ? trace_kmem_cache_alloc+0x29/0xe0 [ 380.651083][T11675] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 380.651108][T11675] ? __pfx__copy_from_iter+0x10/0x10 [ 380.651135][T11675] ? __alloc_skb+0x276/0x7a0 [ 380.651164][T11675] ? __alloc_skb+0x276/0x7a0 [ 380.651199][T11675] ? netlink_sendmsg+0x650/0xb40 [ 380.651221][T11675] ? skb_put+0x112/0x210 [ 380.651254][T11675] netlink_sendmsg+0x6c0/0xb40 [ 380.651286][T11675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.651313][T11675] ? aa_sock_msg_perm+0xf1/0x1b0 [ 380.651340][T11675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.651361][T11675] sock_sendmsg_nosec+0x13a/0x180 [ 380.651391][T11675] ____sys_sendmsg+0x54e/0x850 [ 380.651440][T11675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.651484][T11675] ? import_iovec+0x73/0xa0 [ 380.651518][T11675] ___sys_sendmsg+0x2a5/0x360 [ 380.651551][T11675] ? __lock_acquire+0x683/0x2cf0 [ 380.651585][T11675] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.651657][T11675] ? __fget_files+0x2a/0x420 [ 380.651685][T11675] ? __fget_files+0x3a2/0x420 [ 380.651725][T11675] __x64_sys_sendmsg+0x1b1/0x290 [ 380.651762][T11675] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 380.651817][T11675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.651843][T11675] do_syscall_64+0x174/0x580 [ 380.651875][T11675] ? trace_irq_disable+0x3b/0x140 [ 380.651902][T11675] ? clear_bhb_loop+0x40/0x90 [ 380.651932][T11675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.651952][T11675] RIP: 0033:0x7f4a6479de59 [ 380.651971][T11675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.651989][T11675] RSP: 002b:00007f4a656de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.652012][T11675] RAX: ffffffffffffffda RBX: 00007f4a64a25fa0 RCX: 00007f4a6479de59 [ 380.652027][T11675] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 380.652040][T11675] RBP: 00007f4a656de090 R08: 0000000000000000 R09: 0000000000000000 [ 380.652053][T11675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.652065][T11675] R13: 00007f4a64a26038 R14: 00007f4a64a25fa0 R15: 00007ffe8bc1b528 [ 380.652099][T11675] [ 381.218117][T11683] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1419'. [ 381.227531][T11683] netlink: 'syz.2.1419': attribute type 1 has an invalid length. [ 381.258592][T11683] netlink: 'syz.2.1419': attribute type 11 has an invalid length. [ 383.002632][T11701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.062308][T11696] syzkaller0: entered promiscuous mode [ 383.067860][T11696] syzkaller0: entered allmulticast mode [ 383.214484][T11701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.236989][T11701] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.256127][T11701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.285131][T11701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.297646][T11701] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 383.308877][T11701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.324802][T11701] veth0_macvtap: left promiscuous mode [ 383.336533][T11701] veth0_macvtap: entered promiscuous mode [ 383.344739][T11713] sctp: Trying to GSO but underlying device doesn't support it. [ 383.349482][T11701] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 383.365812][T11701] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 383.374670][T11701] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.383033][T11701] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 383.502002][T11708] __nla_validate_parse: 1 callbacks suppressed [ 383.502027][T11708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1426'. [ 383.528643][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.550691][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.597959][T11708] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1426'. [ 383.635951][T11717] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1429'. [ 383.726015][T11717] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1429'. [ 383.748240][ T7189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.957547][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 385.949496][ T7189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.959974][ T7189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.975519][T11729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.308121][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1437'. [ 386.365854][T11743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1437'. [ 386.452712][T11751] netlink: 'syz.4.1437': attribute type 3 has an invalid length. [ 387.008934][T11767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.233887][T11771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1442'. [ 388.128208][T11777] lo: entered allmulticast mode [ 388.927876][T11800] netlink: 'syz.3.1452': attribute type 13 has an invalid length. [ 389.427604][T11817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1457'. [ 389.521623][T11826] lo: left promiscuous mode [ 389.594379][T11826] team0: left promiscuous mode [ 389.604719][T11826] team_slave_0: left promiscuous mode [ 389.615767][T11826] team_slave_1: left promiscuous mode [ 389.654770][T11826] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 390.146021][T11844] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 390.353475][T11860] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1467'. [ 390.577198][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1469'. [ 390.595352][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1469'. [ 390.714370][T11872] netlink: 'syz.3.1470': attribute type 5 has an invalid length. [ 390.953892][T11876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1470'. [ 391.439977][T11890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.523547][T11890] batman_adv: batadv0: Adding interface: macvtap1 [ 391.530135][T11890] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.577410][T11890] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 391.624593][T11904] tun0: tun_chr_ioctl cmd 1074025681 [ 392.285491][ T7189] tipc: Subscription rejected, illegal request [ 392.362492][T11940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1493'. [ 392.395923][T11940] bond5: entered promiscuous mode [ 392.401490][T11940] 8021q: adding VLAN 0 to HW filter on device bond5 [ 392.417858][T11940] netlink: 'syz.3.1493': attribute type 1 has an invalid length. [ 392.632568][ T1630] block nbd1: Possible stuck request ffff888027667000: control (read@0,1024B). Runtime 180 seconds [ 392.643603][ T1630] block nbd1: Possible stuck request ffff8880276671c0: control (read@1024,1024B). Runtime 180 seconds [ 392.654881][ T1630] block nbd1: Possible stuck request ffff888027667380: control (read@2048,1024B). Runtime 180 seconds [ 392.666099][ T1630] block nbd1: Possible stuck request ffff888027667540: control (read@3072,1024B). Runtime 180 seconds [ 392.852442][T11959] syzkaller0: entered promiscuous mode [ 392.857984][T11959] syzkaller0: entered allmulticast mode [ 393.576488][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1509'. [ 393.609991][T11990] gre0: Master is either lo or non-ether device [ 393.912524][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 394.211282][T12007] syzkaller0: entered promiscuous mode [ 394.241633][T12007] syzkaller0: entered allmulticast mode [ 394.584130][T12017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1520'. [ 394.694870][T12023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1521'. [ 394.893356][T12030] tipc: Enabled bearer , priority 0 [ 394.926999][T12034] netlink: 'syz.3.1524': attribute type 1 has an invalid length. [ 394.985411][T12030] syzkaller0: entered promiscuous mode [ 394.990960][T12030] syzkaller0: entered allmulticast mode [ 394.997262][T12030] tipc: Resetting bearer [ 395.021657][T12038] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1523'. [ 395.036521][T12034] 8021q: adding VLAN 0 to HW filter on device bond6 [ 395.044106][T12022] tipc: Resetting bearer [ 395.053579][T12038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1523'. [ 395.077211][T12038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1523'. [ 395.833149][T12059] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1529'. [ 396.223013][T12067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1530'. [ 397.323511][T12022] tipc: Disabling bearer [ 397.359003][T12058] netlink: 'syz.4.1530': attribute type 12 has an invalid length. [ 397.399821][T12065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1530'. [ 397.433651][T12066] macsec0: entered promiscuous mode [ 397.439323][T12066] macsec0: left promiscuous mode [ 397.447354][T12067] veth1_macvtap: left promiscuous mode [ 397.464129][T12070] netlink: 'syz.3.1532': attribute type 21 has an invalid length. [ 397.472019][T12070] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1532'. [ 397.488826][T12070] netlink: 'syz.3.1532': attribute type 4 has an invalid length. [ 397.496627][T12070] netlink: 'syz.3.1532': attribute type 3 has an invalid length. [ 397.504398][T12070] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1532'. [ 397.876204][T12083] bridge2: entered allmulticast mode [ 397.945622][T12091] netlink: 'syz.3.1538': attribute type 8 has an invalid length. [ 397.961889][T12091] bond0: entered promiscuous mode [ 397.966998][T12091] bond_slave_0: entered promiscuous mode [ 398.040563][T12091] gretap0: entered promiscuous mode [ 398.057557][T12098] netlink: 'syz.4.1539': attribute type 4 has an invalid length. [ 398.104423][T12091] bond0: left promiscuous mode [ 398.109287][T12091] bond_slave_0: left promiscuous mode [ 398.168951][T12103] sctp: [Deprecated]: syz.0.1541 (pid 12103) Use of int in maxseg socket option. [ 398.168951][T12103] Use struct sctp_assoc_value instead [ 398.184936][T12091] gretap0: left promiscuous mode [ 398.424947][T12113] bond7: entered promiscuous mode [ 398.465095][T12113] bond7: entered allmulticast mode [ 398.894625][T12138] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 399.058106][T12138] bond8: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 399.070488][T12138] bond8 (unregistering): Released all slaves [ 399.634024][ T135] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.651546][ T135] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.689897][ T135] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.720612][ T135] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.896784][T12153] bond14: entered promiscuous mode [ 399.914747][T12153] bond14: entered allmulticast mode [ 399.920570][T12153] 8021q: adding VLAN 0 to HW filter on device bond14 [ 399.928618][T12154] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 400.234238][T12173] lo: Caught tx_queue_len zero misconfig [ 400.305232][T12179] __nla_validate_parse: 10 callbacks suppressed [ 400.305264][T12179] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1563'. [ 401.592463][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 401.617302][T12218] sit0: Caught tx_queue_len zero misconfig [ 401.973874][T12233] netlink: 'syz.2.1576': attribute type 1 has an invalid length. [ 401.986024][T12234] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 402.070484][T12233] 8021q: adding VLAN 0 to HW filter on device bond15 [ 402.314505][T12243] C: renamed from veth1_to_team (while UP) [ 402.339709][T12243] netlink: 'syz.1.1578': attribute type 1 has an invalid length. [ 402.428958][T12243] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1578'. [ 402.448960][T12243] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 402.792688][T12249] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1581'. [ 402.822113][ T30] audit: type=1107 audit(1783954432.929:4): pid=12260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 403.001792][T12269] netlink: 'syz.0.1587': attribute type 5 has an invalid length. [ 403.197259][T12269] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1587'. [ 404.614829][T12328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1603'. [ 404.866664][T12335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1606'. [ 404.988428][T12339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1607'. [ 405.231490][T12351] netlink: 'syz.0.1610': attribute type 1 has an invalid length. [ 405.333837][T12351] 8021q: adding VLAN 0 to HW filter on device bond9 [ 405.402646][T12355] bond9: (slave gretap2): making interface the new active one [ 405.466306][T12355] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 405.570340][T12362] netlink: 'syz.4.1614': attribute type 1 has an invalid length. [ 405.608894][T12362] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1614'. [ 405.640079][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1614'. [ 406.064572][T12383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1619'. [ 406.174869][T12390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1618'. [ 406.343850][T12398] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.1623'. [ 406.737114][T12411] bridge_slave_1: left allmulticast mode [ 406.742834][T12411] bridge_slave_1: left promiscuous mode [ 406.748658][T12411] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.945101][T12410] tipc: Enabled bearer , priority 0 [ 406.968720][T12410] tipc: Resetting bearer [ 407.004514][T12413] syzkaller0: entered promiscuous mode [ 407.010061][T12413] syzkaller0: entered allmulticast mode [ 407.016212][T12414] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 407.091317][T12416] tipc: Resetting bearer [ 407.137038][T12416] tipc: Disabling bearer [ 407.432474][T12420] IPv6: NLM_F_CREATE should be specified when creating new route [ 407.462542][T12420] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1629'. [ 407.471564][T12420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1629'. [ 407.480602][T12420] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1629'. [ 407.561625][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1631'. [ 408.014207][T12439] bond16: option miimon: invalid value (18446744073709551615) [ 408.038039][T12439] bond16: option miimon: allowed values 0 - 2147483647 [ 408.053582][T12439] bond16 (unregistering): Released all slaves [ 408.525987][T12446] syzkaller0: entered promiscuous mode [ 408.531664][T12446] syzkaller0: entered allmulticast mode [ 410.743792][T12461] veth0_to_team: entered promiscuous mode [ 410.750510][T12461] gretap0: entered promiscuous mode [ 411.244909][T12494] nbd: couldn't find a device at index 0 [ 411.346259][T12497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1645'. [ 411.486008][T12504] bridge0: entered promiscuous mode [ 411.491306][T12504] bridge0: entered allmulticast mode [ 411.547970][T12504] team0: Port device bridge0 added [ 411.744202][T12498] bridge7: entered promiscuous mode [ 411.749489][T12498] bridge7: entered allmulticast mode [ 411.757325][T12498] team0: Port device bridge7 added [ 412.136259][T12524] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20002 [ 412.353158][T12541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1653'. [ 412.387575][T12541] netlink: 'syz.1.1653': attribute type 7 has an invalid length. [ 412.423551][T12541] netlink: 'syz.1.1653': attribute type 8 has an invalid length. [ 412.455253][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1653'. [ 414.110506][T12597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1671'. [ 414.147603][T12597] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1671'. [ 414.184886][T12597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1671'. [ 414.206334][T12597] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1671'. [ 414.293455][T12607] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 414.444188][ T30] audit: type=1107 audit(1783954444.559:5): pid=12617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' [ 414.444188][ T30] ' [ 414.604386][T12628] syz_tun: entered allmulticast mode [ 414.614526][T12628] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1678'. [ 414.624204][T12628] tipc: Enabling of bearer rejected, media not registered [ 414.703313][T12629] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 414.777191][T12632] tipc: Enabled bearer , priority 0 [ 414.801363][T12632] syzkaller0: entered promiscuous mode [ 414.811169][T12632] syzkaller0: entered allmulticast mode [ 414.838381][T12632] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 415.046835][T12630] tipc: Resetting bearer [ 415.098229][T12630] tipc: Disabling bearer [ 415.126233][T12649] netlink: 'syz.2.1687': attribute type 2 has an invalid length. [ 415.151505][T12655] ip_vti0: left promiscuous mode [ 415.305215][T12655] veth1_to_hsr: left promiscuous mode [ 415.306935][T12653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1688'. [ 415.363618][T12653] block nbd3: Unsupported socket: should be TCP or UNIX. [ 415.389785][T12655] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 415.457270][T12655] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 415.483405][T12653] set match dimension is over the limit! [ 415.526054][T12669] syzkaller0: entered promiscuous mode [ 415.531588][T12669] syzkaller0: entered allmulticast mode [ 415.617653][T12669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1692'. [ 415.926061][T12688] tipc: Started in network mode [ 415.931417][T12690] netlink: 'syz.1.1697': attribute type 5 has an invalid length. [ 415.955843][T12688] tipc: Node identity 066bc159811b, cluster identity 4711 [ 415.965776][T12688] tipc: Enabled bearer , priority 0 [ 416.053544][T12690] geneve2: entered promiscuous mode [ 416.100250][T12690] geneve2: entered allmulticast mode [ 416.126419][T12688] syzkaller0: entered promiscuous mode [ 416.131959][T12688] syzkaller0: entered allmulticast mode [ 416.139063][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 59198 - 0 [ 416.203346][T12683] bridge6: entered allmulticast mode [ 416.222455][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 59198 - 0 [ 416.241120][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 59198 - 0 [ 416.270242][T12688] bond_slave_0: mtu less than device minimum [ 416.279470][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 59198 - 0 [ 416.391844][T12687] tipc: Resetting bearer [ 416.457232][T12710] __nla_validate_parse: 3 callbacks suppressed [ 416.457251][T12710] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1703'. [ 416.498607][T12687] tipc: Disabling bearer [ 416.981526][T12712] syzkaller0: entered promiscuous mode [ 416.997589][T12712] syzkaller0: entered allmulticast mode [ 417.069458][T12727] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1704'. [ 417.100652][T12730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.108789][T12730] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.173831][T12730] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 417.184508][T12730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 417.198608][T12730] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 417.222869][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.229983][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.255977][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.263167][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.465037][T12734] FAULT_INJECTION: forcing a failure. [ 417.465037][T12734] name failslab, interval 1, probability 0, space 0, times 0 [ 417.479843][T12734] CPU: 1 UID: 0 PID: 12734 Comm: syz.2.1708 Not tainted syzkaller #0 PREEMPT(full) [ 417.479872][T12734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 417.479886][T12734] Call Trace: [ 417.479896][T12734] [ 417.479906][T12734] dump_stack_lvl+0xe8/0x150 [ 417.479944][T12734] should_fail_ex+0x40c/0x560 [ 417.479976][T12734] should_failslab+0xa8/0x100 [ 417.480010][T12734] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 417.480047][T12734] ? skb_clone+0x212/0x3a0 [ 417.480068][T12734] ? skb_clone+0x212/0x3a0 [ 417.480097][T12734] skb_clone+0x212/0x3a0 [ 417.480122][T12734] __netlink_deliver_tap+0x413/0x860 [ 417.480156][T12734] ? netlink_deliver_tap+0x2e/0x1b0 [ 417.480179][T12734] netlink_deliver_tap+0x19c/0x1b0 [ 417.480202][T12734] netlink_unicast+0x77f/0x940 [ 417.480246][T12734] netlink_sendmsg+0x813/0xb40 [ 417.480279][T12734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.480306][T12734] ? aa_sock_msg_perm+0xf1/0x1b0 [ 417.480335][T12734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.480356][T12734] sock_sendmsg_nosec+0x13a/0x180 [ 417.480385][T12734] ____sys_sendmsg+0x54e/0x850 [ 417.480424][T12734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 417.480468][T12734] ? import_iovec+0x73/0xa0 [ 417.480502][T12734] ___sys_sendmsg+0x2a5/0x360 [ 417.480540][T12734] ? __lock_acquire+0x683/0x2cf0 [ 417.480574][T12734] ? __pfx____sys_sendmsg+0x10/0x10 [ 417.480644][T12734] ? __fget_files+0x2a/0x420 [ 417.480672][T12734] ? __fget_files+0x3a2/0x420 [ 417.480710][T12734] __x64_sys_sendmsg+0x1b1/0x290 [ 417.480748][T12734] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 417.480801][T12734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.480826][T12734] do_syscall_64+0x174/0x580 [ 417.480856][T12734] ? trace_irq_disable+0x3b/0x140 [ 417.480901][T12734] ? clear_bhb_loop+0x40/0x90 [ 417.480929][T12734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.480951][T12734] RIP: 0033:0x7f4a6479de59 [ 417.480970][T12734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.480988][T12734] RSP: 002b:00007f4a656bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.481010][T12734] RAX: ffffffffffffffda RBX: 00007f4a64a26090 RCX: 00007f4a6479de59 [ 417.481033][T12734] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 417.481047][T12734] RBP: 00007f4a656bd090 R08: 0000000000000000 R09: 0000000000000000 [ 417.481060][T12734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.481072][T12734] R13: 00007f4a64a26128 R14: 00007f4a64a26090 R15: 00007ffe8bc1b528 [ 417.481109][T12734] [ 419.151278][T12701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 419.369607][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1712'. [ 419.740844][T12754] syzkaller0: entered promiscuous mode [ 419.746899][T12754] syzkaller0: entered allmulticast mode [ 419.781204][T12761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1716'. [ 419.854030][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1717'. [ 421.672363][ T5658] Bluetooth: hci4: command 0x0406 tx timeout [ 422.716550][ T1630] block nbd1: Possible stuck request ffff888027667000: control (read@0,1024B). Runtime 210 seconds [ 422.727546][ T1630] block nbd1: Possible stuck request ffff8880276671c0: control (read@1024,1024B). Runtime 210 seconds [ 422.738713][ T1630] block nbd1: Possible stuck request ffff888027667380: control (read@2048,1024B). Runtime 210 seconds [ 422.749841][ T1630] block nbd1: Possible stuck request ffff888027667540: control (read@3072,1024B). Runtime 210 seconds [ 422.780707][T12761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 423.211783][T12821] netlink: 'syz.4.1728': attribute type 1 has an invalid length. [ 423.381014][T12821] 8021q: adding VLAN 0 to HW filter on device bond3 [ 423.417521][T12839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1733'. [ 423.435618][T12821] bond3: entered allmulticast mode [ 423.515995][T12848] netlink: 'syz.2.1736': attribute type 1 has an invalid length. [ 423.599203][T12850] netlink: zone id is out of range [ 423.599731][T12853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1736'. [ 423.604377][T12850] netlink: del zone limit has 4 unknown bytes [ 423.656137][T12853] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1736'. [ 423.731009][T12848] 8021q: adding VLAN 0 to HW filter on device bond16 [ 423.926314][T12870] netlink: 'syz.4.1740': attribute type 5 has an invalid length. [ 424.231925][T12882] xt_CT: You must specify a L4 protocol and not use inversions on it [ 424.275035][T12882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1744'. [ 424.893174][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1751'. [ 425.270259][T12920] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1755'. [ 425.280621][T12920] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1755'. [ 425.303608][T12920] geneve2: entered promiscuous mode [ 425.561128][T12935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1759'. [ 425.564654][T12934] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 425.624677][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1757'. [ 425.633656][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1757'. [ 425.642552][T12936] netlink: 'syz.0.1757': attribute type 6 has an invalid length. [ 425.651783][T12936] netlink: 'syz.0.1757': attribute type 21 has an invalid length. [ 425.837422][T12944] netlink: 'syz.2.1762': attribute type 1 has an invalid length. [ 425.877455][T12941] bond17: (slave geneve4): making interface the new active one [ 425.887861][T12941] bond17: (slave geneve4): Enslaving as an active interface with an up link [ 425.898468][ T7193] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 425.925793][ T6176] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 425.934141][ T6176] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 425.942444][ T6176] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 426.016184][T12951] smc: net device vlan1 applied user defined pnetid SYZ2 [ 426.260782][T12963] vlan4: entered promiscuous mode [ 426.266075][T12963] veth1_macvtap: entered promiscuous mode [ 426.389542][T12965] netlink: 'syz.3.1768': attribute type 23 has an invalid length. [ 426.409188][T12967] ip6t_srh: unknown srh match flags 4000 [ 426.464155][T12965] netlink: 'syz.3.1768': attribute type 21 has an invalid length. [ 426.572349][T12975] ipip0: entered promiscuous mode [ 426.847441][T12984] x_tables: duplicate underflow at hook 1 [ 426.854828][T12984] x_tables: duplicate underflow at hook 1 [ 426.862185][T12984] x_tables: duplicate underflow at hook 1 [ 426.868055][T12984] x_tables: duplicate underflow at hook 1 [ 426.873888][T12984] x_tables: duplicate underflow at hook 1 [ 426.896898][T12984] x_tables: duplicate underflow at hook 1 [ 426.906666][T12984] x_tables: duplicate underflow at hook 1 [ 426.912727][T12984] x_tables: duplicate underflow at hook 1 [ 426.957612][T12984] x_tables: duplicate underflow at hook 1 [ 426.963502][T12984] x_tables: duplicate underflow at hook 1 [ 427.321874][T13001] sch_tbf: burst 5 is lower than device lo mtu (11337746) ! [ 427.492736][T13012] openvswitch: netlink: IPv4 tunnel dst address is zero [ 428.015191][T13037] FAULT_INJECTION: forcing a failure. [ 428.015191][T13037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.028286][T13037] CPU: 0 UID: 0 PID: 13037 Comm: syz.0.1791 Not tainted syzkaller #0 PREEMPT(full) [ 428.028315][T13037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 428.028329][T13037] Call Trace: [ 428.028338][T13037] [ 428.028347][T13037] dump_stack_lvl+0xe8/0x150 [ 428.028386][T13037] should_fail_ex+0x40c/0x560 [ 428.028418][T13037] _copy_from_iter+0x1d3/0x1660 [ 428.028445][T13037] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 428.028474][T13037] ? rcu_is_watching+0x15/0xb0 [ 428.028508][T13037] ? trace_kmem_cache_alloc+0x29/0xe0 [ 428.028536][T13037] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 428.028561][T13037] ? __pfx__copy_from_iter+0x10/0x10 [ 428.028588][T13037] ? __alloc_skb+0x276/0x7a0 [ 428.028617][T13037] ? __alloc_skb+0x276/0x7a0 [ 428.028653][T13037] ? netlink_sendmsg+0x650/0xb40 [ 428.028674][T13037] ? skb_put+0x112/0x210 [ 428.028708][T13037] netlink_sendmsg+0x6c0/0xb40 [ 428.028741][T13037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.028767][T13037] ? aa_sock_msg_perm+0xf1/0x1b0 [ 428.028795][T13037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.028816][T13037] sock_sendmsg_nosec+0x13a/0x180 [ 428.028846][T13037] ____sys_sendmsg+0x54e/0x850 [ 428.028885][T13037] ? __pfx_____sys_sendmsg+0x10/0x10 [ 428.028942][T13037] ? import_iovec+0x73/0xa0 [ 428.028979][T13037] ___sys_sendmsg+0x2a5/0x360 [ 428.029012][T13037] ? __lock_acquire+0x683/0x2cf0 [ 428.029048][T13037] ? __pfx____sys_sendmsg+0x10/0x10 [ 428.029130][T13037] ? __fget_files+0x2a/0x420 [ 428.029169][T13037] ? __fget_files+0x3a2/0x420 [ 428.029208][T13037] __x64_sys_sendmsg+0x1b1/0x290 [ 428.029246][T13037] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 428.029307][T13037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.029333][T13037] do_syscall_64+0x174/0x580 [ 428.029365][T13037] ? trace_irq_disable+0x3b/0x140 [ 428.029393][T13037] ? clear_bhb_loop+0x40/0x90 [ 428.029419][T13037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.029440][T13037] RIP: 0033:0x7f07e139de59 [ 428.029461][T13037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.029480][T13037] RSP: 002b:00007f07e2183028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.029502][T13037] RAX: ffffffffffffffda RBX: 00007f07e1625fa0 RCX: 00007f07e139de59 [ 428.029518][T13037] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 428.029531][T13037] RBP: 00007f07e2183090 R08: 0000000000000000 R09: 0000000000000000 [ 428.029544][T13037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.029558][T13037] R13: 00007f07e1626038 R14: 00007f07e1625fa0 R15: 00007fffa21b9368 [ 428.029592][T13037] [ 428.838130][T13052] syzkaller0: entered promiscuous mode [ 428.871218][T13052] syzkaller0: entered allmulticast mode [ 429.119448][T13062] __nla_validate_parse: 5 callbacks suppressed [ 429.119469][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1798'. [ 429.156980][T13066] FAULT_INJECTION: forcing a failure. [ 429.156980][T13066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.170230][T13066] CPU: 0 UID: 0 PID: 13066 Comm: syz.0.1802 Not tainted syzkaller #0 PREEMPT(full) [ 429.170259][T13066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 429.170272][T13066] Call Trace: [ 429.170280][T13066] [ 429.170288][T13066] dump_stack_lvl+0xe8/0x150 [ 429.170325][T13066] should_fail_ex+0x40c/0x560 [ 429.170355][T13066] _copy_from_iter+0x1d3/0x1660 [ 429.170380][T13066] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 429.170408][T13066] ? rcu_is_watching+0x15/0xb0 [ 429.170441][T13066] ? trace_kmem_cache_alloc+0x29/0xe0 [ 429.170468][T13066] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 429.170494][T13066] ? __pfx__copy_from_iter+0x10/0x10 [ 429.170538][T13066] ? __alloc_skb+0x276/0x7a0 [ 429.170575][T13066] ? __alloc_skb+0x276/0x7a0 [ 429.170611][T13066] ? netlink_sendmsg+0x650/0xb40 [ 429.170632][T13066] ? skb_put+0x112/0x210 [ 429.170666][T13066] netlink_sendmsg+0x6c0/0xb40 [ 429.170699][T13066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.170726][T13066] ? aa_sock_msg_perm+0xf1/0x1b0 [ 429.170754][T13066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.170774][T13066] sock_sendmsg_nosec+0x13a/0x180 [ 429.170803][T13066] ____sys_sendmsg+0x54e/0x850 [ 429.170844][T13066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.170888][T13066] ? import_iovec+0x73/0xa0 [ 429.170922][T13066] ___sys_sendmsg+0x2a5/0x360 [ 429.170954][T13066] ? __lock_acquire+0x683/0x2cf0 [ 429.170989][T13066] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.171061][T13066] ? __fget_files+0x2a/0x420 [ 429.171089][T13066] ? __fget_files+0x3a2/0x420 [ 429.171128][T13066] __x64_sys_sendmsg+0x1b1/0x290 [ 429.171164][T13066] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.171218][T13066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.171242][T13066] do_syscall_64+0x174/0x580 [ 429.171272][T13066] ? trace_irq_disable+0x3b/0x140 [ 429.171300][T13066] ? clear_bhb_loop+0x40/0x90 [ 429.171327][T13066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.171348][T13066] RIP: 0033:0x7f07e139de59 [ 429.171368][T13066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.171387][T13066] RSP: 002b:00007f07e2183028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.171411][T13066] RAX: ffffffffffffffda RBX: 00007f07e1625fa0 RCX: 00007f07e139de59 [ 429.171428][T13066] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 429.171441][T13066] RBP: 00007f07e2183090 R08: 0000000000000000 R09: 0000000000000000 [ 429.171455][T13066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.171468][T13066] R13: 00007f07e1626038 R14: 00007f07e1625fa0 R15: 00007fffa21b9368 [ 429.171503][T13066] [ 429.530526][T13071] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 429.562726][ T7191] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.585066][ T7191] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 59198 - 0 [ 429.844790][T13083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1806'. [ 429.853729][T13083] netlink: 'syz.0.1806': attribute type 10 has an invalid length. [ 429.861573][T13083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1806'. [ 429.877019][T13081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1805'. [ 429.880450][T13083] geneve3: entered promiscuous mode [ 429.891248][T13083] geneve3: entered allmulticast mode [ 429.898344][ T7189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.907108][ T7189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.917051][ T7189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.925820][ T7189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.933982][T13084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1805'. [ 430.136440][T13088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1807'. [ 430.145665][T13088] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1807'. [ 430.154654][T13088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1807'. [ 430.163828][T13088] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1807'. [ 430.204790][T13092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1809'. [ 430.804923][T13122] openvswitch: netlink: Duplicate key (type 6). [ 430.812531][T13122] netlink: 'syz.1.1818': attribute type 1 has an invalid length. [ 430.825307][T13122] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 431.161061][T13139] geneve3: entered allmulticast mode [ 431.376296][T13157] netlink: 'syz.1.1827': attribute type 1 has an invalid length. [ 431.423559][T13157] bond8: option mode: invalid value (10) [ 431.431285][T13157] bond8 (unregistering): Released all slaves [ 431.455543][T13160] netlink: 'syz.3.1828': attribute type 4 has an invalid length. [ 431.469004][T13160] netlink: 'syz.3.1828': attribute type 4 has an invalid length. [ 431.641173][T13166] netlink: 'syz.1.1827': attribute type 10 has an invalid length. [ 431.765432][T13160] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.126233][T13160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.579231][ T7191] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.607656][ T7191] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.674337][ T7191] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.706905][T13190] netlink: 'syz.4.1833': attribute type 10 has an invalid length. [ 432.758906][T13194] syzkaller0: entered promiscuous mode [ 432.764506][T13194] syzkaller0: entered allmulticast mode [ 432.952566][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 433.393219][T13221] : renamed from bridge_slave_0 (while UP) [ 433.720815][T13230] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 434.241213][T13251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.745519][T13292] netlink: 'syz.0.1861': attribute type 1 has an invalid length. [ 435.745610][T13287] __nla_validate_parse: 12 callbacks suppressed [ 435.745672][T13287] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1858'. [ 435.857410][T13292] 8021q: adding VLAN 0 to HW filter on device bond10 [ 435.914551][T13297] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 436.353157][ T5658] block nbd3: Receive control failed (result -32) [ 436.353591][ T5651] block nbd3: Receive control failed (result -32) [ 436.368235][ T5653] block nbd3: Receive control failed (result -32) [ 436.639235][T13311] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1866'. [ 436.685183][T13313] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1865'. [ 436.737519][T13311] xt_CT: You must specify a L4 protocol and not use inversions on it [ 436.784247][T13317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1868'. [ 436.872224][T13319] xt_CT: You must specify a L4 protocol and not use inversions on it [ 436.898473][ T5651] Bluetooth: hci4: command 0x0406 tx timeout [ 437.285350][T13332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.297843][T13332] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.312624][T13332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.502659][T13332] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 437.525334][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.532521][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.550851][T13345] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1876'. [ 437.991366][T13365] nbd: socks must be embedded in a SOCK_ITEM attr [ 438.065048][T13365] batadv_slave_1: entered promiscuous mode [ 438.309282][T13363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.911859][T13365] batadv_slave_1: left promiscuous mode [ 439.482481][T13398] FAULT_INJECTION: forcing a failure. [ 439.482481][T13398] name failslab, interval 1, probability 0, space 0, times 0 [ 439.499820][T13398] CPU: 1 UID: 0 PID: 13398 Comm: syz.1.1889 Not tainted syzkaller #0 PREEMPT(full) [ 439.499849][T13398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 439.499863][T13398] Call Trace: [ 439.499871][T13398] [ 439.499881][T13398] dump_stack_lvl+0xe8/0x150 [ 439.499919][T13398] should_fail_ex+0x40c/0x560 [ 439.499951][T13398] should_failslab+0xa8/0x100 [ 439.499985][T13398] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 439.500011][T13398] ? local_lock_release+0x9c/0x160 [ 439.500042][T13398] ? __alloc_skb+0x1d7/0x7a0 [ 439.500069][T13398] ? __alloc_skb+0x1d7/0x7a0 [ 439.500106][T13398] __alloc_skb+0x1d7/0x7a0 [ 439.500141][T13398] rtmsg_ifinfo_build_skb+0x7f/0x260 [ 439.500277][T13398] ? ip6_route_dev_notify+0x9a/0x5b0 [ 439.500365][T13398] rtmsg_ifinfo+0x8c/0x1a0 [ 439.500399][T13398] netif_state_change+0x297/0x3a0 [ 439.500491][T13398] ? lockdep_rtnl_is_held+0x26/0x40 [ 439.500516][T13398] ? __pfx_netif_state_change+0x10/0x10 [ 439.500552][T13398] ? dev_change_xdp_fd+0x1ab/0x200 [ 439.500599][T13398] do_setlink+0x3c57/0x4670 [ 439.500658][T13398] ? unwind_get_return_address+0x4d/0x90 [ 439.500716][T13398] ? __pfx_do_setlink+0x10/0x10 [ 439.500749][T13398] ? __lock_acquire+0x683/0x2cf0 [ 439.500783][T13398] ? stack_depot_save_flags+0x33/0x800 [ 439.500822][T13398] ? kasan_save_track+0x4f/0x80 [ 439.500848][T13398] ? kasan_save_track+0x3e/0x80 [ 439.500872][T13398] ? __kasan_kmalloc+0x93/0xb0 [ 439.500898][T13398] ? __kmalloc_cache_noprof+0x32d/0x660 [ 439.500937][T13398] ? __mutex_trylock_common+0x15f/0x270 [ 439.500962][T13398] ? __pfx___mutex_trylock_common+0x10/0x10 [ 439.500987][T13398] ? rcu_is_watching+0x15/0xb0 [ 439.501021][T13398] ? trace_contention_end+0x3d/0x140 [ 439.501045][T13398] ? __mutex_lock+0x30d/0x1550 [ 439.501117][T13398] ? rtnl_newlink+0xc10/0x1c30 [ 439.501149][T13398] ? __pfx___mutex_lock+0x10/0x10 [ 439.501193][T13398] ? ns_capable+0x89/0xe0 [ 439.501229][T13398] ? rtnl_nets_add+0x16c/0x300 [ 439.501266][T13398] ? refcount_inc+0x46/0x70 [ 439.501295][T13398] rtnl_newlink+0x146f/0x1c30 [ 439.501341][T13398] ? __pfx_rtnl_newlink+0x10/0x10 [ 439.501369][T13398] ? do_syscall_64+0x174/0x580 [ 439.501399][T13398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.501462][T13398] ? kasan_quarantine_put+0xbb/0x1f0 [ 439.501489][T13398] ? lockdep_hardirqs_on+0x7a/0x110 [ 439.501523][T13398] ? nlmon_xmit+0xb0/0x100 [ 439.501597][T13398] ? kmem_cache_free+0x182/0x650 [ 439.501639][T13398] ? __lock_acquire+0x683/0x2cf0 [ 439.501673][T13398] ? __dev_queue_xmit+0x29b/0x37f0 [ 439.501700][T13398] ? __local_bh_enable_ip+0xd0/0x130 [ 439.501725][T13398] ? lockdep_hardirqs_on+0x7a/0x110 [ 439.501755][T13398] ? __dev_queue_xmit+0x29b/0x37f0 [ 439.501775][T13398] ? __local_bh_enable_ip+0xd0/0x130 [ 439.501797][T13398] ? __dev_queue_xmit+0x29b/0x37f0 [ 439.501828][T13398] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 439.501859][T13398] ? __pfx_rtnl_newlink+0x10/0x10 [ 439.501903][T13398] ? __pfx_rtnl_newlink+0x10/0x10 [ 439.501931][T13398] rtnetlink_rcv_msg+0x802/0xc00 [ 439.501966][T13398] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 439.501995][T13398] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 439.502024][T13398] ? ref_tracker_free+0x689/0x830 [ 439.502077][T13398] ? __pfx_ref_tracker_free+0x10/0x10 [ 439.502115][T13398] netlink_rcv_skb+0x226/0x4a0 [ 439.502151][T13398] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 439.502184][T13398] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 439.502233][T13398] ? netlink_deliver_tap+0x2e/0x1b0 [ 439.502260][T13398] ? netlink_deliver_tap+0x2e/0x1b0 [ 439.502288][T13398] netlink_unicast+0x7bb/0x940 [ 439.502333][T13398] netlink_sendmsg+0x813/0xb40 [ 439.502366][T13398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.502405][T13398] ? aa_sock_msg_perm+0xf1/0x1b0 [ 439.502433][T13398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.502453][T13398] sock_sendmsg_nosec+0x13a/0x180 [ 439.502482][T13398] ____sys_sendmsg+0x54e/0x850 [ 439.502538][T13398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.502583][T13398] ? import_iovec+0x73/0xa0 [ 439.502618][T13398] ___sys_sendmsg+0x2a5/0x360 [ 439.502650][T13398] ? __lock_acquire+0x683/0x2cf0 [ 439.502684][T13398] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.502759][T13398] ? __fget_files+0x2a/0x420 [ 439.502787][T13398] ? __fget_files+0x3a2/0x420 [ 439.502827][T13398] __x64_sys_sendmsg+0x1b1/0x290 [ 439.502864][T13398] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 439.502920][T13398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.502943][T13398] do_syscall_64+0x174/0x580 [ 439.502973][T13398] ? trace_irq_disable+0x3b/0x140 [ 439.503000][T13398] ? clear_bhb_loop+0x40/0x90 [ 439.503028][T13398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.503050][T13398] RIP: 0033:0x7f5bbb79de59 [ 439.503069][T13398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.503089][T13398] RSP: 002b:00007f5bbc6af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.503111][T13398] RAX: ffffffffffffffda RBX: 00007f5bbba25fa0 RCX: 00007f5bbb79de59 [ 439.503127][T13398] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 439.503141][T13398] RBP: 00007f5bbc6af090 R08: 0000000000000000 R09: 0000000000000000 [ 439.503154][T13398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 439.503167][T13398] R13: 00007f5bbba26038 R14: 00007f5bbba25fa0 R15: 00007fff583748d8 [ 439.503204][T13398] [ 440.041492][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.049357][T13397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1886'. [ 440.071065][T13398] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 440.993957][T13375] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 441.240170][T13416] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.511158][T13426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1898'. [ 441.610098][T13429] netlink: 'syz.1.1899': attribute type 21 has an invalid length. [ 441.650549][T13426] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 441.663167][T13429] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1899'. [ 441.803838][T13427] sctp: [Deprecated]: syz.4.1897 (pid 13427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 441.803838][T13427] Use struct sctp_sack_info instead [ 441.892142][T13434] FAULT_INJECTION: forcing a failure. [ 441.892142][T13434] name failslab, interval 1, probability 0, space 0, times 0 [ 441.917917][T13434] CPU: 0 UID: 0 PID: 13434 Comm: syz.2.1900 Not tainted syzkaller #0 PREEMPT(full) [ 441.917945][T13434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 441.917958][T13434] Call Trace: [ 441.917968][T13434] [ 441.917977][T13434] dump_stack_lvl+0xe8/0x150 [ 441.918017][T13434] should_fail_ex+0x40c/0x560 [ 441.918048][T13434] should_failslab+0xa8/0x100 [ 441.918082][T13434] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 441.918109][T13434] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 441.918133][T13434] ? fib6_add_1+0x9fe/0x13e0 [ 441.918157][T13434] ? fib6_add_1+0x9fe/0x13e0 [ 441.918188][T13434] fib6_add_1+0x9fe/0x13e0 [ 441.918229][T13434] fib6_add+0x211/0x1930 [ 441.918271][T13434] ? __pfx_fib6_add+0x10/0x10 [ 441.918298][T13434] ? consume_skb+0x89/0xb0 [ 441.918333][T13434] ? ip6_ins_rt+0xc0/0x140 [ 441.918440][T13434] ip6_ins_rt+0xd6/0x140 [ 441.918463][T13434] ? __pfx_ip6_ins_rt+0x10/0x10 [ 441.918493][T13434] ? nlmsg_notify+0xe3/0x1a0 [ 441.918525][T13434] ? nlmsg_notify+0x142/0x1a0 [ 441.918562][T13434] __ipv6_ifa_notify+0x4e8/0xc60 [ 441.918616][T13434] ? atomic_notifier_call_chain+0x16e/0x180 [ 441.918657][T13434] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 441.918682][T13434] ? fib6_flush_trees+0x147/0x1a0 [ 441.918712][T13434] ? __pfx_fib6_flush_trees+0x10/0x10 [ 441.918739][T13434] ? add_addr+0xdb/0x2d0 [ 441.918770][T13434] ? __local_bh_enable_ip+0xd0/0x130 [ 441.918801][T13434] add_addr+0x1b8/0x2d0 [ 441.918840][T13434] addrconf_notify+0xb1e/0x1050 [ 441.918885][T13434] notifier_call_chain+0x1a5/0x3d0 [ 441.918925][T13434] netif_state_change+0x27d/0x3a0 [ 441.918952][T13434] ? lockdep_rtnl_is_held+0x26/0x40 [ 441.918979][T13434] ? __pfx_netif_state_change+0x10/0x10 [ 441.919015][T13434] ? dev_change_xdp_fd+0x1ab/0x200 [ 441.919041][T13434] do_setlink+0x3c57/0x4670 [ 441.919073][T13434] ? unwind_get_return_address+0x4d/0x90 [ 441.919113][T13434] ? __pfx_do_setlink+0x10/0x10 [ 441.919147][T13434] ? __lock_acquire+0x683/0x2cf0 [ 441.919181][T13434] ? stack_depot_save_flags+0x33/0x800 [ 441.919215][T13434] ? kasan_save_track+0x4f/0x80 [ 441.919240][T13434] ? kasan_save_track+0x3e/0x80 [ 441.919266][T13434] ? __kasan_kmalloc+0x93/0xb0 [ 441.919293][T13434] ? __kmalloc_cache_noprof+0x32d/0x660 [ 441.919331][T13434] ? __mutex_trylock_common+0x15f/0x270 [ 441.919357][T13434] ? __pfx___mutex_trylock_common+0x10/0x10 [ 441.919383][T13434] ? rcu_is_watching+0x15/0xb0 [ 441.919416][T13434] ? trace_contention_end+0x3d/0x140 [ 441.919441][T13434] ? __mutex_lock+0x30d/0x1550 [ 441.919487][T13434] ? rtnl_newlink+0xc10/0x1c30 [ 441.919519][T13434] ? __pfx___mutex_lock+0x10/0x10 [ 441.919564][T13434] ? ns_capable+0x89/0xe0 [ 441.919590][T13434] ? rtnl_nets_add+0x16c/0x300 [ 441.919620][T13434] ? refcount_inc+0x46/0x70 [ 441.919649][T13434] rtnl_newlink+0x146f/0x1c30 [ 441.919694][T13434] ? __pfx_rtnl_newlink+0x10/0x10 [ 441.919723][T13434] ? do_syscall_64+0x174/0x580 [ 441.919753][T13434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.919817][T13434] ? kasan_quarantine_put+0xbb/0x1f0 [ 441.919845][T13434] ? lockdep_hardirqs_on+0x7a/0x110 [ 441.919891][T13434] ? nlmon_xmit+0xb0/0x100 [ 441.919921][T13434] ? kmem_cache_free+0x182/0x650 [ 441.919961][T13434] ? __lock_acquire+0x683/0x2cf0 [ 441.919995][T13434] ? __dev_queue_xmit+0x29b/0x37f0 [ 441.920022][T13434] ? __local_bh_enable_ip+0xd0/0x130 [ 441.920047][T13434] ? lockdep_hardirqs_on+0x7a/0x110 [ 441.920077][T13434] ? __dev_queue_xmit+0x29b/0x37f0 [ 441.920098][T13434] ? __local_bh_enable_ip+0xd0/0x130 [ 441.920121][T13434] ? __dev_queue_xmit+0x29b/0x37f0 [ 441.920152][T13434] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 441.920184][T13434] ? __pfx_rtnl_newlink+0x10/0x10 [ 441.920227][T13434] ? __pfx_rtnl_newlink+0x10/0x10 [ 441.920257][T13434] rtnetlink_rcv_msg+0x802/0xc00 [ 441.920293][T13434] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 441.920323][T13434] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 441.920352][T13434] ? ref_tracker_free+0x689/0x830 [ 441.920383][T13434] ? __pfx_ref_tracker_free+0x10/0x10 [ 441.920422][T13434] netlink_rcv_skb+0x226/0x4a0 [ 441.920457][T13434] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 441.920490][T13434] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 441.920540][T13434] ? netlink_deliver_tap+0x2e/0x1b0 [ 441.920561][T13434] ? netlink_deliver_tap+0x2e/0x1b0 [ 441.920589][T13434] netlink_unicast+0x7bb/0x940 [ 441.920633][T13434] netlink_sendmsg+0x813/0xb40 [ 441.920666][T13434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.920694][T13434] ? aa_sock_msg_perm+0xf1/0x1b0 [ 441.920722][T13434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.920743][T13434] sock_sendmsg_nosec+0x13a/0x180 [ 441.920774][T13434] ____sys_sendmsg+0x54e/0x850 [ 441.920814][T13434] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.920859][T13434] ? import_iovec+0x73/0xa0 [ 441.920904][T13434] ___sys_sendmsg+0x2a5/0x360 [ 441.920936][T13434] ? __lock_acquire+0x683/0x2cf0 [ 441.920970][T13434] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.921046][T13434] ? __fget_files+0x2a/0x420 [ 441.921074][T13434] ? __fget_files+0x3a2/0x420 [ 441.921114][T13434] __x64_sys_sendmsg+0x1b1/0x290 [ 441.921153][T13434] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 441.921208][T13434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.921233][T13434] do_syscall_64+0x174/0x580 [ 441.921263][T13434] ? trace_irq_disable+0x3b/0x140 [ 441.921292][T13434] ? clear_bhb_loop+0x40/0x90 [ 441.921320][T13434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.921341][T13434] RIP: 0033:0x7f4a6479de59 [ 441.921364][T13434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.921383][T13434] RSP: 002b:00007f4a656de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.921406][T13434] RAX: ffffffffffffffda RBX: 00007f4a64a25fa0 RCX: 00007f4a6479de59 [ 441.921422][T13434] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 441.921435][T13434] RBP: 00007f4a656de090 R08: 0000000000000000 R09: 0000000000000000 [ 441.921449][T13434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 441.921461][T13434] R13: 00007f4a64a26038 R14: 00007f4a64a25fa0 R15: 00007ffe8bc1b528 [ 441.921497][T13434] [ 442.245183][T13434] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 442.616860][T13438] bridge8: entered promiscuous mode [ 442.898389][T13451] netlink: 'syz.3.1906': attribute type 1 has an invalid length. [ 442.913386][T13446] tipc: Enabled bearer , priority 0 [ 442.950461][T13451] 8021q: adding VLAN 0 to HW filter on device bond7 [ 442.980632][T13442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1903'. [ 442.990401][T13446] syzkaller0: entered promiscuous mode [ 442.995926][T13446] syzkaller0: entered allmulticast mode [ 443.162520][T13446] tipc: Resetting bearer [ 443.205627][T13446] tipc: Disabling bearer [ 443.223115][T13447] tipc: Enabled bearer , priority 0 [ 443.234374][T13447] syzkaller0: entered promiscuous mode [ 443.239993][T13447] syzkaller0: entered allmulticast mode [ 443.282544][T13447] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1905'. [ 443.317183][T13447] tipc: Resetting bearer [ 443.325112][T13447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1905'. [ 443.508847][T13445] tipc: Resetting bearer [ 443.529580][T13445] tipc: Disabling bearer [ 446.402355][ T4987] udevd[4987]: worker [5740] /devices/virtual/block/nbd1 timeout; kill it [ 446.412470][ T4987] udevd[4987]: seq 12959 '/devices/virtual/block/nbd1' killed [ 452.846706][ T1630] block nbd1: Possible stuck request ffff888027667000: control (read@0,1024B). Runtime 240 seconds [ 452.857528][ T1630] block nbd1: Possible stuck request ffff8880276671c0: control (read@1024,1024B). Runtime 240 seconds [ 452.868583][ T1630] block nbd1: Possible stuck request ffff888027667380: control (read@2048,1024B). Runtime 240 seconds [ 452.880822][ T1630] block nbd1: Possible stuck request ffff888027667540: control (read@3072,1024B). Runtime 240 seconds [ 482.894361][ T1630] block nbd1: Possible stuck request ffff888027667000: control (read@0,1024B). Runtime 270 seconds [ 482.905131][ T1630] block nbd1: Possible stuck request ffff8880276671c0: control (read@1024,1024B). Runtime 270 seconds [ 482.916178][ T1630] block nbd1: Possible stuck request ffff888027667380: control (read@2048,1024B). Runtime 270 seconds [ 482.927188][ T1630] block nbd1: Possible stuck request ffff888027667540: control (read@3072,1024B). Runtime 270 seconds [ 500.421016][T13488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1916'. [ 500.430382][T13488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1916'. [ 500.468889][T13489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1915'. [ 500.513793][T13489] lo: entered allmulticast mode [ 500.694065][T13500] netlink: 'syz.3.1920': attribute type 1 has an invalid length. [ 500.773853][T13500] bond8: entered promiscuous mode [ 500.779067][T13500] bond8: entered allmulticast mode [ 500.784656][T13500] 8021q: adding VLAN 0 to HW filter on device bond8 [ 500.819375][T13500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1920'. [ 500.978385][T13510] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1923'. [ 501.027259][T13516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1925'. [ 501.036791][T13516] macvlan0: entered promiscuous mode [ 501.044637][T13516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1925'. [ 501.053695][T13516] unsupported nla_type 216 [ 501.110024][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1923'. [ 501.118951][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1923'. [ 501.190753][T13521] netlink: 'syz.4.1923': attribute type 1 has an invalid length. [ 501.234544][T13514] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1924'. [ 501.433777][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 501.442916][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.721155][T13542] netlink: 'syz.0.1930': attribute type 21 has an invalid length. [ 501.932580][T13555] netlink: 'syz.4.1937': attribute type 62 has an invalid length. [ 502.163862][T13561] vlan3: entered promiscuous mode [ 502.168966][T13561] bridge0: entered promiscuous mode [ 502.195557][T13565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.487777][T13578] netlink: 'syz.3.1944': attribute type 1 has an invalid length. [ 502.737797][T13597] 8021q: adding VLAN 0 to HW filter on device bond8 [ 502.785337][T13600] 8021q: adding VLAN 0 to HW filter on device bond9 [ 503.059107][T13614] syzkaller0: entered promiscuous mode [ 503.066270][T13614] syzkaller0: entered allmulticast mode [ 503.526488][T13625] trusted_key: syz.1.1957 sent an empty control message without MSG_MORE. [ 503.760061][T13628] vlan2: entered promiscuous mode [ 503.778066][T13628] hsr0: entered promiscuous mode [ 503.794163][T13628] vlan2: entered allmulticast mode [ 503.799552][T13628] hsr0: entered allmulticast mode [ 503.806777][T13628] hsr_slave_0: entered allmulticast mode [ 503.814896][T13628] hsr_slave_1: entered allmulticast mode [ 503.972474][T13636] hsr_slave_0: left promiscuous mode [ 504.012429][T13636] hsr_slave_1: left promiscuous mode [ 504.469717][T13657] veth5: entered allmulticast mode [ 504.579123][T13664] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 504.635281][T13664] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 504.644373][T13664] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 505.467113][T13703] __nla_validate_parse: 16 callbacks suppressed [ 505.467134][T13703] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1980'. [ 505.533677][T13712] xt_hashlimit: size too large, truncated to 1048576 [ 505.630969][T13717] bridge0: port 1(1) entered disabled state [ 505.694213][T13717]  (unregistering): left allmulticast mode [ 505.729514][T13717]  (unregistering): left promiscuous mode [ 505.735498][T13717] bridge0: port 1(1) entered disabled state [ 505.748029][T13721] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1982'. [ 506.050671][T13729] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 506.109072][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1985'. [ 506.241247][T13733] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1985'. [ 506.309251][T13737] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 506.552420][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 508.398280][T13702] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 508.408211][T13719] netlink: 'syz.1.1982': attribute type 11 has an invalid length. [ 508.417303][T13719] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1982'. [ 508.435397][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1985'. [ 508.444306][T13723] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1985'. [ 508.453362][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1985'. [ 508.725490][T13780] netlink: 'syz.0.1994': attribute type 2 has an invalid length. [ 508.837959][T13779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1993'. [ 508.971550][T13779] bond4: entered promiscuous mode [ 508.991480][T13779] 8021q: adding VLAN 0 to HW filter on device bond4 [ 509.060107][T13779] 8021q: adding VLAN 0 to HW filter on device bond4 [ 509.070792][T13779] bond4: (slave sit1): The slave device specified does not support setting the MAC address [ 509.084003][T13779] bond4: (slave sit1): Error -95 calling set_mac_address [ 509.130899][T13794] netlink: 'syz.2.1997': attribute type 4 has an invalid length. [ 509.158943][T13794] netlink: 'syz.2.1997': attribute type 4 has an invalid length. [ 509.177259][T13796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.185411][T13796] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.254700][T13796] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 509.546528][T13804] xt_hashlimit: size too large, truncated to 1048576 [ 509.575183][T13804] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 510.600388][T13867] netlink: 'syz.3.2016': attribute type 4 has an invalid length. [ 510.608294][T13867] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2016'. [ 511.103356][T13848] geneve2: left promiscuous mode [ 511.109642][T13848] geneve2: left allmulticast mode [ 511.125525][T13848] vlan3: left promiscuous mode [ 511.130479][T13848] bridge0: left promiscuous mode [ 511.142869][T13848] batman_adv: batadv0: Interface deactivated: gretap1 [ 511.154004][T13848] ip6tnl2: left allmulticast mode [ 511.167046][T13848] ip6gre1: left promiscuous mode [ 511.172040][T13848] ip6gre1: left allmulticast mode [ 511.198427][T13848] bridge2: left allmulticast mode [ 511.213744][T13848] bond3: left allmulticast mode [ 511.229895][T13848] vlan4: left promiscuous mode [ 511.234901][T13848] veth1_macvtap: left promiscuous mode [ 511.302103][T13867] .`: renamed from bond0 (while UP) [ 511.411063][T13878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2017'. [ 511.543717][ T13] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.576277][ T13] netdevsim netdevsim4 netdevsim0: unset [0, 1] type 1 family 0 port 4352 - 0 [ 511.613318][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.655188][ T13] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.697127][ T13] netdevsim netdevsim4 netdevsim1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 511.740526][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.750839][T13895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2022'. [ 511.759853][T13895] netlink: 'syz.3.2022': attribute type 7 has an invalid length. [ 511.768020][T13895] netlink: 'syz.3.2022': attribute type 8 has an invalid length. [ 511.775785][T13895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2022'. [ 511.786433][ T13] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.786468][ T13] netdevsim netdevsim4 netdevsim2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 511.786497][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.786535][ T13] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.786563][ T13] netdevsim netdevsim4 netdevsim3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 511.786592][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.906959][T13895] erspan0: entered promiscuous mode [ 511.933843][T13895] erspan0: left promiscuous mode [ 512.786345][T13946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2032'. [ 512.837272][T13948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2032'. [ 512.957404][ T1630] block nbd1: Possible stuck request ffff888027667000: control (read@0,1024B). Runtime 300 seconds [ 512.970505][ T1630] block nbd1: Possible stuck request ffff8880276671c0: control (read@1024,1024B). Runtime 300 seconds [ 512.985419][ T1630] block nbd1: Possible stuck request ffff888027667380: control (read@2048,1024B). Runtime 300 seconds [ 512.997895][ T1630] block nbd1: Possible stuck request ffff888027667540: control (read@3072,1024B). Runtime 300 seconds [ 513.065413][ T48] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 513.112501][ T48] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 513.120850][ T48] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 513.161744][T13961] netlink: 'syz.0.2036': attribute type 58 has an invalid length. [ 513.192878][ T48] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 513.195828][T13961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2036'. [ 513.323757][T13964] bond5: entered promiscuous mode [ 513.356152][T13971] ieee802154 phy1 wpan1: encryption failed: -22 [ 513.455956][T13968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.617456][T13976] tipc: Enabled bearer , priority 0 [ 513.628418][T13976] syzkaller0: entered promiscuous mode [ 513.634623][T13976] syzkaller0: entered allmulticast mode [ 513.718721][T13976] tipc: Resetting bearer [ 513.799313][T13984] IPv6: NLM_F_CREATE should be specified when creating new route [ 513.935456][T13989] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2041'. [ 513.971437][T13989] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 514.089835][T13974] tipc: Resetting bearer [ 514.254489][T13974] tipc: Disabling bearer [ 514.300695][T14011] pimreg9: entered allmulticast mode [ 514.337922][T14017] netlink: 'syz.1.2052': attribute type 1 has an invalid length. [ 514.417335][T14017] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2052'. [ 514.524397][T14022] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2053'. [ 514.767092][T14041] bond11: Removing last ns target with arp_interval on [ 514.866741][T14048] netlink: 'syz.4.2061': attribute type 7 has an invalid length. [ 514.878505][T14048] netlink: 'syz.4.2061': attribute type 8 has an invalid length. [ 515.079937][T14051] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 515.093552][ T5651] block nbd6: Receive control failed (result -1) [ 515.106149][ T5651] [ 515.108510][ T5651] ====================================================== [ 515.115529][ T5651] WARNING: possible circular locking dependency detected [ 515.122563][ T5651] syzkaller #0 Not tainted [ 515.126975][ T5651] ------------------------------------------------------ [ 515.134001][ T5651] kworker/u9:4/5651 is trying to acquire lock: [ 515.140161][ T5651] ffff88807a10c5e0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 515.149673][ T5651] [ 515.149673][ T5651] but task is already holding lock: [ 515.157061][ T5651] ffff88807b11f668 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 515.166129][ T5651] [ 515.166129][ T5651] which lock already depends on the new lock. [ 515.166129][ T5651] [ 515.176553][ T5651] [ 515.176553][ T5651] the existing dependency chain (in reverse order) is: [ 515.185587][ T5651] [ 515.185587][ T5651] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 515.193245][ T5651] __mutex_lock+0x19d/0x1550 [ 515.198379][ T5651] nbd_queue_rq+0x373/0x1150 [ 515.203570][ T5651] blk_mq_dispatch_rq_list+0x499/0x1990 [ 515.209729][ T5651] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 515.216639][ T5651] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 515.223176][ T5651] blk_mq_run_work_fn+0x16c/0x300 [ 515.228729][ T5651] process_scheduled_works+0xa8e/0x14e0 [ 515.234816][ T5651] worker_thread+0xa47/0xfb0 [ 515.240055][ T5651] kthread+0x388/0x470 [ 515.244671][ T5651] ret_from_fork+0x514/0xb70 [ 515.249819][ T5651] ret_from_fork_asm+0x1a/0x30 [ 515.255108][ T5651] [ 515.255108][ T5651] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 515.262320][ T5651] __mutex_lock+0x19d/0x1550 [ 515.267542][ T5651] nbd_queue_rq+0xc1/0x1150 [ 515.272578][ T5651] blk_mq_dispatch_rq_list+0x499/0x1990 [ 515.278656][ T5651] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 515.285542][ T5651] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 515.292093][ T5651] blk_mq_run_work_fn+0x16c/0x300 [ 515.297666][ T5651] process_scheduled_works+0xa8e/0x14e0 [ 515.303781][ T5651] worker_thread+0xa47/0xfb0 [ 515.308915][ T5651] kthread+0x388/0x470 [ 515.313529][ T5651] ret_from_fork+0x514/0xb70 [ 515.318741][ T5651] ret_from_fork_asm+0x1a/0x30 [ 515.324054][ T5651] [ 515.324054][ T5651] -> #4 (set->srcu){.+.+}-{0:0}: [ 515.331211][ T5651] __synchronize_srcu+0xc9/0x2f0 [ 515.336702][ T5651] elevator_switch+0x1e8/0x7b0 [ 515.342075][ T5651] elevator_change+0x2fa/0x480 [ 515.347390][ T5651] elevator_set_default+0x375/0x440 [ 515.353136][ T5651] blk_register_queue+0x3f3/0x4e0 [ 515.358745][ T5651] __add_disk+0x6cb/0xe30 [ 515.363648][ T5651] add_disk_fwnode+0xfb/0x4b0 [ 515.368863][ T5651] nbd_dev_add+0x733/0xb60 [ 515.373824][ T5651] nbd_init+0x15f/0x1e0 [ 515.378568][ T5651] do_one_initcall+0x250/0x870 [ 515.383885][ T5651] do_initcall_level+0x10a/0x1a0 [ 515.389386][ T5651] do_initcalls+0x59/0xa0 [ 515.394264][ T5651] kernel_init_freeable+0x29d/0x3e0 [ 515.400012][ T5651] kernel_init+0x1d/0x1d0 [ 515.404897][ T5651] ret_from_fork+0x514/0xb70 [ 515.410044][ T5651] ret_from_fork_asm+0x1a/0x30 [ 515.415355][ T5651] [ 515.415355][ T5651] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 515.423196][ T5651] __mutex_lock+0x19d/0x1550 [ 515.428347][ T5651] elevator_change+0x1af/0x480 [ 515.433654][ T5651] elevator_set_none+0xb5/0x140 [ 515.439045][ T5651] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 515.445422][ T5651] nbd_start_device+0x189/0xb30 [ 515.450965][ T5651] nbd_genl_connect+0x1597/0x1c10 [ 515.456590][ T5651] genl_family_rcv_msg_doit+0x233/0x340 [ 515.462769][ T5651] genl_rcv_msg+0x614/0x7a0 [ 515.467816][ T5651] netlink_rcv_skb+0x226/0x4a0 [ 515.473158][ T5651] genl_rcv+0x28/0x40 [ 515.477678][ T5651] netlink_unicast+0x7bb/0x940 [ 515.483002][ T5651] netlink_sendmsg+0x813/0xb40 [ 515.488302][ T5651] sock_sendmsg_nosec+0x13a/0x180 [ 515.493881][ T5651] ____sys_sendmsg+0x54e/0x850 [ 515.499206][ T5651] ___sys_sendmsg+0x2a5/0x360 [ 515.504443][ T5651] __x64_sys_sendmsg+0x1b1/0x290 [ 515.509944][ T5651] do_syscall_64+0x174/0x580 [ 515.515083][ T5651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.521538][ T5651] [ 515.521538][ T5651] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 515.530191][ T5651] blk_alloc_queue+0x544/0x690 [ 515.535511][ T5651] __blk_mq_alloc_disk+0x194/0x390 [ 515.541171][ T5651] nbd_dev_add+0x494/0xb60 [ 515.546132][ T5651] nbd_init+0x15f/0x1e0 [ 515.550851][ T5651] do_one_initcall+0x250/0x870 [ 515.556160][ T5651] do_initcall_level+0x10a/0x1a0 [ 515.561641][ T5651] do_initcalls+0x59/0xa0 [ 515.566560][ T5651] kernel_init_freeable+0x29d/0x3e0 [ 515.572335][ T5651] kernel_init+0x1d/0x1d0 [ 515.577225][ T5651] ret_from_fork+0x514/0xb70 [ 515.582365][ T5651] ret_from_fork_asm+0x1a/0x30 [ 515.587668][ T5651] [ 515.587668][ T5651] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 515.594918][ T5651] fs_reclaim_acquire+0x71/0x100 [ 515.600439][ T5651] __kmalloc_noprof+0xbc/0x720 [ 515.605771][ T5651] tls_sw_sendmsg+0x599/0x2860 [ 515.611231][ T5651] sock_sendmsg_nosec+0x90/0x180 [ 515.616718][ T5651] sock_sendmsg+0x1ca/0x2d0 [ 515.621765][ T5651] splice_to_socket+0xb5e/0x12a0 [ 515.627251][ T5651] direct_splice_actor+0x101/0x160 [ 515.632908][ T5651] splice_direct_to_actor+0x57b/0xcb0 [ 515.638826][ T5651] do_splice_direct+0x195/0x290 [ 515.644228][ T5651] do_sendfile+0x52e/0x7c0 [ 515.649191][ T5651] __se_sys_sendfile64+0x144/0x1a0 [ 515.654846][ T5651] do_syscall_64+0x174/0x580 [ 515.659984][ T5651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.666411][ T5651] [ 515.666411][ T5651] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 515.674513][ T5651] __lock_acquire+0x1520/0x2cf0 [ 515.679913][ T5651] lock_acquire+0x106/0x350 [ 515.684968][ T5651] lock_sock_nested+0x41/0x100 [ 515.690270][ T5651] inet_shutdown+0x6a/0x390 [ 515.695316][ T5651] nbd_mark_nsock_dead+0x2cb/0x550 [ 515.700970][ T5651] recv_work+0x1cee/0x1e10 [ 515.705917][ T5651] process_scheduled_works+0xa8e/0x14e0 [ 515.711999][ T5651] worker_thread+0xa47/0xfb0 [ 515.717124][ T5651] kthread+0x388/0x470 [ 515.721734][ T5651] ret_from_fork+0x514/0xb70 [ 515.726881][ T5651] ret_from_fork_asm+0x1a/0x30 [ 515.732181][ T5651] [ 515.732181][ T5651] other info that might help us debug this: [ 515.732181][ T5651] [ 515.742421][ T5651] Chain exists of: [ 515.742421][ T5651] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 515.742421][ T5651] [ 515.755489][ T5651] Possible unsafe locking scenario: [ 515.755489][ T5651] [ 515.762953][ T5651] CPU0 CPU1 [ 515.768341][ T5651] ---- ---- [ 515.773730][ T5651] lock(&nsock->tx_lock); [ 515.778177][ T5651] lock(&cmd->lock); [ 515.784708][ T5651] lock(&nsock->tx_lock); [ 515.791670][ T5651] lock(sk_lock-AF_INET6-NBD); [ 515.796549][ T5651] [ 515.796549][ T5651] *** DEADLOCK *** [ 515.796549][ T5651] [ 515.804707][ T5651] 3 locks held by kworker/u9:4/5651: [ 515.810024][ T5651] #0: ffff888026411940 ((wq_completion)nbd6-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 515.821297][ T5651] #1: ffffc90003a7fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 515.833076][ T5651] #2: ffff88807b11f668 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 515.842421][ T5651] [ 515.842421][ T5651] stack backtrace: [ 515.848359][ T5651] CPU: 1 UID: 0 PID: 5651 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 515.848384][ T5651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 515.848397][ T5651] Workqueue: nbd6-recv recv_work [ 515.848417][ T5651] Call Trace: [ 515.848426][ T5651] [ 515.848435][ T5651] dump_stack_lvl+0xe8/0x150 [ 515.848462][ T5651] print_circular_bug+0x2e1/0x300 [ 515.848481][ T5651] check_noncircular+0x12e/0x150 [ 515.848511][ T5651] __lock_acquire+0x1520/0x2cf0 [ 515.848541][ T5651] ? irqentry_exit+0x218/0x8f0 [ 515.848567][ T5651] ? lockdep_hardirqs_on+0x7a/0x110 [ 515.848593][ T5651] ? inet_shutdown+0x6a/0x390 [ 515.848616][ T5651] lock_acquire+0x106/0x350 [ 515.848638][ T5651] ? inet_shutdown+0x6a/0x390 [ 515.848666][ T5651] lock_sock_nested+0x41/0x100 [ 515.848687][ T5651] ? inet_shutdown+0x6a/0x390 [ 515.848710][ T5651] inet_shutdown+0x6a/0x390 [ 515.848735][ T5651] nbd_mark_nsock_dead+0x2cb/0x550 [ 515.848764][ T5651] recv_work+0x1cee/0x1e10 [ 515.848793][ T5651] ? lockdep_unlock+0x5d/0xd0 [ 515.848813][ T5651] ? __lock_acquire+0x13e8/0x2cf0 [ 515.848844][ T5651] ? __pfx_recv_work+0x10/0x10 [ 515.848863][ T5651] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 515.848882][ T5651] ? process_scheduled_works+0xa20/0x14e0 [ 515.848911][ T5651] ? rcu_is_watching+0x15/0xb0 [ 515.848939][ T5651] ? process_scheduled_works+0xa20/0x14e0 [ 515.848957][ T5651] process_scheduled_works+0xa8e/0x14e0 [ 515.848987][ T5651] ? __pfx_process_scheduled_works+0x10/0x10 [ 515.849009][ T5651] ? assign_work+0x3cf/0x5d0 [ 515.849029][ T5651] worker_thread+0xa47/0xfb0 [ 515.849060][ T5651] kthread+0x388/0x470 [ 515.849083][ T5651] ? __pfx_worker_thread+0x10/0x10 [ 515.849102][ T5651] ? __pfx_kthread+0x10/0x10 [ 515.849125][ T5651] ret_from_fork+0x514/0xb70 [ 515.849151][ T5651] ? __pfx_ret_from_fork+0x10/0x10 [ 515.849174][ T5651] ? __switch_to+0xc89/0x1420 [ 515.849195][ T5651] ? __pfx_kthread+0x10/0x10 [ 515.849219][ T5651] ret_from_fork_asm+0x1a/0x30 [ 515.849241][ T5651] [ 516.063118][T14048] netlink: 'syz.4.2061': attribute type 1 has an invalid length. [ 516.070929][T14048] __nla_validate_parse: 3 callbacks suppressed [ 516.070946][T14048] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2061'.