last executing test programs: 4.003534053s ago: executing program 4 (id=3564): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000002940)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002900)={&(0x7f0000001380)={0x38, 0x2, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_CLOSE={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r1, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065", 0x20) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000002840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002800)={&(0x7f0000000440)={0x14, 0x10, 0xa, 0x703, 0x0, 0x0, {0x4f0605a35f2d1d4a, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x10) recvmmsg(r1, &(0x7f0000002600)=[{{&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000000900)=[{&(0x7f00000000c0)=""/132, 0x84}, {&(0x7f0000000200)=""/103, 0x67}, {&(0x7f0000000280)=""/27, 0x1b}, {&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000002700)=""/251, 0xfb}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/253, 0xfd}, {&(0x7f0000000600)=""/204, 0xcc}, {&(0x7f0000000700)=""/219, 0xdb}, {&(0x7f0000000800)=""/223, 0xdf}], 0xa, &(0x7f00000009c0)=""/117, 0x75}, 0x7fffffff}, {{&(0x7f0000000a40)=@qipcrtr, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000ac0)=""/13, 0xd}, {&(0x7f0000000b00)=""/98, 0x62}, {&(0x7f0000000b80)=""/90, 0x5a}], 0x3, &(0x7f0000000c40)=""/145, 0x91}, 0x6}, {{&(0x7f0000000d00)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000d80)=""/210, 0xd2}, {&(0x7f0000000e80)=""/205, 0xcd}, {&(0x7f0000000f80)=""/105, 0x69}, {&(0x7f0000001000)=""/200, 0xc8}], 0x4, &(0x7f0000001140)=""/125, 0x7d}, 0x3}, {{&(0x7f00000011c0)=@hci, 0x80, &(0x7f0000001580)=[{&(0x7f0000001240)=""/172, 0xac}, {&(0x7f0000001300)=""/64, 0x40}, {&(0x7f0000002880)=""/102, 0x66}, {&(0x7f00000013c0)=""/204, 0xcc}, {&(0x7f00000014c0)=""/186, 0xba}], 0x5, &(0x7f0000001600)=""/4096, 0x1000}, 0x8}], 0x4, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x44, &(0x7f0000000140)={0x0, 0x3a}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_mreq(r2, 0x0, 0x17, 0x0, &(0x7f0000000200)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0xfffe) preadv(r4, &(0x7f0000000100), 0xa, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000180)={@initdev, @remote, 0x0}, &(0x7f0000000380)=0xc) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x0, r5, 0x10, r1}, 0x10) 3.726385417s ago: executing program 4 (id=3568): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x28) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff31}, 0x800c011) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0xff06, 0x0) 3.36678093s ago: executing program 2 (id=3572): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2d, 0x5, 0x4, 0x1, 0x800, 0xffffffffffffffff, 0x3, '\x00', r0, r1, 0x5, 0x2, 0x4}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x6, 0x0, 0x0, 0x0, 0x0, 0x2}, @generic={0x5, 0x0, 0x0, 0x2, 0x8000000}, @jmp={0x5, 0x0, 0x2}, @generic={0x1, 0x6, 0x2, 0x4a5, 0x3}]}, &(0x7f0000000440)='GPL\x00'}, 0x94) (async) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="200000001e0021000000000000000000070040"], 0x20}}, 0x80) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d40)={0x24, r7, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x20000800) (async) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x24, r7, 0x10, 0x70bd28, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FAMILY={0x5, 0xd, 0x2b}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x48000) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) r9 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xe0000000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x168, 0x0, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x4c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}]}, @CTA_EXPECT_NAT={0xbc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xb8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x43}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x40}, 0x804) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r4, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x85, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x8f, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x1c, r8, 0x301, 0x70bd2c, 0x25dfdc00, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x404c880) sendmmsg$inet6(r9, &(0x7f0000001000)=[{{&(0x7f0000000b00)={0xa, 0x4e24, 0x7da, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}, 0x1c, &(0x7f0000000fc0)=[{&(0x7f0000000d80)="45270c1e2ba7b829f51cc3f2e350644b9e1603014c42d730931a6f7d6041729974a0ea056e3dc9eca96a9d90a96884beb4aee4e84d96d2380b3a968d58f4b638b2a26828fa2b375def5c5bec9fc429d4f03194d4f2ac0b417acd2503807290219545e400304a88abefcca37df0cc6c8096d1448a00621e2bce20aa050887d4301244f67e7733da8bb4c6c97fb52a83eacc9a9da974588aa4ec9101f4f1fc9a0bc7815b5792225ba6937a0db7ffa8dedbd91f35c63680d621df8399d5ed6f39c27fcb", 0xc2}, {&(0x7f0000000e80)="2550ee77dd4fd80292e34f04234df5f5033127ddd275a98e87975a5abe794bc328ddb1f7aaa2265a5e6c04aa31ff3fcdb24dd9e8aa52bc0f943e35cbb250a131d8c233550a14b2507492b10e3f414914d63419de9ba0b9997e23287f6e5b895868928b6bc6c3684470456e972cc9aaf7081535", 0x73}, {&(0x7f0000000f00)="e6bb56365adee5e3c8cea14ad45b551533c894e527b8dd092f75051b5faead5a04e793d9a586a8a031787c4d4ba3639e13073c5210c9836463b206f458cbf4583d04ee2be2d533a2614dbd308d6ccd310367c8227b6b7e5d08a4022bb8c7cdc1ee470e001b10c07e27b8579513aac3b6d9e1415c2718df1f82363d6c5a88dbe6658a0318445665034d8ed2c2e26e16abaebe4d58320f6e7703ea73fa6d30fdabd02cf085973d93b245e8", 0xaa}], 0x3}}], 0x1, 0x8040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18ad31611659c0f3290000000000000018110300", @ANYRES32=r2, @ANYBLOB="00000000000000002702000014000000b7030000000000008500000059000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 3.262920736s ago: executing program 0 (id=3573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000000080)={0x27, r4, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) connect$nfc_raw(r1, &(0x7f0000000000)={0x27, r4, 0xffffffffffffffff, 0x2}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000000101010100000000000000000a000000100002800c000280050001003a0000000c001980080002000808"], 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)) (async) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) bind$nfc_llcp(r5, &(0x7f0000000080)={0x27, r4, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) (async) connect$nfc_raw(r1, &(0x7f0000000000)={0x27, r4, 0xffffffffffffffff, 0x2}, 0x10) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000000101010100000000000000000a000000100002800c000280050001003a0000000c001980080002000808"], 0x30}}, 0x0) (async) 3.150993167s ago: executing program 2 (id=3574): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000002680), r0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r1, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7fff}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x6c}}, 0x4) syz_emit_ethernet(0x48, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x12, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}]}}}}}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0007002f00090027bd7000fddbdf250600000008000a00110000001eed0214e9d7917b4237df536c040968f2bf68a3064566937212a5d713c6d41b94244e2beba82e30871d3165d6e21748f4ea186b1b27753989"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000040)) 2.997827117s ago: executing program 2 (id=3577): syz_emit_ethernet(0x52, &(0x7f0000000200)={@local, @random="df000040f7ff", @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@lsrr={0x83, 0x7, 0x75, [@multicast2]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x2, [0x10001, 0x0]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0xfffffff9, 0x71, &(0x7f0000000100)=""/113, 0x41100, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000280)=[{0x1, 0x2, 0x10, 0xa}, {0x5, 0x2, 0x0, 0x7}, {0x0, 0x4, 0x8, 0xb}, {0x4, 0x1, 0x2, 0x9}, {0x3, 0x3, 0xb, 0xb}], 0x10, 0x7ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xc4, 0x59, &(0x7f00000003c0)="1ddc39199eec4a9105fd2b08def43c579f33cd8a72c0c697042f081f7b83738cbe4c661e2dcbb31b89a96a7a19d102d442c86a2e62e0f10dbdd13325479b1f01c8060fce844b98326bdad3dedf38a617bdb488b89d53661c118379c3477aa8defd606b3e37986ea9ad2dca2983c0286eb32d507bc81e04e60cb8550936b2ce79942eb382e2ef7065a7859d9b931f15282d8a4fb5821ef124a12ab21a1e315a97a39e86560be4757c1ab24ce35d5d845ef08250314702de30818ea9719cb28e5f2d2c19f9", &(0x7f00000004c0)=""/89, 0x8, 0x0, 0xad, 0x6, &(0x7f0000000540)="7d7bc7b42ef23aea83c7ed3c0aa51649389acdf9b6afaadcc40547d6a103f1a6300a71cd60760db5c156e68714ce921250f7770753b638bc552ac4a0e7cc1b48c5bc78ab8156dd116330ee53f7d591f6a5dd2f0a47fea067e55d0d4fec6a730ee4810b162276c27e1a0533eb908a3640ba93f879d7d25fbbbc172a79ef87dfe46af24fc16141434e79f28d46a32d5e6ea5f8e33dacacbfe3061f9638f1148c9f0fe290f8ab1f1f4183fd2b37d8", &(0x7f0000000600)="2ca295755e4a", 0x2, 0x0, 0x1}, 0x50) 2.905628187s ago: executing program 0 (id=3578): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0xfffe, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3c, &(0x7f0000000440)=[{0x6, 0x2, 0x10, 0x2}]}, 0x5c) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) getpeername$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmmsg$inet(r3, &(0x7f0000001300)=[{{&(0x7f0000000380)={0x2, 0x6e20, @loopback}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000f80)="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", 0x15b}, {&(0x7f0000000180)="6242870f0e6b4396205a2c501f10b0601e64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489a8ddc2b21909092ab24a155c0285968950c5d57e08533c7216e8dd6ccabae10c2", 0xb3}, {&(0x7f0000000580)="7d1455a2eefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd285f0ccc9655dfb2c2330aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57772a67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b0658fe289beff381c455f37c2b1c71e0e98f34a344141f9996f71a6c32cd9e930f86b9aa8d31e566b300"/146, 0x92}, {&(0x7f0000000e00)="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", 0x154}, {&(0x7f00000008c0)="bfc1bfc99c5689c343747de08ca174e7537bba6643a8728bf280dab2e5d29eecc79b53bdc4d9e551904ceda1445fa16f896686a8046d3bc57c10f855dcb44b79c9d4bb0b9285a4590cd7ac862a4efeb27a62f1dac53434cb036335931f77b80f43fef6f7d01fcc8ef21a3611c200d37fba4b86c11fad0395115bf2414e311c5072016f851461ee4cd792f20c97617793b8604ab6ad654960779bed9c68fed82cfe4a5b41caab29552ef9e3eacee6e2d0628d474cb9455cc7a853c4dd2e0961f0c13a424789b26b8e2bc500e65da26e5e618ec40b4f", 0xd5}, {&(0x7f0000001100)="ac6aed94fbb8c7fecccf1fbe0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc0a3448434dca51f5bc1972720dc071c5c5e2358a62bb3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb96809ab4bfbc85cd9eed4820e2a821913e94ed62ce3b44103e31a82b7c14ea5dae6b42906b14cc21e24fcb7b255b5fd8b3d9eda621defc3f398cc545fb03d6549353921bb4a52b3230008f967ddc1ad8635d58667b82a58ec030a57d199f14b1714330e476a95d3aa897b4161302835bee9582736b04c576bbfffe0c6cc0bb35685582b277d975a87", 0xf8}], 0x6}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000680)="99547f99b267", 0x6}, {&(0x7f00000009c0)="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", 0x12b}, {&(0x7f0000000740)="88b09f5655e4a659279cae20dc68f8c19ef60764f93863ac86a461176a66017aee15d40bfda8c6a63d797e0347d0b978", 0x30}, {&(0x7f0000000780)="1ee1eac67ca242c6c1e9a7", 0xb}], 0x4, &(0x7f0000001400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x44, 0xc8, 0x1, 0xa, [{@broadcast}, {@broadcast, 0x9f}, {@local, 0x5}, {@remote, 0x2}, {@broadcast, 0x5}, {@private=0xa010100, 0xa}, {@empty, 0x3}, {@multicast2, 0xd}]}, @noop, @timestamp_prespec={0x44, 0x24, 0x6, 0x3, 0x0, [{@rand_addr=0x64010102, 0x8000}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf67}, {@multicast1, 0x7}]}, @timestamp_prespec={0x44, 0x4, 0xb5, 0x3, 0x5}, @timestamp_addr={0x44, 0x1c, 0xa1, 0x1, 0x3, [{@loopback, 0x1}, {@multicast2, 0x9}, {@empty, 0xb}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x48, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xc9, 0x1, 0x5, [{@local, 0x6}, {@loopback, 0x3}]}, @timestamp_addr={0x44, 0x24, 0x7f, 0x1, 0x2, [{@multicast2, 0x200}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x300000}, {@multicast1, 0x1}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010102, @empty}}}], 0x138}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000b40)="3a105ec95888668bc142a235634c68000c91eb7b633f73fe4c3a7cecf39d0cd9c6ce02388a594845c218cbd38310082a4de5040c15353b06ec22e4e320c6e08baf54d043128e003f470427f0f7709eba50e1a430edd80d65e083005e579016c57b48892d6582f2af1e5160aa3e4058e96820626876de85cb7b16ffd0bdc0ae3b01c96a978c8914a4b66ae171bb146757a12f0564a72d9a9176d6f7b759a5df6e0888", 0xa2}, {&(0x7f0000000c80)="d36042159fdde6c97bb2ea346cebe353b9be1ad209b091fca3ee109c67c85e858ff9ca6af87ecfa9497235d73af1fe3afabe2f9082cf08b6a663117a2e53af8b1444e43cd087175b8f908658805d68edaf4ec788302d3dc04e8c518d417f5436fdcdc76648ce227e725e8f66452f3fb31f0408ce88038cdd77b9cca3db89279cffe0938e220360490689770cf0e94052ff7506441ad06fadcc105e6cb4bfe2d727061fe7d51676e85f5080ab4f2f561599b2a70f82877a46784c32ccea00518d4889df87be9019649803642e006bb616f5413e", 0xd3}, {&(0x7f0000001200)="cf0c3e632e88b2fdd19b0b393884b5ad8f123a4bd21c693c3a57baa8b95b6d75a83d580df4c72b086f40abc852e3fcca716fc265df7386400aa112c9c1d0814335c9d1b99245ac0cc8c41f3f1f80709aca052648088ba0c7182be68d5ecc95fc85db7c1459a9dfddbd9d116ad9932dece77cd470a2503b280e0ea6da9bda93035ace17c0fe72a6e21f1d4ef3b7f7c810fb54959e43f5aa274fc8", 0x9a}], 0x3}}], 0x4, 0x2000c044) writev(r3, &(0x7f0000002640)=[{&(0x7f0000000c40)="b4207053c783", 0x6}, {&(0x7f0000001640)="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", 0x5c2}], 0x2) close(0x3) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)) sendto$inet(r0, &(0x7f00000006c0)="c7127d76fc0e8cbb24cf79582daba1611490fe4412c568f3", 0xffffffffffffff94, 0x10, 0x0, 0xfffffffffffffe69) recvfrom$inet(r0, &(0x7f0000000000)=""/8, 0xfffffffffffffd0b, 0x400123eb, 0x0, 0x1154103478d401ea) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6", 0xd) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) sendmsg$nl_xfrm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[], 0x294}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYRES16=r1], 0x0, 0x2f, 0x0, 0x1, 0x1ff}, 0x28) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="5ceb7d080095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x84, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(anubis))\x00'}, 0xfffffffffffffe0f) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r9, &(0x7f0000000300)={0xa, 0x4e20, 0x2, @remote, 0x1000}, 0x1c) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.862476768s ago: executing program 1 (id=3580): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030000000000000000000a00000015000300686173683a69702c706f72742c6e657400000000050001000700000005000500020000000900020073797a3000000000050004000200000014000780080013400400000308000600"], 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) connect$pptp(r1, &(0x7f0000000280)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) r3 = socket$kcm(0x29, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0xef, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfff}}, [0x5, 0x6, 0x6, 0x4, 0xe6, 0xffffffffffffffd7, 0x2, 0x5, 0x80, 0x2, 0x9, 0x4, 0x8000, 0x64b, 0x100000000]}, &(0x7f00000002c0)=0x100) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000380)={r5, 0xe1cb, 0x5e7}, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r0}) 2.829128511s ago: executing program 2 (id=3581): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000100)=[{0x48, 0x83, 0x0, 0x6}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYRES16=r7], 0xfce) 2.758241916s ago: executing program 4 (id=3582): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x2b, 0x1, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) setsockopt$IPT_SO_SET_REPLACE(r2, 0x29, 0x1f, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@deltaction={0x23c, 0x31, 0x10, 0x70b929, 0x25dfdbfc}, 0x23c}}, 0x20000054) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e2e, 0x3, 'fo\x00', 0x11, 0x10000004, 0x8}, 0x2c) r7 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x1}, {@multicast2, 0x4e23, 0x10000, 0x1cb, 0x4, 0x12d58}}, 0x44) unshare(0x2a020400) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x73, @multicast1, 0x4e24, 0x4, 'dh\x00', 0x70, 0x323b, 0x55}, {@private=0xa010102, 0x4e23, 0x10000, 0x0, 0xc, 0x12d4c}}, 0x44) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff"], 0xfc}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100100fbffffff1864000003000000000000000200"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114}, 0x94) socket(0x28, 0x5, 0x0) 2.621630306s ago: executing program 1 (id=3584): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044080}, 0x4000000) listen(r1, 0xf) (async) r3 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000002"], 0x14}], 0x1}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@RTM_NEWMDB={0x15, 0x54, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x18}}, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbffe0ff0000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.36905425s ago: executing program 2 (id=3586): socket(0x40000000015, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}, 0x0) sendmsg$kcm(r1, 0x0, 0x0) socket(0xf, 0x5, 0x2000000) socket(0x28, 0x5, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000400)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000300)="758dd6e2f815f227d2d505997a9d2cdf302beb1c5c6c202b32413bd3c622ac24537a3f9a619dad199c239a091b449f13b1821d68fc04483e028728fbf88567a30097682b37044bd4f19b4605381f6bd76c4772334902cd39fa41ae8882e78457831a2be4c735a06f78513b1a9ebfef918cb81ba1e57cc08a45e75a9fcc20adc3de5d8104cd369e3b892b343fae71138802cb1907f3bc828ccc15717bea1d257dd88895edfc81b3a2f5b8d0358a1792c75a7d7735339aa3342a0b0dfdb88ca766541f91ac257ee69ace8779f7ebb3612d6afd9e71e2bd212bcddf6fcfbd65d594c42e087f5c0f3946d685c06e28", 0xed}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x1a, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000c00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000800008500000006000000182300"/124, @ANYRES32, @ANYBLOB="00000000533a0000d591020001000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.34351569s ago: executing program 4 (id=3587): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0xa0, 0x7, 0xd75, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x40, 0x0, 0x7dc04718}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getuid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r5, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38, 0x4004c}}], 0x1, 0x805) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0x13, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000002000000850000006d000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r2, &(0x7f00000008c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xe5a45f90bae416d2}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x214, 0x15, 0x400, 0x70bd26, 0x25dfdbff, {0xc}, [@typed={0xc, 0xd3, 0x0, 0x0, @u64=0x3}, @typed={0xc, 0xca, 0x0, 0x0, @u64=0x9}, @nested={0x40, 0xda, 0x0, 0x1, [@nested={0x4, 0x144}, @typed={0x8, 0x34, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0xce}, @typed={0xc, 0x4a, 0x0, 0x0, @u64=0x800}, @typed={0x8, 0x9d, 0x0, 0x0, @uid=r3}, @typed={0xc, 0x1, 0x0, 0x0, @str='syztnl1\x00'}, @typed={0x8, 0x12a, 0x0, 0x0, @uid=r7}, @nested={0x4, 0x116}]}, @nested={0xf5, 0x148, 0x0, 0x1, [@nested={0x4, 0x155}, @typed={0x4, 0x70}, @typed={0x8, 0x70, 0x0, 0x0, @pid=r9}, @generic="be0c3e52d5808271fe294fadb1dfa579e34da098fae70afdd1420871e283dba9398ca1ca0a5337d68c17275587a0f1936516b1cd", @generic="69d1013259432004ed98d8f0ee3ad34391e76c39d26351cee9e68ea555706aea6b8595d8f4153ce5cbc4db2723f492c2bb2da982f3ae080c055cf4d63e7c1a0dffdfc99a5a9d60f38ed1d986fa60c41953cc1f33568881d407f09574586c87b4d2181c6b419138a163dcdf3089cf68a31c7ab76741543df7c579d20a66201c8a07d3f28c7cf4cbae25086aca7a5da11f1acee27d5f6bac87293e8bac7957ca702fe2b060036cc1e7020393e971"]}, @nested={0xa6, 0xc2, 0x0, 0x1, [@nested={0x4, 0xcf}, @typed={0x8, 0x14c, 0x0, 0x0, @uid=r10}, @generic="4882c700c7886cd30fe597cb8326ef8b0bebcaf07c2b", @nested={0x4, 0xce}, @typed={0x14, 0x55, 0x0, 0x0, @ipv6=@private2}, @typed={0x4, 0x1f}, @typed={0x64, 0x34, 0x0, 0x0, @binary="d71fe12b55280dfaca61d8301ad50220a37f0260ebe8f2c11e0b7b863b749c654beaaedf16e05ddc00dd8c1d5064083fb84d5e05238676386ef141d06c1e8bd64adaa10bfedb31c05527ac41e5ae5afc801d67d2248f7fe976663bda6f6700ce"}]}, @typed={0x8, 0x7a, 0x0, 0x0, @fd=r11}]}, 0x214}, 0x1, 0x0, 0x0, 0x24000000}, 0x4140) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r13 = socket(0x15, 0xa, 0x3) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000020601040000000000000000000000020900020073797a30000000000900020073797a31000000000900020073797a300000000004000780d2734a3a7b5df6fec90d759ca8b6db"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000080)=ANY=[@ANYRES16=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0xa0, 0x7, 0xd75, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x40, 0x0, 0x7dc04718}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getuid() (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) (async) sendmmsg$unix(r5, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38, 0x4004c}}], 0x1, 0x805) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0x13, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000002000000850000006d000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_generic(r2, &(0x7f00000008c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xe5a45f90bae416d2}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x214, 0x15, 0x400, 0x70bd26, 0x25dfdbff, {0xc}, [@typed={0xc, 0xd3, 0x0, 0x0, @u64=0x3}, @typed={0xc, 0xca, 0x0, 0x0, @u64=0x9}, @nested={0x40, 0xda, 0x0, 0x1, [@nested={0x4, 0x144}, @typed={0x8, 0x34, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0xce}, @typed={0xc, 0x4a, 0x0, 0x0, @u64=0x800}, @typed={0x8, 0x9d, 0x0, 0x0, @uid=r3}, @typed={0xc, 0x1, 0x0, 0x0, @str='syztnl1\x00'}, @typed={0x8, 0x12a, 0x0, 0x0, @uid=r7}, @nested={0x4, 0x116}]}, @nested={0xf5, 0x148, 0x0, 0x1, [@nested={0x4, 0x155}, @typed={0x4, 0x70}, @typed={0x8, 0x70, 0x0, 0x0, @pid=r9}, @generic="be0c3e52d5808271fe294fadb1dfa579e34da098fae70afdd1420871e283dba9398ca1ca0a5337d68c17275587a0f1936516b1cd", @generic="69d1013259432004ed98d8f0ee3ad34391e76c39d26351cee9e68ea555706aea6b8595d8f4153ce5cbc4db2723f492c2bb2da982f3ae080c055cf4d63e7c1a0dffdfc99a5a9d60f38ed1d986fa60c41953cc1f33568881d407f09574586c87b4d2181c6b419138a163dcdf3089cf68a31c7ab76741543df7c579d20a66201c8a07d3f28c7cf4cbae25086aca7a5da11f1acee27d5f6bac87293e8bac7957ca702fe2b060036cc1e7020393e971"]}, @nested={0xa6, 0xc2, 0x0, 0x1, [@nested={0x4, 0xcf}, @typed={0x8, 0x14c, 0x0, 0x0, @uid=r10}, @generic="4882c700c7886cd30fe597cb8326ef8b0bebcaf07c2b", @nested={0x4, 0xce}, @typed={0x14, 0x55, 0x0, 0x0, @ipv6=@private2}, @typed={0x4, 0x1f}, @typed={0x64, 0x34, 0x0, 0x0, @binary="d71fe12b55280dfaca61d8301ad50220a37f0260ebe8f2c11e0b7b863b749c654beaaedf16e05ddc00dd8c1d5064083fb84d5e05238676386ef141d06c1e8bd64adaa10bfedb31c05527ac41e5ae5afc801d67d2248f7fe976663bda6f6700ce"}]}, @typed={0x8, 0x7a, 0x0, 0x0, @fd=r11}]}, 0x214}, 0x1, 0x0, 0x0, 0x24000000}, 0x4140) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) (async) socket(0x15, 0xa, 0x3) (async) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000020601040000000000000000000000020900020073797a30000000000900020073797a31000000000900020073797a300000000004000780d2734a3a7b5df6fec90d759ca8b6db"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000080)=ANY=[@ANYRES16=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) 2.277093703s ago: executing program 1 (id=3589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r1, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r1, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) r2 = socket$inet(0x2, 0x1, 0x75) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x3, 0x33) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000218500000075000000850000002a0000009500"/40], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) unshare(0x4000400) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r3, 0x0, 0x0) 2.183925966s ago: executing program 3 (id=3590): bpf$PROG_LOAD(0x23, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 2.001630641s ago: executing program 3 (id=3591): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_int(r1, 0x1, 0x2e, 0x0, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 32) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESHEX=r2, @ANYRESDEC=r2], 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x4) (async, rerun: 32) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000002e00)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec97000f982c00fe8000000000000000000000000000aaff020000000000000000000000000001670000000000000002009078000008006f2a7a6303ff6c0100000000000000000000000000000001000000000000000000000000000000012f10000600000000fc010000000000000000000000000001fe8000000000000000000000000000aafc02000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bbfc000000000000000000000000000001fe8000000000000000000000000000bbff0200000000000000000000000000013ad800000000000002bfc9ac4a70ba84646eba50f5859f31f4d9286aaa1792ed14ee4547c4956d4a971cbb5943ff64def2e0d1ded05bd5360357e2296fe1969dda8dda4c22b408f36fa9304a55e25c397d7549ced7ea2a33d05664862232e0c905d4787a86f07900b5e46bafb81c0172b1a37f80d45da7d7db810f0ce8cf826a145c82e35954006a0983dc7ea81e60c7fc155f021fd73f84c23b5a2fffed1a8a6557200050872970c9c98557b169f6da6be0c8e68640cc68607cf8aae3cd6769f0d553e7b5637b912f421157bc5e0a561ec9afe882b9555df4e2fb81b44925179b6021ad454c87a8fcd5e995696ff452611f000126d09297b3b8ed118dd6aa049f386fa0805cdbd997e6dd1622e5c9715458b79e11a9117a786b86a332ad123bbbe1854d4b4a4f1894a52b045516d73880e6be6f2ab043d75f145ebf5ea5ce7fc48fc6fef5d3668b5e68b394e596f44e08b70f966da035f95ad9fce927f6cf9431ab0e918622cb409a58effbbbd81760159a00010765b80e651d81d3850f1ea176347f1672f8d0c9f995c300c97563eeb8dd8bc9d39d40040ed36c0beb6d760f975944a7991739fa296c23c80a2f50c55d69c3741aeeac2e2ff5ba1331adee3590ffa1da2eda6406d8bfa19bc633582baa5f4e85383c6dcee60e47558f43dd6ec67522084c07b6739b391a9728cee6e86ad90c6ec699a5ff20511625e0fc207c405efd1993535116766cc2d29e427dac73da1338211d075cbc352321530b6b98346ade12f626c0be812d2eb571b0bd3c4b335d797bb37bd3826db203e3c89ded2a6d6f95f1744410a0da344329d3bd0cabbfa8e22ec43a8ae8ce43ed8facf77c4f0709e84c8f31d0612485475ae27a3302ecfc04172553c019c3c29a134ec62b4f5ae1c49674af502b2076c4d2e9ed108147135072472fd321dbbe32e15f123d7c9229ad7edc90b0ad3e1dc2ee48a7f384e0271c91c44a0a508df345fbebf9559ad6e3496593ef62139aa5723033209fd80f807638d5b24088e8cb896b499d6d872d42a8d938a77651c28cef73f00ada83257742e08c8c79aef569198542584b408ada5df6f0096ec9a6a8c78fd6d78c5c0944845a5fbcb1936e16a59f05ac6d82c6c2c99c9cae379ece8ddf805e618a61e35361cc4c83b5a07dafe2fe96c7599d6de1a3c5035c77a86b021b72d81bff0c2b6f9665840bf8c98debc219d3d75d451b60293f099ed171c5e566d2591e4bd507a51b925d09aa3ce8c7b8f56d1e35158839484e663de76545c818b0ea8646120eca0b75da4c0e648ae0d56aa168b19f48460923d8d38d3cd570a4c9d6ae1af48b28964db4d5eb89aa2845b8bdddd89f9272ad3e5d04e5624089ae1d124b0eef9ad7ebae1ea2557f946e2a824ed497d45826f26f089fabd54be895fece37564a13f716451a3cb549bece785de9ffa233c8cd10591986b5e5d2bd7349d508b6b504fff44ca31f386383b9da747d0c688bfde3725ebe669571340addd8f83157cdd04bfa060a6b9446e6231d235ecc28ff84ec9f6882bf1eefba15d7b1e47f3233a9dba73c6a027dc9be90e21892545b5d0a4402e9b69b82658b5f8a05977f4b385854814747655b0795e738723ef152b6b3199c41521c8bd86a9d3868b2a969697301b5fbca39bf541849ace04ed8b1b481a3bc80baeaece999cd09a828ae1471482a74cd5e63bb5c80c20050c053fe22fe7375267f84370f0ef1832732f1e0c49b9689d2911d1ea925db9cfce33e9b69d05f6d605e6fce75f65940136f5f55dfe7a8983a9edbc086937ec9f4100bb3e874c075f3d6caeaf46780bcc104dd83825ae45fd5a423d743d817b95e432ba28d994d65883c0532d208f6e90d951de4780b741b4810feee7d3dbd75267666b98510792533ad80bc57d3d6970d2e38504e76c6cc2cf4fb6e1358d49a1a0a30c0bc0d07d29845d9cb2371861fb9f01eb064a18f9e61a5682ef07c31ff8fb1050211fa22f01ef57f042a95756796d4c853360915e5e9c408bc09874d9bcf300c47d74a16c7b85842e22b5734bb84fb4de5dc241708408cb2b379d55be7dc8085f32fd1726a7e6c2fd58041e695596e0c2806c81906d33029c120d7c7e7f145680668fee3e5f010798364713d8c87832a51a934dcd448ac6cd35856ccc3e27c21ff9e25f1cb710d2b1796f637479fa32b003f110b0e2ac9c153941dad387a9edc7c16f50823bcd98a8618cc8735cbaa521a3d6484fc842b9185c740337838e12cf13c9efde323e8bbd33965d2bc435dcdb0cc7c26bf407063ca7a254c33800dd06b191b871fe6b2aae140d1cc1d6f22c1e5c4bc025375b77d3c4edc4cfb9dc558a9ae4814ed5dc83ad963fb590af7c109d2d35df528fa898ac5ea4db299c563fcc7d722a97d68a8e3f7771e5fff804f623ff0b2f25231bbd50ba1bc3a4d4ed857aaef212601bfdb0e183fd85f607e5cccbd4c8452b9b1e4c8376a687a59d34ac1c2dc20645a59efbc022bbd0f30999aafd2796ab3deaf29d0ce9bad1d1eda5f34dfd24cf05c8f3298566d255f75ec91919248c99abe29d5c9879758f68808f2a24dfeb386328dae00d06286a0d46b6b7ea117ad7fdbb5d9f833abf36984190a45bbeb9cd2e45af3f9077b208147e798370bd9e5373881ffa94267b82fc7cc4f11b5258cf219950a5a5732fbe10d385e9053c6fd7b5cc3098aedba588a2b619bc54e7f12228b907aea4f4544c65990baaad1b522635dfe5bb6b71721707f815d7a8ee24c8328d67b46e199c0e5c0c7fdb44b3e9defd5726317f74f4cb87909b00f1f4df8858a980a86f87d27dcf33d6d89bc4c7ec088a7270aff9470d7ef12835eddb86f7471af31e8f2cde0cf102d9c9df7cbf1064d1f61acc5897959df60a6e2861c90316c36f20cfb25d069a21a28441003ea5530e842e6112bc90d3cf67184c063bb33182b59aa49c97eee50f6141ba81518b95963b66f20a7296e911ad472e79ffa926feb2e5c5da5e97ff007445beff0c8711a90c7c7525d48e463c30997d530cab0a845ac173f399effcf6af84f50c6319a1ce3565eef74df335cab14daa748ce2037364d90a2ba428d56d5b3b602b2030ea6b721ffb19078bcfe3bbcace66fb3058745b92ff01de9ddb4dd4e0e460b090bc3983946c007e5f465cd9869cd67c5bcd5881c4557c81c69289bca96d4dc4f4cfa421547d5d5c92279b996173704616c1d50e2016efaee7acfb01c56323bad976ffb39f7d3407f7995742a63751a746e6ef6035923e4e879d92ec3e5d2390fe363270cfdadb75f1db87a71d2343229ec140cf75a25e98a298c98c22fd144b675e5fcf39115b243d8c29ab8d6f7c87a7313481fb99bdeb759072cc9a6ec5153d94298bbfdf80bc3075a503c232e3be025004d281d3478bcbdd0f5549be09fca89da7d0e34af97302607c20c464e034c6428cbe326c07615b39fc72ab6f254c7aad6102f813b9623c6a7601b6ea29f84e86999b1287bd111bfa49672c886cca6eb8786eefc96a84cb0aa04ee0334d3fe23a0cef39078bce8f22cc35eeb2fcbe22280df1209ffb05347cbc3611915e7fedbdc752c658c199b23b3346367cc5a68be6a79069a188f6a6efb2d2aaa387ebed66eeb411b9094254041932876a1120a4ae1d20dfaa8709c62828a3ee332cbbe997b6eae047bd493535a25042e1fb3f2b2933c17f6ef96c1793c0ff79fe740b9282416e5e65ef58254055e38afa2e8cec89274f4e542153896baae0e50c37c83bf1034a5b722c874652182954d271991110e43333a48fd85f9b3427915ff9bd2e3b5342858fd2d86801d1cddb55b66bda6c7df3b04ceeae4a7ce74391255ede63695046d8c27241514ceebbc0a5e6a119f7830600385c3b67583ad2e48f8517c4f31349d2d3535a71b1ba2543fca666e1a06f62ce20557ef459e419e0534feec1958cd6fb5c4413eaa1c7e7a64cb19f6a592fd74def605d69a5e6fe14ad77f60ef0424a8f6b7026c1f4b493c71b6428a826fa731022276888b0dd9fcf6dd67cfdfd2fd1765c3c5d9c5fe4d2012bf8217b9dc91b583d945f70d0df13d3b3380200f02753e86f0de109129586629db95d829235e0db826de6e17c830c1aeca17573cbf95cd18c92b8e12c57e93e189d25fe6e71c32526f82e5ef76fc9b8c3a8bafdebf53e7e9132de09355ca7f5105a61e059d5924d227119175714b5ab610b8dfa9c53d0b4105481bd5f3d47dd6d9d0eee798d7e38644ecd4971b2663a8c628cf51016597eb2c70640a0fea463f9012eca14e957b4280866ad8490fe7c3db57cd40684dc5655bafdd28e8a24217ca96e6ea1ded591b0b8f0cc9f79059fca8c22a884fab4be708e50a38ed1c0350015f3e4326f0af07c57b31d13868167e6ae776f3203f9f03b316233a4d7045b4652b506238a9be0b68b54e6bc52cc1c0894fbfe5071616170ca4895f6636f9be5df32e09f7429c7569aa42715809969b3f8a88080f57155b4c0cbe54039fa8996c4614657a9e4c4b1eafaaf0a663c0d461380ecd907688668d119c0361c6ac486cda549521ad2702d54053e4c2747e710399e235fc8defe54c64218915598c14de35cec58f24328d950ba6548595bc4b9e6c45e3ccdaed1b1dfe9ae3e7dfa2e768d75d7408242d0c504ef2fa583703d8509e5520db9692003b34c9e4ed48aabaa6908cf599667a4ce679ccbadd440900bd917522eeecd73dc2d90446db4d7d40323ec7971477d061fbd6d1c6434c8614ef7a909f46acb4657c4828601a30b993cd9c1b14215674471fceb9777917d6b3cf6c217d453d01ae5007f7ed70f92aaddae11d2f9bcb5854c1292303c3324fef63eff0a3e7ed487310c81a23bb2f89f68a44af31ffc759827b9855fbc6b9e1321bdbed45679c14d5d72b89a7e684ca8fb434352632533b622c8b5ebd162148c301496c0a18fbf31f10e2319020f5f59e81050f21bbed6b007775bc87b3f0ef643d0294dc7db502a0a45d3c68024fad13885d0212fc96067b2de27c2ec471b201cd50f38fc777a6123931e148c4d888097e6ea4f379ff69ba12cda93b2f48ffbb7286395232a4a78094014fbf8f5b1ae3d0ac780efad2721b2996711f6c3ff54468028fc8fcab62fdd160e1e0b18a8b1726dc1bdf34c2ee35ece720716f01f495eb9adc8361e6bcd0f7fdf7a21abb2ea14ab6563f6a9e580c3e5dd0ee7dcaf5d36f04696ddae6b36039cc611020c783504fa233179397f40dee4199528bd2adf4dd0037d0709fcb0c989ed2a26b0b6d475d6c3e25ef26a87d8b25974ed4a84453df731a3d3d496a4807b5ebc5f310dfa6b72f52634cb5705cca5253899ab69035290a0e1f78d148b80c35cac0275c8a5bab51670e7aca012000000000000000ab0924172f9c2a1d"], 0xfce) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="f005133cfbe5786bbc0bd3f1869d", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fddbdf250700000008002c00040000000500350080000000050033000200000008003b000000010008002b008b6200000500300000000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.stat\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f00000002c0), &(0x7f0000000240)=r7}, 0x20) ioctl$PPPOEIOCDFWD(r7, 0xb101, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000006000000000000000300000014120000", @ANYRESHEX, @ANYRES16=r6], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmmsg$unix(r7, 0x0, 0x0, 0x8000) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES64=r3], 0x7c}, 0x1, 0x0, 0x0, 0x44010}, 0x20000000) 1.944801623s ago: executing program 4 (id=3592): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) write(0xffffffffffffffff, &(0x7f0000000580)="4beac53d8760ad2dc5ec5ab4baf37089fa2da41adef1598ed7abfaaa17b28ab3d3c5330e18cea9cdd82e1b2babdb6b5abc009401fa25bb93f00bef23ea1a54b87452817e0b452120ff2ee125597b6ba75c1664f0ddcdfc84cd33b9220f7e6d5b121ae706826ab4f169a2d108274f7348a2132d443fafbf49347a3371c3407f6a13710c", 0x83) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, 0x0, 0x44042) socket$inet(0x2, 0x4, 0x1) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000040)=0x401, 0x4) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socket$unix(0x1, 0x2, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x14, 0x2, {0x0, 0x0, 0x4, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x20040000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r5, 0x0, 0x16, 0x0, &(0x7f0000002480)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) 1.921188081s ago: executing program 0 (id=3593): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000140)=0x6, 0x8) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000001a00010000000000fbdbdf250a8080fc0000000000000000080001000000000008000100ffffffff08000400", @ANYRES32=0x0, @ANYBLOB="08001f00", @ANYRES32, @ANYBLOB="08000f"], 0x44}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.654780204s ago: executing program 3 (id=3594): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0xe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2b, 0x80801, 0x1) shutdown(r3, 0x7ffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x13f}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000400)={0x18, 0x1402, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x4850) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x600}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2103096b}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8bd}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x810) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xffffffff, 0xe, 0x0, &(0x7f00000000c0)="05004013ffffffffa000c4353512", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0xd, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xd}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x44, 0x30, 0xb, 0x5, 0x25df5bfc, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xf646d5f7286d7fdb}, 0x40) socket$nl_route(0x10, 0x3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x0, 0x40}}, 0x40) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 1.65377296s ago: executing program 1 (id=3595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x24000800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0xffffffffffffff07, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40488c0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@ipv6_getmulticast={0x14, 0x3a, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000580)={r5, 0x7}, &(0x7f0000000600)=0x8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0x218, 0x218, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x0, 0x2, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000]}}}, @common=@set={{0x40}, {{0x0, [0x218]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@private=0xa010102, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) r7 = socket$netlink(0x10, 0x3, 0x9) sendmsg$netlink(r7, &(0x7f0000006f40)={0x0, 0x0, &(0x7f0000006e80)=[{&(0x7f0000000180)={0x10}, 0x10}, {&(0x7f0000000380)=ANY=[@ANYBLOB="1000000700000000fdffffff00000000"], 0x10}], 0x2}, 0x0) 1.653368241s ago: executing program 0 (id=3596): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003, {}, 0xff}, 0x18) sendto$inet6(r0, 0x0, 0x8, 0x4040004, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400c89c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000080008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r3, 0x25, 0x0, @void}, 0x10) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000009c0)=ANY=[@ANYBLOB="03000000000000000a004e240000000cff010000000000000000000000000001"], 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x6f, &(0x7f0000000000)=ANY=[], 0x0) 1.318350053s ago: executing program 0 (id=3597): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) syz_emit_ethernet(0xf86, &(0x7f0000000980)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0xf50, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private1, [{0x18, 0xa, "21125ef61d153277b8e16396521752b9adbee5aeae013164e249ea90143563744ab5a8c881554b739ae98935e8a7f4792f99c59851a9a959f40d7066709c3d92ae9e171f65c9080c60744ce3c5e11510b149"}, {0x1, 0x3, "41d744ea371d3b2fc03dfafa7aad188985958a016a056c5117c8"}, {0x18, 0x6, "a6c471be3be48418bde0019a790511b1e0fd42262d975733226081a88984ca8e8c93d7824af40d148d2d8f8e63fb5a0985"}, {0xe, 0x3, "04983a676fbfb2659e5a20860a09bce68dcc0dcef6b456be9a4b42c1"}, {0x1, 0x1cf, "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"}]}}}}}}, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r6 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e22, 0x20, @dev={0xfe, 0x80, '\x00', 0x2}, 0xfffffffc}, 0x1b) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) unshare(0x22020600) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r7, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x403, 0x78bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.101886593s ago: executing program 2 (id=3598): unshare(0x60600) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x8003}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="090000004028020000000a00883b1c4ef226b34f0200000100000ee000f18347bb119fc128df78d6db388e4cecc0f78a12fb853101644566b7ab5d9d6f", @ANYRES64, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB='\x00'/28], 0x5f) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x15, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00}, 0x94) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000040)=r1, 0x4) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x2, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000300000000002604fdffff02000014000000033800001d130000000000007a0af8ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c673825a09a0d1b91bbbf62a8160dc7774f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xfa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000140)={0x3, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = socket(0x2, 0x2, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000002f00)={0x7, [0x731e, 0x8001], 0x8000}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000240)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, &(0x7f0000002fc0)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r6, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0xfffffffffffffd7f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) 1.093903134s ago: executing program 3 (id=3599): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r0, {0x0, 0xd}, {0x2, 0xb}, {0xf, 0xffe0}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x4890) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd6900fedbdf25020007001c00018008000700", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r0, @ANYBLOB="3000018008000300ac141412060001000a000000050002000d00000014000400fc0100"/48], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="0c4a522d120d68306fc7e0f85f124d89a52a6a68d513ab1f0be2e6a230779569dcafbb154e94e72f47a2f08f31b0508665f7c8377d09adf4b06173d31011a9112f1b78bdc92e8cf952a4300ee3a3de6a526f7fc583c86b1aef33335725", 0x5d}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x9}, 0x8) shutdown(r3, 0x1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) epoll_wait(r4, &(0x7f00000001c0)=[{}], 0x1, 0xffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r7) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, r8, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x2}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x10c, r8, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x78}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0xffffffff}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 625.35516ms ago: executing program 3 (id=3600): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x4}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x40080) socket$inet6(0xa, 0xa, 0x101) 558.331401ms ago: executing program 1 (id=3601): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001900010000000000ff0100000a824000", @ANYRES32=0x0, @ANYBLOB="00000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getroute={0x1c, 0x1a, 0x8, 0x70bd29, 0x25dfdbfb, {0x2, 0x14, 0x20, 0xa, 0xfe, 0x0, 0x6, 0xa, 0x1800}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x4054) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r1) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001900010000000000ff0100000a824000", @ANYRES32=0x0, @ANYBLOB="00000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getroute={0x1c, 0x1a, 0x8, 0x70bd29, 0x25dfdbfb, {0x2, 0x14, 0x20, 0xa, 0xfe, 0x0, 0x6, 0xa, 0x1800}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x4054) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) (async) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r1) (async) 255.34397ms ago: executing program 1 (id=3602): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) 93.594074ms ago: executing program 3 (id=3603): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="20000000000000000000000007000000440466d39404010094040100940401001c000000000000000000000008000000", @ANYBLOB="ac"], 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xae}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x81}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@ifindex=r4, 0x32, 0x1, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x400009, 0xf, r9}, 0x20) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={r9, 0x8, 0x20, 0xffffffffffffffff, 0xe}, &(0x7f0000000280)=0x18) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="38010000100033060000000000002000ac1414aa000000000000000000000000fe800000000000000000000000000014ffff3ffc5e2180050200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000001000004d53c0000000a0101000000000000000000000000002303000000005f00000000000000000000000000000000000100000000000000000000000000000000000000000000000000200000000000feffff7e0000000000000000000000000000000000000000040000000000000000000000000200002b35695655848bb80200000021bd700000350000090002010000000000000000480002006374722863617374362900"/240], 0x138}}, 0x4) 78.822488ms ago: executing program 0 (id=3604): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100), 0x10) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x6000200a}) sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @mcast2}, 0x1c, 0x0}}], 0x1, 0x24040000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000980)={&(0x7f0000000080), 0xc, &(0x7f0000000940)={&(0x7f0000000780)=@bridge_newneigh={0x54, 0x1c, 0x1, 0x0, 0x0, {}, [@NDA_FLAGS_EXT={0x8}, @NDA_IFINDEX={0x8}, @NDA_DST_IPV6={0x4, 0x1, @mcast1}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5}]}, @NDA_LINK_NETNSID={0x8}]}, 0x54}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r9, 0x0, 0x1, &(0x7f0000000040)=""/1, &(0x7f0000000140)=0x1) close(r8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x400, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r11, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 0s ago: executing program 4 (id=3605): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="2800000001070139feffff09000000000000000314000780080001"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@empty}, 0x14) kernel console output (not intermixed with test programs): 94.806376][T15581] bridge9: entered allmulticast mode [ 394.849851][T15581] bond14: (slave bridge9): Enslaving as an active interface with an up link [ 395.069233][T15613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2454'. [ 395.306671][T15618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2457'. [ 395.325678][T15618] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2457'. [ 395.394796][T15618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2457'. [ 395.412522][T15618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2457'. [ 395.499932][T15622] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2460'. [ 395.858254][T15648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2466'. [ 395.872156][T15649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2462'. [ 396.009314][T15648] bond13: entered promiscuous mode [ 396.030302][T15648] 8021q: adding VLAN 0 to HW filter on device bond13 [ 396.056724][T15642] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2462'. [ 396.095284][T15653] 8021q: adding VLAN 0 to HW filter on device bond13 [ 396.125138][T15653] bond13: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 396.153237][T15653] bond13: (slave ip6gre2): Error -95 calling set_mac_address [ 396.388957][T15672] ip6tnl0: Caught tx_queue_len zero misconfig [ 396.615911][T15684] syzkaller0: entered promiscuous mode [ 396.638335][T15684] syzkaller0: entered allmulticast mode [ 397.901823][T15732] netlink: 'syz.4.2492': attribute type 16 has an invalid length. [ 397.923095][T15732] netlink: 'syz.4.2492': attribute type 17 has an invalid length. [ 398.152229][T15732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.174699][T15732] team0: left promiscuous mode [ 398.189873][T15732] team0: left allmulticast mode [ 398.200976][T15732] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.311487][T15732] veth1_vlan: left promiscuous mode [ 398.335353][T15732] veth0_vlan: left promiscuous mode [ 398.342699][T15757] FAULT_INJECTION: forcing a failure. [ 398.342699][T15757] name failslab, interval 1, probability 0, space 0, times 0 [ 398.345684][T15732] veth0_vlan: entered promiscuous mode [ 398.355557][T15757] CPU: 1 UID: 0 PID: 15757 Comm: syz.3.2496 Not tainted syzkaller #0 PREEMPT(full) [ 398.355584][T15757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 398.355595][T15757] Call Trace: [ 398.355602][T15757] [ 398.355611][T15757] dump_stack_lvl+0xe8/0x150 [ 398.355641][T15757] should_fail_ex+0x40c/0x560 [ 398.355671][T15757] should_failslab+0xa8/0x100 [ 398.355695][T15757] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 398.355721][T15757] ? skb_clone+0x212/0x3a0 [ 398.355740][T15757] ? skb_clone+0x212/0x3a0 [ 398.355766][T15757] skb_clone+0x212/0x3a0 [ 398.355790][T15757] bpf_clone_redirect+0x170/0x4b0 [ 398.355822][T15757] ? bpf_test_run+0x1d1/0x830 [ 398.355844][T15757] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 398.355875][T15757] ? __kernel_text_address+0xd/0x30 [ 398.355898][T15757] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 398.355934][T15757] ? __pfx___schedule+0x10/0x10 [ 398.355956][T15757] ? ktime_get+0x45/0x220 [ 398.355995][T15757] ? preempt_schedule_thunk+0x16/0x40 [ 398.356023][T15757] ? preempt_schedule_common+0x82/0xd0 [ 398.356046][T15757] ? bpf_test_run+0x1d1/0x830 [ 398.356069][T15757] ? bpf_test_timer_continue+0x10c/0x320 [ 398.356094][T15757] bpf_test_run+0x354/0x830 [ 398.356135][T15757] ? __pfx_bpf_test_run+0x10/0x10 [ 398.356171][T15757] ? __kasan_krealloc+0xec/0x110 [ 398.356199][T15757] ? skb_dst_set+0x72/0x140 [ 398.356221][T15757] bpf_prog_test_run_skb+0xe35/0x2230 [ 398.356270][T15757] ? __fget_files+0x3a2/0x420 [ 398.356288][T15757] ? __fget_files+0x2a/0x420 [ 398.356310][T15757] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 398.356330][T15757] bpf_prog_test_run+0x2c5/0x340 [ 398.356355][T15757] __sys_bpf+0xa22/0xd90 [ 398.356381][T15757] ? __pfx___sys_bpf+0x10/0x10 [ 398.356411][T15757] ? __fget_files+0x2a/0x420 [ 398.356446][T15757] ? ksys_write+0x242/0x270 [ 398.356469][T15757] ? __pfx_ksys_write+0x10/0x10 [ 398.356496][T15757] __x64_sys_bpf+0xba/0xd0 [ 398.356521][T15757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.356541][T15757] do_syscall_64+0x174/0x580 [ 398.356557][T15757] ? trace_irq_disable+0x3b/0x140 [ 398.356574][T15757] ? clear_bhb_loop+0x40/0x90 [ 398.356596][T15757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.356613][T15757] RIP: 0033:0x7f3ed4f9ce59 [ 398.356631][T15757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.356646][T15757] RSP: 002b:00007f3ed31d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 398.356667][T15757] RAX: ffffffffffffffda RBX: 00007f3ed5216090 RCX: 00007f3ed4f9ce59 [ 398.356680][T15757] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 398.356691][T15757] RBP: 00007f3ed31d5090 R08: 0000000000000000 R09: 0000000000000000 [ 398.356702][T15757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 398.356713][T15757] R13: 00007f3ed5216128 R14: 00007f3ed5216090 R15: 00007fff15224158 [ 398.356743][T15757] [ 398.655184][T15732] veth1_vlan: entered promiscuous mode [ 398.667127][T15732] veth1_macvtap: left promiscuous mode [ 398.674517][T15732] veth0_macvtap: left promiscuous mode [ 398.686632][T15732] veth0_macvtap: entered promiscuous mode [ 398.694869][T15732] veth1_macvtap: entered promiscuous mode [ 398.708649][T15732] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 398.716267][T15732] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 398.745927][T15732] 8021q: adding VLAN 0 to HW filter on device bond1 [ 398.757620][T15732] geneve0: entered promiscuous mode [ 398.777753][T15732] 8021q: adding VLAN 0 to HW filter on device bond2 [ 398.787211][T15732] 8021q: adding VLAN 0 to HW filter on device bond3 [ 398.811841][T15732] 8021q: adding VLAN 0 to HW filter on device eth0 [ 398.823390][T15732] 8021q: adding VLAN 0 to HW filter on device eth1 [ 398.837422][T15732] 8021q: adding VLAN 0 to HW filter on device eth2 [ 398.852016][T15732] 8021q: adding VLAN 0 to HW filter on device eth3 [ 398.865110][T15732] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 398.882229][ T11] lo speed is unknown, defaulting to 1000 [ 398.913820][T10144] bond3: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 398.927217][ T11] syz1: Port: 1 Link ACTIVE [ 399.137099][T12626] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.163248][T12626] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 55067 - 0 [ 399.201597][ T5743] lo speed is unknown, defaulting to 1000 [ 399.238339][T12626] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.270592][T12626] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 55067 - 0 [ 399.302879][ T4954] block nbd2: Possible stuck request ffff888026f87000: control (read@0,1024B). Runtime 270 seconds [ 399.312267][T12626] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.314192][ T4954] block nbd2: Possible stuck request ffff888026f871c0: control (read@1024,1024B). Runtime 270 seconds [ 399.333684][ T4954] block nbd2: Possible stuck request ffff888026f87380: control (read@2048,1024B). Runtime 270 seconds [ 399.344857][ T4954] block nbd2: Possible stuck request ffff888026f87540: control (read@3072,1024B). Runtime 270 seconds [ 399.372547][T12626] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 55067 - 0 [ 399.451536][T12626] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.503737][T12626] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 55067 - 0 [ 399.638780][T15777] __nla_validate_parse: 7 callbacks suppressed [ 399.638810][T15777] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2503'. [ 399.747809][T15786] atomic_op ffff88807683b198 conn xmit_atomic 0000000000000000 [ 399.768668][T15786] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2506'. [ 399.949879][T15797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2508'. [ 400.132685][T15804] bridge8: port 1(veth9) entered blocking state [ 400.141139][T15804] bridge8: port 1(veth9) entered disabled state [ 400.148110][T15804] veth9: entered allmulticast mode [ 400.160230][T15804] veth9: entered promiscuous mode [ 400.223518][T15808] bridge8: port 2(veth11) entered blocking state [ 400.230407][T15808] bridge8: port 2(veth11) entered disabled state [ 400.237179][T15808] veth11: entered allmulticast mode [ 400.265789][T15808] veth11: entered promiscuous mode [ 400.293498][T15813] tunl0: Caught tx_queue_len zero misconfig [ 400.317394][T15818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2515'. [ 400.320940][T15815] lo: Caught tx_queue_len zero misconfig [ 400.334737][T15817] netlink: 'syz.2.2515': attribute type 1 has an invalid length. [ 400.354192][T15810] sctp: [Deprecated]: syz.0.2513 (pid 15810) Use of struct sctp_assoc_value in delayed_ack socket option. [ 400.354192][T15810] Use struct sctp_sack_info instead [ 400.379508][T15815] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 400.382595][T15818] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2515'. [ 400.426395][ T4940] block nbd7: Receive control failed (result -32) [ 400.437228][T15817] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2515'. [ 400.466479][T15821] netlink: 'syz.4.2516': attribute type 11 has an invalid length. [ 400.589144][T15818] smc: net device wlan0 applied user defined pnetid SYZ0 [ 400.715626][T15821] bridge8: port 2(veth11) entered blocking state [ 400.722271][T15821] bridge8: port 2(veth11) entered forwarding state [ 400.756403][T15823] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 400.798284][ T14] bridge8: port 1(veth9) entered blocking state [ 400.804818][ T14] bridge8: port 1(veth9) entered forwarding state [ 400.835884][T15839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2520'. [ 400.843226][T15841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2522'. [ 400.913929][T15842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2520'. [ 401.180314][T15844] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2524'. [ 401.444445][T15858] netlink: 'syz.3.2526': attribute type 3 has an invalid length. [ 401.548024][T15861] syzkaller0: entered promiscuous mode [ 401.574130][T15861] syzkaller0: entered allmulticast mode [ 401.688524][T15870] syzkaller1: entered promiscuous mode [ 401.702738][T15870] syzkaller1: entered allmulticast mode [ 402.095686][T15894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.127202][T15894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.160686][T15894] batman_adv: batadv0: Removing interface: gretap2 [ 402.552879][T15917] syzkaller0: entered promiscuous mode [ 402.558724][T15917] syzkaller0: entered allmulticast mode [ 403.306242][T15898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 403.674431][T15934] syzkaller0: entered promiscuous mode [ 403.695329][T15934] syzkaller0: entered allmulticast mode [ 403.756130][T15941] netlink: 'syz.0.2548': attribute type 30 has an invalid length. [ 403.808105][T15946] netlink: 'syz.0.2548': attribute type 30 has an invalid length. [ 403.933856][T15947] bond15: Unable to set peer notification delay as MII monitoring is disabled [ 403.945035][T15947] bond15 (unregistering): Released all slaves [ 404.024445][T15936] lo speed is unknown, defaulting to 1000 [ 404.030494][T10144] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.055504][T10144] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.102866][T10144] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.129402][T10144] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.954512][T15936] lo speed is unknown, defaulting to 1000 [ 404.980848][T15936] xfrm0 speed is unknown, defaulting to 1000 [ 405.164268][ T48] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.190309][ T48] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.223845][ T48] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.245515][ T48] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.448850][T15986] lo speed is unknown, defaulting to 1000 [ 405.467233][T15993] __nla_validate_parse: 10 callbacks suppressed [ 405.467252][T15993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2566'. [ 406.208271][T16013] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2571'. [ 406.362683][T16029] xfrm0: entered allmulticast mode [ 406.406678][T16029] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 406.473965][T15986] lo speed is unknown, defaulting to 1000 [ 406.503084][T15986] xfrm0 speed is unknown, defaulting to 1000 [ 406.899352][T16043] bridge9: entered allmulticast mode [ 406.937976][T16039] syzkaller0: entered promiscuous mode [ 406.953901][T16039] syzkaller0: entered allmulticast mode [ 407.151744][T16062] netlink: 'syz.4.2582': attribute type 8 has an invalid length. [ 407.458176][T16073] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 407.484775][T16074] FAULT_INJECTION: forcing a failure. [ 407.484775][T16074] name failslab, interval 1, probability 0, space 0, times 0 [ 407.497561][T16074] CPU: 0 UID: 0 PID: 16074 Comm: syz.1.2585 Not tainted syzkaller #0 PREEMPT(full) [ 407.497589][T16074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 407.497602][T16074] Call Trace: [ 407.497611][T16074] [ 407.497621][T16074] dump_stack_lvl+0xe8/0x150 [ 407.497644][T16074] should_fail_ex+0x40c/0x560 [ 407.497664][T16074] should_failslab+0xa8/0x100 [ 407.497680][T16074] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 407.497698][T16074] ? skb_clone+0x212/0x3a0 [ 407.497713][T16074] ? skb_clone+0x212/0x3a0 [ 407.497729][T16074] skb_clone+0x212/0x3a0 [ 407.497744][T16074] bpf_clone_redirect+0x170/0x4b0 [ 407.497767][T16074] ? bpf_test_run+0x1d1/0x830 [ 407.497781][T16074] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 407.497796][T16074] ? __kernel_text_address+0xd/0x30 [ 407.497810][T16074] ? unwind_get_return_address+0x4d/0x90 [ 407.497826][T16074] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 407.497844][T16074] ? arch_stack_walk+0xfb/0x150 [ 407.497869][T16074] ? ktime_get+0x45/0x220 [ 407.497891][T16074] ? ktime_get+0x45/0x220 [ 407.497910][T16074] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 407.497928][T16074] ? lockdep_hardirqs_on+0x7a/0x110 [ 407.497946][T16074] ? ktime_get+0x45/0x220 [ 407.497962][T16074] ? seqcount_lockdep_reader_access+0xea/0x100 [ 407.497979][T16074] ? bpf_test_run+0x1d1/0x830 [ 407.497994][T16074] ? bpf_test_timer_continue+0x10c/0x320 [ 407.498014][T16074] bpf_test_run+0x354/0x830 [ 407.498039][T16074] ? __pfx_bpf_test_run+0x10/0x10 [ 407.498061][T16074] ? __kasan_krealloc+0xec/0x110 [ 407.498078][T16074] ? skb_dst_set+0x72/0x140 [ 407.498093][T16074] bpf_prog_test_run_skb+0xe35/0x2230 [ 407.498118][T16074] ? __fget_files+0x3a2/0x420 [ 407.498130][T16074] ? __fget_files+0x2a/0x420 [ 407.498144][T16074] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 407.498157][T16074] bpf_prog_test_run+0x2c5/0x340 [ 407.498173][T16074] __sys_bpf+0xa22/0xd90 [ 407.498189][T16074] ? __pfx___sys_bpf+0x10/0x10 [ 407.498207][T16074] ? __fget_files+0x2a/0x420 [ 407.498228][T16074] ? ksys_write+0x242/0x270 [ 407.498244][T16074] ? __pfx_ksys_write+0x10/0x10 [ 407.498261][T16074] __x64_sys_bpf+0xba/0xd0 [ 407.498278][T16074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.498291][T16074] do_syscall_64+0x174/0x580 [ 407.498302][T16074] ? trace_irq_disable+0x3b/0x140 [ 407.498313][T16074] ? clear_bhb_loop+0x40/0x90 [ 407.498327][T16074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.498339][T16074] RIP: 0033:0x7f99b179ce59 [ 407.498352][T16074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.498362][T16074] RSP: 002b:00007f99af9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 407.498377][T16074] RAX: ffffffffffffffda RBX: 00007f99b1a16090 RCX: 00007f99b179ce59 [ 407.498386][T16074] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 407.498394][T16074] RBP: 00007f99af9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 407.498401][T16074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 407.498408][T16074] R13: 00007f99b1a16128 R14: 00007f99b1a16090 R15: 00007fffb72108c8 [ 407.498427][T16074] [ 407.874761][T16069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 407.888538][T16073] bridge0: left promiscuous mode [ 407.895344][T16073] vlan2: left promiscuous mode [ 407.900485][T16073] geneve0: left promiscuous mode [ 408.192293][T16085] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2588'. [ 408.482665][T16107] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2596'. [ 408.617582][T16122] Cannot find set identified by id 65534 to match [ 408.732338][ T4940] Bluetooth: hci3: command 0x0406 tx timeout [ 409.390428][T16154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2606'. [ 409.531760][ T4954] block nbd0: Possible stuck request ffff888026ef5080: control (read@0,1024B). Runtime 300 seconds [ 409.543778][ T4954] block nbd0: Possible stuck request ffff888026ef5240: control (read@1024,3072B). Runtime 300 seconds [ 409.781864][T16172] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2611'. [ 409.791627][T16172] bond0: invalid ARP target 0.0.0.0 specified for addition [ 409.801987][T16172] bond0: option arp_ip_target: invalid value (0) [ 409.807045][T16174] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2612'. [ 409.868207][T16177] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2613'. [ 409.947396][T16180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2614'. [ 409.962395][T16180] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2614'. [ 410.595348][T16202] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2620'. [ 410.618907][T16205] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2620'. [ 410.861418][T16222] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.879354][T16221] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 411.631105][T16249] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 411.642710][T16248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 412.057791][T16270] netlink: 'syz.1.2639': attribute type 50 has an invalid length. [ 412.486464][T16290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.174542][T16323] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2654'. [ 413.332267][T16323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2654'. [ 413.520856][T16339] FAULT_INJECTION: forcing a failure. [ 413.520856][T16339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.542662][T16339] CPU: 0 UID: 0 PID: 16339 Comm: syz.3.2658 Not tainted syzkaller #0 PREEMPT(full) [ 413.542691][T16339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 413.542702][T16339] Call Trace: [ 413.542710][T16339] [ 413.542719][T16339] dump_stack_lvl+0xe8/0x150 [ 413.542752][T16339] should_fail_ex+0x40c/0x560 [ 413.542786][T16339] _copy_from_user+0x2d/0xb0 [ 413.542808][T16339] ___sys_sendmsg+0x1c6/0x360 [ 413.542830][T16339] ? __lock_acquire+0x683/0x2cf0 [ 413.542857][T16339] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.542914][T16339] ? __fget_files+0x2a/0x420 [ 413.542934][T16339] ? __fget_files+0x3a2/0x420 [ 413.542974][T16339] __x64_sys_sendmsg+0x1b1/0x290 [ 413.542999][T16339] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 413.543038][T16339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.543060][T16339] do_syscall_64+0x174/0x580 [ 413.543078][T16339] ? trace_irq_disable+0x3b/0x140 [ 413.543097][T16339] ? clear_bhb_loop+0x40/0x90 [ 413.543122][T16339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.543140][T16339] RIP: 0033:0x7f3ed4f9ce59 [ 413.543159][T16339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.543176][T16339] RSP: 002b:00007f3ed31f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.543198][T16339] RAX: ffffffffffffffda RBX: 00007f3ed5215fa0 RCX: 00007f3ed4f9ce59 [ 413.543212][T16339] RDX: 0000000004000800 RSI: 0000200000001800 RDI: 0000000000000003 [ 413.543226][T16339] RBP: 00007f3ed31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 413.543238][T16339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.543250][T16339] R13: 00007f3ed5216038 R14: 00007f3ed5215fa0 R15: 00007fff15224158 [ 413.543281][T16339] [ 414.148637][T16369] FAULT_INJECTION: forcing a failure. [ 414.148637][T16369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.227983][T16369] CPU: 0 UID: 0 PID: 16369 Comm: syz.1.2666 Not tainted syzkaller #0 PREEMPT(full) [ 414.228014][T16369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 414.228027][T16369] Call Trace: [ 414.228035][T16369] [ 414.228044][T16369] dump_stack_lvl+0xe8/0x150 [ 414.228076][T16369] should_fail_ex+0x40c/0x560 [ 414.228111][T16369] _copy_from_user+0x2d/0xb0 [ 414.228134][T16369] ___sys_sendmsg+0x1c6/0x360 [ 414.228157][T16369] ? __lock_acquire+0x683/0x2cf0 [ 414.228184][T16369] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.228250][T16369] ? __fget_files+0x2a/0x420 [ 414.228270][T16369] ? __fget_files+0x3a2/0x420 [ 414.228302][T16369] __x64_sys_sendmsg+0x1b1/0x290 [ 414.228328][T16369] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.228373][T16369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.228396][T16369] do_syscall_64+0x174/0x580 [ 414.228414][T16369] ? trace_irq_disable+0x3b/0x140 [ 414.228435][T16369] ? clear_bhb_loop+0x40/0x90 [ 414.228462][T16369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.228482][T16369] RIP: 0033:0x7f99b179ce59 [ 414.228501][T16369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.228528][T16369] RSP: 002b:00007f99af9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.228551][T16369] RAX: ffffffffffffffda RBX: 00007f99b1a15fa0 RCX: 00007f99b179ce59 [ 414.228565][T16369] RDX: 0000000004000800 RSI: 0000200000001800 RDI: 0000000000000003 [ 414.228579][T16369] RBP: 00007f99af9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 414.228591][T16369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.228603][T16369] R13: 00007f99b1a16038 R14: 00007f99b1a15fa0 R15: 00007fffb72108c8 [ 414.228643][T16369] [ 414.575187][T16380] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2667'. [ 414.614236][T16379] vlan0: entered promiscuous mode [ 414.845157][T16396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2673'. [ 415.017747][T16403] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2674'. [ 415.385335][T16414] lo speed is unknown, defaulting to 1000 [ 415.795268][T16424] FAULT_INJECTION: forcing a failure. [ 415.795268][T16424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.842292][T16424] CPU: 0 UID: 0 PID: 16424 Comm: syz.0.2680 Not tainted syzkaller #0 PREEMPT(full) [ 415.842322][T16424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 415.842333][T16424] Call Trace: [ 415.842340][T16424] [ 415.842350][T16424] dump_stack_lvl+0xe8/0x150 [ 415.842380][T16424] should_fail_ex+0x40c/0x560 [ 415.842409][T16424] _copy_from_user+0x2d/0xb0 [ 415.842432][T16424] ____sys_sendmsg+0x303/0x850 [ 415.842461][T16424] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.842494][T16424] ? import_iovec+0x73/0xa0 [ 415.842519][T16424] ___sys_sendmsg+0x2a5/0x360 [ 415.842539][T16424] ? __lock_acquire+0x683/0x2cf0 [ 415.842566][T16424] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.842625][T16424] ? __fget_files+0x2a/0x420 [ 415.842643][T16424] ? __fget_files+0x3a2/0x420 [ 415.842674][T16424] __x64_sys_sendmsg+0x1b1/0x290 [ 415.842699][T16424] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 415.842741][T16424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.842763][T16424] do_syscall_64+0x174/0x580 [ 415.842782][T16424] ? trace_irq_disable+0x3b/0x140 [ 415.842800][T16424] ? clear_bhb_loop+0x40/0x90 [ 415.842825][T16424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.842845][T16424] RIP: 0033:0x7f880419ce59 [ 415.842864][T16424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.842882][T16424] RSP: 002b:00007f88050a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.842913][T16424] RAX: ffffffffffffffda RBX: 00007f8804415fa0 RCX: 00007f880419ce59 [ 415.842927][T16424] RDX: 0000000004000800 RSI: 0000200000001800 RDI: 0000000000000003 [ 415.842940][T16424] RBP: 00007f88050a8090 R08: 0000000000000000 R09: 0000000000000000 [ 415.842952][T16424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.842964][T16424] R13: 00007f8804416038 R14: 00007f8804415fa0 R15: 00007fff1492d398 [ 415.842997][T16424] [ 416.392588][T16440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2686'. [ 416.561917][T16440] 8021q: adding VLAN 0 to HW filter on device bond13 [ 416.623373][T16414] lo speed is unknown, defaulting to 1000 [ 416.753018][T16440] syzkaller0: entered promiscuous mode [ 416.776793][T16440] syzkaller0: entered allmulticast mode [ 416.795551][T16414] xfrm0 speed is unknown, defaulting to 1000 [ 418.253160][T16464] netlink: 'syz.1.2691': attribute type 13 has an invalid length. [ 419.513449][T16455] netlink: 'syz.4.2688': attribute type 6 has an invalid length. [ 419.521409][T16455] netlink: 'syz.4.2688': attribute type 7 has an invalid length. [ 419.529197][T16455] netlink: 'syz.4.2688': attribute type 8 has an invalid length. [ 419.537466][T16455] netlink: 'syz.4.2688': attribute type 15 has an invalid length. [ 419.767446][T16449] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 420.165441][T16498] syzkaller1: entered promiscuous mode [ 420.189439][T16498] syzkaller1: entered allmulticast mode [ 421.162340][T16547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2711'. [ 421.251730][T16551] openvswitch: netlink: Missing valid actions attribute. [ 421.280141][T16551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.528740][T16565] vlan4: entered allmulticast mode [ 421.537870][T16565] bond0: entered allmulticast mode [ 421.545548][T16565] gretap2: entered allmulticast mode [ 421.650492][T16570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2716'. [ 421.686061][T16570] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 421.709156][T16573] bridge10: entered promiscuous mode [ 421.715751][T16573] bridge10: entered allmulticast mode [ 421.961946][T16591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2722'. [ 422.011652][T16591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2722'. [ 422.037490][T16591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2722'. [ 422.754733][T16624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2731'. [ 423.136166][T16656] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2741'. [ 423.630790][T16676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2749'. [ 423.952880][T16692] lo speed is unknown, defaulting to 1000 [ 424.174592][T16697] tipc: Enabled bearer , priority 10 [ 424.282450][T16697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2754'. [ 425.084374][T16735] syzkaller1: entered promiscuous mode [ 425.104776][T16735] syzkaller1: entered allmulticast mode [ 425.138072][T16734] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2763'. [ 425.139245][T16692] lo speed is unknown, defaulting to 1000 [ 425.205936][T16692] xfrm0 speed is unknown, defaulting to 1000 [ 425.287672][T16741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2765'. [ 425.318051][T16741] netlink: 'syz.0.2765': attribute type 2 has an invalid length. [ 425.371420][T16746] batman_adv: batadv0: Adding interface: vlan2 [ 425.377728][T16746] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.420009][T16746] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 425.757874][T16757] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 425.948498][T16760] sctp: [Deprecated]: syz.3.2771 (pid 16760) Use of int in max_burst socket option deprecated. [ 425.948498][T16760] Use struct sctp_assoc_value instead [ 426.422930][T16786] syzkaller0: entered promiscuous mode [ 426.438987][T16786] syzkaller0: entered allmulticast mode [ 426.701433][T16797] RDS: rds_bind could not find a transport for ::ffff:172.20.20.45, load rds_tcp or rds_rdma? [ 427.084144][T16810] netlink: 'syz.4.2780': attribute type 4 has an invalid length. [ 427.097814][ T5735] lo speed is unknown, defaulting to 1000 [ 427.107823][ T5735] syz1: Port: 1 Link DOWN [ 427.114085][T16810] netlink: 'syz.4.2780': attribute type 4 has an invalid length. [ 427.122552][ T5735] lo speed is unknown, defaulting to 1000 [ 427.131998][ T5735] lo speed is unknown, defaulting to 1000 [ 427.137851][ T5735] syz1: Port: 1 Link ACTIVE [ 427.143381][ T24] lo speed is unknown, defaulting to 1000 [ 429.144969][T16765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 429.374709][ T4954] block nbd2: Possible stuck request ffff888026f87000: control (read@0,1024B). Runtime 300 seconds [ 429.385656][ T4954] block nbd2: Possible stuck request ffff888026f871c0: control (read@1024,1024B). Runtime 300 seconds [ 429.398032][ T4954] block nbd2: Possible stuck request ffff888026f87380: control (read@2048,1024B). Runtime 300 seconds [ 429.410133][ T4954] block nbd2: Possible stuck request ffff888026f87540: control (read@3072,1024B). Runtime 300 seconds [ 429.438847][T16820] netlink: 'syz.4.2782': attribute type 1 has an invalid length. [ 429.471269][T16820] nbd: error processing sock list [ 431.000892][T16872] syzkaller0: entered promiscuous mode [ 431.021902][T16872] syzkaller0: entered allmulticast mode [ 431.131970][T16881] __nla_validate_parse: 3 callbacks suppressed [ 431.131989][T16881] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2798'. [ 431.641176][T16896] openvswitch: netlink: Duplicate or invalid key (type 0). [ 431.675484][T16896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.338425][T16926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2802'. [ 432.567766][T16932] tipc: Enabled bearer , priority 30 [ 432.755436][T16942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2807'. [ 432.768467][T16942] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2807'. [ 432.778642][T16942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2807'. [ 432.950614][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2808'. [ 432.977642][T16948] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.482870][T16969] syzkaller0: entered promiscuous mode [ 433.504151][T16969] syzkaller0: entered allmulticast mode [ 433.706131][T16975] bond16: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 433.734659][T16981] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2819'. [ 433.747706][T16975] bond16 (unregistering): Released all slaves [ 433.767790][T16981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2819'. [ 433.862859][T16987] vxcan2: entered allmulticast mode [ 433.925549][T16985] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2820'. [ 434.043286][T16992] syzkaller0: entered promiscuous mode [ 434.048865][T16992] syzkaller0: entered allmulticast mode [ 434.090450][T16992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2823'. [ 434.093217][T16999] tipc: Enabled bearer , priority 0 [ 434.272006][T16999] syzkaller0: entered promiscuous mode [ 434.280961][T16999] syzkaller0: entered allmulticast mode [ 434.343863][T16999] tipc: Resetting bearer [ 434.403916][T16997] tipc: Resetting bearer [ 434.445954][T16997] tipc: Disabling bearer [ 434.580373][T17008] netlink: 'syz.1.2829': attribute type 1 has an invalid length. [ 434.813990][T17023] netlink: 'syz.3.2833': attribute type 29 has an invalid length. [ 434.885179][T17023] netlink: 'syz.3.2833': attribute type 29 has an invalid length. [ 434.900186][T17023] netlink: 'syz.3.2833': attribute type 29 has an invalid length. [ 435.461805][T17053] syzkaller0: entered promiscuous mode [ 435.648138][T17060] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 436.977026][T17067] __nla_validate_parse: 10 callbacks suppressed [ 436.977049][T17067] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2847'. [ 436.992978][T17067] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 437.149423][T17072] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2849'. [ 437.353571][T17078] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 437.365639][T17078] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 437.376909][T17078] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 437.385502][T17078] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 437.393603][T17078] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 437.690264][T17076] lo speed is unknown, defaulting to 1000 [ 437.818625][T17076] lo speed is unknown, defaulting to 1000 [ 437.825937][T17076] xfrm0 speed is unknown, defaulting to 1000 [ 438.034293][T17076] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.042272][T17076] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.050507][T17076] bridge_slave_0: entered allmulticast mode [ 438.058015][T17076] bridge_slave_0: entered promiscuous mode [ 438.066609][T17076] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.074115][T17076] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.081726][T17076] bridge_slave_1: entered allmulticast mode [ 438.089014][T17076] bridge_slave_1: entered promiscuous mode [ 438.120589][T17076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.133136][T17076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.165349][T17076] team0: Port device team_slave_0 added [ 438.173942][T17076] team0: Port device team_slave_1 added [ 438.200274][T17076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.203742][T17041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 438.207297][T17076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.246387][T17076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.284901][T17076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.300015][T17076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.371592][T17076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.433687][T17095] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2852'. [ 438.544951][T17076] hsr_slave_0: entered promiscuous mode [ 438.562916][T17076] hsr_slave_1: entered promiscuous mode [ 438.571391][T17076] debugfs: 'hsr0' already exists in 'hsr' [ 438.577882][T17076] Cannot create hsr debugfs directory [ 438.638573][T17104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2854'. [ 438.656662][T17104] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 438.746293][T17108] netlink: 'syz.1.2855': attribute type 1 has an invalid length. [ 438.820722][T17108] 8021q: adding VLAN 0 to HW filter on device bond14 [ 438.867961][T17113] bond14: (slave veth11): Enslaving as an active interface with a down link [ 438.908738][T17108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.921219][T17108] bond14: (slave batadv0): making interface the new active one [ 438.935210][T17108] batadv0: entered promiscuous mode [ 438.944212][T17108] bond14: (slave batadv0): Enslaving as an active interface with an up link [ 438.996389][T17113] bond14 (unregistering): (slave veth11): Releasing active interface [ 439.012590][T17113] bond14 (unregistering): (slave batadv0): Releasing active interface [ 439.030709][T17113] bond14 (unregistering): Released all slaves [ 439.231566][T17122] netlink: 'syz.0.2859': attribute type 13 has an invalid length. [ 439.450829][T17078] Bluetooth: hci5: command tx timeout [ 439.554210][T17135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2860'. [ 439.624617][ T4954] block nbd0: Possible stuck request ffff888026ef5080: control (read@0,1024B). Runtime 330 seconds [ 439.635667][ T4954] block nbd0: Possible stuck request ffff888026ef5240: control (read@1024,3072B). Runtime 330 seconds [ 440.214496][T17168] netlink: 'syz.2.2871': attribute type 3 has an invalid length. [ 440.236241][T17168] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2871'. [ 440.267495][T17168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2871'. [ 440.734398][T17187] syzkaller0: entered promiscuous mode [ 440.750822][T17187] syzkaller0: entered allmulticast mode [ 440.756857][T17183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2875'. [ 440.809452][T17181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2873'. [ 440.897331][T17189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2875'. [ 441.190206][T17076] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 441.214213][T17076] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 441.223088][T17076] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 441.244449][T17076] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 441.255416][T17076] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 441.291828][T17076] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 441.335838][T17076] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 441.406328][T17076] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 441.434912][T17209] netlink: 'syz.4.2879': attribute type 1 has an invalid length. [ 441.530663][T17078] Bluetooth: hci5: command tx timeout [ 441.629559][T17209] bond4: entered promiscuous mode [ 441.667741][T17209] 8021q: adding VLAN 0 to HW filter on device bond4 [ 441.735502][T17220] netlink: 'syz.2.2880': attribute type 3 has an invalid length. [ 441.992914][T17233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.055094][T17232] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 442.080755][T17232] bond5 (unregistering): Released all slaves [ 442.301532][T17076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.374979][T17076] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.617587][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.625240][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.658242][ T7001] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.665501][ T7001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.318713][T17293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.564810][T17303] __nla_validate_parse: 2 callbacks suppressed [ 443.564832][T17303] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2899'. [ 443.620607][T17078] Bluetooth: hci5: command tx timeout [ 444.038540][T17076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.385537][T17348] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 444.408091][T17348] syzkaller1: linktype set to 780 [ 444.512931][T17076] veth0_vlan: entered promiscuous mode [ 444.559752][T17076] veth1_vlan: entered promiscuous mode [ 444.627730][T17076] veth0_macvtap: entered promiscuous mode [ 444.657955][T17076] veth1_macvtap: entered promiscuous mode [ 444.676952][T17357] x_tables: duplicate underflow at hook 2 [ 444.718246][T17076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.776905][T17076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.826050][ T65] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.858215][ T65] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.995295][ T65] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.098393][ T65] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.252018][T17383] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2917'. [ 445.292655][T17380] netlink: 'syz.0.2918': attribute type 10 has an invalid length. [ 445.392087][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.428129][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.625534][ T7001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.651268][ T7001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.689926][T17078] Bluetooth: hci5: command tx timeout [ 446.148230][T17424] rdma_rxe: rxe_newlink: failed to add lo [ 446.170949][T17423] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 447.010246][T17459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2936'. [ 447.196224][T17465] netlink: 'syz.1.2937': attribute type 1 has an invalid length. [ 447.246890][T17465] 8021q: adding VLAN 0 to HW filter on device bond14 [ 447.283186][T17467] bond14: (slave veth13): Enslaving as an active interface with a down link [ 447.411130][T17465] vlan1: entered allmulticast mode [ 447.416372][T17465] veth0_to_bond: entered allmulticast mode [ 450.539947][ T4991] udevd[4991]: worker [6134] /devices/virtual/block/nbd0 timeout; kill it [ 450.549438][ T4991] udevd[4991]: seq 11204 '/devices/virtual/block/nbd0' killed [ 450.557418][ T4991] udevd[4991]: worker [5820] /devices/virtual/block/nbd2 timeout; kill it [ 450.566370][ T4991] udevd[4991]: seq 11795 '/devices/virtual/block/nbd2' killed [ 459.453109][ T4954] block nbd2: Possible stuck request ffff888026f87000: control (read@0,1024B). Runtime 330 seconds [ 459.464421][ T4954] block nbd2: Possible stuck request ffff888026f871c0: control (read@1024,1024B). Runtime 330 seconds [ 459.475814][ T4954] block nbd2: Possible stuck request ffff888026f87380: control (read@2048,1024B). Runtime 330 seconds [ 459.487061][ T4954] block nbd2: Possible stuck request ffff888026f87540: control (read@3072,1024B). Runtime 330 seconds [ 468.154696][T17477] syzkaller1: entered allmulticast mode [ 468.322186][T17488] netlink: 'syz.1.2945': attribute type 62 has an invalid length. [ 468.343671][T17488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2945'. [ 468.498872][T17500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2949'. [ 468.551059][T17500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2949'. [ 468.654403][T17505] syzkaller0: entered promiscuous mode [ 468.667024][T17505] syzkaller0: entered allmulticast mode [ 468.724262][T17508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.995946][T17528] netlink: 'syz.2.2954': attribute type 1 has an invalid length. [ 469.721598][ T4954] block nbd0: Possible stuck request ffff888026ef5080: control (read@0,1024B). Runtime 360 seconds [ 469.732969][ T4954] block nbd0: Possible stuck request ffff888026ef5240: control (read@1024,3072B). Runtime 360 seconds [ 469.793956][ T4940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 469.811760][ T4940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 469.822564][ T4940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 469.831221][ T4940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 469.842364][ T4940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 470.312080][T17567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2965'. [ 470.317519][T17562] lo speed is unknown, defaulting to 1000 [ 470.777330][T17584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2969'. [ 470.801028][T17584] netlink: 'syz.1.2969': attribute type 25 has an invalid length. [ 470.819415][T17584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2969'. [ 471.078265][T17562] lo speed is unknown, defaulting to 1000 [ 471.080618][T17553] lo speed is unknown, defaulting to 1000 [ 471.104617][T17562] xfrm0 speed is unknown, defaulting to 1000 [ 471.903845][T17623] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2977'. [ 471.932713][T17078] Bluetooth: hci3: command tx timeout [ 472.149094][T17553] lo speed is unknown, defaulting to 1000 [ 472.277438][T17553] xfrm0 speed is unknown, defaulting to 1000 [ 472.532734][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2982'. [ 473.106723][T17659] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2988'. [ 473.322322][T17553] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.329739][T17553] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.337276][T17553] bridge_slave_0: entered allmulticast mode [ 473.350560][T17553] bridge_slave_0: entered promiscuous mode [ 473.360400][T17553] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.368080][T17553] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.375678][T17553] bridge_slave_1: entered allmulticast mode [ 473.384651][T17553] bridge_slave_1: entered promiscuous mode [ 473.428918][T17553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.454027][T17553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.595919][T17553] team0: Port device team_slave_0 added [ 473.632082][T17553] team0: Port device team_slave_1 added [ 473.776453][T17553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.791711][T17553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.858067][T17553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.885098][T17553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.899980][T17553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.960417][T17553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.020974][T17078] Bluetooth: hci3: command tx timeout [ 474.066586][T17680] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 474.084368][T17553] hsr_slave_0: entered promiscuous mode [ 474.099524][T17553] hsr_slave_1: entered promiscuous mode [ 474.107107][T17553] debugfs: 'hsr0' already exists in 'hsr' [ 474.117934][T17553] Cannot create hsr debugfs directory [ 474.562644][T17692] sctp: [Deprecated]: syz.3.2996 (pid 17692) Use of int in maxseg socket option. [ 474.562644][T17692] Use struct sctp_assoc_value instead [ 474.746772][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2999'. [ 474.897019][T17706] netlink: 'syz.4.3000': attribute type 8 has an invalid length. [ 474.934946][T17706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3000'. [ 475.012516][T17706] veth1_to_team: entered promiscuous mode [ 475.045096][T17706] gretap0: entered promiscuous mode [ 475.065036][T17706] veth1_to_team: left promiscuous mode [ 475.093166][T17706] gretap0: left promiscuous mode [ 475.457731][T17720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3003'. [ 475.641072][T17723] FAULT_INJECTION: forcing a failure. [ 475.641072][T17723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.702576][T17723] CPU: 0 UID: 0 PID: 17723 Comm: syz.1.3005 Not tainted syzkaller #0 PREEMPT(full) [ 475.702607][T17723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 475.702619][T17723] Call Trace: [ 475.702628][T17723] [ 475.702637][T17723] dump_stack_lvl+0xe8/0x150 [ 475.702674][T17723] should_fail_ex+0x40c/0x560 [ 475.702710][T17723] _copy_from_user+0x2d/0xb0 [ 475.702734][T17723] kstrtouint_from_user+0xd6/0x180 [ 475.702764][T17723] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 475.702823][T17723] proc_fail_nth_write+0x8e/0x210 [ 475.702849][T17723] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 475.702888][T17723] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 475.702909][T17723] vfs_write+0x296/0xba0 [ 475.702946][T17723] ? __pfx_vfs_write+0x10/0x10 [ 475.702972][T17723] ? __fget_files+0x2a/0x420 [ 475.702997][T17723] ? __fget_files+0x3a2/0x420 [ 475.703016][T17723] ? __fget_files+0x2a/0x420 [ 475.703046][T17723] ksys_write+0x150/0x270 [ 475.703074][T17723] ? __pfx_ksys_write+0x10/0x10 [ 475.703109][T17723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.703134][T17723] do_syscall_64+0x174/0x580 [ 475.703156][T17723] ? trace_irq_disable+0x3b/0x140 [ 475.703177][T17723] ? clear_bhb_loop+0x40/0x90 [ 475.703204][T17723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.703224][T17723] RIP: 0033:0x7f99b175d68e [ 475.703243][T17723] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 475.703261][T17723] RSP: 002b:00007f99af9f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 475.703282][T17723] RAX: ffffffffffffffda RBX: 00007f99af9f66c0 RCX: 00007f99b175d68e [ 475.703296][T17723] RDX: 0000000000000001 RSI: 00007f99af9f60a0 RDI: 0000000000000004 [ 475.703308][T17723] RBP: 00007f99af9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 475.703320][T17723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.703331][T17723] R13: 00007f99b1a16038 R14: 00007f99b1a15fa0 R15: 00007fffb72108c8 [ 475.703364][T17723] [ 475.750151][T17731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3007'. [ 475.813718][T17732] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3006'. [ 476.036958][T17743] sctp: [Deprecated]: syz.1.3009 (pid 17743) Use of int in max_burst socket option. [ 476.036958][T17743] Use struct sctp_assoc_value instead [ 476.068085][T17743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3009'. [ 476.114514][ T7001] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.131295][T17078] Bluetooth: hci3: command tx timeout [ 476.164352][ T7001] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.201939][ T7001] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.252058][ T7001] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.540990][T17758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3011'. [ 476.555595][T17758] nbd: must specify a size in bytes for the device [ 476.564435][T17758] block nbd0: NBD_DISCONNECT [ 476.569176][T17758] block nbd0: Send disconnect failed -32 [ 476.577660][T17553] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 476.586621][T17758] block nbd0: shutting down sockets [ 476.597884][T17553] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 476.606409][T17553] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 476.611699][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 476.630206][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 476.646702][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 476.656003][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 476.663899][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 476.671723][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 476.681363][T17553] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.685133][ T1602] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 476.702542][ T1602] Buffer I/O error on dev nbd0, logical block 0, async page read [ 476.712295][ T1602] Buffer I/O error on dev nbd0, logical block 1, async page read [ 476.720354][ T1602] Buffer I/O error on dev nbd0, logical block 2, async page read [ 476.728173][ T1602] Buffer I/O error on dev nbd0, logical block 3, async page read [ 476.742975][ T1602] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 476.752890][ T1602] Buffer I/O error on dev nbd0, logical block 0, async page read [ 476.761023][ T1602] Buffer I/O error on dev nbd0, logical block 1, async page read [ 476.772837][ T1602] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 476.782725][ T1602] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 476.792872][ T1602] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 476.802715][ T1602] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 476.812886][ T1602] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 476.822741][ T1602] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 476.834090][ T6134] ldm_validate_partition_table(): Disk read failed. [ 476.846108][ T6134] Dev nbd0: unable to read RDB block 0 [ 476.855406][ T6134] nbd0: unable to read partition table [ 476.898455][ T4991] udevd[4991]: worker [6134] terminated by signal 9 (Killed) [ 476.928382][ T4991] udevd[4991]: worker [6134] failed while handling '/devices/virtual/block/nbd0' [ 476.968254][T17760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.005060][T17760] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.048757][T17760] tipc: Resetting bearer [ 477.103194][T17760] veth1_to_hsr: left promiscuous mode [ 477.116870][T17760] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 477.127782][T17760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 477.147638][T17760] veth1_vlan: left promiscuous mode [ 477.155394][T17760] v: left promiscuous mode [ 477.162744][T17760] v: entered promiscuous mode [ 477.172996][T17760] veth1_vlan: entered promiscuous mode [ 477.185890][T17760] veth1_macvtap: left promiscuous mode [ 477.193554][T17760] veth0_macvtap: left promiscuous mode [ 477.201592][T17760] veth0_macvtap: entered promiscuous mode [ 477.208728][T17760] veth1_macvtap: entered promiscuous mode [ 477.224645][T17760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 477.233592][T17760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 477.242429][T17760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 477.251867][T17760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 477.261742][T17760] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 477.273149][T17760] bond1: left promiscuous mode [ 477.277986][T17760] bridge1: left promiscuous mode [ 477.285038][T17760] 8021q: adding VLAN 0 to HW filter on device bond1 [ 477.296470][T17760] bridge2: left promiscuous mode [ 477.303392][T17760] bond2: left promiscuous mode [ 477.308653][T17760] 8021q: adding VLAN 0 to HW filter on device bond2 [ 477.332613][T17760] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 477.348633][T17553] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 477.362526][T17553] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 477.374616][ T5735] bridge0: port 3(vlan2) entered blocking state [ 477.382466][ T5735] bridge0: port 3(vlan2) entered forwarding state [ 477.392611][ T5735] geneve0: entered promiscuous mode [ 477.501259][T12626] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.513236][T12626] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.524569][T12626] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.549275][T17553] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 477.579554][T17553] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 477.595743][T12626] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.645901][T17772] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3015'. [ 477.669148][T17772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.697525][ T65] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 477.708870][T17772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3015'. [ 477.720558][ T5734] lo speed is unknown, defaulting to 1000 [ 477.734077][ T5734] syz1: Port: 1 Link DOWN [ 477.748140][ T5743] lo speed is unknown, defaulting to 1000 [ 478.103310][T12626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.130559][T17791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.148489][T12626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.181000][T17078] Bluetooth: hci3: command tx timeout [ 478.226860][T17553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.520686][T17553] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.546785][T17796] syzkaller0: entered promiscuous mode [ 478.558168][T17796] syzkaller0: entered allmulticast mode [ 478.590314][T17810] tipc: Started in network mode [ 478.598714][T17810] tipc: Node identity 8255bcba54bf, cluster identity 4711 [ 478.609358][T17810] tipc: Enabled bearer , priority 0 [ 478.644089][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.651546][ T3309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.729146][T17800] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.773485][T17800] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.824243][T17800] tipc: Resetting bearer [ 478.831692][T17800] tipc: Resetting bearer [ 478.868396][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.875699][ T3309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.954571][T17794] tipc: Resetting bearer [ 478.978861][T17794] tipc: Disabling bearer [ 479.100201][T17821] netlink: 'syz.4.3027': attribute type 1 has an invalid length. [ 479.156984][T17821] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 479.675707][T17854] netlink: 'syz.1.3035': attribute type 1 has an invalid length. [ 479.749208][T17858] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3033'. [ 479.809122][T17856] netlink: 'syz.1.3035': attribute type 1 has an invalid length. [ 480.883335][T17553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.025911][T17895] xt_hashlimit: size too large, truncated to 1048576 [ 481.084752][T17553] veth0_vlan: entered promiscuous mode [ 481.109167][T17896] @0Ù: renamed from bond_slave_1 (while UP) [ 481.166828][T17553] veth1_vlan: entered promiscuous mode [ 481.279247][T17901] sctp: [Deprecated]: syz.1.3041 (pid 17901) Use of struct sctp_assoc_value in delayed_ack socket option. [ 481.279247][T17901] Use struct sctp_sack_info instead [ 481.329175][T17553] veth0_macvtap: entered promiscuous mode [ 481.353192][T17553] veth1_macvtap: entered promiscuous mode [ 481.387484][T17553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.460166][T17553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.498083][ T7001] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.523279][ T7001] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.567063][ T7001] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.599371][ T7001] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.635712][T17910] bridge0: port 3(vlan1) entered blocking state [ 481.662616][T17910] bridge0: port 3(vlan1) entered disabled state [ 481.679457][T17910] vlan1: entered allmulticast mode [ 481.686768][T17910] virt_wifi0: entered allmulticast mode [ 481.696788][T17910] vlan1: entered promiscuous mode [ 481.702608][T17910] virt_wifi0: entered promiscuous mode [ 481.856145][T17910] bridge12: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 481.959250][T17907] netlink: 'syz.3.3045': attribute type 11 has an invalid length. [ 481.972474][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.008143][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.044989][T17921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3047'. [ 482.090499][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 482.104456][ T3309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.124170][ T3309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.898532][ T4940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 482.916829][ T4940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 482.925388][ T4940] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 482.938081][ T4940] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 482.956199][ T4940] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 484.077746][T17948] lo speed is unknown, defaulting to 1000 [ 485.050128][T17078] Bluetooth: hci2: command tx timeout [ 486.796840][T17948] lo speed is unknown, defaulting to 1000 [ 486.944914][T17948] xfrm0 speed is unknown, defaulting to 1000 [ 487.130942][T17078] Bluetooth: hci2: command tx timeout [ 487.595573][ T3309] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.631507][T18045] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3076'. [ 487.640769][T18045] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3076'. [ 487.788752][ T188] lo speed is unknown, defaulting to 1000 [ 487.806795][ T188] syz1: Port: 1 Link ACTIVE [ 487.916068][ T3309] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.961090][T18056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3080'. [ 488.001394][ T5734] lo speed is unknown, defaulting to 1000 [ 488.255937][ T3309] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.364024][T17948] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.399432][T17948] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.431022][T17948] bridge_slave_0: entered allmulticast mode [ 488.455110][T17948] bridge_slave_0: entered promiscuous mode [ 488.473989][T17948] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.490542][T17948] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.509963][T17948] bridge_slave_1: entered allmulticast mode [ 488.514226][T18087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3087'. [ 488.530971][T17948] bridge_slave_1: entered promiscuous mode [ 488.605869][ T3309] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.755898][T17948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.806516][T17948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.861578][T18098] Bluetooth: MGMT ver 1.23 [ 488.884417][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3093'. [ 488.937179][T18102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3093'. [ 488.981932][T18101] veth0_to_bond: entered allmulticast mode [ 489.016728][T17948] team0: Port device team_slave_0 added [ 489.055584][T17948] team0: Port device team_slave_1 added [ 489.113043][T18101] netlink: 'syz.2.3093': attribute type 2 has an invalid length. [ 489.210143][T17078] Bluetooth: hci2: command tx timeout [ 489.347384][T18126] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3098'. [ 489.381204][T18114] 8021q: adding VLAN 0 to HW filter on device bond5 [ 489.389367][T18114] bridge0: port 1(bond5) entered blocking state [ 489.396646][T18114] bridge0: port 1(bond5) entered disabled state [ 489.403564][T18114] bond5: entered allmulticast mode [ 489.406524][T18126] netlink: 'syz.0.3098': attribute type 21 has an invalid length. [ 489.412273][T18114] bond5: entered promiscuous mode [ 489.423015][T18114] bridge0: port 1(bond5) entered blocking state [ 489.429391][T18114] bridge0: port 1(bond5) entered listening state [ 489.466878][T17948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.475339][T17948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.502704][T17948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.515877][T18126] netlink: 'syz.0.3098': attribute type 1 has an invalid length. [ 489.525065][T18126] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3098'. [ 489.535110][ T4954] block nbd2: Possible stuck request ffff888026f87000: control (read@0,1024B). Runtime 360 seconds [ 489.548289][ T4954] block nbd2: Possible stuck request ffff888026f871c0: control (read@1024,1024B). Runtime 360 seconds [ 489.560192][ T4954] block nbd2: Possible stuck request ffff888026f87380: control (read@2048,1024B). Runtime 360 seconds [ 489.571735][ T4954] block nbd2: Possible stuck request ffff888026f87540: control (read@3072,1024B). Runtime 360 seconds [ 489.709063][T17948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.748972][T17948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.803324][T17948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.816212][T18140] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3101'. [ 489.827391][T18140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3101'. [ 490.145397][ T3309] vlan1: left allmulticast mode [ 490.151831][ T3309] virt_wifi0: left allmulticast mode [ 490.162828][ T3309] vlan1: left promiscuous mode [ 490.175254][ T3309] virt_wifi0: left promiscuous mode [ 490.183512][ T3309] bridge0: port 3(vlan1) entered disabled state [ 490.195421][ T3309] bridge_slave_1: left allmulticast mode [ 490.201579][ T3309] bridge_slave_1: left promiscuous mode [ 490.207761][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.222361][ T3309] bridge_slave_0: left allmulticast mode [ 490.228421][ T3309] bridge_slave_0: left promiscuous mode [ 490.243494][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.486492][T10147] smbdirect: ib_dev[syz0] removed [ 490.810600][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 490.953662][ T3309] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 490.971870][ T3309] bridge1 (unregistering): left promiscuous mode [ 490.979108][ T3309] bridge1 (unregistering): left allmulticast mode [ 491.036204][ T3309] bond12 (unregistering): (slave bridge9): Releasing backup interface [ 491.044585][ T3309] bridge9 (unregistering): left promiscuous mode [ 491.055924][ T3309] bridge9 (unregistering): left allmulticast mode [ 491.095532][ T3309] bond0 (unregistering): left promiscuous mode [ 491.102107][ T3309] bond_slave_0: left promiscuous mode [ 491.107752][ T3309] bond_slave_1: left promiscuous mode [ 491.115180][ T3309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.127590][ T3309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.141220][ T3309] bond0 (unregistering): Released all slaves [ 491.152402][ T3309] bond1 (unregistering): Released all slaves [ 491.168422][ T3309] bond2 (unregistering): Released all slaves [ 491.184524][ T3309] bond3 (unregistering): Released all slaves [ 491.202692][ T3309] bond4 (unregistering): Released all slaves [ 491.219129][ T3309] bond5 (unregistering): Released all slaves [ 491.244824][ T3309] bond6 (unregistering): Released all slaves [ 491.260542][ T3309] bond7 (unregistering): Released all slaves [ 491.276025][ T3309] bond8 (unregistering): Released all slaves [ 491.294669][ T3309] bond9 (unregistering): Released all slaves [ 491.300795][T17078] Bluetooth: hci2: command tx timeout [ 491.322980][ T3309] bond10 (unregistering): Released all slaves [ 491.338453][ T3309] bond11 (unregistering): Released all slaves [ 491.357573][ T3309] bond12 (unregistering): Released all slaves [ 491.382006][ T3309] bond13 (unregistering): Released all slaves [ 491.397913][ T3309] bond14 (unregistering): (slave veth13): Releasing active interface [ 491.408357][ T3309] bond14 (unregistering): Released all slaves [ 491.427380][ T65] bridge0: port 1(bond5) entered disabled state [ 491.435695][T18153] netlink: 'syz.0.3105': attribute type 6 has an invalid length. [ 491.443847][T18153] netlink: 'syz.0.3105': attribute type 7 has an invalid length. [ 491.455708][T18153] netlink: 'syz.0.3105': attribute type 8 has an invalid length. [ 491.487285][T17948] hsr_slave_0: entered promiscuous mode [ 491.507600][T17948] hsr_slave_1: entered promiscuous mode [ 491.534502][T17948] debugfs: 'hsr0' already exists in 'hsr' [ 491.553264][T17948] Cannot create hsr debugfs directory [ 491.582391][T18151] syz_tun: entered promiscuous mode [ 491.588288][T18151] vlan2: entered promiscuous mode [ 491.676253][T18159] geneve4: entered promiscuous mode [ 491.682208][ T3309] tipc: Disabling bearer [ 491.717458][T18166] x_tables: duplicate underflow at hook 1 [ 491.734828][ T3309] tipc: Disabling bearer [ 491.752241][ T3309] tipc: Disabling bearer [ 491.772039][ T3309] tipc: Left network mode [ 492.147374][T18175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.181661][T18173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.297552][T18180] netlink: 'syz.2.3113': attribute type 3 has an invalid length. [ 492.938235][T18206] tls_set_device_offload: netdev not found [ 493.044412][T18210] netlink: 'syz.3.3120': attribute type 1 has an invalid length. [ 493.251950][T18210] bond1: entered promiscuous mode [ 493.272131][T18210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 493.347012][T18217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 493.355002][T18217] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 493.367537][T18217] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 493.385772][T18217] bond1: (slave gre1): making interface the new active one [ 493.394600][T18217] gre1: entered promiscuous mode [ 493.403435][T18217] bond1: (slave gre1): Enslaving as an active interface with an up link [ 493.415723][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 493.725266][T18235] __nla_validate_parse: 7 callbacks suppressed [ 493.725288][T18235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3126'. [ 493.858457][T18245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3128'. [ 494.325564][ T3309] dummy0: left promiscuous mode [ 494.360194][ T3309] hsr_slave_0: left promiscuous mode [ 494.373764][ T3309] hsr_slave_1: left promiscuous mode [ 494.815580][ T3309] team0 (unregistering): Port device team_slave_1 removed [ 494.844723][ T3309] team0 (unregistering): Port device team_slave_0 removed [ 495.154548][T18266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.246211][T18279] syzkaller0: entered promiscuous mode [ 495.254022][T18279] syzkaller0: entered allmulticast mode [ 495.764641][T18310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.353548][T18297] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 498.367089][T18297] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 498.409349][T18297] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 498.728705][T18328] lo speed is unknown, defaulting to 1000 [ 498.837064][T18340] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3145'. [ 498.948968][T17948] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 498.985039][T17948] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 499.014357][ T3309] IPVS: stop unused estimator thread 0... [ 499.022746][T17948] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 499.091511][ T30] audit: type=1804 audit(1782546020.664:8): pid=18347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3146" name="/newroot/620/cgroup.controllers" dev="tmpfs" ino=3201 res=1 errno=0 [ 499.095308][T17948] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 499.170532][ T30] audit: type=1800 audit(1782546020.694:9): pid=18347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3146" name="cgroup.controllers" dev="tmpfs" ino=3201 res=0 errno=0 [ 499.174772][T17948] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 499.243115][T18356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3147'. [ 499.275146][T17948] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 499.300048][T17948] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 499.345869][T17948] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 499.402570][T18365] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3149'. [ 499.666624][T18378] netlink: 'syz.3.3150': attribute type 3 has an invalid length. [ 499.705777][T18378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3150'. [ 499.721770][T18328] lo speed is unknown, defaulting to 1000 [ 499.746948][T17948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.893481][T18386] batadv0: entered promiscuous mode [ 499.913649][T18386] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 500.107961][T17948] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.158219][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.165525][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.207216][T12626] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.214521][T12626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.259222][T18391] openvswitch: netlink: Tunnel attr 324 out of range max 16 [ 500.487338][T18391] netlink: zone id is out of range [ 500.527977][T18391] netlink: zone id is out of range [ 500.545049][T18391] netlink: zone id is out of range [ 500.561012][T18391] netlink: zone id is out of range [ 500.575983][T18391] netlink: zone id is out of range [ 500.592854][T18391] netlink: zone id is out of range [ 500.612414][T18391] netlink: zone id is out of range [ 500.631449][T18391] netlink: zone id is out of range [ 501.022332][T18406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3154'. [ 501.273527][T18418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3157'. [ 501.505975][T18418] 8021q: adding VLAN 0 to HW filter on device bond2 [ 501.776720][T18444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3157'. [ 501.812975][T18423] bond2: (slave veth3): Enslaving as an active interface with an up link [ 501.897842][T18441] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3157'. [ 502.062776][T18428] sctp: [Deprecated]: syz.4.3158 (pid 18428) Use of int in max_burst socket option deprecated. [ 502.062776][T18428] Use struct sctp_assoc_value instead [ 502.119103][T18444] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 502.516985][T17948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.919202][T17948] veth0_vlan: entered promiscuous mode [ 502.969896][T17948] veth1_vlan: entered promiscuous mode [ 503.112368][T17948] veth0_macvtap: entered promiscuous mode [ 503.142788][T17948] veth1_macvtap: entered promiscuous mode [ 503.257508][T17948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.349285][T17948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.403528][T12627] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.429129][T18509] ip6gre1: entered allmulticast mode [ 503.438227][T12627] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.472836][T12627] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.590387][T12627] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.915883][T10142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.974580][T10142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.977831][T18529] --map-set only usable from mangle table [ 504.026660][T18529] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3174'. [ 504.094791][ T7001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.130759][ T7001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.218676][T18537] netlink: 'syz.3.3177': attribute type 2 has an invalid length. [ 504.272093][T18541] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3178'. [ 504.414404][T18537] : entered promiscuous mode [ 504.497729][T18542] bridge3: entered promiscuous mode [ 504.525524][T18542] bridge3: entered allmulticast mode [ 504.814579][T18557] lo speed is unknown, defaulting to 1000 [ 504.870530][T18574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3180'. [ 505.550632][T18595] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3186'. [ 505.620263][ T4940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 505.638971][ T4940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 505.648047][ T4940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 505.658323][ T4940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 505.673959][ T4940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 506.068661][T18623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3190'. [ 506.144879][T18626] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3191'. [ 506.325878][T18623] 8021q: adding VLAN 0 to HW filter on device bond3 [ 506.438504][T18561] dvmrp0: entered allmulticast mode [ 506.542656][T18639] net_ratelimit: 2 callbacks suppressed [ 506.542678][T18639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.599369][T18557] lo speed is unknown, defaulting to 1000 [ 507.188401][T18596] lo speed is unknown, defaulting to 1000 [ 507.451819][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 507.771754][ T4940] Bluetooth: hci0: command tx timeout [ 507.796527][T18667] syz_tun: entered promiscuous mode [ 507.845075][T18667] vlan2: entered promiscuous mode [ 507.915171][T18676] tc_dump_action: action bad kind [ 507.941728][T18676] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3199'. [ 508.162474][T18681] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 508.187870][T18682] sock: sock_timestamping_bind_phc: sock not bind to device [ 508.202024][T18596] lo speed is unknown, defaulting to 1000 [ 508.391877][T18686] bond0: (slave ip6tnl0): refused to change device type [ 508.444940][T18686] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3204'. [ 508.488669][T18686] Bluetooth: MGMT ver 1.23 [ 509.047288][T18711] tipc: Enabled bearer , priority 0 [ 509.056198][T18717] syzkaller0: entered promiscuous mode [ 509.074740][T18717] syzkaller0: entered allmulticast mode [ 509.184869][T18723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3211'. [ 509.223485][T18596] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.236924][T18596] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.262870][T18596] bridge_slave_0: entered allmulticast mode [ 509.284253][T18596] bridge_slave_0: entered promiscuous mode [ 509.308773][T18711] tipc: Resetting bearer [ 509.332981][T18721] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3211'. [ 509.343094][T18596] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.353122][T18596] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.364579][T18596] bridge_slave_1: entered allmulticast mode [ 509.377208][T18596] bridge_slave_1: entered promiscuous mode [ 509.390044][T18708] tipc: Resetting bearer [ 509.417243][T18708] tipc: Disabling bearer [ 509.585849][T18596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.624085][T18596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.720927][T18733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3214'. [ 509.725990][T18596] team0: Port device team_slave_0 added [ 509.767165][T18596] team0: Port device team_slave_1 added [ 509.854401][ T4940] Bluetooth: hci0: command tx timeout [ 509.942782][T18596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.955344][T18596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.989503][T18596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.152633][T18743] tipc: Enabled bearer , priority 10 [ 510.218811][T18596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.234660][T18596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.297134][T18596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.433776][T18596] hsr_slave_0: entered promiscuous mode [ 510.461148][T18596] hsr_slave_1: entered promiscuous mode [ 510.526792][T18758] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 510.876121][T18768] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3223'. [ 510.902720][T18768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3223'. [ 511.206787][T18596] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.218481][T18596] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.226125][T18786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3228'. [ 511.230631][T18596] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 55067 - 0 [ 511.344803][ T11] tipc: Node number set to 3605707962 [ 511.543283][T18596] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.553511][T18596] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.564828][T18596] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 55067 - 0 [ 511.706822][T18596] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.740293][T18596] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.789733][T18596] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 55067 - 0 [ 511.933717][ T4940] Bluetooth: hci0: command tx timeout [ 512.104790][T18596] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.133708][T18596] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.159886][T18596] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 55067 - 0 [ 512.328274][T18809] macsec1: entered promiscuous mode [ 512.607164][T18818] bond0: (slave bond_slave_1): Releasing backup interface [ 512.636853][T18820] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3236'. [ 512.729371][T18825] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3235'. [ 512.803718][T18826] nbd: nbd2 already in use [ 512.824159][T18826] block nbd2: NBD_DISCONNECT [ 512.851963][T18826] block nbd2: Send disconnect failed -32 [ 512.893580][T18826] block nbd2: shutting down sockets [ 512.929538][ C1] blk_print_req_error: 38 callbacks suppressed [ 512.936044][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 512.945409][ C1] buffer_io_error: 54 callbacks suppressed [ 512.945428][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 512.959054][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 512.968298][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 512.976117][ C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 512.985303][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 512.993117][ C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 513.002319][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 513.020576][ T4954] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 513.030890][ T4954] Buffer I/O error on dev nbd2, logical block 0, async page read [ 513.041369][ T4954] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 513.052248][ T4954] Buffer I/O error on dev nbd2, logical block 1, async page read [ 513.061409][ T4954] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 513.071948][ T4954] Buffer I/O error on dev nbd2, logical block 2, async page read [ 513.081256][ T4954] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 513.090710][ T4954] Buffer I/O error on dev nbd2, logical block 3, async page read [ 513.101725][ T4954] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 513.111588][ T4954] Buffer I/O error on dev nbd2, logical block 0, async page read [ 513.120460][ T4954] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 513.137074][ T4954] Buffer I/O error on dev nbd2, logical block 1, async page read [ 513.151340][ T5820] ldm_validate_partition_table(): Disk read failed. [ 513.168480][T18596] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 513.168659][ T5820] Dev nbd2: unable to read RDB block 0 [ 513.187318][ T5820] nbd2: unable to read partition table [ 513.243394][ T4991] udevd[4991]: worker [5820] terminated by signal 9 (Killed) [ 513.264510][T18596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 513.286907][ T4991] udevd[4991]: worker [5820] failed while handling '/devices/virtual/block/nbd2' [ 513.358211][T12626] bridge0: port 3(team0) entered disabled state [ 513.399338][T12626] bridge_slave_1: left allmulticast mode [ 513.430328][T12626] bridge_slave_1: left promiscuous mode [ 513.446606][T12626] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.476593][T12626] bridge_slave_0: left allmulticast mode [ 513.491842][T12626] bridge_slave_0: left promiscuous mode [ 513.502160][T12626] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.583866][T12626] bond4: left allmulticast mode [ 513.628079][T18847] netlink: 'syz.0.3241': attribute type 13 has an invalid length. [ 513.659826][T18847] netlink: 'syz.0.3241': attribute type 17 has an invalid length. [ 513.885607][T18853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3241'. [ 514.009867][ T4940] Bluetooth: hci0: command tx timeout [ 514.071500][T12626] batman_adv: batadv0: Removing interface: vlan2 [ 514.135654][T12626] team0: Port device bridge4 removed [ 514.148547][T12626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.159202][T12626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.177158][T12626] bond0 (unregistering): Released all slaves [ 514.188781][T12626] bond1 (unregistering): Released all slaves [ 514.207447][T12626] bond2 (unregistering): Released all slaves [ 514.226639][T12626] bond3 (unregistering): Released all slaves [ 514.245810][T12626] bond4 (unregistering): Released all slaves [ 514.270865][T12626] bond5 (unregistering): Released all slaves [ 514.285835][T18596] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 514.296454][T18596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 514.452391][T18839] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.460328][T18839] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.557385][T18839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.573307][T18839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.707474][T18843] bridge0: port 3(vlan2) entered disabled state [ 514.727625][T18843] tipc: Resetting bearer [ 514.889290][T18847] gretap0: left allmulticast mode [ 514.913775][T18847] xfrm0: left allmulticast mode [ 514.932101][T18847] ipvlan0: left allmulticast mode [ 514.937444][T18847] v: left allmulticast mode [ 514.948914][T18847] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 514.965330][T18847] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 514.973851][T18847] bridge3: left allmulticast mode [ 514.981095][T18847] bond3: left promiscuous mode [ 514.985899][T18847] bridge8: left promiscuous mode [ 514.992628][T18847] ip6gre1: left promiscuous mode [ 514.997627][T18847] ip6gre1: left allmulticast mode [ 515.004485][T18847] bridge10: left promiscuous mode [ 515.009524][T18847] bridge10: left allmulticast mode [ 515.015342][T18847] gretap1: left promiscuous mode [ 515.023019][T18847] bridge11: left allmulticast mode [ 515.029230][T18847] veth7: left allmulticast mode [ 515.036498][T18847] bond9: left promiscuous mode [ 515.041756][T18847] bridge14: left promiscuous mode [ 515.046938][T18847] bond9: left allmulticast mode [ 515.051979][T18847] bridge14: left allmulticast mode [ 515.058606][T18847] bond11: left promiscuous mode [ 515.063958][T18847] bridge16: left promiscuous mode [ 515.069385][T18847] vlan3: left allmulticast mode [ 515.074452][T18847] bond11: left allmulticast mode [ 515.079463][T18847] bridge16: left allmulticast mode [ 515.085506][T18847] bond12: left promiscuous mode [ 515.090717][T18847] erspan1: left promiscuous mode [ 515.095801][T18847] bond12: left allmulticast mode [ 515.101715][T18847] erspan1: left allmulticast mode [ 515.123357][T18861] vti0: entered promiscuous mode [ 515.128379][T18861] vti0: entered allmulticast mode [ 515.138187][T18596] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 515.169392][T18596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 515.205036][T18596] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 515.237596][T18596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 515.280915][T12626] tipc: Disabling bearer [ 515.298164][T12626] tipc: Left network mode [ 515.298402][T10147] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.364503][T10147] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.367337][T18868] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3247'. [ 515.408257][T18868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3247'. [ 515.431735][T18868] netlink: 356 bytes leftover after parsing attributes in process `syz.2.3247'. [ 515.446295][T10147] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.475164][ T65] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.517305][ T65] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.566789][ T65] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.617599][ T65] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.640058][ T65] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.668170][ T65] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.680630][T18878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3246'. [ 515.692484][ T65] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.719455][ T65] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.731302][ T65] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.914135][T18596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.974675][T18596] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.009118][T10147] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.016532][T10147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.061955][T10147] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.069369][T10147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.090031][ T4940] Bluetooth: hci0: command tx timeout [ 516.275574][T12626] IPVS: stopping backup sync thread 10850 ... [ 517.374795][T18942] netlink: 732 bytes leftover after parsing attributes in process `syz.0.3254'. [ 517.421791][T18942] netlink: 732 bytes leftover after parsing attributes in process `syz.0.3254'. [ 517.518848][T18943] netlink: 'syz.0.3254': attribute type 10 has an invalid length. [ 517.583796][T18948] netlink: 'syz.0.3254': attribute type 10 has an invalid length. [ 517.668160][T18943] team0: Port device dummy0 added [ 517.788165][T18955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3257'. [ 517.988935][T18961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3257'. [ 518.142597][T18955] 8021q: adding VLAN 0 to HW filter on device bond4 [ 518.251391][T18957] ipvlan2: entered allmulticast mode [ 518.288599][T18957] bond4: entered allmulticast mode [ 518.356574][T18958] bond4: (slave ipip0): refused to change device type [ 518.437622][T18966] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3258'. [ 518.540502][T12626] hsr_slave_0: left promiscuous mode [ 518.581462][T12626] hsr_slave_1: left promiscuous mode [ 518.604691][T12626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.644573][T12626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.755207][ T30] audit: type=1800 audit(1782546040.334:10): pid=18985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3261" name="memory.events" dev="tmpfs" ino=460 res=0 errno=0 [ 518.912248][T18993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3262'. [ 519.061426][T12626] team_slave_1 (unregistering): left promiscuous mode [ 519.068302][T12626] team_slave_1 (unregistering): left allmulticast mode [ 519.076271][T12626] team0 (unregistering): Port device team_slave_1 removed [ 519.095958][T12626] team_slave_0 (unregistering): left promiscuous mode [ 519.108069][T12626] team_slave_0 (unregistering): left allmulticast mode [ 519.116272][T12626] team0 (unregistering): Port device team_slave_0 removed [ 519.261820][T12627] smbdirect: ib_dev[syz2] removed [ 519.273477][T18972] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 521.874773][T18596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.062433][T19012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3266'. [ 522.121768][T19016] netlink: 'syz.3.3268': attribute type 1 has an invalid length. [ 522.137256][T19018] dummy0: entered promiscuous mode [ 522.151174][T19018] dummy0: entered allmulticast mode [ 522.465220][T19016] bond5: (slave gretap1): making interface the new active one [ 522.485034][T19016] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 522.525278][T19032] macvlan2: entered promiscuous mode [ 522.540966][T19032] macvlan2: entered allmulticast mode [ 522.558236][T12626] IPVS: stop unused estimator thread 0... [ 522.845970][T19050] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3275'. [ 522.884892][T18596] veth0_vlan: entered promiscuous mode [ 522.898088][T19053] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3274'. [ 522.916981][T18596] veth1_vlan: entered promiscuous mode [ 522.940355][T19050] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3275'. [ 522.998343][T18596] veth0_macvtap: entered promiscuous mode [ 523.045560][T18596] veth1_macvtap: entered promiscuous mode [ 523.100693][T18596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.143288][T18596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.175501][T19066] netlink: 768 bytes leftover after parsing attributes in process `syz.2.3278'. [ 523.198977][T12626] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.222619][T19063] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3279'. [ 523.245128][T12626] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.271646][T12626] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.297120][T12626] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.411956][T19071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3281'. [ 523.468199][T19071] xt_TCPMSS: Only works on TCP SYN packets [ 523.604694][T10142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.613604][T19071] bridge_slave_1: left allmulticast mode [ 523.619478][T19071] bridge_slave_1: left promiscuous mode [ 523.630996][T19071] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.636519][T10142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.646599][T19079] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3283'. [ 523.666475][T19071] bridge_slave_0: left allmulticast mode [ 523.675638][T19071] bridge_slave_0: left promiscuous mode [ 523.683781][T19071] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.692872][T19081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3285'. [ 523.703474][T19081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3285'. [ 523.798984][T12626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.814356][T12626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.866308][T19087] IPVS: set_ctl: invalid protocol: 136 100.1.1.1:20001 [ 524.014519][T19091] syzkaller0: entered promiscuous mode [ 524.035889][T19091] syzkaller0: entered allmulticast mode [ 524.317764][T19093] lo speed is unknown, defaulting to 1000 [ 524.455680][T17078] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 524.472712][T17078] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 524.481960][T17078] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 524.503465][T17078] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 524.515790][T17078] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 524.592107][T19104] netlink: 'syz.4.3291': attribute type 4 has an invalid length. [ 524.767884][ T30] audit: type=1804 audit(1782546046.344:11): pid=19116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3293" name="/newroot/93/cgroup.controllers" dev="tmpfs" ino=502 res=1 errno=0 [ 524.839819][T19116] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 524.870460][ T30] audit: type=1800 audit(1782546046.344:12): pid=19116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3293" name="cgroup.controllers" dev="tmpfs" ino=502 res=0 errno=0 [ 524.894748][T19116] bond6 (unregistering): Released all slaves [ 524.902911][ T30] audit: type=1804 audit(1782546046.414:13): pid=19121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3293" name="/newroot/93/cgroup.controllers" dev="tmpfs" ino=502 res=1 errno=0 [ 525.589867][T19111] lo speed is unknown, defaulting to 1000 [ 525.796042][T19155] syz_tun: entered allmulticast mode [ 526.068609][T19102] lo speed is unknown, defaulting to 1000 [ 526.581452][ T4940] Bluetooth: hci4: command tx timeout [ 527.212039][T19192] netlink: 'syz.3.3306': attribute type 3 has an invalid length. [ 527.546366][T19203] sock: sock_timestamping_bind_phc: sock not bind to device [ 527.573890][T19203] __nla_validate_parse: 73 callbacks suppressed [ 527.573913][T19203] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3308'. [ 527.702331][T19102] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.752482][T19102] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.786015][T19102] bridge_slave_0: entered allmulticast mode [ 527.824298][T19102] bridge_slave_0: entered promiscuous mode [ 527.833690][T19210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3307'. [ 528.182828][T19230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3314'. [ 528.203256][T19233] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3307'. [ 528.325524][T19210] bond1: entered promiscuous mode [ 528.357903][T19210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 528.408048][T19102] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.427908][T19102] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.474836][T19102] bridge_slave_1: entered allmulticast mode [ 528.484117][T19102] bridge_slave_1: entered promiscuous mode [ 528.540578][T19219] lo speed is unknown, defaulting to 1000 [ 528.660545][ T4940] Bluetooth: hci4: command tx timeout [ 528.818359][T19102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.845993][T19102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.053239][T19102] team0: Port device team_slave_0 added [ 529.082343][T19102] team0: Port device team_slave_1 added [ 529.207303][T19102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.227545][T19102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.279127][T19102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.306019][T19102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.322490][T19102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.384252][T19102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.560760][T19102] hsr_slave_0: entered promiscuous mode [ 529.568007][T19102] hsr_slave_1: entered promiscuous mode [ 529.574868][T19102] debugfs: 'hsr0' already exists in 'hsr' [ 529.581877][T19102] Cannot create hsr debugfs directory [ 529.735587][T19273] syzkaller0: entered promiscuous mode [ 529.757003][T19273] syzkaller0: entered allmulticast mode [ 530.398192][T19299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3332'. [ 530.475848][T19299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.730149][ T4940] Bluetooth: hci4: command tx timeout [ 530.799911][T19311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3335'. [ 531.271873][T19319] tap0: tun_chr_ioctl cmd 1074025677 [ 531.285336][T19319] tap0: linktype set to 768 [ 531.302983][T19319] tap0: tun_chr_ioctl cmd 1074025698 [ 532.054892][T19102] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 532.089287][T19102] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 532.115067][T19102] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 532.153551][T19102] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 532.171423][T19102] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 532.197705][T19102] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 532.226825][T19102] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 532.277202][T19102] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 532.565433][T19359] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 532.587391][T19102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.641875][T19102] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.673228][T10144] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.680560][T10144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.728199][T10144] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.735537][T10144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.810462][ T4940] Bluetooth: hci4: command tx timeout [ 532.855022][T19362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3347'. [ 532.928583][T19364] lo speed is unknown, defaulting to 1000 [ 533.165234][T19369] netlink: 'syz.1.3348': attribute type 1 has an invalid length. [ 533.194377][T19369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3348'. [ 533.226001][ T809] IPVS: starting estimator thread 0... [ 533.329816][T19372] IPVS: using max 24 ests per chain, 57600 per kthread [ 533.443026][T19376] sctp: [Deprecated]: syz.3.3350 (pid 19376) Use of int in max_burst socket option. [ 533.443026][T19376] Use struct sctp_assoc_value instead [ 533.745229][T19383] macvtap1: entered promiscuous mode [ 533.763214][T19383] vlan0: entered promiscuous mode [ 533.805063][T19386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.842512][T19383] vlan0: left promiscuous mode [ 533.897789][T19386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.927228][T19365] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3346'. [ 533.941924][T19386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.403698][T19392] C: renamed from veth1_to_team (while UP) [ 534.427025][T19392] netlink: 'syz.1.3354': attribute type 2 has an invalid length. [ 534.459859][T19392] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3354'. [ 534.475316][T19392] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 534.597882][T19102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.801325][T19102] veth0_vlan: entered promiscuous mode [ 534.817934][T19102] veth1_vlan: entered promiscuous mode [ 534.883113][T19102] veth0_macvtap: entered promiscuous mode [ 534.912127][T19102] veth1_macvtap: entered promiscuous mode [ 534.962885][T19102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.046705][T19102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.165660][T10144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.201741][T10144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.238773][T10144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.264336][T10144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.524614][T10147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.553957][T10147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.633791][T19411] syzkaller1: entered promiscuous mode [ 535.651000][T19411] syzkaller1: entered allmulticast mode [ 535.689086][T10144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.720640][T10144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.094054][T19423] ip6_tunnel: non-ECT from fe80:e800:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 536.170701][T19423] syzkaller0: entered promiscuous mode [ 536.187303][T19423] syzkaller0: entered allmulticast mode [ 536.202272][T19426] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3360'. [ 536.245365][T19423] tipc: Started in network mode [ 536.262856][T19423] tipc: Node identity 263402c76dcf, cluster identity 4711 [ 536.281111][T19423] tipc: Enabled bearer , priority 0 [ 536.311960][T19423] tipc: Resetting bearer [ 536.382269][T19422] tipc: Resetting bearer [ 536.452088][T19431] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3361'. [ 536.484240][T19435] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3363'. [ 536.498107][T19422] tipc: Disabling bearer [ 536.742144][T19443] netlink: 'syz.4.3365': attribute type 12 has an invalid length. [ 536.777148][T19443] netlink: 'syz.4.3365': attribute type 1 has an invalid length. [ 536.786547][T19443] netlink: 'syz.4.3365': attribute type 2 has an invalid length. [ 536.805445][T19443] sit0: entered promiscuous mode [ 536.835351][T19443] netlink: 'syz.4.3365': attribute type 1 has an invalid length. [ 536.868146][T19443] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3365'. [ 536.987446][T19449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3368'. [ 537.004060][T19451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3367'. [ 537.481082][T19472] netlink: 'syz.0.3372': attribute type 1 has an invalid length. [ 538.320409][T19514] __nla_validate_parse: 2 callbacks suppressed [ 538.320428][T19514] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3383'. [ 538.958968][T19539] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 538.997334][T19543] bridge_slave_0: default FDB implementation only supports local addresses [ 539.188458][T19554] netlink: 296 bytes leftover after parsing attributes in process `syz.4.3394'. [ 539.338485][T19557] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 539.524915][T19570] veth1_macvtap: left promiscuous mode [ 539.541121][T19570] macsec0: entered allmulticast mode [ 539.694204][T19577] tipc: Enabled bearer , priority 2 [ 539.713055][T19576] tipc: Enabling of bearer rejected, already enabled [ 539.718320][T19583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3402'. [ 539.868195][T19588] x_tables: duplicate underflow at hook 1 [ 539.908193][T19588] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3403'. [ 539.910972][T19591] Cannot find add_set index 0 as target [ 540.401703][T19622] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3413'. [ 540.595841][T19631] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3416'. [ 540.676246][T19635] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.3417'. [ 540.689863][T19636] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.3417'. [ 540.832608][T19640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3418'. [ 540.893147][T19640] vlan2: entered promiscuous mode [ 540.965726][T19642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3419'. [ 541.016007][T10142] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.045609][T19648] netlink: 'syz.3.3420': attribute type 1 has an invalid length. [ 541.065225][T10142] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.077519][T19648] block nbd0: not configured, cannot reconfigure [ 541.087148][T10142] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.106573][T19642] syzkaller0: entered promiscuous mode [ 541.117375][T19642] syzkaller0: entered allmulticast mode [ 541.128877][T10142] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.444285][T19669] tipc: Started in network mode [ 541.463082][T19669] tipc: Node identity ac14140f, cluster identity 4711 [ 541.491218][T19669] tipc: New replicast peer: 255.255.255.255 [ 541.512520][T19669] tipc: Enabled bearer , priority 10 [ 541.726971][T19680] netlink: 'syz.1.3431': attribute type 39 has an invalid length. [ 542.640833][ T188] tipc: Node number set to 2886997007 [ 542.879934][T19734] syzkaller0: entered promiscuous mode [ 542.885487][T19734] syzkaller0: entered allmulticast mode [ 542.896377][T19733] syzkaller1: entered promiscuous mode [ 542.910536][T19733] syzkaller1: entered allmulticast mode [ 543.231318][T19747] netlink: 'syz.0.3451': attribute type 9 has an invalid length. [ 543.448558][T19754] __nla_validate_parse: 44 callbacks suppressed [ 543.448582][T19754] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3453'. [ 543.470766][T19755] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3453'. [ 543.494053][T19759] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 543.595212][T19760] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 543.602568][T19760] IPv6: NLM_F_CREATE should be set when creating new route [ 543.609916][T19760] IPv6: NLM_F_CREATE should be set when creating new route [ 544.025706][T19784] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3461'. [ 544.502502][T19805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3468'. [ 544.527606][T19804] netlink: 6188 bytes leftover after parsing attributes in process `syz.0.3466'. [ 544.552921][T19804] netlink: zone id is out of range [ 544.554111][T19805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3468'. [ 544.563724][T19804] netlink: set zone limit has 4 unknown bytes [ 544.590522][T19805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3468'. [ 544.594106][T19809] (: renamed from bridge_slave_0 (while UP) [ 544.614419][T19805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3468'. [ 544.662805][T19805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3468'. [ 544.706191][T19805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3468'. [ 545.203940][T19828] vxlan1: entered promiscuous mode [ 545.209244][T19828] vxlan1: entered allmulticast mode [ 545.236772][T19798] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 545.641715][T19835] 8021q: adding VLAN 0 to HW filter on device bond6 [ 545.810157][T19839] bond6: (slave veth9): Enslaving as an active interface with an up link [ 545.842411][T19845] syzkaller0: entered promiscuous mode [ 545.868720][T19845] syzkaller0: entered allmulticast mode [ 546.034293][T19851] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 546.495086][ T4940] Bluetooth: hci2: command 0x0401 tx timeout [ 546.608519][ T5286] veth0_vlan: left promiscuous mode [ 546.669455][ T5734] veth0_vlan: entered promiscuous mode [ 547.268880][T19880] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 547.341086][T19880] vti0: left promiscuous mode [ 547.362069][T19880] bond1: left promiscuous mode [ 547.380715][T19880] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 548.140826][T19911] veth1_to_batadv: entered allmulticast mode [ 548.616877][T19939] sctp: [Deprecated]: syz.3.3498 (pid 19939) Use of int in max_burst socket option. [ 548.616877][T19939] Use struct sctp_assoc_value instead [ 548.704969][T19938] __nla_validate_parse: 40 callbacks suppressed [ 548.704991][T19938] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3496'. [ 548.915738][T19951] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3499'. [ 548.977861][T19948] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3499'. [ 549.092047][T19964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3500'. [ 549.118991][T19979] tipc: Resetting bearer [ 549.167790][T19979] tipc: Resetting bearer [ 549.175309][T19979] batadv0: left promiscuous mode [ 549.181701][T19979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.269104][T19979] bond1: left promiscuous mode [ 549.277121][T19979] gre1: left promiscuous mode [ 549.293579][T19979] bridge3: left promiscuous mode [ 549.305571][T19979] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 549.318319][T19979] 8021q: adding VLAN 0 to HW filter on device bond5 [ 549.328090][T19979] bond5: entered promiscuous mode [ 549.337096][T19979] gretap1: entered promiscuous mode [ 549.343072][T19979] macvlan2: left promiscuous mode [ 549.349507][T19979] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 549.367237][T19979] 8021q: adding VLAN 0 to HW filter on device bond7 [ 549.376921][T19979] 8021q: adding VLAN 0 to HW filter on device bond8 [ 549.395316][T19964] vlan2: entered promiscuous mode [ 549.402560][T19964] syz_tun: entered promiscuous mode [ 549.575386][T19986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3503'. [ 551.639681][T19952] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 552.428432][T20037] SET target dimension over the limit! [ 552.466278][T20037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3516'. [ 552.862018][T20060] macvlan0: mtu less than device minimum [ 552.883782][T20060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3522'. [ 553.244625][T20071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3526'. [ 553.263457][T20071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3526'. [ 553.287277][T20071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3526'. [ 553.737084][T20091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3533'. [ 553.774670][T20096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3535'. [ 553.814382][T20095] netlink: 'syz.2.3534': attribute type 1 has an invalid length. [ 553.838573][T20094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 553.890597][T20102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3534'. [ 554.067727][T20107] gre1: entered promiscuous mode [ 554.588003][T20140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3543'. [ 554.818805][T20152] IPVS: set_ctl: invalid protocol: 187 0.0.0.0:20001 [ 555.497497][T20165] bridge1: entered promiscuous mode [ 555.503966][T20165] bridge1: entered allmulticast mode [ 555.563620][T20167] netlink: 'syz.2.3550': attribute type 2 has an invalid length. [ 555.788056][T20175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3551'. [ 555.815029][T20175] bond1: entered promiscuous mode [ 555.820743][T20175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 555.841466][T20175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 555.848554][T20175] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 555.866328][T20175] bond1: (slave sit1): Error -95 calling set_mac_address [ 557.399280][T20133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 557.411808][T20158] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3548'. [ 557.434349][T20180] netlink: 'syz.2.3552': attribute type 11 has an invalid length. [ 557.455509][T20180] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3552'. [ 557.617567][T20186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3554'. [ 557.700779][T20194] netlink: 268 bytes leftover after parsing attributes in process `syz.2.3557'. [ 557.736678][T20187] syzkaller1: entered promiscuous mode [ 557.753646][T20187] syzkaller1: entered allmulticast mode [ 557.953502][T20203] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3560'. [ 558.041157][T20211] lo speed is unknown, defaulting to 1000 [ 558.051716][T20211] lo speed is unknown, defaulting to 1000 [ 558.069899][T20211] lo speed is unknown, defaulting to 1000 [ 558.119358][T20211] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 558.148330][T20211] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 558.195401][T20211] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 558.263844][T20211] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 558.286427][T20219] syzkaller1: entered allmulticast mode [ 558.362706][T20211] lo speed is unknown, defaulting to 1000 [ 558.375575][T20211] lo speed is unknown, defaulting to 1000 [ 558.401635][T20211] lo speed is unknown, defaulting to 1000 [ 558.429234][T20211] lo speed is unknown, defaulting to 1000 [ 558.444060][T20211] lo speed is unknown, defaulting to 1000 [ 558.464232][T20211] lo speed is unknown, defaulting to 1000 [ 558.484207][T20211] lo speed is unknown, defaulting to 1000 [ 558.504122][T20211] lo speed is unknown, defaulting to 1000 [ 558.517346][T20231] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 558.682956][T20235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.702149][T20235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.726723][T20235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.741360][T20233] nbd: must specify at least one socket [ 558.747094][T20235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.080377][T20256] netlink: 'syz.3.3575': attribute type 13 has an invalid length. [ 559.328466][T20268] syzkaller1: entered promiscuous mode [ 559.334439][T20268] syzkaller1: entered allmulticast mode [ 559.350046][T20268] __nla_validate_parse: 4 callbacks suppressed [ 559.350068][T20268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3581'. [ 559.483766][T20271] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 559.492979][ T5357] IPVS: starting estimator thread 0... [ 559.517647][T20271] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20004 [ 559.548999][T20271] IPVS: fo: FWM 3 0x00000003 - no destination available [ 559.589889][T20279] IPVS: using max 27 ests per chain, 64800 per kthread [ 560.842515][T20347] netlink: 'syz.0.3597': attribute type 1 has an invalid length. [ 560.939428][T20347] bond1: entered promiscuous mode [ 560.945429][T20347] 8021q: adding VLAN 0 to HW filter on device bond1 [ 561.205783][T20357] vlan2: entered allmulticast mode [ 561.223386][T20357] bond1: entered allmulticast mode [ 561.347599][T20325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3592'. [ 561.350336][T20365] bridge1: entered promiscuous mode [ 561.362396][T20365] bridge1: entered allmulticast mode [ 561.368728][T20365] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 561.385018][T20325] netlink: 'syz.4.3592': attribute type 7 has an invalid length. [ 561.394237][T20325] netlink: 'syz.4.3592': attribute type 8 has an invalid length. [ 561.402195][T20325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3592'. [ 561.419288][T20325] ip6gretap0: entered promiscuous mode [ 561.437524][T20325] ip6gretap0: left promiscuous mode [ 561.639029][T20379] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3601'. [ 561.693460][T20380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3601'. [ 572.669820][T20362] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 667.119500][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 667.126519][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18596/1:b..l [ 667.135444][ C1] rcu: (detected by 1, t=10502 jiffies, g=113145, q=741 ncpus=2) [ 667.143282][ C1] task:syz-executor state:R running task stack:22296 pid:18596 tgid:18596 ppid:18583 task_flags:0x400140 flags:0x00080000 [ 667.157845][ C1] Call Trace: [ 667.161160][ C1] [ 667.164122][ C1] __schedule+0x17d9/0x56c0 [ 667.168676][ C1] ? stack_trace_save+0xa9/0x100 [ 667.173683][ C1] ? __pfx___schedule+0x10/0x10 [ 667.178589][ C1] preempt_schedule_irq+0x4d/0xa0 [ 667.183644][ C1] irqentry_exit+0x14f/0x8f0 [ 667.188260][ C1] ? trace_irq_disable+0x3b/0x140 [ 667.193315][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 667.199322][ C1] RIP: 0010:unwind_next_frame+0xf3/0x2550 [ 667.205070][ C1] Code: 74 28 80 3d 5c a4 a5 0e 00 75 1f c6 05 53 a4 a5 0e 01 48 c7 c7 40 b3 c9 8b be 4a 03 00 00 48 c7 c2 80 b3 c9 8b e8 6d 7a 2b 00 <48> 89 6c 24 38 48 89 5c 24 40 49 8d 5e 50 48 89 d8 48 c1 e8 03 48 [ 667.224697][ C1] RSP: 0018:ffffc90003c37460 EFLAGS: 00000202 [ 667.230806][ C1] RAX: 0000000000000001 RBX: ffffffff8bb32224 RCX: 0000000080000001 [ 667.238797][ C1] RDX: 000000005a44979c RSI: ffffffff8c2a9f60 RDI: ffffffff8c2a9f20 [ 667.246810][ C1] RBP: 1ffff92000786ea8 R08: ffffffff8176f21f R09: 0000000000000000 [ 667.254829][ C1] R10: 0000000000000000 R11: ffffffff8e959c20 R12: dffffc0000000000 [ 667.262852][ C1] R13: ffffffff8176f21f R14: ffffc90003c37508 R15: 1ffff92000786ea1 [ 667.270859][ C1] ? unwind_next_frame+0x8f/0x2550 [ 667.276013][ C1] ? do_syscall_64+0x174/0x580 [ 667.280799][ C1] ? unwind_next_frame+0x8f/0x2550 [ 667.285956][ C1] ? __x64_sys_clone+0x1b6/0x230 [ 667.290940][ C1] ? unwind_next_frame+0x8f/0x2550 [ 667.296079][ C1] ? __kmalloc_noprof+0x1ad/0x720 [ 667.301134][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 667.307317][ C1] arch_stack_walk+0x11b/0x150 [ 667.312118][ C1] ? do_syscall_64+0x174/0x580 [ 667.316911][ C1] stack_trace_save+0xa9/0x100 [ 667.321706][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 667.327118][ C1] ? __lock_acquire+0x683/0x2cf0 [ 667.332084][ C1] kasan_save_track+0x3e/0x80 [ 667.336783][ C1] ? kasan_save_track+0x3e/0x80 [ 667.341650][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 667.346432][ C1] ? __kmalloc_noprof+0x375/0x720 [ 667.351491][ C1] ? security_prepare_creds+0x52/0x360 [ 667.356980][ C1] ? prepare_creds+0x57d/0x820 [ 667.361763][ C1] ? copy_creds+0x109/0x9f0 [ 667.366289][ C1] ? copy_process+0xd1f/0x43f0 [ 667.371078][ C1] ? kernel_clone+0x2d7/0x940 [ 667.375873][ C1] ? __x64_sys_clone+0x1b6/0x230 [ 667.380831][ C1] ? do_syscall_64+0x174/0x580 [ 667.385676][ C1] __kasan_kmalloc+0x93/0xb0 [ 667.390295][ C1] __kmalloc_noprof+0x375/0x720 [ 667.395194][ C1] ? __kmalloc_noprof+0x1ad/0x720 [ 667.400341][ C1] ? security_prepare_creds+0x52/0x360 [ 667.405824][ C1] ? security_prepare_creds+0x52/0x360 [ 667.411404][ C1] security_prepare_creds+0x52/0x360 [ 667.416724][ C1] prepare_creds+0x57d/0x820 [ 667.421359][ C1] copy_creds+0x109/0x9f0 [ 667.425806][ C1] copy_process+0xd1f/0x43f0 [ 667.430443][ C1] ? __pfx___css_rstat_updated+0x10/0x10 [ 667.436147][ C1] ? __pfx_copy_process+0x10/0x10 [ 667.441218][ C1] kernel_clone+0x2d7/0x940 [ 667.445762][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 667.450868][ C1] __x64_sys_clone+0x1b6/0x230 [ 667.455671][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 667.461006][ C1] ? do_user_addr_fault+0xc4a/0x1340 [ 667.466323][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.472414][ C1] do_syscall_64+0x174/0x580 [ 667.477026][ C1] ? trace_irq_disable+0x3b/0x140 [ 667.482075][ C1] ? clear_bhb_loop+0x40/0x90 [ 667.486864][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.492780][ C1] RIP: 0033:0x7f01a01c58d2 [ 667.497218][ C1] RSP: 002b:00007fff96c38c00 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 667.505742][ C1] RAX: ffffffffffffffda RBX: 00007fff96c38c00 RCX: 00007f01a01c58d2 [ 667.513735][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 667.521760][ C1] RBP: 00007fff96c38d8c R08: 0000000000000000 R09: 0000000000000001 [ 667.529763][ C1] R10: 000055558bea47d0 R11: 0000000000000246 R12: 0000000000000001 [ 667.537756][ C1] R13: 00000000000927c0 R14: 000000000008914b R15: 00007fff96c38de0 [ 667.545774][ C1] [ 667.548817][ C1] rcu: rcu_preempt kthread starved for 9442 jiffies! g113145 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 667.560381][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 667.570378][ C1] rcu: RCU grace-period kthread stack dump: [ 667.576305][ C1] task:rcu_preempt state:R running task stack:27752 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 667.590261][ C1] Call Trace: [ 667.593566][ C1] [ 667.596520][ C1] __schedule+0x17d9/0x56c0 [ 667.601155][ C1] ? __lock_acquire+0x683/0x2cf0 [ 667.606142][ C1] ? __pfx___schedule+0x10/0x10 [ 667.611034][ C1] ? schedule+0x90/0x2b0 [ 667.615307][ C1] schedule+0x164/0x2b0 [ 667.619490][ C1] schedule_timeout+0x152/0x2c0 [ 667.624403][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 667.629799][ C1] ? __pfx_process_timeout+0x10/0x10 [ 667.635116][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 667.641005][ C1] ? prepare_to_swait_event+0x322/0x350 [ 667.646596][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 667.651484][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 667.657673][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 667.663007][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 667.668586][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 667.674437][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 667.679492][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 667.684722][ C1] ? __kthread_parkme+0x71/0x1f0 [ 667.689823][ C1] ? __kthread_parkme+0x196/0x1f0 [ 667.694996][ C1] kthread+0x388/0x470 [ 667.699103][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 667.704428][ C1] ? __pfx_kthread+0x10/0x10 [ 667.709195][ C1] ret_from_fork+0x514/0xb70 [ 667.713906][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 667.719176][ C1] ? __switch_to+0xc89/0x1420 [ 667.723886][ C1] ? __pfx_kthread+0x10/0x10 [ 667.728499][ C1] ret_from_fork_asm+0x1a/0x30 [ 667.733315][ C1] [ 667.736363][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 667.742715][ C1] CPU: 1 UID: 0 PID: 7572 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 667.751595][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 667.761671][ C1] RIP: 0010:smp_call_function_many_cond+0x10b0/0x14b0 [ 667.768458][ C1] Code: c0 75 73 41 8b 1e 89 de 83 e6 01 31 ff e8 d8 1e 0c 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 84 1a 0c 00 eb 37 f3 90 <41> 0f b6 04 1c 84 c0 75 10 41 f7 06 01 00 00 00 74 1e e8 69 1a 0c [ 667.788262][ C1] RSP: 0018:ffffc900054ff580 EFLAGS: 00000293 [ 667.794363][ C1] RAX: ffffffff81ba5717 RBX: dffffc0000000000 RCX: ffff88802ed75d00 [ 667.802441][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 667.810431][ C1] RBP: ffffc900054ff6a8 R08: ffffffff9032d2f7 R09: 1ffffffff2065a5e [ 667.818420][ C1] R10: dffffc0000000000 R11: fffffbfff2065a5f R12: 1ffff110170c85fd [ 667.826411][ C1] R13: ffff8880b873c448 R14: ffff8880b8642fe8 R15: 0000000000000000 [ 667.834667][ C1] FS: 00007f0b5764b880(0000) GS:ffff888125326000(0000) knlGS:0000000000000000 [ 667.843811][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 667.850437][ C1] CR2: 00007ffe1ea4f000 CR3: 0000000078c6e000 CR4: 00000000003526f0 [ 667.858440][ C1] Call Trace: [ 667.861746][ C1] [ 667.864704][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 667.869963][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 667.876675][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 667.881910][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 667.887049][ C1] flush_tlb_mm_range+0x5c4/0x1090 [ 667.892196][ C1] tlb_flush_mmu+0x1af/0xa30 [ 667.896906][ C1] tlb_finish_mmu+0xf4/0x220 [ 667.901525][ C1] unmap_region+0x2a5/0x330 [ 667.906076][ C1] ? __pfx_unmap_region+0x10/0x10 [ 667.911168][ C1] ? __mas_set_range+0x11a/0x3a0 [ 667.916150][ C1] vms_complete_munmap_vmas+0x427/0xbe0 [ 667.921741][ C1] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 667.927847][ C1] ? __mas_set_range+0x11a/0x3a0 [ 667.932818][ C1] do_vmi_align_munmap+0x3b7/0x4b0 [ 667.937983][ C1] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 667.943676][ C1] do_vmi_munmap+0x252/0x2d0 [ 667.948297][ C1] __vm_munmap+0x241/0x3e0 [ 667.952748][ C1] ? __pfx___vm_munmap+0x10/0x10 [ 667.957732][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.963819][ C1] __x64_sys_munmap+0x60/0x70 [ 667.968531][ C1] do_syscall_64+0x174/0x580 [ 667.973152][ C1] ? clear_bhb_loop+0x40/0x90 [ 667.977852][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.983764][ C1] RIP: 0033:0x7f0b56f1e097 [ 667.988205][ C1] Code: 73 01 c3 48 8b 0d 61 2d 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 31 2d 0d 00 f7 d8 64 89 01 48 [ 668.007892][ C1] RSP: 002b:00007ffe1ea4eea8 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 668.016408][ C1] RAX: ffffffffffffffda RBX: 000055fbe3ebcbf0 RCX: 00007f0b56f1e097 [ 668.024434][ C1] RDX: 0000000000000000 RSI: 00000000009480e8 RDI: 00007f0b56400000 [ 668.032541][ C1] RBP: 000055fbe3ebc910 R08: 000055fbe3ecf140 R09: 0000000000000006 [ 668.040623][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000055fbdb4e9588 [ 668.048618][ C1] R13: 00007ffe1ea4ef30 R14: 0000000000000000 R15: 0000000000000000 [ 668.056636][ C1]