last executing test programs: 2m13.128956134s ago: executing program 0 (id=8570): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000000040)={0x20, r1, 0xe6e964277ae08d57, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) 2m10.809515076s ago: executing program 0 (id=8576): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) pread64(r0, &(0x7f0000000040)=""/7, 0x7, 0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x9) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) pipe(&(0x7f0000000280)) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x0) sendmsg$rds(r4, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 2m10.79908386s ago: executing program 0 (id=8582): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x8, 0x3, "e4edf2b7"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlabel\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000001c0)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000003010101000000000000000002000002140005800e0001007369702d3230703030000000"], 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x4040000) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb9", 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe"], 0x48}}, 0x0) pselect6(0xfffffffffffffeef, &(0x7f00000001c0)={0x0, 0x1000000}, 0x0, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000001200)={0x60000010}) epoll_pwait(r6, &(0x7f0000000280)=[{}], 0x1, 0x7, 0x0, 0x0) shutdown(r5, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c80000000101050000000000000000000700000108000c40000000031000164080000000fffffff1000000090800074000000009140005800e000100006e6d705f747261700000000600124000010000060012400001000008001a400000caaa080003400000000014001880080003400000000608000340000005ef4c000e8014000180080001000000000008000200ffffffff06000340000300002c00018014000300ff02000000000000000000000000000114000400fe80000000000000000000000000003c"], 0xc8}, 0x1, 0x0, 0x0, 0x8800}, 0x4000080) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 2m10.47781428s ago: executing program 0 (id=8588): r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) (async) close(r0) 2m8.838877024s ago: executing program 0 (id=8592): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d00)={@cgroup, 0xffffffffffffffff, 0x1e, 0x8}, 0x20) socket$unix(0x1, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb048}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24511724e0e8b0dd}, 0x40095) 2m8.58030371s ago: executing program 0 (id=8597): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = accept4$inet(r0, 0x0, &(0x7f00000000c0), 0x81800) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x100}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="0000002100000000050000000000000095c333d4c0a3ecdd69086b8e4c36439a8808b90ea579cdf8bd475a470064827701f4169ebebecb5bba94f06f020fb64e5594a86f5f00000000000008c7533dc98a94008d7d2a7d2c23bc3f4cc1992aebd29fd21e95b3c7c49de340c24cb6ba1a33740825c424ecd87a3b02ae7840be900964b6948074a8f2ed867fd6601b0ca02215f4c2a5157135575fa1903abe92246853cb7cb868a3b2524a92bfa8aaeaf3ff3f08fb97ec0c126bfea903"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000900), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001f00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010080000000000000000800000008000300", @ANYRES32=r5, @ANYBLOB="67f47fd0391b53d14b60ec51f5e91d90bfbbf72f72bf87989bf6218055de6dadaec56c1731e2a7f557f885248a97f7e443a502299287bcc41040a1268644204181eff26ee6036b84c98dca000000002188fe162f12a9203a530a602c2fbfff7cc1e3483fb5694cbdc1e044afa2c1e64f4bf1a3a07d31e329e3508ffbae785931eaca81123cb426d9db419f50e47d3850a6f844daacb71e1dd329f7f0fc3bca0aff9045a876f7d1ff7c7837c33df162c5c479ddf1f10ca0da69bda509fa5df64a4ccb717d0a05e5217ca098bc9ca6a4294dc4f5958e6f4080d5bcbcb0b694df65dd48f9314ca7956c6ef9220f24ea37e11b07aa30"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x3c, r8, 0x1, 0x0, 0x0, {0x49}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) close(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="6effca5d0f79dca3a34e0f1379e65f6cb561833c6638566accf6ea6ec90e918b2f83e196eb3f60c7646a21b75b199a0622b1f94cb3342de96330df557969b5e0456db4f3d72c5401ea6f6ab8c4df780e2c7c177e9bb0db771685e60904f66843bad7ad04419577703e3fa6df42fcbc3063eb7642cc9d7d595ee4a34dd50654181396b9871e5c30ec656c29080d109e4021a9b38197a335b2e5815e1c2e902b15ef8d15a4700a9598fa55d643ceac45d3a58ea45b307b133e3230e8373aa8c4bb2c20dcf98b272d4f4650c9e71d1da43009d3", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r10}, &(0x7f0000000c40), &(0x7f0000000c80)=r2}, 0x20) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r12, 0x4030582b, &(0x7f0000000300)={0x1100, 0x0, 0x10, 0x8}) r13 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) 1m53.468974995s ago: executing program 32 (id=8597): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = accept4$inet(r0, 0x0, &(0x7f00000000c0), 0x81800) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x100}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="0000002100000000050000000000000095c333d4c0a3ecdd69086b8e4c36439a8808b90ea579cdf8bd475a470064827701f4169ebebecb5bba94f06f020fb64e5594a86f5f00000000000008c7533dc98a94008d7d2a7d2c23bc3f4cc1992aebd29fd21e95b3c7c49de340c24cb6ba1a33740825c424ecd87a3b02ae7840be900964b6948074a8f2ed867fd6601b0ca02215f4c2a5157135575fa1903abe92246853cb7cb868a3b2524a92bfa8aaeaf3ff3f08fb97ec0c126bfea903"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000900), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001f00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010080000000000000000800000008000300", @ANYRES32=r5, @ANYBLOB="67f47fd0391b53d14b60ec51f5e91d90bfbbf72f72bf87989bf6218055de6dadaec56c1731e2a7f557f885248a97f7e443a502299287bcc41040a1268644204181eff26ee6036b84c98dca000000002188fe162f12a9203a530a602c2fbfff7cc1e3483fb5694cbdc1e044afa2c1e64f4bf1a3a07d31e329e3508ffbae785931eaca81123cb426d9db419f50e47d3850a6f844daacb71e1dd329f7f0fc3bca0aff9045a876f7d1ff7c7837c33df162c5c479ddf1f10ca0da69bda509fa5df64a4ccb717d0a05e5217ca098bc9ca6a4294dc4f5958e6f4080d5bcbcb0b694df65dd48f9314ca7956c6ef9220f24ea37e11b07aa30"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x3c, r8, 0x1, 0x0, 0x0, {0x49}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) close(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="6effca5d0f79dca3a34e0f1379e65f6cb561833c6638566accf6ea6ec90e918b2f83e196eb3f60c7646a21b75b199a0622b1f94cb3342de96330df557969b5e0456db4f3d72c5401ea6f6ab8c4df780e2c7c177e9bb0db771685e60904f66843bad7ad04419577703e3fa6df42fcbc3063eb7642cc9d7d595ee4a34dd50654181396b9871e5c30ec656c29080d109e4021a9b38197a335b2e5815e1c2e902b15ef8d15a4700a9598fa55d643ceac45d3a58ea45b307b133e3230e8373aa8c4bb2c20dcf98b272d4f4650c9e71d1da43009d3", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r10}, &(0x7f0000000c40), &(0x7f0000000c80)=r2}, 0x20) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r12, 0x4030582b, &(0x7f0000000300)={0x1100, 0x0, 0x10, 0x8}) r13 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) 2.03093199s ago: executing program 2 (id=9750): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008000100", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0xfffd, @multicast2}, 0x4}}, 0x2e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000001640)=[{{&(0x7f0000000640)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000001140)="c59a9693bd", 0x5}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000800)="931748ff", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000001c0)={r7, 0x2}, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x9, 0x91, 0x2, @mcast2, @empty, 0x8, 0x7f88, 0x3ff, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000340)={'tunl0\x00', r8, 0x7, 0x40, 0xfffffff8, 0x6, {{0x18, 0x4, 0x2, 0x7, 0x60, 0x65, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@ssrr={0x89, 0x2b, 0xea, [@loopback, @local, @multicast2, @broadcast, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x29}, @dev={0xac, 0x14, 0x14, 0x23}, @remote, @empty]}, @rr={0x7, 0x1b, 0x5c, [@loopback, @dev={0xac, 0x14, 0x14, 0x13}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x44, 0x5, "b74cb0"}]}}}}}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000080)={0x5, 0x1, 0x4, 0x62600, r7}, &(0x7f0000000140)=0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a31000000000900010073797a300000000054000000060a0104000000001f0000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c0002800800014000000011080003400000000d08000240f9a88e8b140000001100010000000000000000000000000a"], 0xc8}}, 0x4004) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="feffffff0eee05000000000000000000010000040500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x240408c0}, 0xc0) 1.936666316s ago: executing program 5 (id=9752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r4, 0x0, 0x2a, &(0x7f0000003080)="28410f027a06a5ec90280f53f23a7f83e89ae02572e77804255d41ae923840199f820b50b7a8200fe36c04a7f9846e98d94c6d400af60a16e7858f350311a523d8f8627a3bf6f76b65a3d9aef34055bccc9ed63f4a635bca3586318901a0a3dcced16905b57d8506273df696dfbee4936517a58c1a1555a17179675619f980e8e434a813b4bb5e41b26f71", 0x8b) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="060000000025bd7000ffdbdf2507000000", @ANYRES32=r3, @ANYBLOB="8000ce040a000200aaaaaaaaaa290000"], 0x28}, 0x1, 0x0, 0x0, 0x200440c5}, 0x14) (async, rerun: 32) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async, rerun: 32) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x84}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x800) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r5, 0x3f976000) (async) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) (async) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) (async) syz_emit_ethernet(0x2e, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbe278c8b9b5d9080045080020fffd000000119078e0000001e000000180004e20000c9078c10200018e5edea452870bdb245c4f44fb1fa6bf01cf5e4706665407d131717b743730"], 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, 0x0, &(0x7f0000000100)) (async, rerun: 32) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000200)=0x7fff, 0x4) (async, rerun: 32) sendmmsg$inet6(r6, &(0x7f00000002c0)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x9, @loopback}, 0x1c, 0x0}}], 0x1, 0x24000000) (async) recvmmsg(r6, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x4}], 0x1, 0x40002042, 0x0) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) socket$inet(0x2, 0x2, 0x0) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x198, 0x194, 0x194, 0x198, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x0, 0x0, 0x42}, 0x0, 0x98, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x5, 0x1}, {0x1, 0x6, 0x1}, 0x10, 0xffff9e60}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="2dac7a13aa6b", 0xfacd, 0x15, [0xf, 0x14, 0x1f, 0x11, 0xc, 0xb, 0x18, 0x24, 0x39, 0x0, 0x14, 0xa, 0x38, 0x2, 0x31, 0x15], 0x1, 0x2, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="017917000000000020020c00000008000400000000bb"], 0x1c}}, 0x0) 1.844779589s ago: executing program 4 (id=9754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, r1, 0x1, 0x400, 0x25dfdbfe, {0x3}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd82c}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}]}]}, 0x5c}}, 0x0) 1.676734278s ago: executing program 5 (id=9757): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x34, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.676309632s ago: executing program 4 (id=9758): socketpair(0x26, 0x8080b, 0x5, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000240)=0x1, &(0x7f0000000300)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e40)={0x20, 0x42, 0x107, 0xfffffffe, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x146}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x64}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048808}, 0xc000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x2) close(r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) (async) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x14, 0x0, 0x1, [@generic="b0"]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) sendmmsg$unix(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@file={0x1, './cgroup/../file0/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.658859314s ago: executing program 2 (id=9760): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000910c0000bfa30000000000000703000000feffff7a0af0ff0d00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000009000000b7030000010000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa00000000690e000000000000008b798b4f7458d1863cc67c4c6a06fa28e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc7a65d073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f838f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b32176066599783568628f0309c3a01716d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d247714358d8b170c3b5cad11f72cd9d88e56b95fe9f3de5cfcfa5c1da8ba181580d9db035efe38834de171b64f4b4c1b242786dcc5679e3d0613cdf05b02d7ad4f3b8af27a696e9b8809c2d68fddfcbd451e81d37c11f95094b91fff61ab9e69780b133d1dbca5a78695131c34c855dd793f90ca3973a4bd5606151b3600373d2bbfb7b3638e713e7275af06107949ff5dffe24d3c448ae6e4646b346fe0a21eef1e55d0659eac930d00000000000ff52b98317c45417b900a47c1ae1103c09fc173c1cf28bf7ef7a61523c6b2dbb35f5ae29877bb8e1b3e257056c0d205d391ed7b2089a72a93885b9fc8430ff"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0x69, 0x74, &(0x7f0000000040)="0e7bf2851ce02c6cfb66c1c9025b43a3e592e941966a17f195022ba7d6cd71fbbcf34707c33024fb530e9d71a2747dd1a94344c76547c2310abb0dbdaff48600b718dce2f5e4b33c03a137cd80e2e7fa14a137ca2ff0d0d5eba581c8957e1809c6817bca7fb5aa9fbe", &(0x7f0000000140)=""/116, 0x45, 0x0, 0xd3, 0x41, &(0x7f0000000380)="f5b37ceaa883a6f82e3d1e26058a7660db42e2f82a205ea4715736f2552920d4a85bb7362aa1ed9f839e793baecd10870c5f8268f87746da8d2f100cc06d51f2bc3be19b9f65cfc091752d02e95e3e33a2435b09f7582a6275ffb4f21e012a1fde246be06b0fc38654335fe0075542753d8d8f75143869252a71757e1fc9889baee57d166d57b981f4756e8bacdcf98d24b4de44fae45a6a9bc9f1bf1e9361baf25f8bdb180227320b4cef40d99bbd4d6c4d0a2f794c51dfbc779eac955107847b650e237023a293b863b16b42930c41765575", &(0x7f00000002c0)="86a3fde77753bc7fd40c0cb88793eec76a70d3378dd665436b22a2a75e1b7fb92345b90e6e820d69939cddbc9be9f77fbe0787caf19225a1e32ac58a08f16b85c4", 0x5, 0x0, 0x5}, 0x50) 1.538732503s ago: executing program 2 (id=9761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002300)=ANY=[@ANYBLOB="000086dd0000120000001008000060fc03000fc82c"], 0xffe) 1.385453021s ago: executing program 5 (id=9764): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x8000) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0xb, 0x5, 0x5) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x10, 0x1402, 0x1}, 0x10}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x4c081) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r5, r4}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000200)={r5}) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4040}, 0x0) socket(0x1e, 0x805, 0x0) 1.234824302s ago: executing program 5 (id=9765): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0xc77, 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.234522254s ago: executing program 4 (id=9766): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='pids.current\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000840)='ns/time_for_children\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000000)=@ethtool_eee={0x44, 0x0, 0x8, 0xc17, 0x7d5, 0x1, 0x8, 0x10000000, [0x1, 0x3]}}) ioctl$NS_GET_OWNER_UID(r1, 0x8008b70d, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) 1.140785232s ago: executing program 2 (id=9768): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x9, 0xfffffffffffffffe, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r2, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018150000", @ANYRES32=r1, @ANYRESDEC=r3, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c000000d600000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000009000000000000000000000009000000000000000000000009020000000000"], 0x0, 0x96}, 0x20) close(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) r4 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010001fff009300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000500110002000000"], 0x28}}, 0x0) 1.140249836s ago: executing program 3 (id=9769): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'cpu'}, {0x2b, 'rdma'}, {0x2b, 'cpuset'}, {0x2b, 'devices'}, {0x6, 'rdma'}]}, 0x22) sendfile(r0, r0, &(0x7f00000000c0)=0xac3, 0x933b) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000100)=0x9, &(0x7f0000000140)=0x4) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000180)={0x96, {0x1e, 0x8000, 0x9, 0x7ff, 0xce8}}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r3, &(0x7f00000001c0)={{0x3, @bcast}, [@rose, @netrom, @netrom, @null, @default, @rose, @bcast]}, &(0x7f0000000240)=0x48) r4 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @bcast}, [@remote, @null, @remote, @remote, @remote, @default, @rose, @bcast]}, &(0x7f0000000300)=0x48, 0x80800) ioctl$SIOCAX25OPTRT(r4, 0x89e7, &(0x7f0000000340)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) recvfrom$packet(r5, &(0x7f0000000380)=""/40, 0x28, 0x40000000, &(0x7f0000000400)={0x11, 0x19, r6, 0x1, 0x8}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x3, 0x8}, {0x2, 0xfff3}, {0xfff1, 0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x200}, @qdisc_kind_options=@q_clsact={0xb}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x4c}}, 0x48011) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x4, 0x92, 0x3, 0xfffffffb}]}, 0x10) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r7, 0x89ed, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r7) sendmsg$DEVLINK_CMD_SB_GET(r8, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x88, r9, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff}}]}, 0x88}}, 0x2000c010) r10 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000009c0)={{r10}, r11, 0x12, @unused=[0x9, 0x6, 0x6], @subvolid}) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r12, 0x0, 0x1, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001a40)={'syz_tun\x00'}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r13, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x6040) 1.111928768s ago: executing program 4 (id=9770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a38000000060a010e00000000000000000200ffff0900020073797a32000000000900010073797a30000000000c00064000848b8c42a980e92d6439ba0d990000000000000214000000110001"], 0x60}, 0x1, 0x0, 0xf5ff, 0x20048880}, 0x20002000) 1.060453934s ago: executing program 2 (id=9771): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000101000000000000000001"], 0x114}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)='$', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r3, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r3, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) 949.578648ms ago: executing program 4 (id=9773): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x5, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback={0xfe80}, 0xffffffff}, 0x1c) 772.579295ms ago: executing program 4 (id=9775): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x8000) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0xb, 0x5, 0x5) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x10, 0x1402, 0x1}, 0x10}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x4c081) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000200)={r4}) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4040}, 0x0) socket(0x1e, 0x805, 0x0) 725.438945ms ago: executing program 1 (id=9776): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) getpeername$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x20) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000600010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0xe0, "5b36b9fabc1953a75f39728b2904b990eb17cdc375a313b975b7acdf143e2e1542ac028711ff471da6267e4d748e88925d02db93369f05fceecaeb56987f695d7b7749dee2364da893cb36b248ff78b0b8537dae3dbeaa5092a0b3f2ea749629f1cd78927c303b627cd512f56a7138c9191738a3315b939fc88c4da3de0337fb99103d325cdf3490424c7fa478f25a8d5be31587b649fbc3cc409ce5524b01666e589a183697c9c68697bcea93485dfa3ce2fc22cb61d99812c6e711b56c19400dbdc1a07c68f54c2c8e39ff07a09081fd920f54025eeda2e0e6eba653461cd4"}, &(0x7f0000000100)=0xe8) r6 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000340)={0x0, 'veth0_vlan\x00', {0x4}, 0x81}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000300)={r5, 0x101, 0x2}, 0x8) 662.63655ms ago: executing program 3 (id=9777): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{0x0, 0x114}], 0x1}, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x100}, 0x94) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x11, r2, 0x0) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e23, 0x1000, @empty, 0xe}}, 0x6, 0xa}, 0x90) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e22, @private=0xa010102}, 0x10) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 593.254166ms ago: executing program 1 (id=9778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002300)=ANY=[@ANYBLOB="000086dd0000120000000010000060fc03000fc82c"], 0xffe) 589.887938ms ago: executing program 3 (id=9779): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb4, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0xd, 0x1a, ']\x10\xe0R/\'*$\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8000}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0xd0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @socket={{0xb}, @void}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xa}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x401}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x3c, 0x5, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x58, 0x18, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1d8}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000e08000340000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 542.995158ms ago: executing program 3 (id=9780): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030c000000ff0e0000000000000200090040000000700000000000000003000600000000000200000000000000000000050000000002000100000004d300000502000000e0030005003c00000002"], 0x60}, 0x1, 0x7}, 0x0) 512.285587ms ago: executing program 3 (id=9781): r0 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x1c, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x8, 0xf989, ';.;S'}]}}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) sendmsg$nl_xfrm(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x32}, [@mark={0xc}]}, 0x34}}, 0x0) 440.598238ms ago: executing program 1 (id=9782): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010100}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x278, 0x65, 0x2, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x230, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x210, 0x1, [@m_simple={0x1a8, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x10000000, 0x633, 0xe2d}}]}, {0x161, 0x6, "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"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x64, 0x13, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x400, 0x33c9, 0x3, 0x6, 0x5}, 0x3}}, @TCA_MPLS_TC={0x5, 0x6, 0x4}]}, {0x11, 0x6, "df76640d30b6ba21699aad3d08"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x278}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0006005200010000000000000000000a000000080002000a010101"], 0x1c}}, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffffb6, 0x2, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x25, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) shutdown(r5, 0x1) splice(r5, 0x0, r4, 0x0, 0x100000003, 0xa) accept4(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000040)=0x80, 0x1800) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x1) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000001f00)=""/4062, &(0x7f00000001c0)=0xfde) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0xc77, 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 317.70424ms ago: executing program 1 (id=9783): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) pread64(r0, &(0x7f0000000040)=""/7, 0x7, 0x3) pipe(&(0x7f0000000280)) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x0) sendmsg$rds(r4, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2309fefffffffcffffff01000000050007000000000008000900000000000600020001000000083f0a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 304.004968ms ago: executing program 3 (id=9784): r0 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@isdn, &(0x7f0000000180)=0x80, 0x80000) connect$bt_sco(r0, &(0x7f00000001c0), 0x8) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) (async) socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000400)={r3, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x0, 0x3, 0x3}, 0x10) (async) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000380), &(0x7f0000000200)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r5) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="88000000", @ANYRES16=r6, @ANYBLOB="5d4524bd70a0fedbdf25010000000c0002000100000000000000100007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c0005004601000000000000400007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="0c71100997000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="0c0008000104000000000000"], 0x88}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000002c0)={'wpan0\x00'}) (async, rerun: 32) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10000}, 0x1c) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r10, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000580)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES8=r10, @ANYBLOB="01002efd7000fbdbdf253100000008000200", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8884}, 0x24000010) 244.580378ms ago: executing program 5 (id=9785): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 193.371246ms ago: executing program 1 (id=9786): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) write(r0, &(0x7f0000000000)="b0b1f6fc4e93a0c324f7e40702eea3b0e168bc1901931998d6a6ef8fe2c06c7a9c918f272397e731e1959433e81aa8d85d0c4287b6f35f2708923c235c1ce274c3220ccffb99aa201db034a34690c7507c77ea3378bf230f1743d064421663c2c431962a7b8cae6bff827cef6311e9aa4631a6d45e0bc50d5f0cf4d4c523cf107d94872cdeb8caa79c557b895b42f233e6b39209ec15", 0x96) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001c80)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x1, 0x40, 0x4255, 0x4}, {0x80, 0xa382b932ee83be1b, 0x1, 0x8, 0x1ff, 0x5}, 0x1, 0x80000000, 0x1b39}}, @TCA_TBF_RATE64={0xc, 0x4, 0xe8eb9bca25e8f4c7}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) 116.782518ms ago: executing program 2 (id=9787): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x26000000) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x7, 0xb0b, 0x0, @mcast2, @empty, 0x80, 0x700, 0x92d, 0xffffaf64}}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) accept4(r4, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newchain={0x750, 0x64, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x5}, {0xfff1, 0xffff}, {0xffff, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x724, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vcan0\x00'}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0x10}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x84}, @TCA_U32_SEL={0x6c4, 0x5, {0x7, 0x42, 0x5, 0xecb, 0x7, 0xfffd, 0x8, 0x3, [{0x80000000, 0xfffffffd, 0x5, 0xb32}, {0x6, 0xc0000000, 0xb, 0x40}, {0x4, 0x10, 0x8, 0x800}, {0x3, 0x4, 0x1, 0x2}, {0x2, 0x88, 0x1, 0xffffb46b}, {0x8f69, 0x6, 0x8, 0x7}, {0x3, 0x80, 0x40, 0x2}, {0x9, 0x3, 0x0, 0x7ff}, {0x5, 0x8, 0x8001, 0x7}, {0x8, 0x8, 0x856, 0xd}, {0x7, 0x3c, 0x7, 0xfff}, {0x0, 0x6, 0x4, 0x2}, {0xfffffff9, 0x1, 0x9, 0x3}, {0x7ff, 0x6, 0x4, 0x1}, {0x4, 0x6, 0x7ff, 0x80000000}, {0xffffffff, 0x4, 0x582, 0x4}, {0x8, 0x10001, 0x4, 0x4}, {0x0, 0xf0, 0x8, 0x4}, {0x1, 0x4ff3, 0x1ff, 0x1ff}, {0x4, 0x9, 0x0, 0x9}, {0x4, 0x0, 0x2, 0xff}, {0x154232f, 0x3, 0x5, 0x4}, {0x0, 0xd3, 0x1ff, 0x6}, {0x5, 0x3, 0x4, 0x81}, {0x3, 0x8, 0x0, 0x4}, {0xfffffffb, 0xc, 0x7f, 0x8}, {0xe, 0x5, 0x3, 0xfffffff9}, {0x9, 0xc, 0x30fb0ef3, 0xfffffff8}, {0x1, 0x8, 0x800, 0xc1c7}, {0x5, 0x9, 0x7, 0xffff}, {0x3, 0x0, 0x7}, {0xffff, 0x55ab, 0x1000, 0x10000}, {0xf87, 0x1000, 0x7, 0x3}, {0x4, 0x7, 0x9, 0x9}, {0x814c, 0x8, 0x4, 0xf}, {0x1, 0xc, 0xcc1, 0x3245}, {0x2, 0x7, 0x2, 0x8}, {0x30c, 0xfff, 0x81, 0x22}, {0xe8, 0x8, 0x13, 0x24}, {0x1, 0x0, 0x2, 0x8000}, {0x464, 0x100, 0xc, 0x80000000}, {0x1ff, 0x4, 0x0, 0xcd60}, {0x507, 0x7, 0x1}, {0x2, 0xffffffc0, 0x7, 0x7}, {0x31d, 0x7, 0x1, 0x3}, {0x200, 0x3ff, 0x73e, 0x3}, {0x2, 0x80000001, 0x81, 0x717a48c9}, {0x9074, 0x0, 0x4, 0x1ff}, {0x6, 0x3c, 0xfffffffc, 0x3}, {0x8, 0x7fffffff, 0x200, 0x8}, {0x3, 0x1000, 0x3, 0xe4}, {0x8, 0x6, 0x800000}, {0x4, 0x57, 0x100, 0xd1ae}, {0x2, 0x10001, 0xfffffffd, 0x9}, {0x6, 0x1, 0xc, 0x4}, {0x3, 0x3f14, 0x7f}, {0x4386, 0x0, 0x5, 0x6}, {0xdb0, 0x4, 0x10, 0x6}, {0xff, 0x1, 0x7, 0x5}, {0x2, 0x3, 0x800, 0x7}, {0x1142, 0x368, 0x775f, 0x10001}, {0x40, 0x0, 0x67, 0xc93}, {0x5, 0x80, 0x2, 0x5}, {0x55, 0xffffffff, 0x7, 0x3}, {0xa, 0x4, 0xffffffff, 0x445}, {0x7ff, 0x0, 0xfffffffc, 0x28}, {0xc, 0x43d571df, 0xcee, 0x3}, {0x4, 0x2, 0x9, 0x1}, {0x8, 0xc8fd, 0x10}, {0x16b, 0x8, 0x4, 0x85f}, {0x6, 0x9, 0x800, 0x2}, {0x4, 0x40, 0x1, 0x3}, {0x3, 0x4, 0x0, 0xc}, {0x1, 0x7, 0x26, 0x81}, {0x3, 0x5, 0x4, 0x1}, {0xc20f, 0x0, 0x1, 0x4}, {0xe7, 0x2, 0x7, 0x78}, {0x7fff, 0x3, 0x6171, 0x3}, {0x9c, 0x12, 0x10000, 0xbfc4}, {0xffff, 0xfffffffb, 0x3ff, 0x8210}, {0xf5a, 0x2, 0x81, 0x1}, {0xff, 0x1e4b, 0x9, 0xfffff285}, {0x3, 0x9, 0xe, 0x8}, {0x5, 0x0, 0x3, 0x8}, {0xf3, 0x846, 0x0, 0x6}, {0x3, 0x3, 0xffffd3b0, 0xe}, {0x101, 0x1, 0x1, 0x7}, {0x77, 0xdc3, 0x9, 0x10000}, {0x0, 0x6, 0xa5, 0xfffffff8}, {0x2, 0xfb85b4b5, 0x30, 0x6}, {0x1, 0x9, 0xffffff4a, 0x7}, {0x2, 0x8, 0x7, 0xe}, {0xe36, 0x6fcb, 0x7, 0xc69}, {0x7ff, 0x40, 0x8, 0x633c}, {0x0, 0x5a, 0x7fffffff, 0x84c8}, {0x80000001, 0xdd, 0x1, 0x40}, {0x8, 0x6, 0x9, 0x4}, {0x1, 0x7, 0x8, 0x20000000}, {0x9, 0x9, 0x4, 0x1}, {0x9, 0xfffffff9, 0x0, 0x8001}, {0x3, 0xfffffffc, 0x7, 0x1}, {0xffffff51, 0x0, 0x178a950d, 0x73322737}, {0x2, 0x7, 0x7, 0x3}, {0x0, 0x3, 0x80000000, 0x3}, {0x553b, 0x241, 0x5, 0x9630}, {0xf, 0x2, 0x3, 0x65f}, {0x0, 0x80000000, 0x0, 0x3}]}}, @TCA_U32_INDEV={0x14, 0x8, 'bond_slave_0\x00'}, @TCA_U32_MARK={0x10, 0xa, {0x2, 0x101}}, @TCA_U32_INDEV={0x14, 0x8, 'macvtap0\x00'}]}}]}, 0x750}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000104"], 0x50}}, 0x4000084) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r6, {0x8, 0x3}, {0xfff1, 0xffff}, {0xffff, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f580000000c0a0101000000000000000001001b000900020073797a32000000002c0003802800008008000340000000021c000b80360001800e000100636f6e6e6c696d69740c0000040002800900010073797a3000"], 0xdc}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) setsockopt$bt_BT_SECURITY(r10, 0x112, 0x4, &(0x7f0000000c00)={0x6, 0xa3}, 0x2) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000c964fb7e00000000004083f8576244da2e887ff934714a49a71f80f975e84b1d971d6e3306254973077f14dc7e9533e1e6b5f82be443d7ff71568f96731580a229acd9b0b7abed6f1fdde0b3158b3d273a2ee2270f75fa9b597ceaf98fd278dec8ceee9015935796aaef5a8814515038dcb6392eb84493a84495adb88cd961984e00"], &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r11, 0x0, 0x0}, 0x10) close(r10) 870.94µs ago: executing program 1 (id=9788): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 5 (id=9789): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x4, @empty, 0x9f9}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x18}}], 0x1, 0xe6aa0a9f27214269) (fail_nth: 5) kernel console output (not intermixed with test programs): t 2(bridge_slave_1) entered blocking state [ 585.367122][T24054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.415754][T31898] IPVS: Error joining to the multicast group [ 585.422279][T31895] CPU: 1 UID: 0 PID: 31895 Comm: syz.3.8679 Not tainted syzkaller #0 PREEMPT(full) [ 585.422303][T31895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 585.422314][T31895] Call Trace: [ 585.422322][T31895] [ 585.422330][T31895] dump_stack_lvl+0x189/0x250 [ 585.422380][T31895] ? __pfx____ratelimit+0x10/0x10 [ 585.422400][T31895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 585.422417][T31895] ? __pfx__printk+0x10/0x10 [ 585.422437][T31895] ? __pfx___might_resched+0x10/0x10 [ 585.422455][T31895] ? fs_reclaim_acquire+0x7d/0x100 [ 585.422483][T31895] should_fail_ex+0x414/0x560 [ 585.422507][T31895] should_failslab+0xa8/0x100 [ 585.422531][T31895] kmem_cache_alloc_node_noprof+0x77/0x710 [ 585.422552][T31895] ? __alloc_skb+0x255/0x430 [ 585.422573][T31895] ? napi_skb_cache_get+0x4a5/0x780 [ 585.422592][T31895] ? napi_skb_cache_get+0x151/0x780 [ 585.422618][T31895] __alloc_skb+0x255/0x430 [ 585.422642][T31895] ? __pfx___alloc_skb+0x10/0x10 [ 585.422671][T31895] ? net_generic+0x1e/0x240 [ 585.422693][T31895] ? net_generic+0x1e/0x240 [ 585.422711][T31895] ? net_generic+0x1e/0x240 [ 585.422738][T31895] ovs_ct_limit_cmd_del+0x101/0x770 [ 585.422765][T31895] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 585.422786][T31895] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 585.422814][T31895] genl_family_rcv_msg_doit+0x215/0x300 [ 585.422842][T31895] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 585.422876][T31895] ? bpf_lsm_capable+0x9/0x20 [ 585.422892][T31895] ? security_capable+0x7e/0x2e0 [ 585.422921][T31895] genl_rcv_msg+0x60e/0x790 [ 585.422948][T31895] ? __pfx_genl_rcv_msg+0x10/0x10 [ 585.422968][T31895] ? __pfx_ovs_ct_limit_cmd_del+0x10/0x10 [ 585.423006][T31895] netlink_rcv_skb+0x208/0x470 [ 585.423023][T31895] ? __pfx_genl_rcv_msg+0x10/0x10 [ 585.423045][T31895] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 585.423080][T31895] ? down_read+0x274/0x2e0 [ 585.423101][T31895] ? genl_rcv+0xd/0x40 [ 585.423121][T31895] genl_rcv+0x28/0x40 [ 585.423139][T31895] netlink_unicast+0x82f/0x9e0 [ 585.423172][T31895] ? __pfx_netlink_unicast+0x10/0x10 [ 585.423196][T31895] ? netlink_sendmsg+0x642/0xb30 [ 585.423211][T31895] ? skb_put+0x11b/0x210 [ 585.423236][T31895] netlink_sendmsg+0x805/0xb30 [ 585.423263][T31895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.423284][T31895] ? aa_sock_msg_perm+0xf1/0x1b0 [ 585.423303][T31895] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 585.423324][T31895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.423342][T31895] __sock_sendmsg+0x21c/0x270 [ 585.423364][T31895] ____sys_sendmsg+0x505/0x820 [ 585.423394][T31895] ? __pfx_____sys_sendmsg+0x10/0x10 [ 585.423426][T31895] ? import_iovec+0x74/0xa0 [ 585.423451][T31895] ___sys_sendmsg+0x21f/0x2a0 [ 585.423478][T31895] ? __pfx____sys_sendmsg+0x10/0x10 [ 585.423508][T31895] ? rcu_read_lock_any_held+0xb3/0x120 [ 585.423555][T31895] ? __fget_files+0x2a/0x420 [ 585.423573][T31895] ? __fget_files+0x3a0/0x420 [ 585.423600][T31895] __x64_sys_sendmsg+0x19b/0x260 [ 585.423626][T31895] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 585.423664][T31895] ? __pfx_ksys_write+0x10/0x10 [ 585.423688][T31895] ? do_syscall_64+0xbe/0xf80 [ 585.423712][T31895] do_syscall_64+0xfa/0xf80 [ 585.423733][T31895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.423750][T31895] ? clear_bhb_loop+0x60/0xb0 [ 585.423771][T31895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.423787][T31895] RIP: 0033:0x7fe52f98f749 [ 585.423803][T31895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.423818][T31895] RSP: 002b:00007fe5307e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 585.423836][T31895] RAX: ffffffffffffffda RBX: 00007fe52fbe5fa0 RCX: 00007fe52f98f749 [ 585.423848][T31895] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 585.423859][T31895] RBP: 00007fe5307e4090 R08: 0000000000000000 R09: 0000000000000000 [ 585.423870][T31895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.423879][T31895] R13: 00007fe52fbe6038 R14: 00007fe52fbe5fa0 R15: 00007fffa3bae388 [ 585.423911][T31895] [ 585.718577][T31903] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8682'. [ 585.806647][ T52] Bluetooth: hci3: command tx timeout [ 585.978671][T31911] FAULT_INJECTION: forcing a failure. [ 585.978671][T31911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.008111][T31911] CPU: 1 UID: 0 PID: 31911 Comm: syz.2.8683 Not tainted syzkaller #0 PREEMPT(full) [ 586.008134][T31911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 586.008145][T31911] Call Trace: [ 586.008151][T31911] [ 586.008159][T31911] dump_stack_lvl+0x189/0x250 [ 586.008182][T31911] ? __pfx____ratelimit+0x10/0x10 [ 586.008200][T31911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 586.008216][T31911] ? __pfx__printk+0x10/0x10 [ 586.008236][T31911] ? __might_fault+0xb0/0x130 [ 586.008267][T31911] should_fail_ex+0x414/0x560 [ 586.008290][T31911] fpu__restore_sig+0x1bb/0x10d0 [ 586.008317][T31911] ? __pfx_fpu__restore_sig+0x10/0x10 [ 586.008364][T31911] __ia32_sys_rt_sigreturn+0x704/0x860 [ 586.008395][T31911] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 586.008442][T31911] ? __task_pid_nr_ns+0x28/0x490 [ 586.008467][T31911] ? do_syscall_64+0xbe/0xf80 [ 586.008491][T31911] do_syscall_64+0xfa/0xf80 [ 586.008514][T31911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.008530][T31911] ? clear_bhb_loop+0x60/0xb0 [ 586.008549][T31911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.008564][T31911] RIP: 0033:0x7fc553f8f749 [ 586.008578][T31911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.008601][T31911] RSP: 002b:00007fc554dff038 EFLAGS: 00000246 [ 586.008616][T31911] RAX: fffffffffffffff2 RBX: 00007fc5541e5fa0 RCX: 00007fc553f8f749 [ 586.008628][T31911] RDX: 0000000000000030 RSI: 0000200000000240 RDI: 0000000000000014 [ 586.008639][T31911] RBP: 00007fc554dff090 R08: 0000000000000000 R09: 0000000000000000 [ 586.008650][T31911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.008660][T31911] R13: 00007fc5541e6038 R14: 00007fc5541e5fa0 R15: 00007ffdc6e76748 [ 586.008690][T31911] [ 586.042703][T31717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.575500][T31717] veth0_vlan: entered promiscuous mode [ 586.590758][T31717] veth1_vlan: entered promiscuous mode [ 586.642071][T31717] veth0_macvtap: entered promiscuous mode [ 586.652436][T31717] veth1_macvtap: entered promiscuous mode [ 586.679108][T31717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.698770][T31717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.713739][T31945] FAULT_INJECTION: forcing a failure. [ 586.713739][T31945] name failslab, interval 1, probability 0, space 0, times 0 [ 586.722468][T13111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.727292][T31945] CPU: 1 UID: 0 PID: 31945 Comm: syz.1.8698 Not tainted syzkaller #0 PREEMPT(full) [ 586.727316][T31945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 586.727327][T31945] Call Trace: [ 586.727342][T31945] [ 586.727350][T31945] dump_stack_lvl+0x189/0x250 [ 586.727372][T31945] ? __pfx____ratelimit+0x10/0x10 [ 586.727393][T31945] ? __pfx_dump_stack_lvl+0x10/0x10 [ 586.727412][T31945] ? __pfx__printk+0x10/0x10 [ 586.727435][T31945] ? __pfx___might_resched+0x10/0x10 [ 586.727454][T31945] ? fs_reclaim_acquire+0x7d/0x100 [ 586.727480][T31945] should_fail_ex+0x414/0x560 [ 586.727504][T31945] should_failslab+0xa8/0x100 [ 586.727528][T31945] kmem_cache_alloc_node_noprof+0x77/0x710 [ 586.727549][T31945] ? __alloc_skb+0x255/0x430 [ 586.727569][T31945] ? napi_skb_cache_get+0x4a5/0x780 [ 586.727589][T31945] ? napi_skb_cache_get+0x151/0x780 [ 586.727614][T31945] __alloc_skb+0x255/0x430 [ 586.727637][T31945] ? __pfx___alloc_skb+0x10/0x10 [ 586.727661][T31945] ? netlink_autobind+0xdb/0x300 [ 586.727676][T31945] ? netlink_autobind+0x2c2/0x300 [ 586.727698][T31945] netlink_sendmsg+0x5c6/0xb30 [ 586.727724][T31945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 586.727745][T31945] ? aa_sock_msg_perm+0xf1/0x1b0 [ 586.727764][T31945] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 586.727784][T31945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 586.727803][T31945] __sock_sendmsg+0x21c/0x270 [ 586.727825][T31945] ____sys_sendmsg+0x52d/0x820 [ 586.727855][T31945] ? __pfx_____sys_sendmsg+0x10/0x10 [ 586.727886][T31945] ? import_iovec+0x74/0xa0 [ 586.727913][T31945] ___sys_sendmsg+0x21f/0x2a0 [ 586.727939][T31945] ? __pfx____sys_sendmsg+0x10/0x10 [ 586.727998][T31945] ? __fget_files+0x2a/0x420 [ 586.728013][T31945] ? __fget_files+0x3a0/0x420 [ 586.728039][T31945] __sys_sendmmsg+0x227/0x430 [ 586.728068][T31945] ? __pfx___sys_sendmmsg+0x10/0x10 [ 586.728101][T31945] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 586.728139][T31945] ? ksys_write+0x22a/0x250 [ 586.728166][T31945] ? __pfx_ksys_write+0x10/0x10 [ 586.728191][T31945] __x64_sys_sendmmsg+0xa0/0xc0 [ 586.728209][T31945] do_syscall_64+0xfa/0xf80 [ 586.728232][T31945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.728248][T31945] ? clear_bhb_loop+0x60/0xb0 [ 586.728269][T31945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.728284][T31945] RIP: 0033:0x7fb3f098f749 [ 586.728300][T31945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.728316][T31945] RSP: 002b:00007fb3f17f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 586.728345][T31945] RAX: ffffffffffffffda RBX: 00007fb3f0be5fa0 RCX: 00007fb3f098f749 [ 586.728358][T31945] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 586.728370][T31945] RBP: 00007fb3f17f2090 R08: 0000000000000000 R09: 0000000000000000 [ 586.728380][T31945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.728389][T31945] R13: 00007fb3f0be6038 R14: 00007fb3f0be5fa0 R15: 00007ffcffd472e8 [ 586.728419][T31945] [ 587.048247][T31944] lo: entered promiscuous mode [ 587.054860][T31944] tunl0: entered promiscuous mode [ 587.060763][T31944] gre0: entered promiscuous mode [ 587.067077][T31944] 0{X: entered promiscuous mode [ 587.072587][T31944] 0{X: left allmulticast mode [ 587.085166][T31944] ip_vti0: entered promiscuous mode [ 587.099174][T13111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.122946][T13111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.137238][T13111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.312317][T24057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.340114][T24057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.423048][T31966] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.8703'. [ 587.438018][T13106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.461432][T13106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.558064][T31973] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8704'. [ 587.929581][T31986] netlink: zone id is out of range [ 587.934741][T31986] netlink: zone id is out of range [ 587.958315][T31986] netlink: zone id is out of range [ 587.963473][T31986] netlink: zone id is out of range [ 587.976253][T31986] netlink: zone id is out of range [ 587.987890][T31986] netlink: zone id is out of range [ 588.169994][ T5838] bond2: (slave syz_tun): Releasing backup interface [ 588.184356][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 588.208488][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 588.217620][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 588.237116][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 588.245304][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 588.625239][T31993] chnl_net:caif_netlink_parms(): no params data found [ 588.810571][T31993] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.824255][T31993] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.838211][T31993] bridge_slave_0: entered allmulticast mode [ 588.854501][T31993] bridge_slave_0: entered promiscuous mode [ 588.871730][T32031] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 588.885097][T31993] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.893667][T31993] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.901100][T31993] bridge_slave_1: entered allmulticast mode [ 588.908649][T31993] bridge_slave_1: entered promiscuous mode [ 588.955751][T31993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.982822][T31993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.053599][T31993] team0: Port device team_slave_0 added [ 589.064454][T31993] team0: Port device team_slave_1 added [ 589.151782][T31993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.176806][T31993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.205216][T31993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.220439][T31993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.228422][T31993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.275122][T31993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.314077][T32048] tipc: Enabling of bearer rejected, failed to enable media [ 589.399793][T31993] hsr_slave_0: entered promiscuous mode [ 589.419969][T31993] hsr_slave_1: entered promiscuous mode [ 589.429806][T31993] debugfs: 'hsr0' already exists in 'hsr' [ 589.435659][T31993] Cannot create hsr debugfs directory [ 589.694834][T32062] netlink: 71 bytes leftover after parsing attributes in process `syz.1.8737'. [ 589.708594][T32063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8737'. [ 589.825539][T32062] netlink: 71 bytes leftover after parsing attributes in process `syz.1.8737'. [ 589.851436][T32063] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8737'. [ 589.931125][T32062] netlink: 71 bytes leftover after parsing attributes in process `syz.1.8737'. [ 589.949739][T31993] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.962335][T31993] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.038746][T32062] netlink: 71 bytes leftover after parsing attributes in process `syz.1.8737'. [ 590.052344][T31993] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.062775][T31993] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.128677][T32062] netlink: 71 bytes leftover after parsing attributes in process `syz.1.8737'. [ 590.148130][T31993] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.158219][T31993] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.198993][T32062] netlink: 71 bytes leftover after parsing attributes in process `syz.1.8737'. [ 590.276983][ T5153] Bluetooth: hci2: command tx timeout [ 590.361585][T31993] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.386248][T31993] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.591728][T32100] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 590.733121][T31993] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 590.767940][T31993] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 590.772975][T32104] xt_CT: You must specify a L4 protocol and not use inversions on it [ 590.790208][T31993] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 590.791605][T32106] netlink: 'syz.1.8750': attribute type 1 has an invalid length. [ 590.830450][T31993] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 590.852182][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 590.862969][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 590.871776][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 590.880145][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 590.889849][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 591.549728][T31993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.592418][T32107] chnl_net:caif_netlink_parms(): no params data found [ 591.603036][T32139] FAULT_INJECTION: forcing a failure. [ 591.603036][T32139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.627660][T32139] CPU: 0 UID: 0 PID: 32139 Comm: syz.1.8759 Not tainted syzkaller #0 PREEMPT(full) [ 591.627685][T32139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 591.627696][T32139] Call Trace: [ 591.627704][T32139] [ 591.627711][T32139] dump_stack_lvl+0x189/0x250 [ 591.627735][T32139] ? __pfx____ratelimit+0x10/0x10 [ 591.627757][T32139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 591.627775][T32139] ? __pfx__printk+0x10/0x10 [ 591.627797][T32139] ? __might_fault+0xb0/0x130 [ 591.627829][T32139] should_fail_ex+0x414/0x560 [ 591.627854][T32139] _copy_from_iter+0x1cd/0x1630 [ 591.627886][T32139] ? __build_skb_around+0x22d/0x3c0 [ 591.627914][T32139] ? __pfx__copy_from_iter+0x10/0x10 [ 591.627929][T32139] ? __alloc_skb+0x2f1/0x430 [ 591.627947][T32139] ? __pfx___alloc_skb+0x10/0x10 [ 591.627970][T32139] ? netlink_sendmsg+0x642/0xb30 [ 591.627987][T32139] ? skb_put+0x11b/0x210 [ 591.628011][T32139] netlink_sendmsg+0x6b2/0xb30 [ 591.628038][T32139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.628059][T32139] ? aa_sock_msg_perm+0xf1/0x1b0 [ 591.628079][T32139] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 591.628101][T32139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.628119][T32139] __sock_sendmsg+0x21c/0x270 [ 591.628142][T32139] ____sys_sendmsg+0x505/0x820 [ 591.628172][T32139] ? __pfx_____sys_sendmsg+0x10/0x10 [ 591.628205][T32139] ? import_iovec+0x74/0xa0 [ 591.628231][T32139] ___sys_sendmsg+0x21f/0x2a0 [ 591.628257][T32139] ? __pfx____sys_sendmsg+0x10/0x10 [ 591.628289][T32139] ? rcu_read_lock_any_held+0xb3/0x120 [ 591.628337][T32139] ? __fget_files+0x2a/0x420 [ 591.628353][T32139] ? __fget_files+0x3a0/0x420 [ 591.628379][T32139] __x64_sys_sendmsg+0x19b/0x260 [ 591.628407][T32139] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 591.628440][T32139] ? __pfx_ksys_write+0x10/0x10 [ 591.628458][T32139] ? do_syscall_64+0xbe/0xf80 [ 591.628475][T32139] do_syscall_64+0xfa/0xf80 [ 591.628496][T32139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.628513][T32139] ? clear_bhb_loop+0x60/0xb0 [ 591.628535][T32139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.628551][T32139] RIP: 0033:0x7fb3f098f749 [ 591.628568][T32139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.628583][T32139] RSP: 002b:00007fb3f17f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 591.628602][T32139] RAX: ffffffffffffffda RBX: 00007fb3f0be5fa0 RCX: 00007fb3f098f749 [ 591.628614][T32139] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 591.628625][T32139] RBP: 00007fb3f17f2090 R08: 0000000000000000 R09: 0000000000000000 [ 591.628635][T32139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.628646][T32139] R13: 00007fb3f0be6038 R14: 00007fb3f0be5fa0 R15: 00007ffcffd472e8 [ 591.628678][T32139] [ 592.060783][T31993] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.069205][T32107] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.076448][T32107] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.084064][T32107] bridge_slave_0: entered allmulticast mode [ 592.092452][T32107] bridge_slave_0: entered promiscuous mode [ 592.111899][T32107] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.119800][T32107] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.127356][T32107] bridge_slave_1: entered allmulticast mode [ 592.135410][T32107] bridge_slave_1: entered promiscuous mode [ 592.162550][T32150] syzkaller0: entered promiscuous mode [ 592.169812][T32150] syzkaller0: entered allmulticast mode [ 592.220269][T13106] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.227523][T13106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.280088][T32107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.318079][T32107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.365605][ T5153] Bluetooth: hci2: command tx timeout [ 592.436822][T13106] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.444000][T13106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.520756][T32107] team0: Port device team_slave_0 added [ 592.541363][T32107] team0: Port device team_slave_1 added [ 592.613471][T32107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.621015][T32107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.647791][T32107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.670793][T32107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.679163][T32107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.707501][T32107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.859738][T32181] netlink: 'syz.1.8772': attribute type 7 has an invalid length. [ 592.872367][T32184] netlink: 'syz.1.8772': attribute type 7 has an invalid length. [ 592.942541][T32107] hsr_slave_0: entered promiscuous mode [ 592.949285][T32188] ip6t_REJECT: ECHOREPLY is not supported [ 592.958025][T32107] hsr_slave_1: entered promiscuous mode [ 592.964508][T32107] debugfs: 'hsr0' already exists in 'hsr' [ 592.970623][T32107] Cannot create hsr debugfs directory [ 592.997321][ T5153] Bluetooth: hci5: command tx timeout [ 593.362148][T32202] veth1_macvtap: left promiscuous mode [ 593.387489][T32202] macsec0: entered promiscuous mode [ 593.392741][T32202] macsec0: entered allmulticast mode [ 593.466728][T32205] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 593.578562][T32107] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 593.621086][T32213] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 593.640454][T32107] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 593.670797][T32107] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 593.711508][T32216] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 593.736917][T32107] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 593.765986][T31993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.777665][T32219] tipc: Enabled bearer , priority 0 [ 593.805438][T32219] +: renamed from syzkaller0 [ 593.818872][T32219] tipc: Disabling bearer [ 593.892532][T32231] __nla_validate_parse: 11 callbacks suppressed [ 593.892548][T32231] netlink: 220 bytes leftover after parsing attributes in process `syz.4.8785'. [ 593.953057][T31993] veth0_vlan: entered promiscuous mode [ 594.013928][T31993] veth1_vlan: entered promiscuous mode [ 594.079135][T32107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.140388][T31993] veth0_macvtap: entered promiscuous mode [ 594.200431][T32107] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.228605][T31993] veth1_macvtap: entered promiscuous mode [ 594.272685][T13110] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.279951][T13110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.322192][T32251] FAULT_INJECTION: forcing a failure. [ 594.322192][T32251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.331296][T13095] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.339815][T32251] CPU: 1 UID: 0 PID: 32251 Comm: syz.2.8791 Not tainted syzkaller #0 PREEMPT(full) [ 594.339841][T32251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 594.339852][T32251] Call Trace: [ 594.339860][T32251] [ 594.339869][T32251] dump_stack_lvl+0x189/0x250 [ 594.339893][T32251] ? __pfx____ratelimit+0x10/0x10 [ 594.339921][T32251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 594.339940][T32251] ? __pfx__printk+0x10/0x10 [ 594.339974][T32251] should_fail_ex+0x414/0x560 [ 594.339998][T32251] _copy_to_user+0x31/0xb0 [ 594.340023][T32251] simple_read_from_buffer+0xe1/0x170 [ 594.340052][T32251] proc_fail_nth_read+0x1b3/0x220 [ 594.340076][T32251] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 594.340101][T32251] ? rw_verify_area+0x2a6/0x4d0 [ 594.340120][T32251] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 594.340142][T32251] vfs_read+0x200/0xa30 [ 594.340160][T32251] ? fdget_pos+0x247/0x320 [ 594.340181][T32251] ? __pfx___mutex_lock+0x10/0x10 [ 594.340202][T32251] ? __pfx_vfs_read+0x10/0x10 [ 594.340224][T32251] ? __fget_files+0x2a/0x420 [ 594.340243][T32251] ? __fget_files+0x3a0/0x420 [ 594.340257][T32251] ? __fget_files+0x2a/0x420 [ 594.340281][T32251] ksys_read+0x145/0x250 [ 594.340304][T32251] ? __pfx_ksys_read+0x10/0x10 [ 594.340327][T32251] ? do_syscall_64+0xbe/0xf80 [ 594.340351][T32251] do_syscall_64+0xfa/0xf80 [ 594.340373][T32251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.340389][T32251] ? clear_bhb_loop+0x60/0xb0 [ 594.340410][T32251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.340426][T32251] RIP: 0033:0x7fc553f8e15c [ 594.340443][T32251] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 594.340458][T32251] RSP: 002b:00007fc554dff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 594.340477][T32251] RAX: ffffffffffffffda RBX: 00007fc5541e5fa0 RCX: 00007fc553f8e15c [ 594.340489][T32251] RDX: 000000000000000f RSI: 00007fc554dff0a0 RDI: 0000000000000004 [ 594.340500][T32251] RBP: 00007fc554dff090 R08: 0000000000000000 R09: 0000000000000000 [ 594.340511][T32251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.340521][T32251] R13: 00007fc5541e6038 R14: 00007fc5541e5fa0 R15: 00007ffdc6e76748 [ 594.340552][T32251] [ 594.441298][ T5153] Bluetooth: hci2: command tx timeout [ 594.445931][T13095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.469172][T32255] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8793'. [ 594.602338][T32257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8794'. [ 594.610592][T31993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.661906][T31993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.725198][T13110] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.748579][T13110] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.773570][T13110] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.793650][T13110] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.811258][T32264] FAULT_INJECTION: forcing a failure. [ 594.811258][T32264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.865009][T32264] CPU: 1 UID: 0 PID: 32264 Comm: syz.2.8796 Not tainted syzkaller #0 PREEMPT(full) [ 594.865034][T32264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 594.865043][T32264] Call Trace: [ 594.865050][T32264] [ 594.865057][T32264] dump_stack_lvl+0x189/0x250 [ 594.865078][T32264] ? __pfx____ratelimit+0x10/0x10 [ 594.865101][T32264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 594.865115][T32264] ? __pfx__printk+0x10/0x10 [ 594.865143][T32264] should_fail_ex+0x414/0x560 [ 594.865163][T32264] _copy_to_user+0x31/0xb0 [ 594.865184][T32264] simple_read_from_buffer+0xe1/0x170 [ 594.865212][T32264] proc_fail_nth_read+0x1b3/0x220 [ 594.865234][T32264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 594.865256][T32264] ? rw_verify_area+0x2a6/0x4d0 [ 594.865273][T32264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 594.865293][T32264] vfs_read+0x200/0xa30 [ 594.865308][T32264] ? fdget_pos+0x247/0x320 [ 594.865323][T32264] ? __pfx___mutex_lock+0x10/0x10 [ 594.865341][T32264] ? __pfx_vfs_read+0x10/0x10 [ 594.865358][T32264] ? __fget_files+0x2a/0x420 [ 594.865374][T32264] ? __fget_files+0x3a0/0x420 [ 594.865384][T32264] ? __fget_files+0x2a/0x420 [ 594.865404][T32264] ksys_read+0x145/0x250 [ 594.865423][T32264] ? __pfx_ksys_read+0x10/0x10 [ 594.865443][T32264] ? do_syscall_64+0xbe/0xf80 [ 594.865464][T32264] do_syscall_64+0xfa/0xf80 [ 594.865481][T32264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.865495][T32264] ? clear_bhb_loop+0x60/0xb0 [ 594.865513][T32264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.865526][T32264] RIP: 0033:0x7fc553f8e15c [ 594.865541][T32264] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 594.865553][T32264] RSP: 002b:00007fc554dff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 594.865569][T32264] RAX: ffffffffffffffda RBX: 00007fc5541e5fa0 RCX: 00007fc553f8e15c [ 594.865579][T32264] RDX: 000000000000000f RSI: 00007fc554dff0a0 RDI: 0000000000000004 [ 594.865588][T32264] RBP: 00007fc554dff090 R08: 0000000000000000 R09: 0000000000000000 [ 594.865598][T32264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.865608][T32264] R13: 00007fc5541e6038 R14: 00007fc5541e5fa0 R15: 00007ffdc6e76748 [ 594.865633][T32264] [ 595.118636][ T5153] Bluetooth: hci5: command tx timeout [ 595.274780][T24053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.288975][T24053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.370384][T13095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.378777][T13095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.407703][T32107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.529002][T32284] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8803'. [ 595.588018][T32290] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 595.697712][T32293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8805'. [ 595.747068][T32300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8808'. [ 595.761848][T32300] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8808'. [ 595.762120][T32297] netlink: 'syz.2.8807': attribute type 1 has an invalid length. [ 596.119951][T32316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8816'. [ 596.148990][T32107] veth0_vlan: entered promiscuous mode [ 596.179928][T32107] veth1_vlan: entered promiscuous mode [ 596.229694][T32320] Unknown options in mask b7f2 [ 596.303427][T32107] veth0_macvtap: entered promiscuous mode [ 596.363231][T32107] veth1_macvtap: entered promiscuous mode [ 596.402555][T32107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.420692][T32107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.442334][T13095] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.458241][T13095] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.485228][T13095] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.500671][T13095] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.516869][ T5153] Bluetooth: hci2: command tx timeout [ 596.558891][T32332] vlan2: entered allmulticast mode [ 596.694847][T32339] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8825'. [ 596.705176][T32339] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8825'. [ 596.791826][T13095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.800667][T13095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.889926][T13106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.903967][T13106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.158847][ T5153] Bluetooth: hci5: command tx timeout [ 597.830467][T32374] netlink: 'syz.1.8837': attribute type 10 has an invalid length. [ 597.870317][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 597.884788][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 597.894581][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 597.905354][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 597.912637][T32374] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 597.924605][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 598.520049][T32377] chnl_net:caif_netlink_parms(): no params data found [ 598.559907][T32400] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 598.582245][T32404] netlink: 'syz.1.8845': attribute type 1 has an invalid length. [ 598.718355][T32410] netlink: zone id is out of range [ 598.744562][T32404] 8021q: adding VLAN 0 to HW filter on device bond2 [ 598.779108][T32395] syzkaller1: entered promiscuous mode [ 598.784625][T32395] syzkaller1: entered allmulticast mode [ 598.841055][T32407] bond2: (slave geneve2): making interface the new active one [ 598.852364][T32407] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 598.970216][T32416] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.977990][T32416] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.089072][T32416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.105418][T32416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.238343][ T52] Bluetooth: hci5: command tx timeout [ 599.288962][T13106] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.319648][T13106] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.440400][T13106] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.449869][T13106] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.493855][T32377] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.502335][T32377] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.522584][T32377] bridge_slave_0: entered allmulticast mode [ 599.540401][T32377] bridge_slave_0: entered promiscuous mode [ 599.570302][T32432] __nla_validate_parse: 7 callbacks suppressed [ 599.570320][T32432] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8851'. [ 599.588473][T32432] netem: invalid attributes len -24 [ 599.593813][T32432] netem: change failed [ 599.599018][T32377] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.622231][T32377] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.630919][T32377] bridge_slave_1: entered allmulticast mode [ 599.648421][T32377] bridge_slave_1: entered promiscuous mode [ 599.692604][T32445] FAULT_INJECTION: forcing a failure. [ 599.692604][T32445] name failslab, interval 1, probability 0, space 0, times 0 [ 599.705343][T32445] CPU: 0 UID: 0 PID: 32445 Comm: syz.5.8855 Not tainted syzkaller #0 PREEMPT(full) [ 599.705369][T32445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 599.705380][T32445] Call Trace: [ 599.705388][T32445] [ 599.705396][T32445] dump_stack_lvl+0x189/0x250 [ 599.705419][T32445] ? __pfx____ratelimit+0x10/0x10 [ 599.705441][T32445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.705467][T32445] ? __pfx__printk+0x10/0x10 [ 599.705490][T32445] ? lockdep_hardirqs_on+0x98/0x140 [ 599.705512][T32445] ? finish_task_switch+0x23d/0x940 [ 599.705541][T32445] should_fail_ex+0x414/0x560 [ 599.705566][T32445] should_failslab+0xa8/0x100 [ 599.705591][T32445] kmem_cache_alloc_noprof+0x74/0x6f0 [ 599.705613][T32445] ? skb_clone+0x212/0x3a0 [ 599.705635][T32445] skb_clone+0x212/0x3a0 [ 599.705656][T32445] bpf_clone_redirect+0x16a/0x4b0 [ 599.705678][T32445] ? __pfx___schedule+0x10/0x10 [ 599.705704][T32445] ? bpf_test_run+0x192/0x7d0 [ 599.705721][T32445] bpf_prog_dda02ae5dee86940+0x65/0x71 [ 599.705744][T32445] ? preempt_schedule+0xae/0xc0 [ 599.705761][T32445] ? bpf_test_run+0x192/0x7d0 [ 599.705779][T32445] ? preempt_schedule_common+0x83/0xd0 [ 599.705799][T32445] ? preempt_schedule+0xae/0xc0 [ 599.705818][T32445] ? __pfx_preempt_schedule+0x10/0x10 [ 599.705840][T32445] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 599.705867][T32445] ? preempt_schedule_thunk+0x16/0x30 [ 599.705892][T32445] ? __local_bh_disable_ip+0xf1/0x190 [ 599.705909][T32445] ? __pfx___cant_migrate+0x10/0x10 [ 599.705925][T32445] ? __local_bh_enable_ip+0x13e/0x1c0 [ 599.705942][T32445] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 599.705964][T32445] ? bpf_test_timer_continue+0x10d/0x320 [ 599.705984][T32445] bpf_test_run+0x313/0x7d0 [ 599.706022][T32445] ? __pfx_bpf_test_run+0x10/0x10 [ 599.706046][T32445] ? rcu_is_watching+0x15/0xb0 [ 599.706067][T32445] ? __kasan_krealloc+0xeb/0x110 [ 599.706090][T32445] ? eth_type_trans+0x35e/0x6d0 [ 599.706116][T32445] ? convert___skb_to_skb+0x3d/0x5b0 [ 599.706135][T32445] bpf_prog_test_run_skb+0xd67/0x1d50 [ 599.706173][T32445] ? __fget_files+0x2a/0x420 [ 599.706188][T32445] ? __fget_files+0x3a0/0x420 [ 599.706202][T32445] ? __fget_files+0x2a/0x420 [ 599.706223][T32445] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 599.706249][T32445] bpf_prog_test_run+0x2c7/0x340 [ 599.706275][T32445] __sys_bpf+0x562/0x860 [ 599.706298][T32445] ? __pfx___sys_bpf+0x10/0x10 [ 599.706334][T32445] ? ksys_write+0x22a/0x250 [ 599.706358][T32445] ? __pfx_ksys_write+0x10/0x10 [ 599.706386][T32445] __x64_sys_bpf+0x7c/0x90 [ 599.706405][T32445] do_syscall_64+0xfa/0xf80 [ 599.706428][T32445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.706452][T32445] ? clear_bhb_loop+0x60/0xb0 [ 599.706473][T32445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.706489][T32445] RIP: 0033:0x7fbb2bd8f749 [ 599.706505][T32445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.706518][T32445] RSP: 002b:00007fbb2cba7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 599.706535][T32445] RAX: ffffffffffffffda RBX: 00007fbb2bfe5fa0 RCX: 00007fbb2bd8f749 [ 599.706548][T32445] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 599.706558][T32445] RBP: 00007fbb2cba7090 R08: 0000000000000000 R09: 0000000000000000 [ 599.706568][T32445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 599.706577][T32445] R13: 00007fbb2bfe6038 R14: 00007fbb2bfe5fa0 R15: 00007ffcb60e13c8 [ 599.706603][T32445] [ 600.077505][ T52] Bluetooth: hci4: command tx timeout [ 600.106271][T28189] block nbd6: Possible stuck request ffff888024f67000: control (read@0,1024B). Runtime 120 seconds [ 600.117396][T28189] block nbd6: Possible stuck request ffff888024f671c0: control (read@1024,1024B). Runtime 120 seconds [ 600.176778][T28189] block nbd6: Possible stuck request ffff888024f67380: control (read@2048,1024B). Runtime 120 seconds [ 600.187799][T28189] block nbd6: Possible stuck request ffff888024f67540: control (read@3072,1024B). Runtime 120 seconds [ 600.368133][T32451] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 600.408341][T32377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.468975][T32455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8860'. [ 600.480423][T32377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.602371][T32458] bridge1: port 1(veth3) entered blocking state [ 600.620533][T32458] bridge1: port 1(veth3) entered disabled state [ 600.637549][T32458] veth3: entered allmulticast mode [ 600.650096][T32458] veth3: entered promiscuous mode [ 600.683779][T28187] block nbd5: Possible stuck request ffff888024f05080: control (read@0,1024B). Runtime 150 seconds [ 600.694597][T28187] block nbd5: Possible stuck request ffff888024f05240: control (read@1024,1024B). Runtime 150 seconds [ 600.706772][T28189] block nbd2: Possible stuck request ffff888024df2300: control (read@0,1024B). Runtime 150 seconds [ 600.718357][T28189] block nbd2: Possible stuck request ffff888024df24c0: control (read@1024,1024B). Runtime 150 seconds [ 600.729525][T28189] block nbd2: Possible stuck request ffff888024df2680: control (read@2048,1024B). Runtime 150 seconds [ 600.740664][T28189] block nbd2: Possible stuck request ffff888024df2840: control (read@3072,1024B). Runtime 150 seconds [ 600.753465][T28187] block nbd5: Possible stuck request ffff888024f05400: control (read@2048,1024B). Runtime 150 seconds [ 600.765111][T28187] block nbd5: Possible stuck request ffff888024f055c0: control (read@3072,1024B). Runtime 150 seconds [ 600.831012][T32455] bridge1: port 2(veth0_to_bond) entered blocking state [ 600.845849][T32455] bridge1: port 2(veth0_to_bond) entered disabled state [ 600.853091][T32455] veth0_to_bond: entered allmulticast mode [ 600.862767][T32455] veth0_to_bond: entered promiscuous mode [ 600.880460][T32377] team0: Port device team_slave_0 added [ 600.900227][T32377] team0: Port device team_slave_1 added [ 601.108569][T32377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.125776][T32377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.167227][T32377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.181297][T32377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.188754][T32377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.262768][T32377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.275291][T32490] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 601.630375][T32507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.732709][T32377] hsr_slave_0: entered promiscuous mode [ 601.745866][T32377] hsr_slave_1: entered promiscuous mode [ 601.785922][T32377] debugfs: 'hsr0' already exists in 'hsr' [ 601.792560][T32377] Cannot create hsr debugfs directory [ 601.808933][T32518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8883'. [ 601.813997][T32516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.010324][T32524] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 602.122372][ T52] Bluetooth: hci4: command tx timeout [ 602.191882][T32537] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8890'. [ 602.373841][T32377] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.435924][T32549] netlink: 'syz.1.8895': attribute type 4 has an invalid length. [ 602.535766][T32377] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.583266][T32555] Cannot find map_set index 0 as target [ 602.592704][T32555] netlink: 'syz.5.8899': attribute type 3 has an invalid length. [ 602.688111][T32557] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 602.708514][T32561] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8901'. [ 602.819761][T32377] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.990442][T32377] netdevsim netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.467621][T32611] syzkaller0: entered promiscuous mode [ 603.474765][T32611] syzkaller0: entered allmulticast mode [ 603.526832][T32614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8922'. [ 604.121315][T32377] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 604.196807][ T52] Bluetooth: hci4: command tx timeout [ 604.208413][T32634] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8927'. [ 604.217825][T32634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8927'. [ 604.227608][T32634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8927'. [ 604.249936][T32377] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 604.260337][T32636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8928'. [ 604.263938][T32377] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 604.304756][T32377] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 604.573508][T32657] netlink: 'syz.1.8935': attribute type 15 has an invalid length. [ 604.593194][T32658] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 604.593331][T32657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8935'. [ 604.681942][T32377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.804183][T32377] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.841094][T24053] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.848333][T24053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.912417][T32670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8939'. [ 604.923729][T32673] netlink: 'syz.1.8941': attribute type 1 has an invalid length. [ 604.938086][T13111] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.945187][T13111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.031648][T32673] 8021q: adding VLAN 0 to HW filter on device bond3 [ 605.097010][T32676] 8021q: adding VLAN 0 to HW filter on device bond3 [ 605.104214][T32676] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 605.155096][T32676] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 605.165521][T32686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8941'. [ 605.241667][T32685] xt_CT: No such helper "pptp" [ 605.307218][T32673] veth5: entered promiscuous mode [ 605.317919][T32673] bond3: (slave veth5): Enslaving as an active interface with a down link [ 605.328989][T32686] 8021q: adding VLAN 0 to HW filter on device bond3 [ 605.482752][T32697] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8946'. [ 605.507137][T32697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8946'. [ 605.633656][T32709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8946'. [ 605.738435][T32716] netlink: 'syz.5.8949': attribute type 13 has an invalid length. [ 605.768017][T32716] netlink: 'syz.5.8949': attribute type 17 has an invalid length. [ 605.791674][T32718] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 605.869883][T32722] netlink: 'syz.4.8953': attribute type 1 has an invalid length. [ 606.057327][T32732] xt_ecn: cannot match TCP bits for non-tcp packets [ 606.064660][T32716] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 606.116218][T32727] syzkaller1: entered promiscuous mode [ 606.122291][T32727] syzkaller1: entered allmulticast mode [ 606.259210][T32377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.280661][ T52] Bluetooth: hci4: command tx timeout [ 606.432874][T32749] netlink: 'syz.4.8963': attribute type 6 has an invalid length. [ 606.442545][T32744] tipc: Started in network mode [ 606.442574][T32744] tipc: Node identity 56c384b43159, cluster identity 4711 [ 606.442777][T32744] tipc: Enabled bearer , priority 0 [ 606.447059][T32744] +: renamed from syzkaller0 [ 606.521120][T32744] tipc: Disabling bearer [ 606.556918][T32377] veth0_vlan: entered promiscuous mode [ 606.575396][T32757] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 606.575622][T32755] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 606.630517][T32377] veth1_vlan: entered promiscuous mode [ 606.798846][T32377] veth0_macvtap: entered promiscuous mode [ 606.844370][T32377] veth1_macvtap: entered promiscuous mode [ 606.891512][T32377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.955031][ T304] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8972'. [ 607.045414][ T311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8970'. [ 607.053618][T32377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.123660][T13111] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.152496][T13111] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.182721][ T317] FAULT_INJECTION: forcing a failure. [ 607.182721][ T317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.203266][ T315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8976'. [ 607.218171][ T317] CPU: 0 UID: 0 PID: 317 Comm: syz.3.8975 Not tainted syzkaller #0 PREEMPT(full) [ 607.218197][ T317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 607.218208][ T317] Call Trace: [ 607.218216][ T317] [ 607.218224][ T317] dump_stack_lvl+0x189/0x250 [ 607.218247][ T317] ? __pfx____ratelimit+0x10/0x10 [ 607.218267][ T317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.218285][ T317] ? __pfx__printk+0x10/0x10 [ 607.218304][ T317] ? __might_fault+0xb0/0x130 [ 607.218331][ T317] should_fail_ex+0x414/0x560 [ 607.218356][ T317] _copy_from_user+0x2d/0xb0 [ 607.218380][ T317] ___sys_sendmsg+0x158/0x2a0 [ 607.218405][ T317] ? __pfx____sys_sendmsg+0x10/0x10 [ 607.218433][ T317] ? rcu_read_lock_any_held+0xb3/0x120 [ 607.218474][ T317] ? __fget_files+0x2a/0x420 [ 607.218488][ T317] ? __fget_files+0x3a0/0x420 [ 607.218514][ T317] __x64_sys_sendmsg+0x19b/0x260 [ 607.218541][ T317] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 607.218573][ T317] ? __pfx_ksys_write+0x10/0x10 [ 607.218602][ T317] ? do_syscall_64+0xbe/0xf80 [ 607.218625][ T317] do_syscall_64+0xfa/0xf80 [ 607.218646][ T317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.218663][ T317] ? clear_bhb_loop+0x60/0xb0 [ 607.218683][ T317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.218698][ T317] RIP: 0033:0x7f47b778f749 [ 607.218714][ T317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.218729][ T317] RSP: 002b:00007f47b86e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.218747][ T317] RAX: ffffffffffffffda RBX: 00007f47b79e5fa0 RCX: 00007f47b778f749 [ 607.218758][ T317] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 607.218769][ T317] RBP: 00007f47b86e8090 R08: 0000000000000000 R09: 0000000000000000 [ 607.218780][ T317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.218790][ T317] R13: 00007f47b79e6038 R14: 00007f47b79e5fa0 R15: 00007ffcdf124418 [ 607.218818][ T317] [ 607.223819][T13111] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.469070][ T329] openvswitch: netlink: Missing key (keys=40, expected=80) [ 607.563132][ T332] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 607.613525][T13111] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.731904][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.753266][ T334] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 607.761490][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.928033][ T336] syzkaller0: entered promiscuous mode [ 607.953823][ T336] syzkaller0: entered allmulticast mode [ 607.975388][ T6119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.987208][ T6119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.104998][ T343] netlink: 18 bytes leftover after parsing attributes in process `syz.5.8982'. [ 608.163100][ T349] lo: entered allmulticast mode [ 608.177960][ T349] lo: left allmulticast mode [ 608.773213][ T385] netlink: 'syz.5.8997': attribute type 1 has an invalid length. [ 608.782535][ T390] netlink: 'syz.3.9000': attribute type 2 has an invalid length. [ 609.632617][ T435] xt_bpf: check failed: parse error [ 610.006641][ T451] __nla_validate_parse: 11 callbacks suppressed [ 610.006659][ T451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9020'. [ 610.183844][ T465] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9025'. [ 610.212798][ T466] netlink: 'syz.4.9023': attribute type 24 has an invalid length. [ 610.351382][ T473] FAULT_INJECTION: forcing a failure. [ 610.351382][ T473] name failslab, interval 1, probability 0, space 0, times 0 [ 610.365483][ T473] CPU: 1 UID: 0 PID: 473 Comm: syz.1.9026 Not tainted syzkaller #0 PREEMPT(full) [ 610.365510][ T473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 610.365521][ T473] Call Trace: [ 610.365529][ T473] [ 610.365537][ T473] dump_stack_lvl+0x189/0x250 [ 610.365561][ T473] ? __pfx____ratelimit+0x10/0x10 [ 610.365594][ T473] ? __pfx_dump_stack_lvl+0x10/0x10 [ 610.365613][ T473] ? __pfx__printk+0x10/0x10 [ 610.365635][ T473] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 610.365657][ T473] ? __pfx___mutex_trylock_common+0x10/0x10 [ 610.365689][ T473] should_fail_ex+0x414/0x560 [ 610.365713][ T473] should_failslab+0xa8/0x100 [ 610.365739][ T473] kmem_cache_alloc_noprof+0x74/0x6f0 [ 610.365762][ T473] ? skb_clone+0x212/0x3a0 [ 610.365785][ T473] skb_clone+0x212/0x3a0 [ 610.365805][ T473] __netlink_deliver_tap+0x404/0x850 [ 610.365836][ T473] ? netlink_deliver_tap+0x2e/0x1b0 [ 610.365855][ T473] netlink_deliver_tap+0x19c/0x1b0 [ 610.365874][ T473] netlink_dump+0x92b/0xe90 [ 610.365903][ T473] ? __pfx_netlink_dump+0x10/0x10 [ 610.365938][ T473] ? kmem_cache_free+0x197/0x620 [ 610.365958][ T473] ? netlink_recvmsg+0x5b2/0xa30 [ 610.365980][ T473] netlink_recvmsg+0x676/0xa30 [ 610.366000][ T473] ? lockdep_hardirqs_on+0x98/0x140 [ 610.366026][ T473] ? __pfx_netlink_recvmsg+0x10/0x10 [ 610.366047][ T473] ? __lock_acquire+0x6b6/0x2cf0 [ 610.366067][ T473] ? __pfx_netlink_recvmsg+0x10/0x10 [ 610.366085][ T473] sock_recvmsg_nosec+0x186/0x1c0 [ 610.366107][ T473] ____sys_recvmsg+0x3aa/0x460 [ 610.366128][ T473] ? __pfx_____sys_recvmsg+0x10/0x10 [ 610.366160][ T473] ? import_iovec+0x74/0xa0 [ 610.366187][ T473] ___sys_recvmsg+0x1b5/0x510 [ 610.366208][ T473] ? __pfx____sys_recvmsg+0x10/0x10 [ 610.366257][ T473] ? __might_fault+0xb0/0x130 [ 610.366279][ T473] do_recvmmsg+0x307/0x770 [ 610.366302][ T473] ? __pfx_do_recvmmsg+0x10/0x10 [ 610.366330][ T473] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 610.366365][ T473] __x64_sys_recvmmsg+0x190/0x240 [ 610.366383][ T473] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 610.366403][ T473] ? do_syscall_64+0xbe/0xf80 [ 610.366423][ T473] do_syscall_64+0xfa/0xf80 [ 610.366442][ T473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.366455][ T473] ? clear_bhb_loop+0x60/0xb0 [ 610.366474][ T473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.366488][ T473] RIP: 0033:0x7fb3f098f749 [ 610.366503][ T473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.366518][ T473] RSP: 002b:00007fb3f17f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 610.366536][ T473] RAX: ffffffffffffffda RBX: 00007fb3f0be5fa0 RCX: 00007fb3f098f749 [ 610.366549][ T473] RDX: 0400000000000166 RSI: 0000200000005180 RDI: 0000000000000003 [ 610.366560][ T473] RBP: 00007fb3f17f2090 R08: 0000000000000000 R09: 0000000000000000 [ 610.366578][ T473] R10: 000000000001a000 R11: 0000000000000246 R12: 0000000000000001 [ 610.366589][ T473] R13: 00007fb3f0be6038 R14: 00007fb3f0be5fa0 R15: 00007ffcffd472e8 [ 610.366621][ T473] [ 610.885087][ T488] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 610.893605][ T488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 611.077118][ T502] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9038'. [ 611.331159][ T511] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9041'. [ 611.369600][ T511] syzkaller1: entered promiscuous mode [ 611.375458][ T511] syzkaller1: entered allmulticast mode [ 611.472623][ T520] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9039'. [ 611.528190][ T522] FAULT_INJECTION: forcing a failure. [ 611.528190][ T522] name failslab, interval 1, probability 0, space 0, times 0 [ 611.567397][ T522] CPU: 0 UID: 0 PID: 522 Comm: syz.2.9046 Not tainted syzkaller #0 PREEMPT(full) [ 611.567421][ T522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 611.567431][ T522] Call Trace: [ 611.567438][ T522] [ 611.567444][ T522] dump_stack_lvl+0x189/0x250 [ 611.567467][ T522] ? __pfx____ratelimit+0x10/0x10 [ 611.567488][ T522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.567504][ T522] ? __pfx__printk+0x10/0x10 [ 611.567527][ T522] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 611.567555][ T522] should_fail_ex+0x414/0x560 [ 611.567578][ T522] should_failslab+0xa8/0x100 [ 611.567601][ T522] kmem_cache_alloc_noprof+0x74/0x6f0 [ 611.567621][ T522] ? skb_clone+0x212/0x3a0 [ 611.567640][ T522] skb_clone+0x212/0x3a0 [ 611.567659][ T522] __netlink_deliver_tap+0x404/0x850 [ 611.567688][ T522] ? netlink_deliver_tap+0x2e/0x1b0 [ 611.567706][ T522] netlink_deliver_tap+0x19c/0x1b0 [ 611.567724][ T522] __netlink_sendskb+0x47/0x90 [ 611.567747][ T522] netlink_dump+0xa84/0xe90 [ 611.567774][ T522] ? __pfx_netlink_dump+0x10/0x10 [ 611.567807][ T522] ? kmem_cache_free+0x197/0x620 [ 611.567826][ T522] ? netlink_recvmsg+0x5b2/0xa30 [ 611.567847][ T522] netlink_recvmsg+0x676/0xa30 [ 611.567862][ T522] ? lockdep_hardirqs_on+0x98/0x140 [ 611.567890][ T522] ? __pfx_netlink_recvmsg+0x10/0x10 [ 611.567910][ T522] ? __lock_acquire+0x6b6/0x2cf0 [ 611.567931][ T522] ? __pfx_netlink_recvmsg+0x10/0x10 [ 611.567949][ T522] sock_recvmsg_nosec+0x186/0x1c0 [ 611.567974][ T522] ____sys_recvmsg+0x3aa/0x460 [ 611.567999][ T522] ? __pfx_____sys_recvmsg+0x10/0x10 [ 611.568029][ T522] ? import_iovec+0x74/0xa0 [ 611.568053][ T522] ___sys_recvmsg+0x1b5/0x510 [ 611.568074][ T522] ? __pfx____sys_recvmsg+0x10/0x10 [ 611.568122][ T522] ? __might_fault+0xb0/0x130 [ 611.568147][ T522] do_recvmmsg+0x307/0x770 [ 611.568173][ T522] ? __pfx_do_recvmmsg+0x10/0x10 [ 611.568204][ T522] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 611.568245][ T522] __x64_sys_recvmmsg+0x190/0x240 [ 611.568276][ T522] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 611.568299][ T522] ? do_syscall_64+0xbe/0xf80 [ 611.568324][ T522] do_syscall_64+0xfa/0xf80 [ 611.568345][ T522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.568363][ T522] ? clear_bhb_loop+0x60/0xb0 [ 611.568384][ T522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.568401][ T522] RIP: 0033:0x7fd76a78f749 [ 611.568418][ T522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.568434][ T522] RSP: 002b:00007fd76b5c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 611.568454][ T522] RAX: ffffffffffffffda RBX: 00007fd76a9e5fa0 RCX: 00007fd76a78f749 [ 611.568467][ T522] RDX: 0400000000000166 RSI: 0000200000005180 RDI: 0000000000000003 [ 611.568479][ T522] RBP: 00007fd76b5c0090 R08: 0000000000000000 R09: 0000000000000000 [ 611.568490][ T522] R10: 000000000001a000 R11: 0000000000000246 R12: 0000000000000002 [ 611.568500][ T522] R13: 00007fd76a9e6038 R14: 00007fd76a9e5fa0 R15: 00007ffc5a720408 [ 611.568533][ T522] [ 611.899317][ T529] netlink: 'syz.3.9048': attribute type 1 has an invalid length. [ 611.908365][ T529] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9048'. [ 612.132803][ T546] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 612.254706][ T551] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 612.348729][ T558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9058'. [ 612.734653][ T568] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 612.767995][ T568] bond1 (unregistering): Released all slaves [ 612.914211][ T582] netlink: 'syz.1.9065': attribute type 22 has an invalid length. [ 613.007581][ T584] bond4: Removing last arp target with arp_interval on [ 613.141163][ T589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9068'. [ 613.240669][ T595] netlink: 'syz.2.9070': attribute type 178 has an invalid length. [ 613.368142][ T599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9066'. [ 613.393687][ T601] C: renamed from lo [ 613.444942][ T601] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 613.859708][ T621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9079'. [ 613.948580][ T625] veth1_macvtap: left promiscuous mode [ 614.190938][ T633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.478086][ T657] veth1_macvtap: left promiscuous mode [ 614.643205][ T665] ipt_rpfilter: unknown options [ 615.034762][ T684] __nla_validate_parse: 5 callbacks suppressed [ 615.034785][ T684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9101'. [ 615.051172][ T684] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9101'. [ 615.758683][ T729] tap0: tun_chr_ioctl cmd 1074025678 [ 615.774405][ T729] tap0: group set to 0 [ 615.850077][ T738] netlink: 216 bytes leftover after parsing attributes in process `syz.5.9124'. [ 615.858497][ T742] lo: entered promiscuous mode [ 615.870627][ T742] tunl0: entered promiscuous mode [ 615.880482][ T738] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9124'. [ 615.881007][ T742] gre0: entered promiscuous mode [ 615.910235][ T742] gretap0: entered promiscuous mode [ 615.924983][ T742] erspan0: entered promiscuous mode [ 615.959896][ T742] ip_vti0: entered promiscuous mode [ 616.189740][ T760] netlink: 'syz.4.9132': attribute type 10 has an invalid length. [ 616.210202][ T760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9132'. [ 616.382330][ T774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9135'. [ 616.392533][ T774] netlink: 176 bytes leftover after parsing attributes in process `syz.1.9135'. [ 616.403627][ T774] netlink: 'syz.1.9135': attribute type 5 has an invalid length. [ 616.551562][ T781] syzkaller0: entered promiscuous mode [ 616.562288][ T781] syzkaller0: entered allmulticast mode [ 616.870351][ T797] netlink: 'syz.3.9143': attribute type 1 has an invalid length. [ 616.906940][ T801] netlink: 'syz.1.9142': attribute type 21 has an invalid length. [ 616.924890][ T801] IPv6: NLM_F_CREATE should be specified when creating new route [ 616.946999][ T801] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 616.954276][ T801] IPv6: NLM_F_CREATE should be set when creating new route [ 616.961617][ T801] IPv6: NLM_F_CREATE should be set when creating new route [ 616.968891][ T801] IPv6: NLM_F_CREATE should be set when creating new route [ 616.989605][ T804] geneve2: entered promiscuous mode [ 616.994840][ T804] geneve2: entered allmulticast mode [ 617.045534][T24058] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 617.085458][T24058] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 617.137375][T24058] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 617.180737][ T801] syzkaller1: entered promiscuous mode [ 617.187146][ T801] syzkaller1: entered allmulticast mode [ 617.198333][T24058] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 617.605961][ T845] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9159'. [ 617.624751][ T846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9158'. [ 617.643375][ T846] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9158'. [ 618.718707][ T925] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 618.828606][ T933] siw: device registration error -23 [ 619.125867][ T963] netlink: 'syz.4.9197': attribute type 1 has an invalid length. [ 619.260909][ T968] bond1 (unregistering): Released all slaves [ 619.385113][ T963] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 619.537464][ T986] syzkaller1: entered promiscuous mode [ 619.568136][ T986] syzkaller1: entered allmulticast mode [ 619.638179][ T993] pim6reg1: entered promiscuous mode [ 619.643523][ T993] pim6reg1: entered allmulticast mode [ 619.660096][ T999] netlink: 'syz.5.9207': attribute type 1 has an invalid length. [ 619.744965][ T999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 619.787098][ T1005] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 620.019772][ T993] xfrm1: entered promiscuous mode [ 620.038287][ T993] xfrm1: entered allmulticast mode [ 620.267539][ T1045] __nla_validate_parse: 7 callbacks suppressed [ 620.267558][ T1045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9216'. [ 620.283726][ T1045] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9216'. [ 621.825744][ T1071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9222'. [ 621.882066][ T1072] tipc: Started in network mode [ 621.908061][ T1072] tipc: Node identity 1a87f0e5a161, cluster identity 4711 [ 621.932140][ T1072] tipc: Enabled bearer , priority 0 [ 621.956953][ T1081] syzkaller0: entered promiscuous mode [ 621.962482][ T1081] syzkaller0: entered allmulticast mode [ 622.010924][ T1072] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 622.049819][ T1072] tipc: Resetting bearer [ 622.059712][ T1089] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 622.072773][ T1068] tipc: Resetting bearer [ 622.139281][ T1097] x_tables: duplicate underflow at hook 2 [ 622.150521][ T1097] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 622.175618][ T1068] tipc: Disabling bearer [ 622.189005][ T1098] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 622.598357][ T1120] bond1: entered allmulticast mode [ 622.603906][ T1120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 623.062584][ T1158] C: renamed from team_slave_0 (while UP) [ 623.074494][ T1158] netlink: 'syz.5.9253': attribute type 1 has an invalid length. [ 623.089363][ T1158] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 623.458479][ T1189] tipc: Enabled bearer , priority 0 [ 623.530556][ T1189] syzkaller0: entered promiscuous mode [ 623.538661][ T1189] syzkaller0: entered allmulticast mode [ 623.545086][ T1189] tipc: Resetting bearer [ 623.583277][ T1186] tipc: Resetting bearer [ 623.838093][ T1209] Cannot find set identified by id 0 to match [ 623.964390][ T1212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9270'. [ 624.364525][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 625.193737][ T1186] tipc: Disabling bearer [ 625.226575][ T330] tipc: Node number set to 3152474341 [ 625.259942][ T1219] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9272'. [ 625.689529][ T1251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9281'. [ 625.712287][ T1251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9281'. [ 625.752987][ T1251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9281'. [ 625.782219][ T1256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9282'. [ 625.816473][ T1251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9281'. [ 625.828856][ T1257] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9282'. [ 625.832990][ T1251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9281'. [ 625.856977][ T1251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9281'. [ 625.872038][ T1251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9281'. [ 625.881583][ T1251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9281'. [ 625.980332][ T1264] syzkaller0: entered promiscuous mode [ 625.989832][ T1264] syzkaller0: entered allmulticast mode [ 626.162967][ T1278] xt_l2tp: unknown flags: 10 [ 626.183121][ T1278] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 629.022034][ T1380] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20003 [ 629.876069][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 629.884147][ C1] lec:lec_tx_timeout: lec0 [ 629.889355][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 629.917574][ T1426] wg1: entered allmulticast mode [ 630.340757][ T1463] pim6reg1: entered promiscuous mode [ 630.353655][ T1463] pim6reg1: entered allmulticast mode [ 630.757170][T28187] block nbd2: Possible stuck request ffff888024df2300: control (read@0,1024B). Runtime 180 seconds [ 630.768110][T28189] block nbd5: Possible stuck request ffff888024f05080: control (read@0,1024B). Runtime 180 seconds [ 630.781139][ T56] block nbd6: Possible stuck request ffff888024f67000: control (read@0,1024B). Runtime 150 seconds [ 630.792094][T28187] block nbd2: Possible stuck request ffff888024df24c0: control (read@1024,1024B). Runtime 180 seconds [ 630.803932][ T56] block nbd6: Possible stuck request ffff888024f671c0: control (read@1024,1024B). Runtime 150 seconds [ 630.816188][T28189] block nbd5: Possible stuck request ffff888024f05240: control (read@1024,1024B). Runtime 180 seconds [ 630.827369][T28187] block nbd2: Possible stuck request ffff888024df2680: control (read@2048,1024B). Runtime 180 seconds [ 630.827891][ T1493] __nla_validate_parse: 128 callbacks suppressed [ 630.827906][ T1493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9360'. [ 630.838388][ T56] block nbd6: Possible stuck request ffff888024f67380: control (read@2048,1024B). Runtime 150 seconds [ 630.838419][ T56] block nbd6: Possible stuck request ffff888024f67540: control (read@3072,1024B). Runtime 150 seconds [ 630.838470][T28189] block nbd5: Possible stuck request ffff888024f05400: control (read@2048,1024B). Runtime 180 seconds [ 630.838519][T28187] block nbd2: Possible stuck request ffff888024df2840: control (read@3072,1024B). Runtime 180 seconds [ 630.854526][T28187] block nbd5: Possible stuck request ffff888024f055c0: control (read@3072,1024B). Runtime 180 seconds [ 631.019955][ T1498] netlink: 'syz.3.9362': attribute type 5 has an invalid length. [ 631.057678][ T1498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9362'. [ 631.076610][ T1498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9362'. [ 631.210849][ T1508] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 631.333856][ T1524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9369'. [ 631.513005][ T1530] netlink: 212 bytes leftover after parsing attributes in process `syz.3.9372'. [ 631.589380][ T1534] netlink: 'syz.1.9371': attribute type 1 has an invalid length. [ 631.599441][ T1534] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9371'. [ 631.640169][ T1541] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9374'. [ 631.728011][ T1545] bond0: entered promiscuous mode [ 631.747961][ T1545] bond_slave_0: entered promiscuous mode [ 631.757000][ T1545] bond_slave_1: entered promiscuous mode [ 631.780085][ T1548] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9378'. [ 631.969724][ T1550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 632.022425][ T1570] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9385'. [ 632.032409][ T1570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9385'. [ 632.885781][ T1600] netlink: 'syz.5.9393': attribute type 1 has an invalid length. [ 632.911873][ T1607] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 633.059208][ T1613] netlink: 'syz.5.9399': attribute type 7 has an invalid length. [ 634.013612][ T1652] netlink: 'syz.1.9412': attribute type 1 has an invalid length. [ 634.063626][ T1652] 8021q: adding VLAN 0 to HW filter on device bond5 [ 634.073890][ T1653] IPVS: Unknown mcast interface: lo [ 634.144562][ T1652] 8021q: adding VLAN 0 to HW filter on device bond5 [ 634.159658][ T1652] bond5: (slave vxcan11): The slave device specified does not support setting the MAC address [ 634.223537][ T1652] bond5: (slave vxcan11): Error -95 calling set_mac_address [ 634.280202][ T1660] gretap1: entered promiscuous mode [ 634.308695][ T1660] bond5: (slave gretap1): making interface the new active one [ 634.330931][ T1660] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 634.365743][ T1665] macvlan2: entered promiscuous mode [ 634.373301][ T1665] macvlan2: entered allmulticast mode [ 634.397876][ T1665] bond5: entered promiscuous mode [ 634.403943][ T1665] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 634.440913][ T1665] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 634.454335][ T1665] bond5: left promiscuous mode [ 634.896526][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 634.904641][ C1] lec:lec_tx_timeout: lec0 [ 634.909626][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 634.954298][ T1699] IPVS: Unknown mcast interface: lo [ 635.231146][ T1716] netlink: 'syz.5.9432': attribute type 4 has an invalid length. [ 635.273402][ T1716] Cannot find add_set index 0 as target [ 635.274212][ T5203] udevd[5203]: worker [24073] /devices/virtual/block/nbd2 timeout; kill it [ 635.310503][ T1717] netlink: 'syz.5.9432': attribute type 1 has an invalid length. [ 635.324431][ T5203] udevd[5203]: seq 23840 '/devices/virtual/block/nbd2' killed [ 635.358860][ T5203] udevd[5203]: worker [23942] /devices/virtual/block/nbd5 timeout; kill it [ 635.386623][ T5203] udevd[5203]: seq 23845 '/devices/virtual/block/nbd5' killed [ 635.685456][ T1738] can: request_module (can-proto-0) failed. [ 635.886609][ T1755] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 635.925556][ T1756] tap0: tun_chr_ioctl cmd 1074025678 [ 635.933388][ T1756] tap0: group set to 0 [ 635.944697][ T1756] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.952436][ T1756] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.118100][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 636.135856][ T1766] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 636.250025][ T1777] netlink: 'syz.5.9448': attribute type 21 has an invalid length. [ 636.261044][ T1777] netlink: 'syz.5.9448': attribute type 1 has an invalid length. [ 636.289451][ T1778] __nla_validate_parse: 14 callbacks suppressed [ 636.289470][ T1778] netlink: 220 bytes leftover after parsing attributes in process `syz.4.9447'. [ 636.309374][ T1775] netlink: 220 bytes leftover after parsing attributes in process `syz.4.9447'. [ 636.398435][ T1788] syzkaller0: entered promiscuous mode [ 636.412534][ T1788] syzkaller0: entered allmulticast mode [ 636.521952][ T1794] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 636.584051][ T1805] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9457'. [ 636.665874][ T1809] set match dimension is over the limit! [ 637.171784][ T1838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9468'. [ 637.343384][ T1847] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9470'. [ 637.959758][ T1882] openvswitch: netlink: IP tunnel TTL not specified. [ 637.988904][ T1882] pim6reg1: entered promiscuous mode [ 637.994380][ T1882] pim6reg1: entered allmulticast mode [ 638.829863][ T1947] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9509'. [ 638.936794][ T1952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9510'. [ 639.047730][ T1961] can: request_module (can-proto-0) failed. [ 639.047887][ T1956] bond7: option lp_interval: invalid value (0) [ 639.060673][ T1956] bond7: option lp_interval: allowed values 1 - 2147483647 [ 639.073939][ T1956] bond7 (unregistering): Released all slaves [ 639.099567][ T1961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9510'. [ 639.220373][ T1968] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 639.231832][ T1972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9517'. [ 639.248272][ T1970] netlink: 'syz.2.9518': attribute type 7 has an invalid length. [ 639.270794][ T1973] 8021q: VLANs not supported on sit0 [ 639.277176][ T1970] netlink: 'syz.2.9518': attribute type 7 has an invalid length. [ 639.289985][ T69] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.299815][ T69] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.326768][ T69] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.335520][ T69] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.473574][ T1987] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 639.613214][ T1994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9527'. [ 639.764188][ T2005] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 639.916546][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 639.924590][ C1] lec:lec_tx_timeout: lec0 [ 639.929986][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 640.238213][ T2029] veth1_macvtap: left promiscuous mode [ 640.280518][ T2032] veth0: entered promiscuous mode [ 640.495437][ T2039] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 640.551624][ T2046] vlan2: entered promiscuous mode [ 640.576083][ T2046] bridge0: entered promiscuous mode [ 640.587335][ T2047] syzkaller0: entered promiscuous mode [ 640.604785][ T2047] syzkaller0: entered allmulticast mode [ 640.938937][ T2068] syzkaller1: entered promiscuous mode [ 640.958522][ T2068] syzkaller1: entered allmulticast mode [ 641.032242][ T2068] delete_channel: no stack [ 641.193271][ T2083] xt_NFQUEUE: number of total queues is 0 [ 641.439925][ T2099] __nla_validate_parse: 12 callbacks suppressed [ 641.439945][ T2099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9570'. [ 641.448085][ T2104] FAULT_INJECTION: forcing a failure. [ 641.448085][ T2104] name failslab, interval 1, probability 0, space 0, times 0 [ 641.515339][ T2104] CPU: 1 UID: 0 PID: 2104 Comm: syz.4.9569 Not tainted syzkaller #0 PREEMPT(full) [ 641.515386][ T2104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 641.515409][ T2104] Call Trace: [ 641.515417][ T2104] [ 641.515426][ T2104] dump_stack_lvl+0x189/0x250 [ 641.515450][ T2104] ? __pfx____ratelimit+0x10/0x10 [ 641.515473][ T2104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.515492][ T2104] ? __pfx__printk+0x10/0x10 [ 641.515521][ T2104] ? __pfx___might_resched+0x10/0x10 [ 641.515539][ T2104] ? fs_reclaim_acquire+0x7d/0x100 [ 641.515568][ T2104] should_fail_ex+0x414/0x560 [ 641.515593][ T2104] should_failslab+0xa8/0x100 [ 641.515618][ T2104] __kvmalloc_node_noprof+0x158/0x910 [ 641.515639][ T2104] ? alloc_netdev_mqs+0xa6/0x11b0 [ 641.515663][ T2104] alloc_netdev_mqs+0xa6/0x11b0 [ 641.515679][ T2104] ? __pfx_macvlan_setup+0x10/0x10 [ 641.515702][ T2104] rtnl_create_link+0x31f/0xcf0 [ 641.515726][ T2104] rtnl_newlink_create+0x25c/0xb00 [ 641.515754][ T2104] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 641.515770][ T2104] ? __pfx___mutex_lock+0x10/0x10 [ 641.515802][ T2104] ? ns_capable+0x8a/0xf0 [ 641.515820][ T2104] rtnl_newlink+0x16e7/0x1c90 [ 641.515862][ T2104] ? __pfx_rtnl_newlink+0x10/0x10 [ 641.515880][ T2104] ? do_syscall_64+0xfa/0xf80 [ 641.515905][ T2104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.515956][ T2104] ? kasan_quarantine_put+0xdd/0x220 [ 641.515976][ T2104] ? lockdep_hardirqs_on+0x98/0x140 [ 641.516000][ T2104] ? kmem_cache_free+0x197/0x620 [ 641.516020][ T2104] ? nlmon_xmit+0xb0/0x100 [ 641.516048][ T2104] ? __lock_acquire+0x6b6/0x2cf0 [ 641.516069][ T2104] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 641.516091][ T2104] ? __dev_queue_xmit+0x289/0x3140 [ 641.516110][ T2104] ? __dev_queue_xmit+0x289/0x3140 [ 641.516125][ T2104] ? __dev_queue_xmit+0x289/0x3140 [ 641.516172][ T2104] ? __pfx_rtnl_newlink+0x10/0x10 [ 641.516194][ T2104] rtnetlink_rcv_msg+0x7cf/0xb70 [ 641.516221][ T2104] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 641.516243][ T2104] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 641.516263][ T2104] ? ref_tracker_free+0x63a/0x7d0 [ 641.516284][ T2104] ? __asan_memcpy+0x40/0x70 [ 641.516302][ T2104] ? __pfx_ref_tracker_free+0x10/0x10 [ 641.516334][ T2104] netlink_rcv_skb+0x208/0x470 [ 641.516354][ T2104] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 641.516379][ T2104] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 641.516408][ T2104] ? netlink_deliver_tap+0x2e/0x1b0 [ 641.516435][ T2104] netlink_unicast+0x82f/0x9e0 [ 641.516468][ T2104] ? __pfx_netlink_unicast+0x10/0x10 [ 641.516494][ T2104] ? netlink_sendmsg+0x642/0xb30 [ 641.516509][ T2104] ? skb_put+0x11b/0x210 [ 641.516536][ T2104] netlink_sendmsg+0x805/0xb30 [ 641.516564][ T2104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.516586][ T2104] ? aa_sock_msg_perm+0xf1/0x1b0 [ 641.516606][ T2104] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 641.516628][ T2104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.516646][ T2104] __sock_sendmsg+0x21c/0x270 [ 641.516670][ T2104] ____sys_sendmsg+0x505/0x820 [ 641.516700][ T2104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 641.516735][ T2104] ? import_iovec+0x74/0xa0 [ 641.516762][ T2104] ___sys_sendmsg+0x21f/0x2a0 [ 641.516789][ T2104] ? __pfx____sys_sendmsg+0x10/0x10 [ 641.516821][ T2104] ? rcu_read_lock_any_held+0xb3/0x120 [ 641.516872][ T2104] ? __fget_files+0x2a/0x420 [ 641.516887][ T2104] ? __fget_files+0x3a0/0x420 [ 641.516920][ T2104] __x64_sys_sendmsg+0x19b/0x260 [ 641.516948][ T2104] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 641.516983][ T2104] ? __pfx_ksys_write+0x10/0x10 [ 641.517009][ T2104] ? do_syscall_64+0xbe/0xf80 [ 641.517034][ T2104] do_syscall_64+0xfa/0xf80 [ 641.517056][ T2104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.517073][ T2104] ? clear_bhb_loop+0x60/0xb0 [ 641.517094][ T2104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.517111][ T2104] RIP: 0033:0x7f4c4638f749 [ 641.517127][ T2104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.517143][ T2104] RSP: 002b:00007f4c445f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.517161][ T2104] RAX: ffffffffffffffda RBX: 00007f4c465e5fa0 RCX: 00007f4c4638f749 [ 641.517174][ T2104] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 641.517185][ T2104] RBP: 00007f4c445f6090 R08: 0000000000000000 R09: 0000000000000000 [ 641.517196][ T2104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.517206][ T2104] R13: 00007f4c465e6038 R14: 00007f4c465e5fa0 R15: 00007ffeba5b54f8 [ 641.517240][ T2104] [ 642.123943][ T2117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 642.148205][ T2113] netlink: 27 bytes leftover after parsing attributes in process `syz.2.9572'. [ 642.386975][ T2116] syzkaller0: entered promiscuous mode [ 642.392570][ T2116] syzkaller0: entered allmulticast mode [ 642.400672][ T2115] tipc: Started in network mode [ 642.405882][ T2115] tipc: Node identity 4a74fdda1b81, cluster identity 4711 [ 642.413698][ T2115] tipc: Enabled bearer , priority 0 [ 642.441005][ T2120] tipc: Resetting bearer [ 642.580203][ T2139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9578'. [ 644.169294][ T2120] tipc: Disabling bearer [ 644.256250][T18916] tipc: Node number set to 1375075802 [ 644.316685][ T2153] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 644.428290][ T2160] FAULT_INJECTION: forcing a failure. [ 644.428290][ T2160] name failslab, interval 1, probability 0, space 0, times 0 [ 644.444017][ T2160] CPU: 1 UID: 0 PID: 2160 Comm: syz.4.9584 Not tainted syzkaller #0 PREEMPT(full) [ 644.444044][ T2160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 644.444056][ T2160] Call Trace: [ 644.444064][ T2160] [ 644.444072][ T2160] dump_stack_lvl+0x189/0x250 [ 644.444097][ T2160] ? __pfx____ratelimit+0x10/0x10 [ 644.444119][ T2160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 644.444139][ T2160] ? __pfx__printk+0x10/0x10 [ 644.444168][ T2160] ? __pfx___might_resched+0x10/0x10 [ 644.444192][ T2160] should_fail_ex+0x414/0x560 [ 644.444217][ T2160] should_failslab+0xa8/0x100 [ 644.444243][ T2160] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 644.444262][ T2160] ? __d_alloc+0x37/0x6f0 [ 644.444284][ T2160] __d_alloc+0x37/0x6f0 [ 644.444306][ T2160] d_alloc+0x4b/0x190 [ 644.444320][ T2160] ? lookup_one_qstr_excl+0xc8/0x360 [ 644.444338][ T2160] lookup_one_qstr_excl+0xdc/0x360 [ 644.444352][ T2160] ? lookup_noperm_common+0x245/0x430 [ 644.444372][ T2160] start_dirop+0x5c/0x90 [ 644.444389][ T2160] simple_start_creating+0xc4/0x100 [ 644.444406][ T2160] ? __pfx_simple_start_creating+0x10/0x10 [ 644.444436][ T2160] debugfs_start_creating+0x10f/0x180 [ 644.444455][ T2160] __debugfs_create_file+0x79/0x4f0 [ 644.444477][ T2160] debugfs_create_file_full+0x3f/0x60 [ 644.444506][ T2160] ref_tracker_dir_debugfs+0x14e/0x270 [ 644.444527][ T2160] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 644.444573][ T2160] ? trace_kmalloc+0x1f/0xb0 [ 644.444590][ T2160] ? __kvmalloc_node_noprof+0x5e9/0x910 [ 644.444625][ T2160] ? __raw_spin_lock_init+0x45/0x100 [ 644.444648][ T2160] alloc_netdev_mqs+0x272/0x11b0 [ 644.444666][ T2160] ? __pfx_macvlan_setup+0x10/0x10 [ 644.444691][ T2160] rtnl_create_link+0x31f/0xcf0 [ 644.444718][ T2160] rtnl_newlink_create+0x25c/0xb00 [ 644.444749][ T2160] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 644.444770][ T2160] ? __pfx___mutex_lock+0x10/0x10 [ 644.444803][ T2160] ? ns_capable+0x8a/0xf0 [ 644.444823][ T2160] rtnl_newlink+0x16e7/0x1c90 [ 644.444860][ T2160] ? __pfx_rtnl_newlink+0x10/0x10 [ 644.444880][ T2160] ? do_syscall_64+0xfa/0xf80 [ 644.444898][ T2160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.444952][ T2160] ? kasan_quarantine_put+0xdd/0x220 [ 644.444972][ T2160] ? lockdep_hardirqs_on+0x98/0x140 [ 644.445000][ T2160] ? kmem_cache_free+0x197/0x620 [ 644.445019][ T2160] ? nlmon_xmit+0xb0/0x100 [ 644.445046][ T2160] ? __lock_acquire+0x6b6/0x2cf0 [ 644.445067][ T2160] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 644.445087][ T2160] ? __dev_queue_xmit+0x289/0x3140 [ 644.445105][ T2160] ? __dev_queue_xmit+0x289/0x3140 [ 644.445120][ T2160] ? __dev_queue_xmit+0x289/0x3140 [ 644.445169][ T2160] ? __pfx_rtnl_newlink+0x10/0x10 [ 644.445191][ T2160] rtnetlink_rcv_msg+0x7cf/0xb70 [ 644.445218][ T2160] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 644.445240][ T2160] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 644.445260][ T2160] ? ref_tracker_free+0x63a/0x7d0 [ 644.445280][ T2160] ? __asan_memcpy+0x40/0x70 [ 644.445299][ T2160] ? __pfx_ref_tracker_free+0x10/0x10 [ 644.445330][ T2160] netlink_rcv_skb+0x208/0x470 [ 644.445351][ T2160] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 644.445375][ T2160] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 644.445405][ T2160] ? netlink_deliver_tap+0x2e/0x1b0 [ 644.445431][ T2160] netlink_unicast+0x82f/0x9e0 [ 644.445465][ T2160] ? __pfx_netlink_unicast+0x10/0x10 [ 644.445490][ T2160] ? netlink_sendmsg+0x642/0xb30 [ 644.445505][ T2160] ? skb_put+0x11b/0x210 [ 644.445532][ T2160] netlink_sendmsg+0x805/0xb30 [ 644.445559][ T2160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.445581][ T2160] ? aa_sock_msg_perm+0xf1/0x1b0 [ 644.445607][ T2160] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 644.445628][ T2160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.445647][ T2160] __sock_sendmsg+0x21c/0x270 [ 644.445672][ T2160] ____sys_sendmsg+0x505/0x820 [ 644.445702][ T2160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 644.445737][ T2160] ? import_iovec+0x74/0xa0 [ 644.445764][ T2160] ___sys_sendmsg+0x21f/0x2a0 [ 644.445791][ T2160] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.445823][ T2160] ? rcu_read_lock_any_held+0xb3/0x120 [ 644.445869][ T2160] ? __fget_files+0x2a/0x420 [ 644.445884][ T2160] ? __fget_files+0x3a0/0x420 [ 644.445911][ T2160] __x64_sys_sendmsg+0x19b/0x260 [ 644.445940][ T2160] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 644.445979][ T2160] ? __pfx_ksys_write+0x10/0x10 [ 644.446002][ T2160] ? do_syscall_64+0xbe/0xf80 [ 644.446025][ T2160] do_syscall_64+0xfa/0xf80 [ 644.446045][ T2160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.446062][ T2160] ? clear_bhb_loop+0x60/0xb0 [ 644.446082][ T2160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.446099][ T2160] RIP: 0033:0x7f4c4638f749 [ 644.446115][ T2160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.446131][ T2160] RSP: 002b:00007f4c445f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.446150][ T2160] RAX: ffffffffffffffda RBX: 00007f4c465e5fa0 RCX: 00007f4c4638f749 [ 644.446163][ T2160] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 644.446174][ T2160] RBP: 00007f4c445f6090 R08: 0000000000000000 R09: 0000000000000000 [ 644.446185][ T2160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.446195][ T2160] R13: 00007f4c465e6038 R14: 00007f4c465e5fa0 R15: 00007ffeba5b54f8 [ 644.446227][ T2160] [ 644.961073][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 644.969136][ C1] lec:lec_tx_timeout: lec0 [ 644.974120][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 645.002895][ T2160] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 645.019353][ T2161] netlink: 92 bytes leftover after parsing attributes in process `syz.3.9583'. [ 645.075140][ T2157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9582'. [ 645.273981][ T2177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9589'. [ 645.565649][ T2193] netlink: 'syz.4.9603': attribute type 1 has an invalid length. [ 645.579647][ T2189] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9600'. [ 645.605017][ T2199] sctp: [Deprecated]: syz.3.9602 (pid 2199) Use of int in maxseg socket option. [ 645.605017][ T2199] Use struct sctp_assoc_value instead [ 645.620464][ T2198] sctp: [Deprecated]: syz.3.9602 (pid 2198) Use of int in maxseg socket option. [ 645.620464][ T2198] Use struct sctp_assoc_value instead [ 645.643307][ T2193] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.773422][ T2193] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.814723][ T2211] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 645.852415][ T2214] xt_CT: You must specify a L4 protocol and not use inversions on it [ 645.871821][ T2211] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9606'. [ 645.891147][ T2193] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.932738][ T2216] IPVS: length: 139 != 180393552568 [ 645.939183][ T2218] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9609'. [ 645.987910][ T2193] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.295762][ T2233] pimreg: entered allmulticast mode [ 646.335557][T13094] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.383506][T13094] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.443462][T13100] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.532468][T13100] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.588541][ T2247] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9622'. [ 646.600981][ T2247] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9622'. [ 646.900361][ T2272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9632'. [ 646.912027][ T2272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9632'. [ 646.992441][ T2279] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9634'. [ 647.051295][ T2283] dvmrp0: entered allmulticast mode [ 647.119767][ T2288] FAULT_INJECTION: forcing a failure. [ 647.119767][ T2288] name failslab, interval 1, probability 0, space 0, times 0 [ 647.133485][ T2288] CPU: 1 UID: 0 PID: 2288 Comm: syz.1.9638 Not tainted syzkaller #0 PREEMPT(full) [ 647.133511][ T2288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 647.133521][ T2288] Call Trace: [ 647.133528][ T2288] [ 647.133535][ T2288] dump_stack_lvl+0x189/0x250 [ 647.133565][ T2288] ? __pfx____ratelimit+0x10/0x10 [ 647.133586][ T2288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 647.133605][ T2288] ? __pfx__printk+0x10/0x10 [ 647.133629][ T2288] ? __pfx___might_resched+0x10/0x10 [ 647.133647][ T2288] ? fs_reclaim_acquire+0x7d/0x100 [ 647.133674][ T2288] should_fail_ex+0x414/0x560 [ 647.133704][ T2288] should_failslab+0xa8/0x100 [ 647.133731][ T2288] kmem_cache_alloc_node_noprof+0x77/0x710 [ 647.133752][ T2288] ? __alloc_skb+0x255/0x430 [ 647.133772][ T2288] ? napi_skb_cache_get+0x4a5/0x780 [ 647.133792][ T2288] ? napi_skb_cache_get+0x151/0x780 [ 647.133818][ T2288] __alloc_skb+0x255/0x430 [ 647.133841][ T2288] ? __pfx___alloc_skb+0x10/0x10 [ 647.133871][ T2288] alloc_skb_with_frags+0xca/0x890 [ 647.133900][ T2288] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 647.133929][ T2288] sock_alloc_send_pskb+0x84d/0x980 [ 647.133965][ T2288] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 647.133987][ T2288] ? aa_file_perm+0x139/0x1530 [ 647.134004][ T2288] ? aa_sk_perm+0x15f/0x920 [ 647.134029][ T2288] ? aa_sk_perm+0x7ee/0x920 [ 647.134055][ T2288] hci_sock_sendmsg+0x207/0xef0 [ 647.134082][ T2288] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 647.134101][ T2288] ? aa_sock_msg_perm+0xf1/0x1b0 [ 647.134120][ T2288] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 647.134142][ T2288] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 647.134162][ T2288] __sock_sendmsg+0x21c/0x270 [ 647.134182][ T2288] sock_write_iter+0x279/0x360 [ 647.134203][ T2288] ? __pfx_sock_write_iter+0x10/0x10 [ 647.134230][ T2288] ? bpf_lsm_file_permission+0x9/0x20 [ 647.134253][ T2288] ? security_file_permission+0x75/0x290 [ 647.134283][ T2288] vfs_write+0x5c9/0xb30 [ 647.134308][ T2288] ? __pfx_sock_write_iter+0x10/0x10 [ 647.134327][ T2288] ? __pfx_vfs_write+0x10/0x10 [ 647.134358][ T2288] ? __fget_files+0x2a/0x420 [ 647.134386][ T2288] ksys_write+0x145/0x250 [ 647.134408][ T2288] ? __pfx_ksys_write+0x10/0x10 [ 647.134430][ T2288] ? do_syscall_64+0xbe/0xf80 [ 647.134452][ T2288] do_syscall_64+0xfa/0xf80 [ 647.134474][ T2288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.134490][ T2288] ? clear_bhb_loop+0x60/0xb0 [ 647.134510][ T2288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.134526][ T2288] RIP: 0033:0x7fb3f098f749 [ 647.134543][ T2288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.134558][ T2288] RSP: 002b:00007fb3f17f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 647.134577][ T2288] RAX: ffffffffffffffda RBX: 00007fb3f0be5fa0 RCX: 00007fb3f098f749 [ 647.134590][ T2288] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000004 [ 647.134601][ T2288] RBP: 00007fb3f17f2090 R08: 0000000000000000 R09: 0000000000000000 [ 647.134612][ T2288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.134622][ T2288] R13: 00007fb3f0be6038 R14: 00007fb3f0be5fa0 R15: 00007ffcffd472e8 [ 647.134653][ T2288] [ 647.538590][ T2293] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 647.552493][ T2291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9639'. [ 647.657354][ T2297] sctp: [Deprecated]: syz.3.9643 (pid 2297) Use of struct sctp_assoc_value in delayed_ack socket option. [ 647.657354][ T2297] Use struct sctp_sack_info instead [ 647.878907][ T2314] sctp: [Deprecated]: syz.2.9649 (pid 2314) Use of int in max_burst socket option deprecated. [ 647.878907][ T2314] Use struct sctp_assoc_value instead [ 648.030634][ T2324] netlink: 'syz.4.9647': attribute type 13 has an invalid length. [ 648.048989][ T2324] netlink: 'syz.4.9647': attribute type 17 has an invalid length. [ 648.113095][ T2326] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9652'. [ 648.163503][ T6056] IPVS: starting estimator thread 0... [ 648.178545][ T2324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 648.199439][ T2328] netem: change failed [ 648.266714][ T2330] IPVS: using max 34 ests per chain, 81600 per kthread [ 648.398093][ T2337] FAULT_INJECTION: forcing a failure. [ 648.398093][ T2337] name failslab, interval 1, probability 0, space 0, times 0 [ 648.412004][ T2337] CPU: 0 UID: 0 PID: 2337 Comm: syz.5.9656 Not tainted syzkaller #0 PREEMPT(full) [ 648.412027][ T2337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 648.412039][ T2337] Call Trace: [ 648.412047][ T2337] [ 648.412054][ T2337] dump_stack_lvl+0x189/0x250 [ 648.412079][ T2337] ? __pfx____ratelimit+0x10/0x10 [ 648.412101][ T2337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 648.412120][ T2337] ? __pfx__printk+0x10/0x10 [ 648.412156][ T2337] should_fail_ex+0x414/0x560 [ 648.412179][ T2337] should_failslab+0xa8/0x100 [ 648.412203][ T2337] __kmalloc_cache_noprof+0x6f/0x6f0 [ 648.412223][ T2337] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 648.412241][ T2337] ? sctp_add_bind_addr+0x8c/0x370 [ 648.412265][ T2337] sctp_add_bind_addr+0x8c/0x370 [ 648.412288][ T2337] sctp_copy_local_addr_list+0x30b/0x4e0 [ 648.412311][ T2337] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 648.412329][ T2337] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 648.412359][ T2337] ? sctp_v6_is_any+0x64/0x80 [ 648.412378][ T2337] ? sctp_copy_one_addr+0x93/0x360 [ 648.412400][ T2337] sctp_bind_addr_copy+0xb3/0x3c0 [ 648.412419][ T2337] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 648.412445][ T2337] sctp_connect_new_asoc+0x2e0/0x690 [ 648.412469][ T2337] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 648.412488][ T2337] ? __local_bh_enable_ip+0x12d/0x1c0 [ 648.412512][ T2337] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 648.412535][ T2337] ? security_sctp_bind_connect+0x7e/0x2e0 [ 648.412564][ T2337] sctp_sendmsg+0x155c/0x2810 [ 648.412596][ T2337] ? __pfx_sctp_sendmsg+0x10/0x10 [ 648.412615][ T2337] ? aa_sk_perm+0x15f/0x920 [ 648.412642][ T2337] ? aa_sk_perm+0x7ee/0x920 [ 648.412670][ T2337] ? __pfx_aa_sk_perm+0x10/0x10 [ 648.412697][ T2337] ? sock_rps_record_flow+0x19/0x410 [ 648.412718][ T2337] ? inet_sendmsg+0x2f4/0x370 [ 648.412739][ T2337] __sock_sendmsg+0x19c/0x270 [ 648.412763][ T2337] __sys_sendto+0x3bd/0x520 [ 648.412787][ T2337] ? __pfx___sys_sendto+0x10/0x10 [ 648.412807][ T2337] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 648.412843][ T2337] ? __fget_files+0x3a0/0x420 [ 648.412871][ T2337] ? ksys_write+0x22a/0x250 [ 648.412895][ T2337] ? __pfx_ksys_write+0x10/0x10 [ 648.412919][ T2337] __x64_sys_sendto+0xde/0x100 [ 648.412946][ T2337] do_syscall_64+0xfa/0xf80 [ 648.412969][ T2337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.412985][ T2337] ? clear_bhb_loop+0x60/0xb0 [ 648.413005][ T2337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.413021][ T2337] RIP: 0033:0x7fbb2bd8f749 [ 648.413038][ T2337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.413053][ T2337] RSP: 002b:00007fbb2cba7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 648.413071][ T2337] RAX: ffffffffffffffda RBX: 00007fbb2bfe5fa0 RCX: 00007fbb2bd8f749 [ 648.413083][ T2337] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000003 [ 648.413094][ T2337] RBP: 00007fbb2cba7090 R08: 0000200000000140 R09: 000000000000001c [ 648.413103][ T2337] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 648.413113][ T2337] R13: 00007fbb2bfe6038 R14: 00007fbb2bfe5fa0 R15: 00007ffcb60e13c8 [ 648.413144][ T2337] [ 648.839070][ T2343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9659'. [ 648.858841][ T2348] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9661'. [ 648.881553][ T2351] netlink: 'syz.3.9662': attribute type 13 has an invalid length. [ 648.968068][ T2355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9664'. [ 648.984150][ T2355] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 649.151017][ T2367] FAULT_INJECTION: forcing a failure. [ 649.151017][ T2367] name failslab, interval 1, probability 0, space 0, times 0 [ 649.235174][ T2367] CPU: 0 UID: 0 PID: 2367 Comm: syz.1.9669 Not tainted syzkaller #0 PREEMPT(full) [ 649.235210][ T2367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 649.235222][ T2367] Call Trace: [ 649.235230][ T2367] [ 649.235238][ T2367] dump_stack_lvl+0x189/0x250 [ 649.235261][ T2367] ? __pfx____ratelimit+0x10/0x10 [ 649.235283][ T2367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 649.235302][ T2367] ? __pfx__printk+0x10/0x10 [ 649.235338][ T2367] should_fail_ex+0x414/0x560 [ 649.235363][ T2367] should_failslab+0xa8/0x100 [ 649.235389][ T2367] kmem_cache_alloc_node_noprof+0x77/0x710 [ 649.235410][ T2367] ? __alloc_skb+0x255/0x430 [ 649.235430][ T2367] ? napi_skb_cache_get+0x4a5/0x780 [ 649.235450][ T2367] ? napi_skb_cache_get+0x151/0x780 [ 649.235476][ T2367] __alloc_skb+0x255/0x430 [ 649.235498][ T2367] ? __pfx___alloc_skb+0x10/0x10 [ 649.235522][ T2367] ? __pfx___mutex_lock+0x10/0x10 [ 649.235541][ T2367] ? __local_bh_enable_ip+0x12d/0x1c0 [ 649.235564][ T2367] hci_mgmt_cmd+0x1ca/0xef0 [ 649.235582][ T2367] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 649.235611][ T2367] hci_sock_sendmsg+0x6ca/0xef0 [ 649.235638][ T2367] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 649.235658][ T2367] ? aa_sock_msg_perm+0xf1/0x1b0 [ 649.235682][ T2367] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 649.235703][ T2367] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 649.235722][ T2367] __sock_sendmsg+0x21c/0x270 [ 649.235745][ T2367] sock_write_iter+0x279/0x360 [ 649.235766][ T2367] ? __pfx_sock_write_iter+0x10/0x10 [ 649.235797][ T2367] ? bpf_lsm_file_permission+0x9/0x20 [ 649.235819][ T2367] ? security_file_permission+0x75/0x290 [ 649.235850][ T2367] vfs_write+0x5c9/0xb30 [ 649.235876][ T2367] ? __pfx_sock_write_iter+0x10/0x10 [ 649.235895][ T2367] ? __pfx_vfs_write+0x10/0x10 [ 649.235927][ T2367] ? __fget_files+0x2a/0x420 [ 649.235954][ T2367] ksys_write+0x145/0x250 [ 649.235976][ T2367] ? __pfx_ksys_write+0x10/0x10 [ 649.235996][ T2367] ? do_syscall_64+0xbe/0xf80 [ 649.236018][ T2367] do_syscall_64+0xfa/0xf80 [ 649.236038][ T2367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.236055][ T2367] ? clear_bhb_loop+0x60/0xb0 [ 649.236077][ T2367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.236093][ T2367] RIP: 0033:0x7fb3f098f749 [ 649.236109][ T2367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.236124][ T2367] RSP: 002b:00007fb3f17f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 649.236143][ T2367] RAX: ffffffffffffffda RBX: 00007fb3f0be5fa0 RCX: 00007fb3f098f749 [ 649.236156][ T2367] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000004 [ 649.236167][ T2367] RBP: 00007fb3f17f2090 R08: 0000000000000000 R09: 0000000000000000 [ 649.236186][ T2367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.236196][ T2367] R13: 00007fb3f0be6038 R14: 00007fb3f0be5fa0 R15: 00007ffcffd472e8 [ 649.236230][ T2367] [ 649.603028][ T2383] FAULT_INJECTION: forcing a failure. [ 649.603028][ T2383] name failslab, interval 1, probability 0, space 0, times 0 [ 649.625652][ T2383] CPU: 1 UID: 0 PID: 2383 Comm: syz.2.9672 Not tainted syzkaller #0 PREEMPT(full) [ 649.625679][ T2383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 649.625691][ T2383] Call Trace: [ 649.625698][ T2383] [ 649.625707][ T2383] dump_stack_lvl+0x189/0x250 [ 649.625731][ T2383] ? __pfx____ratelimit+0x10/0x10 [ 649.625752][ T2383] ? __pfx_dump_stack_lvl+0x10/0x10 [ 649.625770][ T2383] ? __pfx__printk+0x10/0x10 [ 649.625808][ T2383] should_fail_ex+0x414/0x560 [ 649.625834][ T2383] should_failslab+0xa8/0x100 [ 649.625859][ T2383] __kmalloc_cache_noprof+0x6f/0x6f0 [ 649.625880][ T2383] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 649.625899][ T2383] ? sctp_add_bind_addr+0x8c/0x370 [ 649.625914][ T2383] ? sctp_add_bind_addr+0xb0/0x370 [ 649.625937][ T2383] sctp_add_bind_addr+0x8c/0x370 [ 649.625959][ T2383] sctp_copy_local_addr_list+0x30b/0x4e0 [ 649.625985][ T2383] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 649.626001][ T2383] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 649.626019][ T2383] ? sctp_v6_is_any+0x64/0x80 [ 649.626038][ T2383] ? sctp_copy_one_addr+0x93/0x360 [ 649.626059][ T2383] sctp_bind_addr_copy+0xb3/0x3c0 [ 649.626077][ T2383] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 649.626104][ T2383] sctp_connect_new_asoc+0x2e0/0x690 [ 649.626128][ T2383] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 649.626146][ T2383] ? __local_bh_enable_ip+0x12d/0x1c0 [ 649.626177][ T2383] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 649.626200][ T2383] ? security_sctp_bind_connect+0x7e/0x2e0 [ 649.626225][ T2383] sctp_sendmsg+0x155c/0x2810 [ 649.626258][ T2383] ? __pfx_sctp_sendmsg+0x10/0x10 [ 649.626277][ T2383] ? aa_sk_perm+0x15f/0x920 [ 649.626304][ T2383] ? aa_sk_perm+0x7ee/0x920 [ 649.626332][ T2383] ? __pfx_aa_sk_perm+0x10/0x10 [ 649.626359][ T2383] ? sock_rps_record_flow+0x19/0x410 [ 649.626381][ T2383] ? inet_sendmsg+0x2f4/0x370 [ 649.626403][ T2383] __sock_sendmsg+0x19c/0x270 [ 649.626426][ T2383] __sys_sendto+0x3bd/0x520 [ 649.626451][ T2383] ? __pfx___sys_sendto+0x10/0x10 [ 649.626471][ T2383] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 649.626507][ T2383] ? __fget_files+0x3a0/0x420 [ 649.626536][ T2383] ? ksys_write+0x22a/0x250 [ 649.626558][ T2383] ? __pfx_ksys_write+0x10/0x10 [ 649.626583][ T2383] __x64_sys_sendto+0xde/0x100 [ 649.626610][ T2383] do_syscall_64+0xfa/0xf80 [ 649.626632][ T2383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.626649][ T2383] ? clear_bhb_loop+0x60/0xb0 [ 649.626670][ T2383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.626687][ T2383] RIP: 0033:0x7fd76a78f749 [ 649.626704][ T2383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.626720][ T2383] RSP: 002b:00007fd76b5c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 649.626739][ T2383] RAX: ffffffffffffffda RBX: 00007fd76a9e5fa0 RCX: 00007fd76a78f749 [ 649.626752][ T2383] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000003 [ 649.626764][ T2383] RBP: 00007fd76b5c0090 R08: 0000200000000140 R09: 000000000000001c [ 649.626776][ T2383] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 649.626787][ T2383] R13: 00007fd76a9e6038 R14: 00007fd76a9e5fa0 R15: 00007ffc5a720408 [ 649.626820][ T2383] [ 649.724756][ T2389] tipc: Enabled bearer , priority 0 [ 649.986619][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 649.994717][ C1] lec:lec_tx_timeout: lec0 [ 650.000115][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 650.073123][ T2392] syzkaller0: entered promiscuous mode [ 650.081073][ T2392] syzkaller0: entered allmulticast mode [ 650.093900][ T2388] tipc: Resetting bearer [ 651.718309][ T2388] tipc: Disabling bearer [ 651.859534][ T2439] __nla_validate_parse: 2 callbacks suppressed [ 651.859553][ T2439] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9683'. [ 652.104624][ T2446] bond2: Removing last ns target with arp_interval on [ 652.181775][ T2469] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 652.271106][ T2475] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9694'. [ 652.417160][ T2485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9698'. [ 652.461861][ T2494] FAULT_INJECTION: forcing a failure. [ 652.461861][ T2494] name failslab, interval 1, probability 0, space 0, times 0 [ 652.488272][ T2494] CPU: 1 UID: 0 PID: 2494 Comm: syz.5.9700 Not tainted syzkaller #0 PREEMPT(full) [ 652.488298][ T2494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 652.488309][ T2494] Call Trace: [ 652.488316][ T2494] [ 652.488325][ T2494] dump_stack_lvl+0x189/0x250 [ 652.488350][ T2494] ? __pfx____ratelimit+0x10/0x10 [ 652.488370][ T2494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 652.488386][ T2494] ? __pfx__printk+0x10/0x10 [ 652.488423][ T2494] should_fail_ex+0x414/0x560 [ 652.488445][ T2494] should_failslab+0xa8/0x100 [ 652.488469][ T2494] __kmalloc_cache_noprof+0x6f/0x6f0 [ 652.488489][ T2494] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 652.488506][ T2494] ? sctp_add_bind_addr+0x8c/0x370 [ 652.488520][ T2494] ? sctp_add_bind_addr+0xb0/0x370 [ 652.488541][ T2494] sctp_add_bind_addr+0x8c/0x370 [ 652.488561][ T2494] sctp_copy_local_addr_list+0x30b/0x4e0 [ 652.488580][ T2494] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 652.488598][ T2494] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 652.488617][ T2494] ? sctp_v6_is_any+0x64/0x80 [ 652.488635][ T2494] ? sctp_copy_one_addr+0x93/0x360 [ 652.488657][ T2494] sctp_bind_addr_copy+0xb3/0x3c0 [ 652.488676][ T2494] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 652.488704][ T2494] sctp_connect_new_asoc+0x2e0/0x690 [ 652.488728][ T2494] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 652.488745][ T2494] ? __local_bh_enable_ip+0x12d/0x1c0 [ 652.488768][ T2494] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 652.488790][ T2494] ? security_sctp_bind_connect+0x7e/0x2e0 [ 652.488814][ T2494] sctp_sendmsg+0x155c/0x2810 [ 652.488845][ T2494] ? __pfx_sctp_sendmsg+0x10/0x10 [ 652.488863][ T2494] ? aa_sk_perm+0x15f/0x920 [ 652.488888][ T2494] ? aa_sk_perm+0x7ee/0x920 [ 652.488914][ T2494] ? __pfx_aa_sk_perm+0x10/0x10 [ 652.488952][ T2494] ? sock_rps_record_flow+0x19/0x410 [ 652.488972][ T2494] ? inet_sendmsg+0x2f4/0x370 [ 652.488994][ T2494] __sock_sendmsg+0x19c/0x270 [ 652.489017][ T2494] __sys_sendto+0x3bd/0x520 [ 652.489043][ T2494] ? __pfx___sys_sendto+0x10/0x10 [ 652.489063][ T2494] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 652.489098][ T2494] ? __fget_files+0x3a0/0x420 [ 652.489127][ T2494] ? ksys_write+0x22a/0x250 [ 652.489152][ T2494] ? __pfx_ksys_write+0x10/0x10 [ 652.489176][ T2494] __x64_sys_sendto+0xde/0x100 [ 652.489202][ T2494] do_syscall_64+0xfa/0xf80 [ 652.489225][ T2494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.489243][ T2494] ? clear_bhb_loop+0x60/0xb0 [ 652.489265][ T2494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.489281][ T2494] RIP: 0033:0x7fbb2bd8f749 [ 652.489297][ T2494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.489312][ T2494] RSP: 002b:00007fbb2cba7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 652.489331][ T2494] RAX: ffffffffffffffda RBX: 00007fbb2bfe5fa0 RCX: 00007fbb2bd8f749 [ 652.489345][ T2494] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000003 [ 652.489356][ T2494] RBP: 00007fbb2cba7090 R08: 0000200000000140 R09: 000000000000001c [ 652.489368][ T2494] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 652.489379][ T2494] R13: 00007fbb2bfe6038 R14: 00007fbb2bfe5fa0 R15: 00007ffcb60e13c8 [ 652.489412][ T2494] [ 652.875918][ T2503] netlink: 'syz.3.9703': attribute type 1 has an invalid length. [ 652.886118][ T2503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9703'. [ 653.151163][ T30] audit: type=1107 audit(1764922700.737:3): pid=2538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 653.369575][ T2565] FAULT_INJECTION: forcing a failure. [ 653.369575][ T2565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.387508][ T2565] CPU: 0 UID: 0 PID: 2565 Comm: syz.5.9719 Not tainted syzkaller #0 PREEMPT(full) [ 653.387534][ T2565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 653.387546][ T2565] Call Trace: [ 653.387553][ T2565] [ 653.387561][ T2565] dump_stack_lvl+0x189/0x250 [ 653.387586][ T2565] ? __pfx____ratelimit+0x10/0x10 [ 653.387607][ T2565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.387626][ T2565] ? __pfx__printk+0x10/0x10 [ 653.387649][ T2565] ? __might_fault+0xb0/0x130 [ 653.387682][ T2565] should_fail_ex+0x414/0x560 [ 653.387708][ T2565] _copy_from_user+0x2d/0xb0 [ 653.387731][ T2565] kstrtouint_from_user+0xc4/0x170 [ 653.387755][ T2565] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 653.387793][ T2565] proc_fail_nth_write+0x88/0x200 [ 653.387814][ T2565] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 653.387841][ T2565] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 653.387864][ T2565] vfs_write+0x27e/0xb30 [ 653.387894][ T2565] ? __pfx_vfs_write+0x10/0x10 [ 653.387916][ T2565] ? __fget_files+0x2a/0x420 [ 653.387935][ T2565] ? __fget_files+0x3a0/0x420 [ 653.387950][ T2565] ? __fget_files+0x2a/0x420 [ 653.387975][ T2565] ksys_write+0x145/0x250 [ 653.387998][ T2565] ? __pfx_ksys_write+0x10/0x10 [ 653.388021][ T2565] ? do_syscall_64+0xbe/0xf80 [ 653.388046][ T2565] do_syscall_64+0xfa/0xf80 [ 653.388067][ T2565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.388083][ T2565] ? clear_bhb_loop+0x60/0xb0 [ 653.388104][ T2565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.388119][ T2565] RIP: 0033:0x7fbb2bd8e1ff [ 653.388136][ T2565] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 653.388151][ T2565] RSP: 002b:00007fbb2cba7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 653.388169][ T2565] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbb2bd8e1ff [ 653.388188][ T2565] RDX: 0000000000000001 RSI: 00007fbb2cba70a0 RDI: 0000000000000003 [ 653.388198][ T2565] RBP: 00007fbb2cba7090 R08: 0000000000000000 R09: 0000000000000000 [ 653.388208][ T2565] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 653.388218][ T2565] R13: 00007fbb2bfe6038 R14: 00007fbb2bfe5fa0 R15: 00007ffcb60e13c8 [ 653.388249][ T2565] [ 653.410406][ T2567] netlink: 'syz.4.9720': attribute type 1 has an invalid length. [ 653.632878][ T2567] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9720'. [ 653.889347][ T2525] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 655.016528][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 655.024534][ C1] lec:lec_tx_timeout: lec0 [ 655.029351][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 660.036428][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 660.044430][ C1] lec:lec_tx_timeout: lec0 [ 660.049410][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 660.154873][ T5203] udevd[5203]: worker [25414] /devices/virtual/block/nbd6 timeout; kill it [ 660.164260][ T5203] udevd[5203]: seq 24987 '/devices/virtual/block/nbd6' killed [ 660.846472][T28187] block nbd2: Possible stuck request ffff888024df2300: control (read@0,1024B). Runtime 210 seconds [ 660.857478][T28187] block nbd2: Possible stuck request ffff888024df24c0: control (read@1024,1024B). Runtime 210 seconds [ 660.868712][T28187] block nbd2: Possible stuck request ffff888024df2680: control (read@2048,1024B). Runtime 210 seconds [ 660.880421][T28187] block nbd2: Possible stuck request ffff888024df2840: control (read@3072,1024B). Runtime 210 seconds [ 660.891511][T28189] block nbd6: Possible stuck request ffff888024f67000: control (read@0,1024B). Runtime 180 seconds [ 660.902630][T28189] block nbd6: Possible stuck request ffff888024f671c0: control (read@1024,1024B). Runtime 180 seconds [ 660.913732][T28189] block nbd6: Possible stuck request ffff888024f67380: control (read@2048,1024B). Runtime 180 seconds [ 660.924924][T28189] block nbd6: Possible stuck request ffff888024f67540: control (read@3072,1024B). Runtime 180 seconds [ 660.936980][ T56] block nbd5: Possible stuck request ffff888024f05080: control (read@0,1024B). Runtime 210 seconds [ 660.947743][ T56] block nbd5: Possible stuck request ffff888024f05240: control (read@1024,1024B). Runtime 210 seconds [ 660.958792][ T56] block nbd5: Possible stuck request ffff888024f05400: control (read@2048,1024B). Runtime 210 seconds [ 660.970034][ T56] block nbd5: Possible stuck request ffff888024f055c0: control (read@3072,1024B). Runtime 210 seconds [ 665.056424][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 665.064483][ C1] lec:lec_tx_timeout: lec0 [ 665.069675][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 671.076072][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6010 ms [ 671.084118][ C1] lec:lec_tx_timeout: lec0 [ 671.089387][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 676.836063][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 676.844075][ C1] lec:lec_tx_timeout: lec0 [ 676.849501][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 681.876101][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 681.884121][ C1] lec:lec_tx_timeout: lec0 [ 681.888972][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 686.896352][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 686.904383][ C1] lec:lec_tx_timeout: lec0 [ 686.909426][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 690.917920][ T56] block nbd2: Possible stuck request ffff888024df2300: control (read@0,1024B). Runtime 240 seconds [ 690.929046][T28189] block nbd6: Possible stuck request ffff888024f67000: control (read@0,1024B). Runtime 210 seconds [ 690.939848][T28189] block nbd6: Possible stuck request ffff888024f671c0: control (read@1024,1024B). Runtime 210 seconds [ 690.950890][ T56] block nbd2: Possible stuck request ffff888024df24c0: control (read@1024,1024B). Runtime 240 seconds [ 690.962146][T28189] block nbd6: Possible stuck request ffff888024f67380: control (read@2048,1024B). Runtime 210 seconds [ 690.973339][ T56] block nbd2: Possible stuck request ffff888024df2680: control (read@2048,1024B). Runtime 240 seconds [ 690.996147][ T56] block nbd2: Possible stuck request ffff888024df2840: control (read@3072,1024B). Runtime 240 seconds [ 691.007566][T28189] block nbd6: Possible stuck request ffff888024f67540: control (read@3072,1024B). Runtime 210 seconds [ 691.556825][T28189] block nbd5: Possible stuck request ffff888024f05080: control (read@0,1024B). Runtime 240 seconds [ 691.567971][T28189] block nbd5: Possible stuck request ffff888024f05240: control (read@1024,1024B). Runtime 240 seconds [ 691.579836][T28189] block nbd5: Possible stuck request ffff888024f05400: control (read@2048,1024B). Runtime 240 seconds [ 691.590874][T28189] block nbd5: Possible stuck request ffff888024f055c0: control (read@3072,1024B). Runtime 240 seconds [ 691.916338][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 691.924344][ C1] lec:lec_tx_timeout: lec0 [ 691.929279][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 696.936565][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 696.944611][ C1] lec:lec_tx_timeout: lec0 [ 696.949406][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 698.116663][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 700.786533][ T2580] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9722'. [ 700.915647][ T2589] netlink: 256 bytes leftover after parsing attributes in process `syz.5.9726'. [ 700.972948][ T2589] netlink: 'syz.5.9726': attribute type 26 has an invalid length. [ 700.998965][ T2589] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9726'. [ 701.015456][ T2602] netlink: 'syz.2.9730': attribute type 1 has an invalid length. [ 701.029460][ T2589] netlink: 'syz.5.9726': attribute type 26 has an invalid length. [ 701.039204][ T2589] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9726'. [ 701.118749][ T2602] 8021q: adding VLAN 0 to HW filter on device bond1 [ 701.169358][ T2621] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9735'. [ 701.200764][ T2607] bond1: (slave veth5): Enslaving as an active interface with a down link [ 701.239851][ T2616] vlan2: entered allmulticast mode [ 701.256676][ T2616] veth1: entered allmulticast mode [ 701.273023][ T2616] veth1: entered promiscuous mode [ 701.297621][ T2616] veth1: left promiscuous mode [ 701.304656][ T2616] bond1: (slave vlan2): making interface the new active one [ 701.328012][ T2616] veth1: entered promiscuous mode [ 701.339626][ T2616] vlan2: entered promiscuous mode [ 701.347762][ T2616] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 701.484270][ T2644] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9741'. [ 701.675062][ T2661] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9747'. [ 701.741350][ T2665] openvswitch: netlink: Unknown key attributes 2 [ 701.956011][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 701.964049][ C1] lec:lec_tx_timeout: lec0 [ 701.969572][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 701.995302][ T2685] tipc: Enabled bearer , priority 0 [ 702.104790][ T2692] netlink: 'syz.1.9756': attribute type 24 has an invalid length. [ 702.111664][ T2698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9757'. [ 702.139563][ T2696] tipc: Enabled bearer , priority 0 [ 702.154457][ T2696] syzkaller0: entered promiscuous mode [ 702.176562][ T2698] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9757'. [ 702.191983][ T2696] syzkaller0: entered allmulticast mode [ 702.233632][ T2707] tipc: Resetting bearer [ 702.259060][ T2549] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.259165][ T2698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9757'. [ 702.288096][ T2549] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.323944][ T2549] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.349521][ T2700] tipc: Resetting bearer [ 702.389212][ T2700] tipc: Disabling bearer [ 702.420000][ T2549] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.920948][ T2759] openvswitch: netlink: Flow key attribute not present in set flow. [ 703.102411][ T2771] netlink: 'syz.3.9777': attribute type 6 has an invalid length. [ 703.249116][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 703.288285][ T2782] netlink: 'syz.3.9781': attribute type 10 has an invalid length. [ 703.302504][ T2782] team0: Failed to send options change via netlink (err -105) [ 703.311489][ T2782] team0: Port device dummy0 added [ 703.318908][ T2782] netlink: 'syz.3.9781': attribute type 10 has an invalid length. [ 703.330651][ T2782] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 703.344015][ T2782] team0: Failed to send options change via netlink (err -105) [ 703.352241][ T2782] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 703.362774][ T2782] team0: Port device dummy0 removed [ 703.380084][ T2782] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 703.522081][ T2800] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 703.694980][ T2807] FAULT_INJECTION: forcing a failure. [ 703.694980][ T2807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 703.709986][ T2792] [ 703.712332][ T2792] ====================================================== [ 703.719337][ T2792] WARNING: possible circular locking dependency detected [ 703.726370][ T2792] syzkaller #0 Not tainted [ 703.730826][ T2792] ------------------------------------------------------ [ 703.737841][ T2792] syz.3.9784/2792 is trying to acquire lock: [ 703.743816][ T2792] ffff888024b671d8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1e5/0x4c0 [ 703.753205][ T2792] [ 703.753205][ T2792] but task is already holding lock: [ 703.760558][ T2792] ffff888024b66c98 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 703.770734][ T2792] [ 703.770734][ T2792] which lock already depends on the new lock. [ 703.770734][ T2792] [ 703.781126][ T2792] [ 703.781126][ T2792] the existing dependency chain (in reverse order) is: [ 703.790131][ T2792] [ 703.790131][ T2792] -> #6 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 703.798732][ T2792] blk_alloc_queue+0x538/0x620 [ 703.804028][ T2792] __blk_mq_alloc_disk+0x15c/0x340 [ 703.809733][ T2792] nbd_dev_add+0x46c/0xae0 [ 703.814663][ T2792] nbd_init+0x168/0x1f0 [ 703.819329][ T2792] do_one_initcall+0x1fb/0x7f0 [ 703.824602][ T2792] do_initcall_level+0x104/0x190 [ 703.830050][ T2792] do_initcalls+0x59/0xa0 [ 703.834888][ T2792] kernel_init_freeable+0x334/0x4b0 [ 703.840592][ T2792] kernel_init+0x1d/0x1d0 [ 703.845426][ T2792] ret_from_fork+0x599/0xb30 [ 703.850526][ T2792] ret_from_fork_asm+0x1a/0x30 [ 703.855806][ T2792] [ 703.855806][ T2792] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 703.863005][ T2792] fs_reclaim_acquire+0x72/0x100 [ 703.868460][ T2792] __kmalloc_cache_node_noprof+0x45/0x6f0 [ 703.874693][ T2792] create_worker+0x112/0x720 [ 703.879795][ T2792] workqueue_prepare_cpu+0xe4/0x170 [ 703.885506][ T2792] cpuhp_invoke_callback+0x445/0x860 [ 703.891299][ T2792] _cpu_up+0x2c9/0x580 [ 703.895874][ T2792] cpu_up+0x1d2/0x220 [ 703.900364][ T2792] cpuhp_bringup_mask+0xb2/0x1a0 [ 703.905814][ T2792] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 703.912126][ T2792] bringup_nonboot_cpus+0x17/0x30 [ 703.917659][ T2792] smp_init+0x32/0x110 [ 703.922234][ T2792] kernel_init_freeable+0x316/0x4b0 [ 703.927938][ T2792] kernel_init+0x1d/0x1d0 [ 703.932786][ T2792] ret_from_fork+0x599/0xb30 [ 703.937885][ T2792] ret_from_fork_asm+0x1a/0x30 [ 703.943156][ T2792] [ 703.943156][ T2792] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 703.950872][ T2792] cpus_read_lock+0x42/0x160 [ 703.956001][ T2792] static_key_slow_inc+0x12/0x30 [ 703.961456][ T2792] nbd_genl_reconfigure+0x10d8/0x1a50 [ 703.967338][ T2792] genl_family_rcv_msg_doit+0x215/0x300 [ 703.973395][ T2792] genl_rcv_msg+0x60e/0x790 [ 703.978408][ T2792] netlink_rcv_skb+0x208/0x470 [ 703.983676][ T2792] genl_rcv+0x28/0x40 [ 703.988168][ T2792] netlink_unicast+0x82f/0x9e0 [ 703.993445][ T2792] netlink_sendmsg+0x805/0xb30 [ 703.998718][ T2792] __sock_sendmsg+0x21c/0x270 [ 704.003934][ T2792] ____sys_sendmsg+0x505/0x820 [ 704.009210][ T2792] ___sys_sendmsg+0x21f/0x2a0 [ 704.014505][ T2792] __x64_sys_sendmsg+0x19b/0x260 [ 704.019953][ T2792] do_syscall_64+0xfa/0xf80 [ 704.024964][ T2792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.031363][ T2792] [ 704.031363][ T2792] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 704.039014][ T2792] __mutex_lock+0x187/0x1350 [ 704.044120][ T2792] nbd_queue_rq+0x257/0xf10 [ 704.049132][ T2792] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 704.055185][ T2792] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 704.062024][ T2792] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 704.068516][ T2792] blk_mq_run_hw_queue+0x348/0x4f0 [ 704.074141][ T2792] blk_mq_dispatch_list+0xd0c/0xe00 [ 704.079844][ T2792] blk_mq_flush_plug_list+0x469/0x550 [ 704.085719][ T2792] __blk_flush_plug+0x3d3/0x4b0 [ 704.091077][ T2792] __submit_bio+0x2d3/0x5a0 [ 704.096090][ T2792] submit_bio_noacct_nocheck+0x2eb/0xa30 [ 704.102238][ T2792] block_read_full_folio+0x599/0x830 [ 704.108047][ T2792] filemap_read_folio+0x117/0x380 [ 704.113586][ T2792] do_read_cache_folio+0x350/0x590 [ 704.119210][ T2792] read_part_sector+0xb6/0x2b0 [ 704.124481][ T2792] adfspart_check_ICS+0xa4/0xa50 [ 704.129924][ T2792] bdev_disk_changed+0x75f/0x14b0 [ 704.135448][ T2792] blkdev_get_whole+0x380/0x510 [ 704.140806][ T2792] bdev_open+0x31e/0xd30 [ 704.145554][ T2792] blkdev_open+0x457/0x600 [ 704.150473][ T2792] do_dentry_open+0x7ce/0x1420 [ 704.155744][ T2792] vfs_open+0x3b/0x340 [ 704.160320][ T2792] path_openat+0x340e/0x3dd0 [ 704.165417][ T2792] do_filp_open+0x1fa/0x410 [ 704.170424][ T2792] do_sys_openat2+0x121/0x200 [ 704.175606][ T2792] __x64_sys_openat+0x138/0x170 [ 704.180960][ T2792] do_syscall_64+0xfa/0xf80 [ 704.185987][ T2792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.192400][ T2792] [ 704.192400][ T2792] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 704.199599][ T2792] __mutex_lock+0x187/0x1350 [ 704.204708][ T2792] nbd_queue_rq+0xc8/0xf10 [ 704.209632][ T2792] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 704.215683][ T2792] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 704.222515][ T2792] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 704.229003][ T2792] blk_mq_run_hw_queue+0x348/0x4f0 [ 704.234627][ T2792] blk_mq_dispatch_list+0xd0c/0xe00 [ 704.240328][ T2792] blk_mq_flush_plug_list+0x469/0x550 [ 704.246208][ T2792] __blk_flush_plug+0x3d3/0x4b0 [ 704.251571][ T2792] __submit_bio+0x2d3/0x5a0 [ 704.256578][ T2792] submit_bio_noacct_nocheck+0x2eb/0xa30 [ 704.262713][ T2792] block_read_full_folio+0x599/0x830 [ 704.268506][ T2792] filemap_read_folio+0x117/0x380 [ 704.274039][ T2792] do_read_cache_folio+0x350/0x590 [ 704.279655][ T2792] read_part_sector+0xb6/0x2b0 [ 704.284921][ T2792] adfspart_check_ICS+0xa4/0xa50 [ 704.290359][ T2792] bdev_disk_changed+0x75f/0x14b0 [ 704.295885][ T2792] blkdev_get_whole+0x380/0x510 [ 704.301237][ T2792] bdev_open+0x31e/0xd30 [ 704.305987][ T2792] blkdev_open+0x457/0x600 [ 704.310915][ T2792] do_dentry_open+0x7ce/0x1420 [ 704.316197][ T2792] vfs_open+0x3b/0x340 [ 704.320780][ T2792] path_openat+0x340e/0x3dd0 [ 704.325877][ T2792] do_filp_open+0x1fa/0x410 [ 704.330888][ T2792] do_sys_openat2+0x121/0x200 [ 704.336072][ T2792] __x64_sys_openat+0x138/0x170 [ 704.341433][ T2792] do_syscall_64+0xfa/0xf80 [ 704.346445][ T2792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.352846][ T2792] [ 704.352846][ T2792] -> #1 (set->srcu){.+.+}-{0:0}: [ 704.359960][ T2792] __synchronize_srcu+0x96/0x390 [ 704.365405][ T2792] elevator_switch+0x12b/0x640 [ 704.370672][ T2792] elevator_change+0x315/0x4c0 [ 704.375941][ T2792] elevator_set_default+0x186/0x260 [ 704.381647][ T2792] blk_register_queue+0x34e/0x3f0 [ 704.387176][ T2792] __add_disk+0x677/0xd50 [ 704.392012][ T2792] add_disk_fwnode+0xfc/0x480 [ 704.397194][ T2792] nbd_dev_add+0x717/0xae0 [ 704.402119][ T2792] nbd_init+0x168/0x1f0 [ 704.406786][ T2792] do_one_initcall+0x1fb/0x7f0 [ 704.412057][ T2792] do_initcall_level+0x104/0x190 [ 704.417496][ T2792] do_initcalls+0x59/0xa0 [ 704.422329][ T2792] kernel_init_freeable+0x334/0x4b0 [ 704.428028][ T2792] kernel_init+0x1d/0x1d0 [ 704.432857][ T2792] ret_from_fork+0x599/0xb30 [ 704.437955][ T2792] ret_from_fork_asm+0x1a/0x30 [ 704.443227][ T2792] [ 704.443227][ T2792] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 704.451029][ T2792] __lock_acquire+0x15a6/0x2cf0 [ 704.456389][ T2792] lock_acquire+0x117/0x340 [ 704.461401][ T2792] __mutex_lock+0x187/0x1350 [ 704.466502][ T2792] elevator_change+0x1e5/0x4c0 [ 704.471770][ T2792] elevator_set_none+0x42/0xb0 [ 704.477040][ T2792] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 704.483354][ T2792] nbd_start_device+0x17f/0xb10 [ 704.488710][ T2792] nbd_genl_connect+0x135b/0x18f0 [ 704.494250][ T2792] genl_family_rcv_msg_doit+0x215/0x300 [ 704.500304][ T2792] genl_rcv_msg+0x60e/0x790 [ 704.505316][ T2792] netlink_rcv_skb+0x208/0x470 [ 704.510586][ T2792] genl_rcv+0x28/0x40 [ 704.515078][ T2792] netlink_unicast+0x82f/0x9e0 [ 704.520351][ T2792] netlink_sendmsg+0x805/0xb30 [ 704.525615][ T2792] __sock_sendmsg+0x21c/0x270 [ 704.530799][ T2792] ____sys_sendmsg+0x505/0x820 [ 704.536071][ T2792] ___sys_sendmsg+0x21f/0x2a0 [ 704.541263][ T2792] __x64_sys_sendmsg+0x19b/0x260 [ 704.546716][ T2792] do_syscall_64+0xfa/0xf80 [ 704.551741][ T2792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.558141][ T2792] [ 704.558141][ T2792] other info that might help us debug this: [ 704.558141][ T2792] [ 704.568356][ T2792] Chain exists of: [ 704.568356][ T2792] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#52 [ 704.568356][ T2792] [ 704.582079][ T2792] Possible unsafe locking scenario: [ 704.582079][ T2792] [ 704.589526][ T2792] CPU0 CPU1 [ 704.594893][ T2792] ---- ---- [ 704.600245][ T2792] lock(&q->q_usage_counter(io)#52); [ 704.605619][ T2792] lock(fs_reclaim); [ 704.612159][ T2792] lock(&q->q_usage_counter(io)#52); [ 704.620051][ T2792] lock(&q->elevator_lock); [ 704.624633][ T2792] [ 704.624633][ T2792] *** DEADLOCK *** [ 704.624633][ T2792] [ 704.632781][ T2792] 6 locks held by syz.3.9784/2792: [ 704.637886][ T2792] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 704.646067][ T2792] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 704.655035][ T2792] #2: ffff888024d4d9d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1ab0 [ 704.666426][ T2792] #3: ffff888024d4d8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1ab0 [ 704.677378][ T2792] #4: ffff888024b66c98 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 704.687984][ T2792] #5: ffff888024b66cd0 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 704.698866][ T2792] [ 704.698866][ T2792] stack backtrace: [ 704.704751][ T2792] CPU: 0 UID: 0 PID: 2792 Comm: syz.3.9784 Not tainted syzkaller #0 PREEMPT(full) [ 704.704773][ T2792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 704.704782][ T2792] Call Trace: [ 704.704791][ T2792] [ 704.704800][ T2792] dump_stack_lvl+0x189/0x250 [ 704.704819][ T2792] ? __pfx_dump_stack_lvl+0x10/0x10 [ 704.704833][ T2792] ? __pfx__printk+0x10/0x10 [ 704.704850][ T2792] ? print_lock_name+0xde/0x100 [ 704.704867][ T2792] print_circular_bug+0x2e2/0x300 [ 704.704884][ T2792] check_noncircular+0x12e/0x150 [ 704.704901][ T2792] __lock_acquire+0x15a6/0x2cf0 [ 704.704922][ T2792] ? elevator_change+0x1e5/0x4c0 [ 704.704935][ T2792] lock_acquire+0x117/0x340 [ 704.704946][ T2792] ? elevator_change+0x1e5/0x4c0 [ 704.704964][ T2792] __mutex_lock+0x187/0x1350 [ 704.704981][ T2792] ? elevator_change+0x1e5/0x4c0 [ 704.704994][ T2792] ? xa_find_after+0xae/0x430 [ 704.705013][ T2792] ? xa_find_after+0x402/0x430 [ 704.705029][ T2792] ? elevator_change+0x1e5/0x4c0 [ 704.705040][ T2792] ? xa_find_after+0xae/0x430 [ 704.705057][ T2792] ? __pfx___mutex_lock+0x10/0x10 [ 704.705076][ T2792] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 704.705094][ T2792] elevator_change+0x1e5/0x4c0 [ 704.705109][ T2792] elevator_set_none+0x42/0xb0 [ 704.705122][ T2792] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 704.705144][ T2792] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 704.705165][ T2792] ? sysfs_add_file_mode_ns+0x259/0x300 [ 704.705183][ T2792] nbd_start_device+0x17f/0xb10 [ 704.705201][ T2792] ? device_create_file+0xf4/0x1b0 [ 704.705219][ T2792] nbd_genl_connect+0x135b/0x18f0 [ 704.705238][ T2792] ? __pfx_nbd_genl_connect+0x10/0x10 [ 704.705256][ T2792] ? __nla_parse+0x40/0x60 [ 704.705274][ T2792] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 704.705294][ T2792] genl_family_rcv_msg_doit+0x215/0x300 [ 704.705312][ T2792] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 704.705331][ T2792] ? __lock_acquire+0x6b6/0x2cf0 [ 704.705347][ T2792] genl_rcv_msg+0x60e/0x790 [ 704.705363][ T2792] ? __pfx_genl_rcv_msg+0x10/0x10 [ 704.705378][ T2792] ? __pfx_nbd_genl_connect+0x10/0x10 [ 704.705397][ T2792] netlink_rcv_skb+0x208/0x470 [ 704.705410][ T2792] ? __pfx_genl_rcv_msg+0x10/0x10 [ 704.705426][ T2792] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 704.705444][ T2792] ? down_read+0x274/0x2e0 [ 704.705460][ T2792] ? genl_rcv+0xd/0x40 [ 704.705474][ T2792] genl_rcv+0x28/0x40 [ 704.705488][ T2792] netlink_unicast+0x82f/0x9e0 [ 704.705509][ T2792] ? __pfx_netlink_unicast+0x10/0x10 [ 704.705526][ T2792] ? netlink_sendmsg+0x642/0xb30 [ 704.705538][ T2792] ? skb_put+0x11b/0x210 [ 704.705556][ T2792] netlink_sendmsg+0x805/0xb30 [ 704.705572][ T2792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 704.705586][ T2792] ? aa_sock_msg_perm+0xf1/0x1b0 [ 704.705599][ T2792] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 704.705615][ T2792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 704.705629][ T2792] __sock_sendmsg+0x21c/0x270 [ 704.705644][ T2792] ____sys_sendmsg+0x505/0x820 [ 704.705665][ T2792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 704.705686][ T2792] ? import_iovec+0x74/0xa0 [ 704.705710][ T2792] ___sys_sendmsg+0x21f/0x2a0 [ 704.705729][ T2792] ? __pfx____sys_sendmsg+0x10/0x10 [ 704.705749][ T2792] ? futex_wake+0x4b2/0x560 [ 704.705772][ T2792] ? __fget_files+0x2a/0x420 [ 704.705784][ T2792] ? __fget_files+0x3a0/0x420 [ 704.705798][ T2792] __x64_sys_sendmsg+0x19b/0x260 [ 704.705818][ T2792] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 704.705842][ T2792] ? do_syscall_64+0xbe/0xf80 [ 704.705861][ T2792] do_syscall_64+0xfa/0xf80 [ 704.705880][ T2792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.705895][ T2792] ? clear_bhb_loop+0x60/0xb0 [ 704.705920][ T2792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.705933][ T2792] RIP: 0033:0x7f47b778f749 [ 704.705950][ T2792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.705963][ T2792] RSP: 002b:00007f47b86e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 704.705979][ T2792] RAX: ffffffffffffffda RBX: 00007f47b79e5fa0 RCX: 00007f47b778f749 [ 704.705989][ T2792] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 704.705999][ T2792] RBP: 00007f47b7813f91 R08: 0000000000000000 R09: 0000000000000000 [ 704.706010][ T2792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.706018][ T2792] R13: 00007f47b79e6038 R14: 00007f47b79e5fa0 R15: 00007ffcdf124418 [ 704.706037][ T2792] [ 704.724178][ T2807] CPU: 1 UID: 0 PID: 2807 Comm: syz.5.9789 Not tainted syzkaller #0 PREEMPT(full) [ 704.724204][ T2807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 704.724215][ T2807] Call Trace: [ 704.724222][ T2807] [ 704.724229][ T2807] dump_stack_lvl+0x189/0x250 [ 704.724252][ T2807] ? __pfx____ratelimit+0x10/0x10 [ 704.724271][ T2807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 704.724288][ T2807] ? __pfx__printk+0x10/0x10 [ 704.724313][ T2807] should_fail_ex+0x414/0x560 [ 704.724334][ T2807] _copy_to_user+0x31/0xb0 [ 704.724356][ T2807] simple_read_from_buffer+0xe1/0x170 [ 704.724381][ T2807] proc_fail_nth_read+0x1b3/0x220 [ 704.724404][ T2807] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.724424][ T2807] ? rw_verify_area+0x2a6/0x4d0 [ 704.724443][ T2807] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.724463][ T2807] vfs_read+0x200/0xa30 [ 704.724481][ T2807] ? fdget_pos+0x247/0x320 [ 704.724497][ T2807] ? __pfx___mutex_lock+0x10/0x10 [ 704.724517][ T2807] ? __pfx_vfs_read+0x10/0x10 [ 704.724536][ T2807] ? __fget_files+0x2a/0x420 [ 704.724552][ T2807] ? __fget_files+0x3a0/0x420 [ 704.724566][ T2807] ? __fget_files+0x2a/0x420 [ 704.724584][ T2807] ksys_read+0x145/0x250 [ 704.724603][ T2807] ? __pfx_ksys_read+0x10/0x10 [ 704.724622][ T2807] ? do_syscall_64+0xbe/0xf80 [ 704.724644][ T2807] do_syscall_64+0xfa/0xf80 [ 704.724663][ T2807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.724680][ T2807] ? clear_bhb_loop+0x60/0xb0 [ 704.724697][ T2807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.724712][ T2807] RIP: 0033:0x7fbb2bd8e15c [ 704.724727][ T2807] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 704.724741][ T2807] RSP: 002b:00007fbb2cba7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 704.724759][ T2807] RAX: ffffffffffffffda RBX: 00007fbb2bfe5fa0 RCX: 00007fbb2bd8e15c [ 704.724771][ T2807] RDX: 000000000000000f RSI: 00007fbb2cba70a0 RDI: 0000000000000004 [ 704.724781][ T2807] RBP: 00007fbb2cba7090 R08: 0000000000000000 R09: 0000000000000000 [ 704.724792][ T2807] R10: e6aa0a9f27214269 R11: 0000000000000246 R12: 0000000000000001 [ 704.724802][ T2807] R13: 00007fbb2bfe6038 R14: 00007fbb2bfe5fa0 R15: 00007ffcb60e13c8 [ 704.724823][ T2807] [ 705.489763][ T5153] block nbd3: Receive control failed (result -32) [ 705.489993][ T5847] block nbd3: Receive control failed (result -32) [ 705.502877][ T52] block nbd3: Receive control failed (result -32) [ 706.976507][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 706.984517][ C1] lec:lec_tx_timeout: lec0 [ 706.989348][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 711.996253][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 712.004255][ C1] lec:lec_tx_timeout: lec0 [ 712.009247][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 713.477271][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 713.477282][ T52] Bluetooth: hci2: command 0x0406 tx timeout