last executing test programs: 5.248320436s ago: executing program 1 (id=8725): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async, rerun: 32) listen(r1, 0x402) (async, rerun: 32) syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0xf500, {[@fastopen={0x1e, 0x5, 'Hx\x00'}]}}}}}}}}, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2, r2}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2, r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) close(r5) (async, rerun: 32) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x200000c0}, 0x810) (async, rerun: 32) write$nci(r5, &(0x7f0000000180)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x1, 0x2, 0x4, 0x63}, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'nicvf0\x00', 0x200}) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) r7 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r7, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x7c, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}}}, 0x24) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@setneightbl={0x98, 0x43, 0x400, 0x70bd2c, 0x25dfdbff, {0x7}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0x9}, @NDTA_PARMS={0x68, 0x6, 0x0, 0x1, [@NDTPA_LOCKTIME={0xc, 0xf, 0xe}, @NDTPA_RETRANS_TIME={0xc, 0x5, 0x10}, @NDTPA_RETRANS_TIME={0xc, 0x5, 0x3}, @NDTPA_ANYCAST_DELAY={0xc, 0xc, 0x3133}, @NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0x77}, @NDTPA_DELAY_PROBE_TIME={0xc, 0x7, 0x7}, @NDTPA_LOCKTIME={0xc, 0xf, 0x1}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0x3}, @NDTPA_MCAST_PROBES={0x8, 0xb, 0x3}]}, @NDTA_THRESH3={0x8, 0x4, 0x7ff}, @NDTA_THRESH2={0x8, 0x3, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x400c001}, 0x24008844) (async) close(r8) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r9, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r4, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x8000) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r8, 0x4) 4.500477059s ago: executing program 4 (id=8732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x400}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r1, 0x2000}, {r1, 0x8104}], 0x2, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)}, 0x20) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000540)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) syz_emit_ethernet(0x56, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x2, 0xfffe, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x7, 0xf989, "4f46b5"}, @sack={0x5, 0xa, [0x394, 0x6]}, @exp_smc={0xfe, 0x6}, @mss={0x2, 0x4, 0x6}, @fastopen={0x22, 0x5, "ef4c01"}]}}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="0000000002000000000000000000000000000200000000080600"], 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x7cd}, &(0x7f0000000440)=0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0xfffffffffffffd88, &(0x7f0000000280)="63ec33c9e9b98600000000090000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000015c0)={r6, 0x7, 0xf001, 0xf, 0x10001, 0x1000}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xb, &(0x7f0000000240)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000002c0)='syzkaller\x00', 0x80, 0x77, &(0x7f0000000300)=""/119, 0x41100, 0x10, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000380)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x7, 0x8, 0xa}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=[{0x0, 0x5, 0xc, 0x6}, {0x4, 0x5, 0xc}], 0x10, 0xffffff47}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 4.085383629s ago: executing program 1 (id=8733): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r0, 0x8903, 0x1000000000000) r1 = socket(0x2, 0x80005, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00', 0x2}}, 0x4, 0x2, 0x80000003, 0x3, 0xe2d8f2eb1d010931, 0x9, 0xd}, 0x9c) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x0, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0xe8}}, 0x4000840) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48050}, 0x800) r3 = socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r4, 0x1, 0x2e, 0x0, &(0x7f0000000000)) write(r3, &(0x7f0000000380)="7c30d83571813c648fbe219adb", 0xd) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) 3.743404165s ago: executing program 1 (id=8735): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000ea00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000ea00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x1a, 0xffffffffffffffee, &(0x7f0000000080)="630b008646dc3f0adf398151d9000000000000000000ea1f0000", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000a00000007"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f00000000c0)='G', 0x1) (async) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f00000000c0)='G', 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000180)=0x5b6, 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1007, &(0x7f0000001980)=""/4103, 0x41100, 0x68}, 0x94) 3.742416834s ago: executing program 4 (id=8736): syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0), 0x6, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x888e, r1, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) sendto$packet(r2, 0x0, 0xff24, 0x1, &(0x7f0000000280)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) r3 = socket(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe80900534e05f5dd00000010000100040c100000000080224e0000", 0x58}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000e"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x44014) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0b67c34aa37818690aafa76013546505e696c5cb9f7aa99166ba95829a00b3b4f72980b8163eaacd83ab5b121b417feab25287ee3db1f01d9af5c3152e36c63823a90b8f5bd1f062dda2f2485f950adb7489383ebaacff30136ed55cde8473b831197e40b2e772a4acff99d68d755500f0c5c1d1c96966cef92da17b00", @ANYRES16=0x0, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c081) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="2420040085ad00002c0012800e00010069703665727370616e00000018000280050008000800000005000b006200000010001200"], 0x4c}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x3}, @TCA_PIE_ALPHA={0x8, 0x4, 0x12}]}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000079a183199eb81c0000bec846f75861179f1f320c7c4366c6b4f51ac332d1b80b9122226befea479a621e7c38bad723ffee73172e0a4e9d32238aea313355d34f48931cf3f2844f3ec9cf3f0f8fce4bcf3cc552e110fb7c17ea0abcc7693009b018cff032742a65db", @ANYRES16=r7, @ANYBLOB, @ANYRES32=r12, @ANYBLOB="ff000500030000"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="24bda929b7cbcb64bbf14bc2b802a7953cd365249480af5e5fd4904742fa13aa26c1c44abdcc9e01636082e172908238e6998512b6a09c9d58dede714a148c9e978b6d5ee98d476e7ffc367e1f909e67b8ba173a53305d2455fb117b5365d2a74d23cb29bb217e58c5a2d3056963647dc883ef17ce8187ce95c92ea23482d4fe0095a165aa4c159d8fbd8dda27de8c434c12ce", @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r13, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r13, @ANYBLOB="0a00344000020202020200000a000600bf090783a074765e79000000000000"], 0x44}}, 0x0) 3.287737159s ago: executing program 3 (id=8740): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000009f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000045e4d344b70300000000000085000000b8000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "11223344"}]}, @NFTA_SET_ELEM_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "55667788"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x40, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "11223344"}]}]}]}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "11223344"}]}]}}}, {0x30, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf4}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000640)={r5}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r5, 0x9, 0x0, 0x3, 0x9, 0xfffffffc}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000100)={r6, 0x80, 0x89, "8adaebf26e2a62b4de087bc0d281694b1b785cb9b845733d5a741c2230b9cc9c644029ef123a0af183fa1a34ae01463ca00900c3de0b14813a0255a844357a01e8d1c016bf85221f832b604c54657b6c6abc10f8a7849f3b17bc648ed75b49ad01ca1beecac46e11cc103a901b4235a0b3b74fed869a620cfcb46f148539d6b9ea1fa13be6fa9051a8"}, 0x91) 3.065669818s ago: executing program 1 (id=8742): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {0xfff2}, {0xafabc05531515610, 0x415034f1892c1116}, {0x8, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1}, 0x24048004) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000308010200000000000000000700020306000240809b00001400048008000140000000ed0700024047527ab90500030084"], 0x38}}, 0xd4) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000100)={@remote, r2}, 0x14) 2.661542018s ago: executing program 2 (id=8745): preadv(0xffffffffffffffff, &(0x7f00000008c0)=[{0x0}], 0x1, 0x3, 0x1) (async, rerun: 64) r0 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000080)="06078df43eafda138d39d63b6ae8e76cbc08270b0a98a789bb70abe38afbabba6b50281c53b403bf9536cd5df1bff2dc176d15e0d79238284f341e6692b599203c09f4215fb73bd33374394ae86de26f4892c2f5526bbcedbef64a00d78f97588f28c2748478247b8863b43d48ec86c49f", 0x71}, {&(0x7f0000000100)="db613dd13c1455fcb61f6d6b3634412fcf18a454838c3f0cd68d163efdca0ceccb494150de38bec360e672d920b12dd40025fed46fe78f3a1ef9cd90ba3fc3df9784fe813f07fa34a9c8138886750b2bd8d3dc3f365d7b0d1029323c99e4f342c62aa5b47e0f288e9d72f9aabfe28cad77627cd77d7ca8be039094d72874d38af169c404379ab7d69e65d0587184aa3b2dcc8cb6d56dd204836e59c18a4f7308330f7f93963a10dc95cb6541f138ea7c8c17d2b7f4d835845fb6604c6f9bca724125147b7f6b3af0", 0xc8}, {&(0x7f00000002c0)="5312a6900367fced9d91c38003ac7e2dbfea7a3f404741f8f5b246dcd0b2d4bf59bd6449787d0b9584d64ad1962e502fabc783ab7b6cc2e544874963abd1c0ab4352180c0fa38e7e564f820ed816018e051cd5f525f503df6e78de88852cdd88bec1b079ec5588cd9f066eeec73c7129929bea7369d7307f4ad85837f15699750ba63de35a6950416f784ca548a565a329141dc2e126fb0afa3447f67ec7e9717fff9541e2c0818338c7c7209eda7d82236324e6186f058e83c39c2afbb2d26be49285ad5d7f", 0xc6}, {&(0x7f00000003c0)="0d129ab361f002cc1bb4", 0xa}, {&(0x7f0000000400)="6737e1c843c375e35aadca4a513ea306a04eed311b681cc7b38eb654e4ad5abaff4b50c688c7e5358bce70df6a469bb6d75618b3d2b911f6359dd7d6bd5bc7f46ad8ecd63839bcb394f034c6786f7df02155852f898146b899417b62e5705310249550f5822d5c91d90b9bfcefa0fe3070817b7b55a7556bc39cc2b168f8e3a1dcb7ce8a6ee8a08daf22ca0e10f654dc30d713e3b12971f20f4cd15184a6cc5711758b95516fc557d3cab9bb5e5ef7e2fcac07ad8c967fdddc5e14c45205bebca6227e84ce495c6812d1d95e554c92faca4f8d877453cd0bde286f4a0b820d2b02d26170868b80854d56a2d590f8e63d6edafe", 0xf3}, {&(0x7f0000000900)="49f47f632624566445e17d1365110846437b7479884126e0a5f8d0a66e3f4450d49e169647ae3e9305cdac55ccfd5aaa068ec15e4e98e19125bc36d6c8cd6e47cb76c963f6e5b3f537057bdb8eb26aa85876c68e0f5b80f989948121ae5aa93cbd2b0c567a843a81a38d6fb5ebc03f6616121ddb33b44c61fd6be3db89292a068c12f2267a36c662e12445eb00e6b6463e463216af69426c5fdf8f7948920b72951fbb6f0d454e503e95d5268a59bf81db45b1690a369bfc23d7ed964cd667e79d15867e913d66d9cbb9c7413451113867408820b02dd161a94c3bfd710092a7605df617edaf537b4195d939c76b0ff980aa949de920c3f7d795f9a1d9d05e4dc7f2aee0f28d48fad016bcb8b357a2442de3698a0a6307b1ce9522ed8cb2b751eba91e9e8da5040806a002cbdab635c218bd109595dcf020548751e41c941df8848310e4c2727ffa012b4bba9964f86af99de2aef67b931074c92c86e9a14c1d0a487892a9c428a4edf0cc62eaf11d1e2017d8d6a1ccc2dd8743db5de607285b2dcaa1d4301762a61bfcb633a211f0103b18e06205e57d6218b97b5d9ed2a0c73c74e409ec6dc40960cab87b5081cbc825290ff03686b4cc415feb5b5513db063a75872dcbefa7ee0c486c3d8bcf03c3797720227a81dd65093b3b42bc89f867a42add4bd21825b50285040988e0e933351080c026fda6a758726ded1c799480eb90f666ee6ec6904fe90b85362a3f24a49abd679b50ec40dcccc3c4663fed222109417e4f5c69c66e75b8a0715bfc14b9fe7af8fce3f29603d1f08f524f0902cef6e67fdfa15efd4c5659b354a21f9e7dd2dab3b9536b653870064925ec3b425e790108d34ce0d8f1f2dc9298f2e790997fc201d4d0a4ce9cbd963ba12e42f1bd36ae1f85df60c7ab3398a85a41b12feaee28ef6d12a9876352d37e011059bb86057bd748b8dab46894940a0f097bf83e0302f3656c674d9ee1eb66d5f9be88f332808a7470075759b015d61b9579f1195850bae21751a45aef24f667b6d590d66b9d9b5841e3bf894e263b2973d036aed6418cb41485859591fe4d9b94527e52f17f8d06744ee43d2d99f746dbfb6fc69df9019c896aea673c7f585b9e12dd392b194ea40229b7faa40df71678785562aa2af1ab21bd1213a97329a103025c72af1667a8505e342cdd0bb8fb614889ac6293d0a0a398369346f73383b3f0e6912cb2cc40024d3b7cf528b9a0c8316825c8040b6bdafdaf6e14df69454f43d33ab81d4fa7d9d9ab6f9f8971f1d7f15aafcdcc43fb75ffb44ffc17b53c783a36b3fbd3eb62ec0cabb3ae0c6de3fa7b525968b47252dbc84f7e941a7eab5c278541b796acb88e11543e6a44d658f318dea0cb092156364d8f9b350efcde44f1a6bcba2d81d244be6da11023c60857c611a9b6cea380d5a4fc7805abc50ec93b0dab92e02ef9791de5504d0d4fce675c78a862e1b513ba4090442888ee0b21e235e54dcac5f044787733d47a0b275f628c545a4d94d0826732f235e7ca810fdf1c803ff5fc0ad1d6c09717b3fc098b36386cf2703c654ef8b6a69aca27318fe23319a3c9823e6633e81f9fcb2e5ec3d795804e944e1d2c432a083fba8ff98deb527266465368d4a06b2426b550c44164fdd2b4b01a329a6fdc7d5f2fdbc0fad9bf50954cace55a734c0aa9af6c575b17b8088dae8d3ece52451bb9f7325a1e3cd9cb5a7087be32b4ba425b26b27093ecc00503b86b7c5c5cae12d4a6e5049ae4d5154eeb8e00b6fef9c333dd693d8f73db95e5a99a937ccc21bf758e25d761134c17248d165c5a8a0c910d0fbacf8ac27910ad86459b61c7bbc63cb4e3498def4fab28ec56251b129a4059ffa4848413fb8d3508addc42e9d26757cbe1c1fdef38f7f2f5a6d6b441f1801971113d51458df3c1ccaa1090576b5296644e905c098929ec7f76b1b43235e3409210032cffa8d113a4660ba8519b249ff726cc71a010c19a9d395047e43ecf1537d00771e34efc9c58f27425e7b41598505754c79ed6ade81c586a91ce9bb988182a3d08848622e466ec507d90079201dc331f4841a8e5bb5aef908b09ce3a447297fb8b8762a2cf66dc61bce223cf21c46b02b4672678235260445508cc4d9c4697bdf5f494a2e191e704006a4df5dbe81ae178c627d668d00c87a0277fcfcce2722052b36cb5cb97e0f224aa08a0ac8cbb16f6100330a6593ed3acb606260b120cd6616b8f1bb44a428c73aaadd04f55dde8752bcfb5bab7daf19aaf8be38b1ed339870f99eec696757c7ab1baf62cdf80db785ef020d3f0c6242e75a7b860e533b5ecd4b2eb0ba19331f244765e6c2e9d32e662e4f69cd895aa842085709fab1f862efdf56b0e2e6dbbb87ad774b7e0b8dfe78e638ef29963c34ae67ecbc8945ae28bff0ac81e2582a66347753683b04aba1f3c9e2aeb66a4538466b0a65d303af6f6dec2f67909781cd3b6110ef5d36c25e6ddfac8e923ceb102280649847288ad66b139db293d85fab432852c7d77079296b5452aef8e7741784c75f6a5474075f830ceb485f60edad9e54239c6fe3c915d2c7fc726525513a6dfec63c75ffc4e03b61506e911d69b305bc8daccf017a7bb3780dd07434af98b6c6de1aeb8936d5c51c0b45f554a57bebc6e0071b1f5344cd426bd7cddf2d0068642c706e6ae0a9df16f9ea7188b27ebea3ce36c432ec0a53c80dbd861c7af438c85cf5e10b32145e1f01aff49b5d7935687dc3b816c1c7666f5e861b50422fda9fbf0e5c81d0a257481255a9ca9f31ab63915301725b6ec1528f64895d736d9982bb5c894b477b9c80db1cf51714da51f8b509e84fcab96079f5d93b35abf0011862745c5dadd0835da9721db98f498b73d9f9adcc74f4b3d5f21f882a816c84feb0e44a7b50f171dd72990dcdef5d27fde77d3d86689b7a115890f748699e4a82086ac5dfac718bfce4f2d02b412f5caae0e283261b0b52a2f38594a562ca3fda9652164ad0c9c50da626fee484a64d96248c9c89a0b33832729846cddeb7e3e8b3ae2e4d147e8b889f1545dcf177b0f27ef53c2fda51aa02215f8e6ec38ddf11047f5791a902c355734251aee3b59f15dd4253cf9284d1597aad1da3b50861e3913fa0ebaf42b0f55bb7ed7317ed4b7a027d065a496681695541520c0d768c26e99fa64cc118b9e013398dcc6c97b4ff797e465c79bd99ebfaa8a64fcf66d2a8f2afbbd0a2ba98b73ad8b016e1239d7853d07fea5c26c6bc3cd30849fe3db17820634f4be534e56057d477a290b5e3e856fbf8e61d44cb547c3903530635b83263ca70ece5d677a978f9387905950f6b7155a1883e1a51388b772fcb4b73afc133381b0e0c862ef055876de440a5e292926dc28f644c2e27acaf1e630c097d9d007900a3d933c0238ad1f9246b6d1c17751391e752e746880af44aa7076f66873ee4e5011005b30a70b27ce811d93a6ccdd380c21d5c7ad125e786f1479a7c7d20b8db8a955790ec9f7001c31f90cf51fabc4f04306c851cdd29871a73805177fa70d7e704188d8b43d6da148acc1a5a5dbdd2925724d0b79d994608b0a56001f55a897870c7cc9b8bef33f3c904df507caab68d980929e73d46390246cbc34c86b062508ca37ed911d69d978ba99142cb31d59aaaa68774d4d121eb102a48af34d0474051b9d5a6716150283d682e6d3c4c1a3b9646506d72b42ed46916bd71efddb35f68b1680aaa9930bf14c6e789bae0f49002b05c111feda1ef50d5a49376dcd91380d629a0c0ba6d0db03407650a3dff793f534528c4721a62c2b5ff24823af33e68ded42b7aeb2f9bd6540a5779b21b001c62a8b6800557dfa251a3c0bee42e619bd25a20f824dc0ba78530a109cd327c3ddd8a1374e63dd07af37972f018f95382bbf5143222f688823482d06d3690b238be2aaeeac235ad9269ed2ec9a55f7b951a7a5409ef4829be5fbb3d54492a1c0d42214748a982e90c2af870802d9665c0590e759f2ab940ff8245c5b98d1aabc71e1cc42a73e2ab1e17c08ae2617ea6a364969abe52ad8e82d519c22d7b3cb0fdfb95c04f27b11f8f0011211cf82ccce63f0d8b4632db1ff8068f11425fb80f762f7d94dda2e32eecd64f17ecfa2cd9c4f810b3f5879032a544be0b9f6fc2f6685c3aa5d9c40d733378667b3f7b1ae54fa6fcce11fcfb2ff7d211707a23b32148ba075fa2aaa66b1f76154d8f84c027964b630e3dedf9a88584e4363e816382bdb9fa06c01697e8151522311a0a611bbffdf104e57e0aa94d971afe9691f05c4ac943f0088cca0de7f8bbb1c54247a0b7fbb8ab6157ba5786dcc6bb025a776cd81feba04b80e08fc43accebf63fc3cf63ae2eb0b74a6c9279cb8ce33ccf31c6c24575dbaf26353cd140fa404691641ec44499609af4887d7738621e38b4f3c5cb841c2433f46b5e33e2d70f2ca6e3ad88ca8721bf731b7a145e608ddbc375c4d610164ad17f3511dbbb4315c1b4b044b2e4f89f7b6b3a6ed87e290a49b294c7805c7cf5951772a05cfde3f2ebd6b014a04df2ac1729ec3adb51d5a2c749b6b13ba0147f7240c15436b543f14e3d831be2a0b4a1f8d359cb31f70fd02e8424d2d7f25c72ebefdd5a8e2a286b1307a4f468d76abab13d14581c2c8a2c6f1973a06ef516c5870fd0dd5f4cbb9d2989c0592b1ef4beeb38289051f2402573d042541360b238a0c9375cb93aad859f20bc034f3230e3d5179c8814f4dbc6a928ac019cfdb1a396e52ae795f34e7cfc3622b482c769b7fea5aec76154115776d743acccfef37432d0a22ad764673bc3883098e035d826137c2e19adff203b5846c2f0efaa01dfcb326c27a51ccef0bb6229361dd485b5758ac0249421810c92dc507752cfb913035e16587698f90b7bc859383c16f72b4832a5f57576b0016e1887ae10460e41d3c8497b4aec82f29ae416ace0392b5aa25d50c96ac5c69651064cf94b60458254dc023691711efcda4b5df9caf8a6520a7c1282af4c25b7dad60e0d40937d348ecea047c082a7b9a789fec3576bc338b2723fd8af60bd35c0ecbb1913327e975981933816773fdfba43f7e89f766ee026aa61cce19d60dc0702b369cd4938f0fa6cffb1ad3725f5d11a446c0f9e02a721a18e687ea0e1d51efc826d8dc6c77234b8a386b02d15d6a9be880ba8759a54dbed282907ae1f69863af508a8cbd613b6f3fbf2447adb166b1c06369f1e6ac91a37d4e5e321f00bcfed38fb8b83a034dbaac791758e61c79e06fb24cbfc2044178bcb8d80e8b731c07f8e24cc484b2b2fb380d9e85c85dcb851b600689777bdc4ef426dc9bb7a5eb600a8fcbcf683fcc9e76f3c84bddb884b114affee33ffb0fd9f4adab4ba8b58bf6f12ee4637ee4b697d2c7f70833f019e8afabe5b334f846e6b098ba9a6256f035e3b2a636bdb457983d6768de3520b6354089dc9d7e4776aa35cd53f26576e53df16dfdafbf95adff3f4ffe70a0883e3bbf71c412803fa3e0ec51bee3763951f44cab361265389b7027eeda52a4e1b5edf55bd8c7285a2aa6d590579005289b6ec12ab7c5abe3b2e1349d153a523be9a424e343ae9afab3b538c10e72031844f171da32440c1f1ae451f6ad921aeec31e291cbc2e54b9eda7a6238e596e5e8aee1b3b813bf606324b9a692f1e8248ac9f1086e5a946e5e974dcd3ed91887de137b52a5ba7a7732f02116e77a98ac25b0ef46c6c142bbf9879a1bf35e05ba7e649b88adcf9756f31f13e7c163bdc5f71118a74ef54d63367e1f72a1f62094ad2a26290af46975135", 0x1000}, {&(0x7f0000001900)="4682ca8b05319fb2b639eb68d92ca4d313c4479b301a04d43fe0f6a39537ce9ee464e1321a9b1c8e1c8714df3d6f276a43c0cc1d359f1c937bfbe6c82b8de56959e85e10b1f1e18121f245f15fbe6eb2e4e62601ef819e868e00b19df343d957f7cb8e00cd", 0x65}, {&(0x7f0000001980)="221eb4ae4e58fd02b7ec4813ac14dac1b8d73ea9a183b0539481d2612ae83731d3136f7e3a33cad9e1bbb06bdd8b4401f829a5780578e012265fb6d8f9736fd5c3dae143c404cd2ae41015", 0x4b}, {&(0x7f0000001a00)="f09b13a30b82552934011a9b43ee2fa19a1e1c41533817ac5070a096a946c12f9eac25a717787a45f2b8181bfdd58755fb05499ffeb6e7edaa168ba2aef8666af3d6397307882ea0ef95afe7bfd4d0ed03691926c274a029f15a00", 0x5b}], 0x9}, 0x40) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x6) (async, rerun: 32) close(0x3) (rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) (async) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000480)={0x7, 0x1, 0x836, 0x8, 0x7}, 0x14) (async, rerun: 64) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000080)=0x10000008, 0x4) (async, rerun: 64) socket$inet6(0xa, 0x5, 0x2402) (rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newqdisc={0xb0, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xc9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x10}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x30}]}}]}, 0xb0}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 2.584443281s ago: executing program 4 (id=8746): r0 = socket$kcm(0x10, 0x2, 0x0) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = socket$kcm(0x21, 0x2, 0x2) (async, rerun: 32) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) (async) sendmsg$inet(r2, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x40004) (async) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000680)={'filter\x00', 0x7, 0x4, 0x3f0, 0x218, 0x218, 0x218, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@arp={@multicast2, @private=0xa010101, 0x0, 0xff, 0x2, 0x2, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, {[0xff, 0x80, 0x0, 0x0, 0xff]}}, 0x422f, 0x5, 0xbc, 0x8001, 0x535b, 0x9f, 'pimreg\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x372}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xc5905bd2, 'syz0\x00', {0x6}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @loopback, @remote, 0x2, 0x1}}}, {{@arp={@multicast1, @local, 0xffffffff, 0x0, 0x6, 0xe, {@mac=@local, {[0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff]}}, 0x1, 0xc45, 0xb, 0xffff, 0x8, 0x9f14, 'veth1_macvtap\x00', 'veth0\x00', {}, {0xff}, 0x0, 0x80}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7, 0x8, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @rand_addr=0x64010100}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff) (async) close(0x3) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000700)="60000000300005060100000000000000000000004c0001804800018007000100637400003c0002801800010001000000000000000300000000000000000000000600030008000000080010006674700005001100020000000500120006000000b3d62f8b7367b16efb942ac92f0bfac977c05e959fd2fa66751319b985053533cde4aac3f6e0f0beb43f7ac819e2448adda1", 0x92}], 0x1}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="740000000206050000000000000000030000fffd0e0003006269746d61703a697000000005000400000000000900020073797a31000000002c00078008000840000000cb1800018014000240200100000000000000000000000000010800060000006d2305000500020000000500010006"], 0x74}}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000dc0)="d8000000180081084e81f783db4cb9040a10080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fec0ffff000000fd035c0461c1d67f6f94007134cf6efb800189b316277ce06bbaceac3c2fb14c2ee5a7cef4090f00201f373f7b9555da25364c3b10b7b91b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e003640fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4788}, 0x0) 2.267720263s ago: executing program 1 (id=8747): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x1, {0x29}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa40000000000000704000008070000000200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x1002, &(0x7f0000000fc0)=""/4098, 0x41100, 0x24}, 0x94) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) nanosleep(&(0x7f00000001c0)={r3, r4+10000000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4) ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x5000940f, &(0x7f0000002000)={{r5}, "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"}) 2.127101372s ago: executing program 3 (id=8748): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010006030000000044000500fe880000000000000000000000000101000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}}, 0x0) r3 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x52, &(0x7f0000001680)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd699eebf9001406fffe8000000000000000000000000000a4b080", @ANYBLOB], 0x0) sendmsg$nl_route(r3, 0x0, 0x440b0) r4 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) read(r4, &(0x7f0000001780)=""/214, 0xd6) 2.060374197s ago: executing program 2 (id=8749): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x18, 0x80000, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$key(0xf, 0x3, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) syz_emit_ethernet(0x27f, &(0x7f0000000400)={@random="3bf9bef22c39", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x249, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x19, 0x17, "5e8c5f5a088917d65a7ce97fc8a6813bf7b5a5bc32f457a8edfe4dff634d5468c05b10f890e6a6039fa65fd5039c8c92649305a9cb4c0ab8c5c7c3fbd872afeab8dc7e6b6d793bf1c9320670fa2e93471b0fcb9df15ee1686e6af27ea94d0e8e4f78145dfcb56af5deef162c182e7c1ae07e893f727f11c32bdf35e85ebc39fb71f0b76bd96f400a5a9ee1c345a6f1c62d5ad1118a1cdeaa1757e3948d350bbb88c38ac447965d73b3f05b0850c49e63afae6b8fb0e2d4479fd1cb90"}, {0x5, 0xa, "fae6e7fd07c76449f304e9ef26076029f32fbbcafb68d2763e304845c5214cde7707f37bde80afbc9ef6ad306734e3cb6348194bdcec85005b7688210ce75fbb4e1f9cf2b36de1f07dcb5692b28bc2049736d9eb11"}, {0x18, 0x1, "fdef081e36fe38596c9f"}, {0x5, 0xf, "4ab4b8a4b8f712940aca18e61b157b5122d3ba4eecb5e13950d89483ef0447b07f4c51b2218b915ef7a4678010c735b6ab4f536bf3062d1b1a8e5be1abaaeaf74f7d9ea534b175823eca2b8ac3ed3710e00927992a327985d9595512b543d4831002b8bc678e0be09cb9420c59f0cef0a3a76b8b074c5808e1d981"}, {0x4, 0xc, "4c3c1e3852f7fa9b603723e69f42f3ccc5a8bf53f73b8bca8fe9f062c35769b4c2d3b684330bf80efb87bbc3ea0d8dbefdaa69cf8ed31776dc8b55eb66267be17b2650fa86fa33c03a52932364dbf0901d877d0ce204e262a2393dfbd1b927e787"}, {0x1, 0x8, "a50483bfd1b3960ab7b825f32c2939796b6a9c9c1f2396421f94bba55c967341beb61210cbad7c25a0fd6691c4d73866a4d33583728bd6a820cecd67eda5"}]}}}}}}, 0x0) 2.041110701s ago: executing program 4 (id=8750): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x1, 0x1, r1}}, 0x40) (fail_nth: 4) 1.946491672s ago: executing program 0 (id=8751): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000025c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001a80)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000000)={"fcd1f5d58b7d76eae934f6c527bd5138", 0x0, r2, {0xc3a, 0x2}, {0x9, 0x4}, 0x3, [0x811, 0x0, 0x1, 0x100000000, 0x6, 0x1326efcc, 0xfffffffffffffff3, 0x482, 0xd1e, 0x7, 0x0, 0x0, 0x1, 0x3, 0x3ff, 0x14]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000a80)={{r1}, r3, 0x0, @unused=[0x40, 0x39, 0x9, 0x4000000], @name="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"}) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e22, 0xf09d, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, 0x1}, 0x1c) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e21, 0x80000004, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x40009}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x7, &(0x7f0000000080)=0x80000005, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x4340, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff, 0x4}, 0x20) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000180)={r5, @multicast2, @loopback}, 0xc) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000280)) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) socket$inet6(0xa, 0x3, 0x87) write$tun(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="03031b003000940006006300000001632fff00000000000000000000ffffac141419ff02000000000000000000000000000104206558000000030100080098affdd491f51bcedeb5117981bff43df94d3f6bc13b42928188713a"], 0x195) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000001580)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000001680)) close(0x4) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f000000b8c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000640)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e23, @loopback}], 0x20) sendmmsg$inet6(r6, &(0x7f0000002580)=[{{&(0x7f00000004c0)={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000002c0)="98", 0x1}], 0x1}}], 0x1, 0x4000040) 1.834161958s ago: executing program 4 (id=8752): r0 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@i, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x85, 0x0, 0x0, 0xc7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080), 0x4) 1.833122315s ago: executing program 2 (id=8753): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d00000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r1, 0x4, 0x2, 0x2}, 0x50) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)={0x80000001, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@map=r3, r2, 0x1f, 0x2a, r2, @void, @void, @void, @value=r4}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x3, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x2}, 0x94) unshare(0x8040480) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0xffffffffffffffdc, &(0x7f0000000080)}, 0x9a) socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003880)={0x20, 0x47, 0x107, 0xfffffffe, 0xffffffff, {0x1, 0x7c}, [@nested={0x9, 0x4, 0x0, 0x1, [@generic="35cb9b64e9"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0xd861000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r5, 0x0, 0x22, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000008007e227f3ad7a91ba78c185431cb8329614f78c7e6", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x11, 0x7, 0x4, 0x5, 0x450, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0xffffffff}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d00000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r1, 0x4, 0x2, 0x2}, 0x50) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)={0x80000001}, 0x8) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@map=r3, r2, 0x1f, 0x2a, r2, @void, @void, @void, @value=r4}, 0x20) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x3, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x2}, 0x94) (async) unshare(0x8040480) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0xffffffffffffffdc, &(0x7f0000000080)}, 0x9a) (async) socket$l2tp(0x2, 0x2, 0x73) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003880)={0x20, 0x47, 0x107, 0xfffffffe, 0xffffffff, {0x1, 0x7c}, [@nested={0x9, 0x4, 0x0, 0x1, [@generic="35cb9b64e9"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0xd861000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r5, 0x0, 0x22, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000008007e227f3ad7a91ba78c185431cb8329614f78c7e6", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x11, 0x7, 0x4, 0x5, 0x450, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0xffffffff}, 0x50) (async) 1.624576306s ago: executing program 4 (id=8754): bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xffff800016adffff}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000180)=0xfff) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000104feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000200000008000200", @ANYRES32=0x0, @ANYBLOB="8313673c544f44436f911739e5"], 0x44}}, 0x40) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000340)="656c575a6e7131f1538bbe56d27a3ad1a28a862d6ea782aaa252419488b0144abb9c4810aa61629929afb03b244979a7d866c009c91545129ef3ae89ea0698e629b89cca36186d823f596333f1450c1c2f2a538b914a28fd1de2da", 0x5b}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e1e, @private=0xa010102}, 0x10, &(0x7f0000000880)=[{&(0x7f00000003c0)="29653633f1", 0x5}], 0x1}}], 0x3, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={r3, 0x6}, 0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e21, @loopback}}}, 0x84) 1.587439557s ago: executing program 3 (id=8755): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000014c0)={0x2, &(0x7f0000000000)=[{0x28, 0x80, 0x1a, 0xfffff038}, {0x6, 0x5, 0xf9, 0x207}]}, 0x10) 1.468322687s ago: executing program 2 (id=8756): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)={0x30, r3, 0xb1c21d04d6f403e9, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc008002}, 0x8004000) syz_genetlink_get_family_id$team(&(0x7f0000000040), r2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000080000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x78bd28, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884) 1.414796636s ago: executing program 0 (id=8757): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'wlan0\x00', {0x2, 0x0, @multicast2}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x800) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x1, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x1, 0x4) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'caif0\x00', {0x2, 0x4e21, @remote}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getneigh={0x14, 0x1e, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2040}, 0x44004080) r3 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x400a01, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x400a01, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000300)) socket$nl_audit(0x10, 0x3, 0x9) (async) r5 = socket$nl_audit(0x10, 0x3, 0x9) splice(r5, &(0x7f0000000340)=0x3ff, r1, &(0x7f0000000380)=0x6, 0x7, 0x0) (async) splice(r5, &(0x7f0000000340)=0x3ff, r1, &(0x7f0000000380)=0x6, 0x7, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@getnetconf={0x14, 0x52, 0x0, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@getnetconf={0x14, 0x52, 0x0, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="7495b41a2710ff7847289737ad713f540afabbf5c4cc2a6531fd704018568092c1e3b6af8cacd15a47bdec9f01f7d469f36259bce405303cd08c5fed1eebd93f08a74412a8c941e98eb1824a27786eff98a17394db3c0864937500f82704bbd6d4942d864271772f548038edad6df389ab10c3cb1916dedf9a81ef33893d87fe922aae9b898f1bfd64e87f20e882f10bd5174543cc892b2c9630e880934263a0b8a8831c4830b2dfc2b3222525ffc43c47b3e8e881a85d62ffc0fe2114387fec64a2f1a4d9c5480987f82ba1a650ef617e51c2781333927dc0fbd3cbe8ac", 0xde}], 0x1, &(0x7f0000000600)=[{0x18, 0x113, 0x9, "61e4539905fc4fe2"}, {0xc0, 0x120, 0x1000000, "9c7ac32585413ebb54ab6aef8fbf4f8be95ac7dcaed7b5bbc0825dfeddebde0acf544f82a7455c05964d30c8b38324595f69b2d120e8f057182170284bb456e12a465e1b6f40339fea7b5685bfaa7736d51c2ea58ff1c39a3f28cd6eee0a896893d11e7ad0213a046bfef0fd89088b49abb381c952a7011191f25082460a48956538a19de6e1560e3cf3b61c563c4290290490be63fce642349c5709c32d69bc691056dffdac49f71757e4f276c336ef"}, {0xd0, 0x84, 0x0, "8acc53dc0d58b0600d5503cf73477ca509c005567f4892b3f9ff49c11d55b31e1c366ff8cac1aa67dc51ad95697943603ec4a29850ee245a1c6c96970703a9a1130852b1519eb933a8eb50ec581347a5317945d8a5f4892912acd3a38ecbde43013a9716a46ae9477816f04ae8e95741e222baca6d12dba0432a3000de683a61ecc1dde305ba926582e3cd1d90d9c82a438b95efd6c05e37293d9004f44ec7fa7acfcde741afe4465c82b08aadb95e0c5232a0eb7aca80ea52b03cb3d8e991"}, {0x98, 0x88, 0x5, "ebbdb401bef696228c52d36a36b45011e0a58d2568b705349faa08bf8db8a2728f57056f7b1d71a4bb9d392d61e46dcb2cb391dacf3988cf1347f7fc249db112cd5e00d1a27db99e6967d5cc40e1ede70be82e7e0ed10bc00624eed5a03014a405d4600660213c4949cc9fe04a54eccb7d09561885c273121d8656ba7513241e58b3497ff08451"}], 0x240}, 0x4000080) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000880), 0x10800, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f00000008c0)=0x4000080) socket$can_raw(0x1d, 0x3, 0x1) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000940)=0x40) socket$igmp(0x2, 0x3, 0x2) (async) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000980)={{0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x1, 'rr\x00', 0x2, 0x7, 0xc}, {@loopback, 0x4e21, 0x2, 0x387, 0x7fffffff, 0x81}}, 0x44) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000a00)=0x4) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000a00)=0x4) r9 = socket$xdp(0x2c, 0x3, 0x0) write$tun(r6, &(0x7f0000000a40)={@val={0x0, 0x8914}, @val={0x1, 0x4, 0xb9c, 0x0, 0x9917, 0xc}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @broadcast, @loopback, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @dev={0xfe, 0x80, '\x00', 0x19}}}, 0x42) (async) write$tun(r6, &(0x7f0000000a40)={@val={0x0, 0x8914}, @val={0x1, 0x4, 0xb9c, 0x0, 0x9917, 0xc}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @broadcast, @loopback, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @dev={0xfe, 0x80, '\x00', 0x19}}}, 0x42) ioctl$XFS_IOC_FSINUMBERS(r9, 0xc0205867, &(0x7f0000000fc0)={&(0x7f0000000ac0)=0x40000000000000, 0x2f, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000f80)}) r10 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r10, &(0x7f00000014c0)={&(0x7f0000001000)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001080)=""/89, 0x59}, {&(0x7f0000001100)=""/177, 0xb1}, {&(0x7f00000011c0)=""/41, 0x29}, {&(0x7f0000001200)=""/208, 0xd0}, {&(0x7f0000001300)=""/131, 0x83}], 0x5, &(0x7f0000001440)=""/79, 0x4f}, 0x10000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001580)={{r9, 0xffffffffffffffff}, &(0x7f0000001500), &(0x7f0000001540)='%pS \x00'}, 0x20) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f00000015c0)={0x0, 0xfffffffffffffffc, 0x1, [0x100000000, 0x595, 0x7, 0x7, 0x4], [0x2203, 0x6, 0x9, 0x1, 0x40, 0x9, 0x0, 0xffffffffffffcf7e, 0xe, 0xa127, 0xee, 0x8da5, 0x1, 0x7fffffffffffffff, 0x7, 0xa9d, 0x3, 0x100000000, 0xfffffffffffffff8, 0x10, 0xfffffffffffffff8, 0x8000, 0x2, 0x9, 0x5, 0x0, 0xfffffffffffffc01, 0x10000, 0x2, 0x1000, 0xffff, 0x7ff, 0x3, 0x2, 0x6, 0x8001, 0x4, 0x9, 0x10001, 0xb98a, 0x5, 0x9, 0x100000000, 0x35c, 0x80, 0x10d, 0x4b50f221, 0x8, 0x4, 0x35, 0x1, 0x5, 0x6, 0x3, 0x10000, 0x100000000, 0x9, 0x3, 0xfffffffffffffff5, 0x2, 0x10000, 0x4, 0x800, 0xf23, 0x7, 0xfaad, 0x2, 0x6, 0x9, 0x8000000000000001, 0xfffffffffffffffc, 0x31c, 0x3, 0x58, 0x3, 0x8, 0x8, 0x2a, 0x9, 0x8001, 0x6, 0x10001, 0x5, 0x10000, 0x3, 0x4, 0x94f, 0x10, 0x9, 0x180000000, 0x3, 0xd49, 0x1, 0x80000001, 0x2, 0x3, 0xffffffffffffffff, 0x232e5d07, 0x6, 0xc4, 0x40, 0x7fff, 0x87b8000, 0x5, 0x5, 0x1, 0x7ff, 0x1, 0x9, 0x8000000000000000, 0x7a1, 0x3, 0x6, 0x9, 0xa0ef, 0xb1a4, 0x3ff, 0x3000, 0x4, 0x5, 0x4]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f00000015c0)={0x0, 0xfffffffffffffffc, 0x1, [0x100000000, 0x595, 0x7, 0x7, 0x4], [0x2203, 0x6, 0x9, 0x1, 0x40, 0x9, 0x0, 0xffffffffffffcf7e, 0xe, 0xa127, 0xee, 0x8da5, 0x1, 0x7fffffffffffffff, 0x7, 0xa9d, 0x3, 0x100000000, 0xfffffffffffffff8, 0x10, 0xfffffffffffffff8, 0x8000, 0x2, 0x9, 0x5, 0x0, 0xfffffffffffffc01, 0x10000, 0x2, 0x1000, 0xffff, 0x7ff, 0x3, 0x2, 0x6, 0x8001, 0x4, 0x9, 0x10001, 0xb98a, 0x5, 0x9, 0x100000000, 0x35c, 0x80, 0x10d, 0x4b50f221, 0x8, 0x4, 0x35, 0x1, 0x5, 0x6, 0x3, 0x10000, 0x100000000, 0x9, 0x3, 0xfffffffffffffff5, 0x2, 0x10000, 0x4, 0x800, 0xf23, 0x7, 0xfaad, 0x2, 0x6, 0x9, 0x8000000000000001, 0xfffffffffffffffc, 0x31c, 0x3, 0x58, 0x3, 0x8, 0x8, 0x2a, 0x9, 0x8001, 0x6, 0x10001, 0x5, 0x10000, 0x3, 0x4, 0x94f, 0x10, 0x9, 0x180000000, 0x3, 0xd49, 0x1, 0x80000001, 0x2, 0x3, 0xffffffffffffffff, 0x232e5d07, 0x6, 0xc4, 0x40, 0x7fff, 0x87b8000, 0x5, 0x5, 0x1, 0x7ff, 0x1, 0x9, 0x8000000000000000, 0x7a1, 0x3, 0x6, 0x9, 0xa0ef, 0xb1a4, 0x3ff, 0x3000, 0x4, 0x5, 0x4]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r11, 0xc400941d, &(0x7f0000001a00)={r12, 0x10001, 0x1ff, 0x1}) 1.371907803s ago: executing program 3 (id=8758): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x1, 0x803, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1300000002"], 0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$tipc(r7, &(0x7f0000002340)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3}}, 0x10, &(0x7f00000021c0)=[{&(0x7f0000000100)="2fe3cd9dca7f4427d4f82e41c3199684883b6cd2140c9ab9634bcd34d142633dfab9d8ca", 0x24}, {&(0x7f0000000180)}, {&(0x7f0000000300)="8485bdac064c6cd4267dbbebe71070ff0016ef226216a9a8b6655861c0cfc835b4c56729631145c1f989b458861403f6129947f6129ce0a40e6d6f5d53fb417b10fc706610b5bdd6e9413b11811e6ee20a3a28a046f090cfa9cf16ccf5cf41a37c7ae49a026dc6d980ac3d6beee4aff6ff5056a6ce469d95eb2240cb52065292abc107d19d3d5ef919a1178c831fc53fb2c67600092b64d84026c654a78576052d6011e4c0af8234efd9f0e9906fd8cc01e0b01ec301142b5a79a53d477012a773954c303d2efe675800acbeb665434530", 0xd1}, {0x0}, {&(0x7f00000004c0)="03d3ea6ceed03e78503347c6b558ad15621133488778f817b4a9e438d32dd726168edd5b559564c843528ae800545a63e6f3a0d0df206ff176740cd4239de8cb788eb70db649074bf538752340847187e6ddeef1454e865e7924fd42ecd99b9a13699135e66ebdb7a0f71f3b15e6fd74b5949b5e472b2e9883426cf72840b19f9663ad8421b131894bbf2a096698c999", 0x90}, {0x0}], 0x6, &(0x7f0000002240)="161c42c620fe6dc3c331477e74f72eaea6dc5194becb26fa83a7a1c0ae6e935c2b7714fdb028e2efe8e5c70beca15554c6d4ae8fd6979403aa618ce0aec47ffc40ec5c6355af94d6a06ed28de357e4cf8b00322068abccf002666862ec336d22a3e92e816b4a95ea1aca9c51280fbda84d2e92974dd31218695305a256bc1088edd477fcd606af817906db4a8d9cc02fe1c74438d3fd1279c7fed371209387f008603e1412be24de4dffde7f6dadb559dc3f1ef6bf65c46a211d54a96429cbff731707c3edabec03fd5e8d544702cb8d38142e4fb3b4ca92e8", 0xd9, 0x4006000}, 0x24004000) bind$inet6(r6, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private2}, 0x1c) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf250300000014000200fe8800000000000000000000000000012600070073797374656d5f753a6f626a6563745f723a78656e5f6465766963655f743a73100000001400060076657468315f766c616e000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4040805}, 0x40004) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) r10 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x4, 0x0, 0x0, 0x2, 0x0, 0xa0f, 0x40010}, {}, 0x9, 0x46e6bb3, 0x0, 0x0, 0x2}, {{@in=@private=0xa010101, 0x1fffffc, 0x33}, 0xa, @in=@broadcast, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1}}, 0xe8) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000019340)={0x29, 0x0, 0x0, &(0x7f0000019280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x38, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000911183000000000052e1e6685afd9196"], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl(0xffffffffffffffff, 0x8b2c, &(0x7f0000000040)) connect$inet6(r10, 0x0, 0x0) r11 = socket(0xf, 0x5, 0x40) getsockopt(r11, 0x200000000114, 0x5, &(0x7f0000000240)=""/102387, &(0x7f0000000180)=0x9d) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1.160291084s ago: executing program 3 (id=8759): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000020000180140002006c6f000000000000000000000000000008000300010000002400038008000200400000000c00040000000000000000000c00050019000000ff"], 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES32=r0, @ANYBLOB="14000300003414000200fe8800"/26], 0x64}, 0x1, 0x0, 0x0, 0x24000011}, 0x24008010) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000500)={{r0, 0x0, 0xa0200, 0x0, 0x0, 0x0, 0x0}, 0x0, &(0x7f00000004c0)}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x800) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000140)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1810000087000000000000000600008018", @ANYRES32], 0x0, 0xa, 0x0, 0x0, 0x41000, 0x4d}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000d0000000000010005000093737b8662ff010000006868f8ff0000000018110000", @ANYBLOB, @ANYBLOB="e100000000000000b7080000080000007b8af873e875f522ff00000000bfa200000000000007020000f8ffffffb703000008080000000000f9ebe0f47eae1eaf17183171335700000000000001f94000090000009500"/103], &(0x7f0000000200)='GPL\x00', 0xd, 0x1000, &(0x7f0000001ac0)=""/4105, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0xa}, 0x2, 0x10, &(0x7f00000003c0)={0x0, 0xf, 0x999, 0xfffffffd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x95) 1.159750946s ago: executing program 0 (id=8760): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000f8ffffff000000000000080000950000000000000000000000000000898936be1438180a6138270942bcd2d1d0e0520f53632a75d9a33fc6aa7c9bb4d5068354ef800f0e58eaf3715e9be39dd00d227db0f4907bd0632ccc33aaa9ecea64ebcc0cc9706e0213dd756584629484a97c5b427cd0b7905acef7a4c975bb7709ca1af8d99d5a02b9009a0ad1b66506a6487295f4c7f4cbdf25729dd0771611c086b65114cbfcd011b83faf192605fa8510315157bb39e94262058523a2ee7409226687d9e145b61d"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0xd}, 0x94) 1.158416096s ago: executing program 1 (id=8761): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "eeba1daa3c696e33", "8cd11084a86e02071031ecd5f1cb8efeeee1da564cf9831268724500b699fa5e", "990ff934", "917ab8da99afa933"}, 0x38) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c80)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x8000) (async, rerun: 64) syz_emit_ethernet(0x46, 0x0, 0x0) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000000100)='0', 0x3fec, 0x0, 0x0, 0x0) (async) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) (rerun: 64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYRES64=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd}, 0x94) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x49, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f00000001c0)={{r3}, 0x4000, 0x8, 0x7}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010126bd7000030000002b00000008000300", @ANYRES32=r11, @ANYBLOB="0400460005003400c4"], 0x54}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x72bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000005da28746b14689c8f109e2931eef2f9c73c0f3159b63f23c582b3d68725bdff9c16667f4588fb2defbc1988f907c7f15cf0f1c057aeb747726c2949826c30944aede36f133f02164b4913bcb62cc3e71d235faa0093162511a725b9c0f49fac3b7e32b8706e18c116d0a94521e29590e22ad908e5beb16e02ff96074aeed5698a757c35c0e30e685e7397f823d5aded8f6818cd58c5058e542bbe2a04cad667d61a9e7a49cd567d6d3a217511db3494655117bd7", @ANYRES16=r2, @ANYBLOB="040025ad7002ffdbdf25720000f03f00"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@getchain={0x44, 0x66, 0x10, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xa, 0x3}, {0xb, 0x9}, {0xa, 0xf}}, [{0x8, 0xb, 0x9fc}, {0x8, 0xb, 0x3}, {0x8}, {0x8, 0xb, 0x3}]}, 0xd4f91dda38ad9712}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async, rerun: 32) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) (async, rerun: 32) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000100)={0x2b, 0x3}) 1.073087835s ago: executing program 2 (id=8762): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000240)=@hci, 0x80, &(0x7f0000001a40)=[{&(0x7f00000002c0)=""/41, 0x29}, {&(0x7f0000000300)=""/187, 0xbb}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/137, 0x89}, {&(0x7f0000000600)=""/23, 0x17}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/44, 0x2c}, {&(0x7f0000001980)=""/175, 0xaf}], 0x8}, 0x80000001}, {{&(0x7f0000001ac0)=@ieee802154, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001b40)=""/147, 0x93}, {&(0x7f0000001c00)=""/13, 0xd}, {&(0x7f0000001c40)=""/243, 0xf3}], 0x3}, 0x7ff}], 0x2, 0x10041, &(0x7f0000001e00)={0x0, 0x989680}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000231a0500240012800e009ee3d51a37010069703665727370616e000000660002800400120005001600010000000a80ec1ce8e8c95110dc75c133cdee8da79b162df3db241218445054144425904ed17f105da20a36412e3db954104acc31aeb9dd5e26eab182f07a7e00000000000000000000000600000000"], 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x10) 927.778916ms ago: executing program 0 (id=8764): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) 716.245334ms ago: executing program 0 (id=8765): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x2, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10000000}, 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000002780)={{r3}, r4, 0x4, @inherit={0x68, &(0x7f0000000580)={0x0, 0x4, 0xa5b, 0x4, {0x9, 0x1, 0xfffffffffffffff9, 0x8, 0x5}, [0x2, 0xb, 0x6, 0x4]}}, @name="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"}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001ac0)={0x10, 0x1, {0x8, @struct={0x6, 0x5}, 0x0, 0x1, 0x1, 0x9, 0x6, 0x7, 0x14, @usage=0x10001, 0x101, 0x6, [0x10, 0x8, 0x6, 0x1f5, 0x9, 0x80]}, {0x6, @usage=0x467, 0x0, 0x8, 0x9, 0xb, 0x3, 0x9, 0x22, @struct={0x3}, 0x9, 0x1, [0x7, 0x9, 0xf4, 0x9, 0x9, 0x7fffffffffffffff]}, {0x4bf, @struct={0x9, 0x1ff}, 0x0, 0x8, 0x539, 0x3, 0x3, 0x1, 0x401, @usage=0x4, 0x9, 0x417, [0x318, 0x9, 0x2, 0x8, 0xc9]}, {0x668, 0x5, 0x2}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000001ec0)={{r0}, r4, 0x29, @inherit={0x78, &(0x7f00000001c0)={0x0, 0x6, 0x9, 0x68, {0x10, 0xd0, 0x7, 0x71, 0xfaa7}, [0x0, 0x8001, 0x8, 0x10000, 0x7fff, 0x200]}}, @devid=r5}) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r1}, &(0x7f0000001780)=0x4, 0x0}, 0x20) r6 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r6, 0x0) 232.267227ms ago: executing program 3 (id=8766): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), 0xfffffffffffffffc) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x0) (rerun: 64) 78.793143ms ago: executing program 2 (id=8767): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000050018"], 0x44}}, 0x1) r0 = socket(0xa, 0x3, 0x3a) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf4, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffbe}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc3d}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4044001}, 0x4000810) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4) setsockopt$inet6_buf(r0, 0x29, 0xcc, &(0x7f0000000100)="0a00000000000000fe8000000000000000000000000000bb000000000a00000000000000ff0e000000000000000000000000123400000000000000000200"/74, 0x4a) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="33330000123400112233445586dd6000000000103b40fe8000000000000000000000000000bbff0e000000000000000000000000123400"/70], 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000900020073797a31000000000500040000c7010000000000006973743a736574000000000c000780080017400000852c05000500020000000500010006000000"], 0x54}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 0s ago: executing program 0 (id=8768): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="180500006300000000000000feffffffb7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000000000000000000000000000000000003566b5ae278626eb33154e33e2d74fd82825ad718f4850c044d6bb436f89453cbb70d887b94e69e9a6637acbfb3a20e97490bccf13841c69c8407863342efa7720d100dc87d5367df89a940b34e9d34c81e5a1c42d8de411"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5e, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1}, {0x10, 0x7}, {0x8, 0xfff3}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000000c0)={0x7, 'tunl0\x00', {0x2}, 0xe}) kernel console output (not intermixed with test programs): 7fe03bd5e98e [ 1486.009302][ T7511] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1486.009319][ T7511] RSP: 002b:00007fe03cbcefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1486.009341][ T7511] RAX: ffffffffffffffda RBX: 00007fe03cbcf6c0 RCX: 00007fe03bd5e98e [ 1486.009357][ T7511] RDX: 000000000000000f RSI: 00007fe03cbcf0a0 RDI: 0000000000000005 [ 1486.009370][ T7511] RBP: 00007fe03cbcf090 R08: 0000000000000000 R09: 0000000000000000 [ 1486.009384][ T7511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1486.009396][ T7511] R13: 00007fe03c026038 R14: 00007fe03c025fa0 R15: 00007ffc348f34e8 [ 1486.009432][ T7511] [ 1486.389002][ T7513] tipc: Failed to remove unknown binding: 66,0,0/4294905987:3521817092/3521817094 [ 1486.389036][ T7513] tipc: Failed to remove unknown binding: 66,0,0/4294905987:3521817092/3521817093 [ 1486.389465][ T7513] tipc: Failed to remove unknown binding: 66,0,0/4294905987:3521817092/3521817094 [ 1486.389490][ T7513] tipc: Failed to remove unknown binding: 66,0,0/4294905987:3521817092/3521817093 [ 1486.828042][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7592'. [ 1486.981880][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7593'. [ 1487.028447][ T7535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7595'. [ 1487.028899][ T7535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7595'. [ 1487.205402][ T7534] syzkaller1: entered promiscuous mode [ 1487.205577][ T7534] syzkaller1: entered allmulticast mode [ 1488.302240][ T7586] syzkaller0: entered promiscuous mode [ 1488.302266][ T7586] syzkaller0: entered allmulticast mode [ 1489.964322][ T7632] netlink: 'syz.1.7616': attribute type 1 has an invalid length. [ 1490.086972][ T7638] netlink: 'syz.4.7618': attribute type 1 has an invalid length. [ 1490.086993][ T7638] __nla_validate_parse: 71 callbacks suppressed [ 1490.087006][ T7638] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7618'. [ 1490.109548][ T7632] bond6: entered promiscuous mode [ 1490.111437][ T7632] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1490.158739][ T7631] ipvlan2: entered allmulticast mode [ 1490.158763][ T7631] bond6: entered allmulticast mode [ 1490.166501][ T7640] syzkaller1: entered promiscuous mode [ 1490.166676][ T7640] syzkaller1: entered allmulticast mode [ 1490.256179][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7617'. [ 1490.264129][ T7636] netlink: 292 bytes leftover after parsing attributes in process `syz.3.7617'. [ 1490.288846][ T5786] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1490.463114][ T5616] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1490.785295][ T5628] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1490.791154][ T7657] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7624'. [ 1490.791179][ T7657] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7624'. [ 1490.791195][ T7657] netlink: 'syz.0.7624': attribute type 6 has an invalid length. [ 1490.791210][ T7657] netlink: 'syz.0.7624': attribute type 5 has an invalid length. [ 1490.791223][ T7657] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7624'. [ 1491.205011][ T7671] netlink: 'syz.1.7627': attribute type 1 has an invalid length. [ 1491.606288][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7630'. [ 1491.661521][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7630'. [ 1492.072938][ T7703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7637'. [ 1492.131064][ T7708] ±ÿÇl¡­ˆiý: entered allmulticast mode [ 1492.957377][ T7695] ±ÿÇl¡­ˆiý: left allmulticast mode [ 1493.217124][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7645'. [ 1493.301830][ T7734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1493.864443][ T7753] syzkaller0: entered promiscuous mode [ 1493.864466][ T7753] syzkaller0: entered allmulticast mode [ 1493.893854][ T7753] tipc: Enabled bearer , priority 0 [ 1493.918618][ T7752] tipc: Resetting bearer [ 1493.982154][ T7752] tipc: Disabling bearer [ 1494.599451][ T7783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.600251][ T7783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.655404][ T7783] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.655526][ T7783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1494.655809][ T7783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.655922][ T7783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1494.664226][ T7783] bridge0: entered promiscuous mode [ 1494.710660][ T7783] team0: Port device bridge0 added [ 1495.037566][ T7802] netlink: 'syz.0.7662': attribute type 6 has an invalid length. [ 1495.037588][ T7802] netlink: 'syz.0.7662': attribute type 7 has an invalid length. [ 1495.037601][ T7802] netlink: 'syz.0.7662': attribute type 8 has an invalid length. [ 1495.349290][ T1987] block nbd5: Possible stuck request ffff888027b5e000: control (read@0,1024B). Runtime 60 seconds [ 1495.349355][ T1987] block nbd5: Possible stuck request ffff888027b5e1c0: control (read@1024,1024B). Runtime 60 seconds [ 1495.349382][ T1987] block nbd5: Possible stuck request ffff888027b5e380: control (read@2048,1024B). Runtime 60 seconds [ 1495.349410][ T1987] block nbd5: Possible stuck request ffff888027b5e540: control (read@3072,1024B). Runtime 60 seconds [ 1495.687749][ T7831] vlan1: entered promiscuous mode [ 1495.687774][ T7831] bridge0: entered promiscuous mode [ 1496.612298][ T7866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1496.661994][ T7866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1496.779995][ T7867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1496.910478][ T7874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1496.950252][ T7877] netlink: 'syz.0.7681': attribute type 1 has an invalid length. [ 1496.950275][ T7877] netlink: 244 bytes leftover after parsing attributes in process `syz.0.7681'. [ 1497.250131][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7684'. [ 1497.287886][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7684'. [ 1497.338440][ T7891] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7686'. [ 1497.347038][ T7893] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7686'. [ 1497.411893][ T7891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7686'. [ 1497.491933][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7688'. [ 1497.553958][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7686'. [ 1497.913447][ T7915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1498.237655][ T4983] udevd[4983]: worker [6235] /devices/virtual/block/nbd5 is taking a long time [ 1498.416217][ T7943] netlink: 'syz.1.7696': attribute type 7 has an invalid length. [ 1498.416241][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7696'. [ 1498.417599][ T7943] netlink: 'syz.1.7696': attribute type 7 has an invalid length. [ 1498.417619][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7696'. [ 1498.710948][ T7946] ip6gretap0: entered promiscuous mode [ 1498.741443][ T7946] macsec0: entered allmulticast mode [ 1498.741469][ T7946] ip6gretap0: entered allmulticast mode [ 1499.332495][ T7977] netlink: 'syz.0.7704': attribute type 10 has an invalid length. [ 1499.372068][ T7958] bridge_slave_0: left allmulticast mode [ 1499.372096][ T7958] bridge_slave_0: left promiscuous mode [ 1499.372372][ T7958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.421170][ T7958] bridge_slave_1: left allmulticast mode [ 1499.421196][ T7958] bridge_slave_1: left promiscuous mode [ 1499.442895][ T7958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.471217][ T7958] bond0: (slave bond_slave_0): Releasing backup interface [ 1499.494920][ T7958] bond0: (slave bond_slave_1): Releasing backup interface [ 1499.534697][ T7958] team0: Port device team_slave_0 removed [ 1499.552269][ T7958] team0: Port device team_slave_1 removed [ 1499.554845][ T7958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1499.580296][ T7958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1499.606568][ T7958] bond2: (slave macvlan0): Releasing active interface [ 1499.649171][ T7958] bond2: (slave veth5): Releasing active interface [ 1499.679208][ T7958] batman_adv: batadv0: Removing interface: macvtap1 [ 1499.705505][ T7958] batman_adv: batadv0: Removing interface: gretap1 [ 1499.731026][ T7977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1499.802754][ T7977] team0: Port device netdevsim1 added [ 1499.829017][ T7964] hsr_slave_0: left promiscuous mode [ 1499.860220][ T7964] hsr_slave_1: left promiscuous mode [ 1500.443832][ T7999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1500.840711][ T8032] ip6_vti0: left promiscuous mode [ 1500.841808][ T8032] ip6tnl0: left promiscuous mode [ 1501.060788][ T8042] netlink: 'syz.4.7713': attribute type 10 has an invalid length. [ 1501.091534][ T8041] syzkaller1: entered promiscuous mode [ 1501.091565][ T8041] syzkaller1: entered allmulticast mode [ 1503.505411][ T8008] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1503.510948][ T8031] netlink: 'syz.3.7711': attribute type 8 has an invalid length. [ 1503.637116][ T8050] netlink: 'syz.4.7715': attribute type 61 has an invalid length. [ 1503.920031][ T8058] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 1504.058659][ T8069] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 1504.228258][ T8076] netlink: 'syz.3.7723': attribute type 1 has an invalid length. [ 1504.468009][ T8076] veth7: entered allmulticast mode [ 1504.474501][ T8076] bond4: (slave veth7): Enslaving as an active interface with a down link [ 1504.582149][ T8084] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1504.659047][ T8076] macvlan3: entered promiscuous mode [ 1504.659071][ T8076] macvlan3: entered allmulticast mode [ 1504.660380][ T8076] bond4: entered promiscuous mode [ 1504.664050][ T8076] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1504.679496][ T8076] bond4: left promiscuous mode [ 1504.829338][ T8082] batadv_slave_1: entered promiscuous mode [ 1505.354151][ T8116] __nla_validate_parse: 7 callbacks suppressed [ 1505.354173][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7734'. [ 1505.354205][ T8116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1505.469861][ T8120] veth1_to_team: entered promiscuous mode [ 1505.470041][ T8120] veth1_to_team: entered allmulticast mode [ 1505.532489][ T8120] netlink: 'syz.3.7737': attribute type 2 has an invalid length. [ 1505.701827][ T8130] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7734'. [ 1506.347347][ T8149] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 1507.139466][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7749'. [ 1507.139491][ T8174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7749'. [ 1507.673147][ T8191] netlink: 632 bytes leftover after parsing attributes in process `syz.1.7751'. [ 1507.823058][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7751'. [ 1507.877374][ T8193] netlink: 964 bytes leftover after parsing attributes in process `syz.3.7753'. [ 1507.877399][ T8193] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 1508.281216][ T8205] netlink: 'syz.2.7756': attribute type 6 has an invalid length. [ 1508.319591][ T8213] syzkaller0: entered promiscuous mode [ 1508.319612][ T8213] syzkaller0: entered allmulticast mode [ 1508.337695][ T8216] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7758'. [ 1508.412630][ T8217] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7758'. [ 1508.688646][ T8235] x_tables: duplicate underflow at hook 3 [ 1509.134901][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7765'. [ 1509.519363][ T8262] netlink: 'syz.2.7768': attribute type 272 has an invalid length. [ 1509.979277][ T8283] sctp: [Deprecated]: syz.0.7774 (pid 8283) Use of int in max_burst socket option deprecated. [ 1509.979277][ T8283] Use struct sctp_assoc_value instead [ 1510.012022][ T8284] rdma_rxe: rxe_newlink: failed to add bond0 [ 1510.125105][ T31] audit: type=1804 audit(1791069583.505:29): pid=8276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7772" name="/newroot/258/cgroup.controllers" dev="tmpfs" ino=1341 res=1 errno=0 [ 1510.125160][ T31] audit: type=1800 audit(1791069583.515:30): pid=8276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7772" name="cgroup.controllers" dev="tmpfs" ino=1341 res=0 errno=0 [ 1510.147499][ T31] audit: type=1800 audit(1791069583.515:31): pid=8276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7772" name="cgroup.controllers" dev="tmpfs" ino=1341 res=0 errno=0 [ 1510.240057][ T8276] IPVS: Error connecting to the multicast addr [ 1510.337893][ T8297] syzkaller1: entered promiscuous mode [ 1510.337918][ T8297] syzkaller1: entered allmulticast mode [ 1510.412586][ T8299] __nla_validate_parse: 3 callbacks suppressed [ 1510.412607][ T8299] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7778'. [ 1510.500611][ T8301] syzkaller1: entered promiscuous mode [ 1510.500637][ T8301] syzkaller1: entered allmulticast mode [ 1510.654668][ T8305] netlink: 'syz.1.7780': attribute type 1 has an invalid length. [ 1510.911218][ T8305] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1511.009648][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7784'. [ 1511.111706][ T8305] bond7: (slave gre2): refused to change device type [ 1511.430888][ T8338] xt_hashlimit: size too large, truncated to 1048576 [ 1512.034005][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7793'. [ 1512.468090][ T8364] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7791'. [ 1512.502714][ T8364] gretap0: entered promiscuous mode [ 1512.597097][ T8345] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7791'. [ 1512.650796][ T8345] 0ªî{X¹¦: renamed from gretap0 [ 1512.672069][ T8345] 0ªî{X¹¦: left promiscuous mode [ 1512.672091][ T8345] 0ªî{X¹¦: entered allmulticast mode [ 1512.705485][ T8345] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1513.350856][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7797'. [ 1514.000545][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7802'. [ 1514.281921][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7805'. [ 1514.390429][ T8418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1515.177888][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1515.320918][ T8451] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7812'. [ 1515.320943][ T8451] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7812'. [ 1515.901590][ T8465] netlink: 'syz.1.7817': attribute type 10 has an invalid length. [ 1515.944734][ T8465] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1515.952883][ T8465] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1516.375975][ T8484] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 1516.386681][ T8482] netlink: 500 bytes leftover after parsing attributes in process `syz.3.7816'. [ 1516.618713][ T8463] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1517.324987][ T8514] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1517.618353][ T8526] ip6tnl1: entered allmulticast mode [ 1517.620197][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7824'. [ 1517.671053][T21459] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1517.671281][T21459] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1517.695518][T17400] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1517.712215][ T8535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7830'. [ 1517.828464][ T8535] ovs-dp0: entered promiscuous mode [ 1517.907109][ T8538] openvswitch: netlink: IP tunnel dst address not specified [ 1517.907143][ T8538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1518.366439][ T8552] tipc: Enabled bearer , priority 0 [ 1518.387106][ T5628] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1518.535943][ T5628] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1518.573718][ T8552] syzkaller0: entered promiscuous mode [ 1518.573893][ T8552] syzkaller0: entered allmulticast mode [ 1518.588068][ T8552] tipc: Resetting bearer [ 1518.703827][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7837'. [ 1519.232138][ T8585] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1519.327917][ T8586] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7841'. [ 1519.412234][ T8590] netlink: 'syz.0.7842': attribute type 1 has an invalid length. [ 1519.544435][ T8591] netlink: 'syz.0.7842': attribute type 11 has an invalid length. [ 1519.607173][ T5608] tipc: Resetting bearer [ 1519.622744][ T8550] tipc: Resetting bearer [ 1519.678134][ T8595] xt_ecn: cannot match TCP bits for non-tcp packets [ 1519.698457][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7842'. [ 1520.289244][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7838'. [ 1520.744336][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7843'. [ 1520.744375][ T8621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1520.850287][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7843'. [ 1522.063989][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1524.333525][ T8550] tipc: Disabling bearer [ 1524.427761][ T8590] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1524.434839][ T8598] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1524.533486][ T8607] syz_tun: entered allmulticast mode [ 1524.533711][ T8607] syz_tun: left allmulticast mode [ 1524.743770][ T8627] bridge0: port 3(veth1_to_bond) entered blocking state [ 1524.743860][ T8627] bridge0: port 3(veth1_to_bond) entered disabled state [ 1524.744030][ T8627] veth1_to_bond: entered allmulticast mode [ 1524.782607][ T8627] veth1_to_bond: entered promiscuous mode [ 1524.797547][ T8627] bridge0: port 3(veth1_to_bond) entered blocking state [ 1524.797643][ T8627] bridge0: port 3(veth1_to_bond) entered forwarding state [ 1524.881019][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7848'. [ 1524.930522][ T8634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7848'. [ 1525.047611][ T8639] netlink: 'syz.3.7848': attribute type 7 has an invalid length. [ 1525.047634][ T8639] netlink: 'syz.3.7848': attribute type 8 has an invalid length. [ 1525.087879][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7848'. [ 1525.303965][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7848'. [ 1525.320161][ T8645] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7852'. [ 1525.320191][ T8645] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1525.425859][ T1987] block nbd5: Possible stuck request ffff888027b5e000: control (read@0,1024B). Runtime 90 seconds [ 1525.432593][ T1987] block nbd5: Possible stuck request ffff888027b5e1c0: control (read@1024,1024B). Runtime 90 seconds [ 1525.432629][ T1987] block nbd5: Possible stuck request ffff888027b5e380: control (read@2048,1024B). Runtime 90 seconds [ 1525.432656][ T1987] block nbd5: Possible stuck request ffff888027b5e540: control (read@3072,1024B). Runtime 90 seconds [ 1526.181852][ T8684] netlink: 'syz.2.7853': attribute type 1 has an invalid length. [ 1526.762695][ T8698] netlink: 'syz.0.7856': attribute type 9 has an invalid length. [ 1526.762718][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7856'. [ 1526.955948][ T8703] netlink: 'syz.2.7859': attribute type 1 has an invalid length. [ 1526.955968][ T8703] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7859'. [ 1527.176747][ T5786] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1527.183652][ T8722] xfrm1: entered allmulticast mode [ 1527.202393][ T8706] syzkaller0: entered promiscuous mode [ 1527.202416][ T8706] syzkaller0: entered allmulticast mode [ 1527.561593][ T8727] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1527.614030][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7863'. [ 1527.674390][ T8737] netlink: 'syz.3.7865': attribute type 1 has an invalid length. [ 1527.674689][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7865'. [ 1528.139904][ T5786] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1528.192165][ T8753] netlink: 'syz.3.7865': attribute type 10 has an invalid length. [ 1528.192187][ T8753] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7865'. [ 1528.252972][ T8737] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1528.899670][ T8784] syzkaller1: entered promiscuous mode [ 1528.899706][ T8784] syzkaller1: entered allmulticast mode [ 1529.240943][ T8799] IPv6: NLM_F_CREATE should be specified when creating new route [ 1529.816514][ T8816] ip_tables: iptables: counters copy to user failed while replacing table [ 1531.175319][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1531.338321][ T8862] __nla_validate_parse: 2 callbacks suppressed [ 1531.338343][ T8862] netlink: 136 bytes leftover after parsing attributes in process `syz.3.7882'. [ 1531.478925][ T8865] bond0: (slave gretap0): Error: Device is in use and cannot be enslaved [ 1531.829757][ T8876] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7886'. [ 1531.909731][ T8882] syzkaller0: entered promiscuous mode [ 1531.909755][ T8882] syzkaller0: entered allmulticast mode [ 1532.016770][ T8886] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1532.213876][ T8890] netlink: 'syz.2.7890': attribute type 1 has an invalid length. [ 1532.213899][ T8890] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7890'. [ 1532.360673][ T8894] netlink: 'syz.3.7892': attribute type 1 has an invalid length. [ 1532.397204][ T8894] netlink: 'syz.3.7892': attribute type 1 has an invalid length. [ 1532.454796][ T8893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7891'. [ 1532.503715][ T8902] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7892'. [ 1532.672728][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7894'. [ 1532.716420][ T8893] netlink: 'syz.1.7891': attribute type 1 has an invalid length. [ 1532.716443][ T8893] netlink: 200 bytes leftover after parsing attributes in process `syz.1.7891'. [ 1532.885516][ T8914] netlink: 'syz.2.7894': attribute type 1 has an invalid length. [ 1532.889808][ T8914] netlink: 280 bytes leftover after parsing attributes in process `syz.2.7894'. [ 1532.899106][ T8914] netlink: 'syz.2.7894': attribute type 27 has an invalid length. [ 1532.943618][ T8906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1532.943813][ T8906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1534.490019][ T8906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1534.490199][ T8906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1535.481635][ T8955] ovs-dp0: entered promiscuous mode [ 1535.500341][ T8955] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7899'. [ 1535.788822][ T8972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7904'. [ 1536.232227][ T8982] netlink: 'syz.0.7906': attribute type 1 has an invalid length. [ 1536.517793][ T8982] bond9: entered promiscuous mode [ 1536.518223][ T8982] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1536.686572][ T8981] bond9: (slave bridge7): making interface the new active one [ 1536.686598][ T8981] bridge7: entered promiscuous mode [ 1536.690692][ T8981] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 1536.884630][ T9011] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7910'. [ 1537.059319][ T9015] netlink: 'syz.4.7911': attribute type 49 has an invalid length. [ 1537.399565][ T9031] syzkaller1: entered promiscuous mode [ 1537.399590][ T9031] syzkaller1: entered allmulticast mode [ 1537.407397][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7917'. [ 1537.609060][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7919'. [ 1537.648851][ T31] audit: type=1800 audit(1791069611.035:32): pid=9044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7919" name=B702 dev="tmpfs" ino=1881 res=0 errno=0 [ 1537.958582][ T9049] syzkaller1: entered promiscuous mode [ 1537.958607][ T9049] syzkaller1: entered allmulticast mode [ 1538.182527][ T9058] syzkaller1: entered allmulticast mode [ 1538.198706][ T9058] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1538.199219][ T9058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7923'. [ 1538.199725][ T9059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7923'. [ 1538.510531][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7927'. [ 1538.985811][ T9096] xt_bpf: check failed: parse error [ 1538.985906][ T9095] xt_bpf: check failed: parse error [ 1539.628235][ T9108] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7938'. [ 1539.694522][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7940'. [ 1539.771158][ T9118] »»»»»»: renamed from sit0 [ 1540.174597][ T9126] macvlan1: entered promiscuous mode [ 1540.427131][ T9126] macvlan1: left promiscuous mode [ 1540.586040][ T9142] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1540.594265][ T9148] bond5 (unregistering): Released all slaves [ 1540.691305][ T9150] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7950'. [ 1540.734420][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7951'. [ 1541.496797][ T9150] ip6gre1: left promiscuous mode [ 1541.497673][ T9150] bond5: left promiscuous mode [ 1541.497766][ T9150] bridge1: left promiscuous mode [ 1541.528144][ T5628] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1542.071859][ T9177] __nla_validate_parse: 1 callbacks suppressed [ 1542.071879][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7958'. [ 1542.197373][ T9180] ip_tables: iptables: counters copy to user failed while replacing table [ 1542.296372][ T5628] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1542.519918][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7961'. [ 1542.710339][ T9195] IPVS: sync thread started: state = MASTER, mcast_ifn = virt_wifi0, syncid = 1, id = 0 [ 1542.734929][ T9190] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7963'. [ 1543.849624][ T9228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7973'. [ 1543.852060][ T9228] ip_tables: iptables: counters copy to user failed while replacing table [ 1544.143755][ T9240] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1544.156736][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7977'. [ 1544.162873][ T9242] ip6t_srh: unknown srh match flags 4000 [ 1544.271206][ T31] audit: type=1800 audit(1791069617.655:33): pid=9249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7980" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2341 res=0 errno=0 [ 1544.330626][ T9249] netlink: 'syz.4.7980': attribute type 1 has an invalid length. [ 1544.330651][ T9249] netlink: 244 bytes leftover after parsing attributes in process `syz.4.7980'. [ 1544.331757][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7980'. [ 1544.331789][ T9249] netlink: 'syz.4.7980': attribute type 10 has an invalid length. [ 1544.331805][ T9249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7980'. [ 1544.357075][ T9251] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7978'. [ 1544.534623][ T31] audit: type=1800 audit(1791069617.915:34): pid=9253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7983" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1954 res=0 errno=0 [ 1544.841465][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7984'. [ 1544.988863][ T9273] ip_tables: iptables: counters copy to user failed while replacing table [ 1545.009607][ T9273] C: renamed from lo [ 1545.013500][ T9273] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1545.201364][ T9282] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1545.425135][ T9285] tipc: Invalid UDP bearer configuration [ 1545.425182][ T9285] tipc: Enabling of bearer rejected, failed to enable media [ 1545.534062][ T9293] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1545.572220][ T9285] syzkaller0: entered promiscuous mode [ 1545.572399][ T9285] syzkaller0: entered allmulticast mode [ 1545.840810][ T9306] netlink: 'syz.3.7991': attribute type 1 has an invalid length. [ 1547.397482][ T9329] __nla_validate_parse: 3 callbacks suppressed [ 1547.397503][ T9329] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8001'. [ 1547.450671][ T9329] vlan2: entered allmulticast mode [ 1547.450694][ T9329] erspan0: entered allmulticast mode [ 1547.509170][ T9332] syzkaller0: left promiscuous mode [ 1547.509194][ T9332] syzkaller0: left allmulticast mode [ 1548.235859][ T9355] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8011'. [ 1548.665782][ T9361] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8013'. [ 1548.665844][ T9361] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8013'. [ 1548.753498][ T9364] batman_adv: batadv0: Adding interface: gretap0 [ 1548.753517][ T9364] batman_adv: batadv0: The MTU of interface gretap0 is too small (1442) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1548.753550][ T9364] batman_adv: batadv0: Interface activated: gretap0 [ 1548.805412][ T9369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8015'. [ 1549.014265][ T9364] netlink: 'syz.4.8014': attribute type 1 has an invalid length. [ 1549.014313][ T9364] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.8014'. [ 1549.044378][ T9364] netlink: 'syz.4.8014': attribute type 1 has an invalid length. [ 1549.044403][ T9364] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.8014'. [ 1549.673564][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8017'. [ 1549.736168][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1549.943597][ T9391] ip6t_srh: unknown srh match flags 4000 [ 1550.304513][ T9416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8024'. [ 1550.333014][ T9416] netlink: 'syz.2.8024': attribute type 1 has an invalid length. [ 1550.333036][ T9416] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8024'. [ 1550.469046][ T9419] netlink: NAT attribute has 4 unknown bytes [ 1550.469094][ T9419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1550.813416][ T9427] bridge0: port 1(syz_tun) entered blocking state [ 1550.813592][ T9427] bridge0: port 1(syz_tun) entered disabled state [ 1550.813758][ T9427] syz_tun: entered allmulticast mode [ 1550.858905][ T9427] bridge0: port 2(ip6gretap0) entered blocking state [ 1550.859081][ T9427] bridge0: port 2(ip6gretap0) entered disabled state [ 1550.859220][ T9427] ip6gretap0: entered allmulticast mode [ 1550.952545][ T9432] tc_dump_action: action bad kind [ 1551.149568][ T5655] tipc: Subscription rejected, illegal request [ 1551.232888][ T9444] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1551.627880][ T9459] netlink: 'syz.2.8039': attribute type 1 has an invalid length. [ 1551.967211][ T9466] vlan3: entered promiscuous mode [ 1552.180576][ T9484] netlink: 'syz.3.8045': attribute type 16 has an invalid length. [ 1552.180597][ T9484] netlink: 'syz.3.8045': attribute type 17 has an invalid length. [ 1552.231830][ T9484] gretap0: entered promiscuous mode [ 1552.309978][ T9484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1552.311832][ T9484] 8021q: adding VLAN 0 to HW filter on device team0 [ 1552.338047][ T9484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1552.413815][ T9484] bond_slave_0: entered promiscuous mode [ 1552.438816][ T9484] bond_slave_1: entered promiscuous mode [ 1552.483891][ T9484] veth1_to_team: left promiscuous mode [ 1552.488168][ T9484] veth1_to_team: left allmulticast mode [ 1552.520846][ T9484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1552.672561][ T9484] veth1_vlan: left promiscuous mode [ 1552.686916][ T9484] veth0_vlan: left promiscuous mode [ 1552.705195][ T9484] veth0_vlan: entered promiscuous mode [ 1552.720849][ T9484] veth1_vlan: entered promiscuous mode [ 1552.959091][ T9484] veth1_macvtap: left promiscuous mode [ 1552.982956][ T9484] veth0_macvtap: left promiscuous mode [ 1553.000717][ T9484] veth0_macvtap: entered promiscuous mode [ 1553.013975][ T9484] veth1_macvtap: entered promiscuous mode [ 1553.063573][ T9484] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1553.073716][ T9484] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1553.089982][ T9484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1553.106757][ T9484] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1553.112986][ T9484] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1553.167450][ T9484] bridge1: port 1(erspan0) entered blocking state [ 1553.167589][ T9484] bridge1: port 1(erspan0) entered forwarding state [ 1553.174560][ T9484] vlan2: left allmulticast mode [ 1553.174581][ T9484] bridge1: left allmulticast mode [ 1553.204916][ T9484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1553.221305][ T9484] geneve2: left promiscuous mode [ 1553.221328][ T9484] geneve2: left allmulticast mode [ 1553.354328][ T9484] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1553.382686][ T9484] veth5: left allmulticast mode [ 1553.409095][ T9484] ip6gre1: left promiscuous mode [ 1553.409120][ T9484] ip6gre1: left allmulticast mode [ 1553.413066][ T9484] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1553.447994][ T9484] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1553.451840][ T9484] veth7: left allmulticast mode [ 1553.502399][ T9484] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 1553.524900][ T5631] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 1553.524935][ T5631] netdevsim netdevsim3 netdevsim3: set [0, 2] type 1 family 0 port 256 - 0 [ 1553.524961][ T5631] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.597993][ T5631] bond4: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 1553.598206][ T5631] bond4: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 1553.598553][ T5631] bond4: (slave veth7): making interface the new active one [ 1553.602792][ T5631] bond4: active interface up! [ 1553.755225][ T5608] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 1553.755261][ T5608] netdevsim netdevsim3 netdevsim0: set [0, 2] type 1 family 0 port 256 - 0 [ 1553.755286][ T5608] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.757498][ T5608] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 1553.757528][ T5608] netdevsim netdevsim3 netdevsim2: set [0, 2] type 1 family 0 port 256 - 0 [ 1553.757554][ T5608] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.977708][ T5630] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 1553.977745][ T5630] netdevsim netdevsim3 netdevsim1: set [0, 2] type 1 family 0 port 256 - 0 [ 1553.977771][ T5630] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.207441][ T5631] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1554.209290][ T5631] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1554.229058][T23698] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1554.439720][ T9503] batman_adv: batadv0: Adding interface: vlan4 [ 1554.439739][ T9503] batman_adv: batadv0: The MTU of interface vlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1554.439768][ T9503] batman_adv: batadv0: Not using interface vlan4 (retrying later): interface not active [ 1554.630643][ T9510] __nla_validate_parse: 8 callbacks suppressed [ 1554.630663][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8052'. [ 1555.034387][T23698] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1555.098447][T23698] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1555.459692][ T9531] bond6: option all_slaves_active: invalid value (255) [ 1555.461673][ T9531] bond6 (unregistering): Released all slaves [ 1555.500413][ T1987] block nbd5: Possible stuck request ffff888027b5e000: control (read@0,1024B). Runtime 120 seconds [ 1555.500456][ T1987] block nbd5: Possible stuck request ffff888027b5e1c0: control (read@1024,1024B). Runtime 120 seconds [ 1555.500485][ T1987] block nbd5: Possible stuck request ffff888027b5e380: control (read@2048,1024B). Runtime 120 seconds [ 1555.500512][ T1987] block nbd5: Possible stuck request ffff888027b5e540: control (read@3072,1024B). Runtime 120 seconds [ 1555.610930][ T9539] bond6: option all_slaves_active: invalid value (255) [ 1555.629563][ T9539] bond6 (unregistering): Released all slaves [ 1556.120062][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8064'. [ 1557.598997][ T31] audit: type=1800 audit(1791069630.985:35): pid=9606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8071" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1994 res=0 errno=0 [ 1557.715658][ T9601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8071'. [ 1557.960509][ T9621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8077'. [ 1557.975343][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1558.434743][ T9637] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1558.714869][ T9650] netlink: 'syz.0.8083': attribute type 3 has an invalid length. [ 1558.714890][ T9650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8083'. [ 1558.718777][ T9650] openvswitch: netlink: EtherType 2 is less than min 600 [ 1559.349318][ T9676] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8093'. [ 1559.488028][ T9679] IPVS: Unknown mcast interface: vcan0 [ 1560.032034][ T9687] vlan3: left promiscuous mode [ 1560.046308][ T5786] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1560.937386][ T5786] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1561.176896][ T9724] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8101'. [ 1561.511076][ T9739] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8106'. [ 1561.583537][ T9739] tipc: Failed to remove unknown binding: 66,1,1/4294905987:1676607465/1676607466 [ 1561.619094][ T9739] netlink: 'syz.4.8106': attribute type 9 has an invalid length. [ 1561.964018][ T9761] xt_TCPMSS: Only works on TCP SYN packets [ 1561.964395][ T9761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8110'. [ 1562.037404][ T9762] ovs-s!!: entered promiscuous mode [ 1562.086047][ T9762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8108'. [ 1562.182428][ T9770] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 1562.439450][ T9770] IPVS: Scheduler module ip_vs_sip not found [ 1562.932136][ T9791] 0ªî{X¹¦: left allmulticast mode [ 1563.173964][ T9791] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.174496][ T9791] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.222754][ T9791] team0: left allmulticast mode [ 1563.223383][ T9791] team_slave_0: left allmulticast mode [ 1563.223405][ T9791] team_slave_1: left allmulticast mode [ 1563.316207][ T9807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8118'. [ 1563.349239][ T9791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1563.370405][ T9791] 0·: left allmulticast mode [ 1563.370428][ T9791] hsr_slave_0: left allmulticast mode [ 1563.370443][ T9791] hsr_slave_1: left allmulticast mode [ 1563.430624][ T9791] veth1_vlan: left allmulticast mode [ 1563.430764][ T9791] macvlan1: left allmulticast mode [ 1563.486663][ T9791] bond1: left allmulticast mode [ 1563.489380][ T9791] ip6erspan0: left allmulticast mode [ 1563.566027][ T9791] batman_adv: batadv0: Interface deactivated: macvlan3 [ 1563.611374][ T9791] ip6tnl1: left allmulticast mode [ 1563.622820][ T9791] xfrm1: left allmulticast mode [ 1563.868105][ T9791] vlan2: left allmulticast mode [ 1563.868131][ T9791] erspan0: left allmulticast mode [ 1563.880409][ T9791] batman_adv: batadv0: Interface deactivated: gretap0 [ 1564.261319][ T5786] s`z1: Port: 1 Link DOWN [ 1564.423455][ T9804] tipc: New replicast peer: 172.20.20.170 [ 1564.444241][ T9821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8122'. [ 1564.476943][ T9804] tipc: Enabled bearer , priority 10 [ 1564.505402][T21465] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1564.505439][T21465] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.516817][ T4829] netdevsim netdevsim4 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1564.516852][ T4829] netdevsim netdevsim4 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.519626][T21465] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1564.519657][T21465] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.519698][T21465] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1564.519723][T21465] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.620400][ T9813] bond0: (slave xfrm0): Error: Device can not be enslaved while up [ 1564.644859][ T9815] bond0: (slave xfrm0): Error: Device can not be enslaved while up [ 1564.706771][ T9824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8123'. [ 1564.787488][ T9825] ip_tables: iptables: counters copy to user failed while replacing table [ 1565.012010][ T9830] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8124'. [ 1565.095171][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1565.823965][ T9851] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8130'. [ 1566.131915][ T9861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1566.205782][ T9842] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1566.517084][ T9870] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8136'. [ 1566.562719][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8137'. [ 1566.562743][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8137'. [ 1566.630212][ T9875] netlink: 55 bytes leftover after parsing attributes in process `syz.0.8137'. [ 1566.630237][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8137'. [ 1566.659443][ T9873] macvtap1: entered allmulticast mode [ 1566.659466][ T9873] dummy0: entered allmulticast mode [ 1566.777294][ T9875] macvtap2: entered allmulticast mode [ 1567.050594][ T9890] warn_alloc: 1 callbacks suppressed [ 1567.050613][ T9890] syz.0.8143: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1567.050674][ T9890] CPU: 0 UID: 0 PID: 9890 Comm: syz.0.8143 Not tainted syzkaller #0 PREEMPT(full) [ 1567.050719][ T9890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1567.050744][ T9890] Call Trace: [ 1567.050753][ T9890] [ 1567.050761][ T9890] dump_stack_lvl+0xe8/0x150 [ 1567.050794][ T9890] warn_alloc+0x24d/0x270 [ 1567.050817][ T9890] ? kasan_save_track+0x4f/0x80 [ 1567.050838][ T9890] ? kasan_save_track+0x3e/0x80 [ 1567.050861][ T9890] ? __pfx_warn_alloc+0x10/0x10 [ 1567.050879][ T9890] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1567.050905][ T9890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1567.050943][ T9890] __vmalloc_node_range_noprof+0x127/0x1540 [ 1567.050989][ T9890] ? rcu_is_watching+0x16/0xb0 [ 1567.051017][ T9890] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1567.051045][ T9890] ? __kmalloc_cache_noprof+0x321/0x600 [ 1567.051065][ T9890] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1567.051085][ T9890] ? xskq_create+0x56/0x220 [ 1567.051114][ T9890] xskq_create+0x148/0x220 [ 1567.051138][ T9890] ? xsk_init_queue+0x8a/0xe0 [ 1567.051163][ T9890] xsk_init_queue+0x8a/0xe0 [ 1567.051188][ T9890] xsk_setsockopt+0x52a/0x960 [ 1567.051213][ T9890] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1567.051237][ T9890] ? __pfx_aa_sk_perm+0x10/0x10 [ 1567.051271][ T9890] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1567.051295][ T9890] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1567.051322][ T9890] do_sock_setsockopt+0x17c/0x1b0 [ 1567.051353][ T9890] __x64_sys_setsockopt+0x13d/0x1b0 [ 1567.051388][ T9890] do_syscall_64+0x166/0x520 [ 1567.051425][ T9890] ? trace_irq_disable+0x3b/0x140 [ 1567.051445][ T9890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1567.051464][ T9890] ? clear_bhb_loop+0x70/0xc0 [ 1567.051485][ T9890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1567.051504][ T9890] RIP: 0033:0x7fe03bd9e159 [ 1567.051523][ T9890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1567.051540][ T9890] RSP: 002b:00007fe03cbae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1567.051560][ T9890] RAX: ffffffffffffffda RBX: 00007fe03c026090 RCX: 00007fe03bd9e159 [ 1567.051574][ T9890] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1567.051586][ T9890] RBP: 00007fe03be3506b R08: 0000000000000004 R09: 0000000000000000 [ 1567.051599][ T9890] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1567.051611][ T9890] R13: 00007fe03c026128 R14: 00007fe03c026090 R15: 00007ffc348f34e8 [ 1567.051644][ T9890] [ 1567.051815][ T9890] Mem-Info: [ 1567.051825][ T9890] active_anon:5766 inactive_anon:0 isolated_anon:0 [ 1567.051825][ T9890] active_file:2 inactive_file:43896 isolated_file:0 [ 1567.051825][ T9890] unevictable:0 dirty:142 writeback:0 [ 1567.051825][ T9890] slab_reclaimable:12673 slab_unreclaimable:132769 [ 1567.051825][ T9890] mapped:29615 shmem:529 pagetables:1321 [ 1567.051825][ T9890] sec_pagetables:0 bounce:0 [ 1567.051825][ T9890] kernel_misc_reclaimable:0 [ 1567.051825][ T9890] free:1260336 free_pcp:9776 free_cma:0 [ 1567.051877][ T9890] Node 0 active_anon:23064kB inactive_anon:0kB active_file:8kB inactive_file:175376kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118460kB dirty:568kB writeback:0kB shmem:2116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18640kB pagetables:5156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1567.051929][ T9890] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1567.051980][ T9890] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1567.052039][ T9890] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1567.052076][ T9890] Node 0 DMA32 free:1083156kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23064kB inactive_anon:0kB active_file:8kB inactive_file:175376kB unevictable:0kB writepending:568kB zspages:0kB present:3129332kB managed:2547096kB mlocked:0kB bounce:0kB free_pcp:39092kB local_pcp:19548kB free_cma:0kB [ 1567.052135][ T9890] lowmem_reserve[]: 0 0 0 0 0 [ 1567.052169][ T9890] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1567.052224][ T9890] lowmem_reserve[]: 0 0 0 0 0 [ 1567.052258][ T9890] Node 1 Normal free:3942828kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1567.052314][ T9890] lowmem_reserve[]: 0 0 0 0 0 [ 1567.054701][ T9890] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1567.054817][ T9890] Node 0 DMA32: 1819*4kB (UME) 745*8kB (UME) 304*16kB (UME) 245*32kB (UME) 150*64kB (UME) 40*128kB (UME) 56*256kB (UME) 24*512kB (UM) 8*1024kB (UME) 4*2048kB (UME) 244*4096kB (UM) = 1083092kB [ 1567.054960][ T9890] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1567.095892][ T9890] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 5*16kB (UM) 6*32kB (UM) 10*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3942828kB [ 1567.096032][ T9890] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1567.096048][ T9890] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1567.096064][ T9890] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1567.096080][ T9890] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1567.096096][ T9890] 44423 total pagecache pages [ 1567.096105][ T9890] 0 pages in swap cache [ 1567.096113][ T9890] Free swap = 124996kB [ 1567.096121][ T9890] Total swap = 124996kB [ 1567.096130][ T9890] 2097051 pages RAM [ 1567.096137][ T9890] 0 pages HighMem/MovableOnly [ 1567.096145][ T9890] 428661 pages reserved [ 1567.096153][ T9890] 0 pages cma reserved [ 1569.128073][ T9953] netlink: 'syz.2.8154': attribute type 1 has an invalid length. [ 1569.130970][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8154'. [ 1569.288789][ T9953] bond6: entered promiscuous mode [ 1569.293520][ T9953] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1569.563718][ T9970] netlink: 'syz.2.8157': attribute type 1 has an invalid length. [ 1569.749416][ T9970] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1569.785864][ T9970] netlink: 'syz.2.8157': attribute type 2 has an invalid length. [ 1569.785886][ T9970] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8157'. [ 1569.850546][ T9981] netlink: 'syz.2.8157': attribute type 1 has an invalid length. [ 1569.916702][ T9972] bond7: (slave veth7): Enslaving as an active interface with a down link [ 1570.023225][ T9976] bond7: (slave macvlan0): making interface the new active one [ 1570.097405][ T9976] macvlan0: entered promiscuous mode [ 1570.098225][ T9976] bond7: (slave macvlan0): Enslaving as an active interface with an up link [ 1570.354811][ T9983] bond7: (slave veth9): Enslaving as an active interface with a down link [ 1570.354905][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8158'. [ 1570.693164][ T9995] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 1570.712182][T10004] FAULT_INJECTION: forcing a failure. [ 1570.712182][T10004] name failslab, interval 1, probability 0, space 0, times 0 [ 1570.712214][T10004] CPU: 0 UID: 0 PID: 10004 Comm: syz.2.8161 Not tainted syzkaller #0 PREEMPT(full) [ 1570.712237][T10004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1570.712249][T10004] Call Trace: [ 1570.712256][T10004] [ 1570.712265][T10004] dump_stack_lvl+0xe8/0x150 [ 1570.712297][T10004] should_fail_ex+0x410/0x560 [ 1570.712324][T10004] should_failslab+0xa8/0x100 [ 1570.712352][T10004] __kmalloc_noprof+0xfe/0x720 [ 1570.712370][T10004] ? sk_prot_alloc+0x57/0x210 [ 1570.712392][T10004] ? security_sk_alloc+0x52/0x360 [ 1570.712535][T10004] ? security_sk_alloc+0x52/0x360 [ 1570.712563][T10004] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1570.712594][T10004] security_sk_alloc+0x52/0x360 [ 1570.712628][T10004] sk_prot_alloc+0x101/0x210 [ 1570.712657][T10004] sk_alloc+0x3a/0x390 [ 1570.712686][T10004] inet_create+0x7a9/0xff0 [ 1570.712710][T10004] ? inet_create+0x9d/0xff0 [ 1570.712736][T10004] __sock_create+0x4b3/0x9d0 [ 1570.712767][T10004] mptcp_subflow_create_socket+0xfd/0x810 [ 1570.712851][T10004] ? process_measurement+0x7b2/0x1c10 [ 1570.712946][T10004] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1570.712966][T10004] ? begin_current_label_crit_section+0x2a3/0x830 [ 1570.712998][T10004] __mptcp_nmpc_sk+0x155/0x770 [ 1570.713019][T10004] ? do_raw_spin_lock+0x12b/0x2f0 [ 1570.713044][T10004] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1570.713065][T10004] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1570.713099][T10004] mptcp_sendmsg_fastopen+0xce/0x540 [ 1570.713128][T10004] ? mptcp_rps_record_subflows+0x1d/0x400 [ 1570.713166][T10004] mptcp_sendmsg+0x1a69/0x1d10 [ 1570.713213][T10004] ? __lock_acquire+0x747/0x2de0 [ 1570.713239][T10004] ? __lock_acquire+0x747/0x2de0 [ 1570.713262][T10004] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1570.713289][T10004] ? aa_sock_msg_perm+0xfc/0x210 [ 1570.713318][T10004] ? inet_sendmsg+0x298/0x320 [ 1570.713343][T10004] ? __pfx_inet_sendmsg+0x10/0x10 [ 1570.713364][T10004] sock_sendmsg_nosec+0x10f/0x190 [ 1570.713388][T10004] ____sys_sendmsg+0x54e/0x850 [ 1570.713418][T10004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1570.713454][T10004] ? import_iovec+0x73/0xa0 [ 1570.713484][T10004] ___sys_sendmsg+0x2a5/0x360 [ 1570.713509][T10004] ? __lock_acquire+0x747/0x2de0 [ 1570.713533][T10004] ? __pfx____sys_sendmsg+0x10/0x10 [ 1570.713603][T10004] ? __fget_files+0x2a/0x420 [ 1570.713629][T10004] ? __fget_files+0x3a2/0x420 [ 1570.713667][T10004] __x64_sys_sendmsg+0x1b1/0x290 [ 1570.713697][T10004] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1570.713746][T10004] do_syscall_64+0x166/0x520 [ 1570.713775][T10004] ? trace_irq_disable+0x3b/0x140 [ 1570.713796][T10004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1570.713817][T10004] ? clear_bhb_loop+0x70/0xc0 [ 1570.713842][T10004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1570.713861][T10004] RIP: 0033:0x7fb27139e159 [ 1570.713880][T10004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1570.713897][T10004] RSP: 002b:00007fb2721e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1570.713918][T10004] RAX: ffffffffffffffda RBX: 00007fb271625fa0 RCX: 00007fb27139e159 [ 1570.713954][T10004] RDX: 0000000030004001 RSI: 0000200000000080 RDI: 0000000000000004 [ 1570.713968][T10004] RBP: 00007fb2721e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1570.713980][T10004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1570.713992][T10004] R13: 00007fb271626038 R14: 00007fb271625fa0 R15: 00007ffee55c5818 [ 1570.714027][T10004] [ 1571.495789][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1572.160091][T10044] syzkaller0: entered promiscuous mode [ 1572.160115][T10044] syzkaller0: entered allmulticast mode [ 1572.519401][T10050] FAULT_INJECTION: forcing a failure. [ 1572.519401][T10050] name failslab, interval 1, probability 0, space 0, times 0 [ 1572.519441][T10050] CPU: 0 UID: 0 PID: 10050 Comm: syz.0.8174 Not tainted syzkaller #0 PREEMPT(full) [ 1572.519465][T10050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1572.519477][T10050] Call Trace: [ 1572.519485][T10050] [ 1572.519494][T10050] dump_stack_lvl+0xe8/0x150 [ 1572.519527][T10050] should_fail_ex+0x410/0x560 [ 1572.519558][T10050] should_failslab+0xa8/0x100 [ 1572.519585][T10050] __kmalloc_noprof+0xfe/0x720 [ 1572.519604][T10050] ? sk_prot_alloc+0x57/0x210 [ 1572.519629][T10050] ? security_sk_alloc+0x52/0x360 [ 1572.519658][T10050] ? security_sk_alloc+0x52/0x360 [ 1572.519688][T10050] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1572.519722][T10050] security_sk_alloc+0x52/0x360 [ 1572.519755][T10050] sk_prot_alloc+0x101/0x210 [ 1572.519784][T10050] sk_alloc+0x3a/0x390 [ 1572.519812][T10050] inet_create+0x7a9/0xff0 [ 1572.519837][T10050] ? inet_create+0x9d/0xff0 [ 1572.519864][T10050] __sock_create+0x4b3/0x9d0 [ 1572.519895][T10050] mptcp_subflow_create_socket+0xfd/0x810 [ 1572.519919][T10050] ? process_measurement+0x7b2/0x1c10 [ 1572.519945][T10050] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1572.519969][T10050] ? begin_current_label_crit_section+0x2a3/0x830 [ 1572.520005][T10050] __mptcp_nmpc_sk+0x155/0x770 [ 1572.520028][T10050] ? do_raw_spin_lock+0x12b/0x2f0 [ 1572.520056][T10050] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1572.520079][T10050] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1572.520114][T10050] mptcp_sendmsg_fastopen+0xce/0x540 [ 1572.520143][T10050] ? mptcp_rps_record_subflows+0x1d/0x400 [ 1572.520182][T10050] mptcp_sendmsg+0x1a69/0x1d10 [ 1572.520230][T10050] ? __lock_acquire+0x747/0x2de0 [ 1572.520255][T10050] ? __lock_acquire+0x747/0x2de0 [ 1572.520278][T10050] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1572.520306][T10050] ? aa_sock_msg_perm+0xfc/0x210 [ 1572.520335][T10050] ? inet_sendmsg+0x298/0x320 [ 1572.520359][T10050] ? __pfx_inet_sendmsg+0x10/0x10 [ 1572.520380][T10050] sock_sendmsg_nosec+0x10f/0x190 [ 1572.520404][T10050] ____sys_sendmsg+0x54e/0x850 [ 1572.520443][T10050] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1572.520480][T10050] ? import_iovec+0x73/0xa0 [ 1572.520510][T10050] ___sys_sendmsg+0x2a5/0x360 [ 1572.520535][T10050] ? __lock_acquire+0x747/0x2de0 [ 1572.520560][T10050] ? __pfx____sys_sendmsg+0x10/0x10 [ 1572.520624][T10050] ? __fget_files+0x2a/0x420 [ 1572.520649][T10050] ? __fget_files+0x3a2/0x420 [ 1572.520685][T10050] __x64_sys_sendmsg+0x1b1/0x290 [ 1572.520716][T10050] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1572.520765][T10050] do_syscall_64+0x166/0x520 [ 1572.520794][T10050] ? trace_irq_disable+0x3b/0x140 [ 1572.520815][T10050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.520836][T10050] ? clear_bhb_loop+0x70/0xc0 [ 1572.520860][T10050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.520881][T10050] RIP: 0033:0x7fe03bd9e159 [ 1572.520899][T10050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1572.520917][T10050] RSP: 002b:00007fe03cbcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1572.520939][T10050] RAX: ffffffffffffffda RBX: 00007fe03c025fa0 RCX: 00007fe03bd9e159 [ 1572.520954][T10050] RDX: 0000000030004001 RSI: 0000200000000080 RDI: 0000000000000004 [ 1572.520968][T10050] RBP: 00007fe03cbcf090 R08: 0000000000000000 R09: 0000000000000000 [ 1572.520981][T10050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1572.520994][T10050] R13: 00007fe03c026038 R14: 00007fe03c025fa0 R15: 00007ffc348f34e8 [ 1572.521028][T10050] [ 1573.091380][T10074] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1573.254563][T10082] bridge8: entered promiscuous mode [ 1573.254589][T10082] bridge8: entered allmulticast mode [ 1574.588803][T10115] FAULT_INJECTION: forcing a failure. [ 1574.588803][T10115] name failslab, interval 1, probability 0, space 0, times 0 [ 1574.588836][T10115] CPU: 0 UID: 0 PID: 10115 Comm: syz.0.8189 Not tainted syzkaller #0 PREEMPT(full) [ 1574.588859][T10115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1574.588871][T10115] Call Trace: [ 1574.588880][T10115] [ 1574.588889][T10115] dump_stack_lvl+0xe8/0x150 [ 1574.588922][T10115] should_fail_ex+0x410/0x560 [ 1574.588951][T10115] should_failslab+0xa8/0x100 [ 1574.588979][T10115] __kmalloc_cache_noprof+0xa3/0x600 [ 1574.589002][T10115] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1574.589137][T10115] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1574.589168][T10115] tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1574.589201][T10115] mptcp_sendmsg_fastopen+0x17b/0x540 [ 1574.589242][T10115] mptcp_sendmsg+0x1a69/0x1d10 [ 1574.589288][T10115] ? __lock_acquire+0x747/0x2de0 [ 1574.589315][T10115] ? __lock_acquire+0x747/0x2de0 [ 1574.589339][T10115] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1574.589368][T10115] ? aa_sock_msg_perm+0xfc/0x210 [ 1574.589419][T10115] ? inet_sendmsg+0x298/0x320 [ 1574.589445][T10115] ? __pfx_inet_sendmsg+0x10/0x10 [ 1574.589466][T10115] sock_sendmsg_nosec+0x10f/0x190 [ 1574.589492][T10115] ____sys_sendmsg+0x54e/0x850 [ 1574.589526][T10115] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1574.589564][T10115] ? import_iovec+0x73/0xa0 [ 1574.589594][T10115] ___sys_sendmsg+0x2a5/0x360 [ 1574.589620][T10115] ? __lock_acquire+0x747/0x2de0 [ 1574.589650][T10115] ? __pfx____sys_sendmsg+0x10/0x10 [ 1574.589723][T10115] ? __fget_files+0x2a/0x420 [ 1574.589750][T10115] ? __fget_files+0x3a2/0x420 [ 1574.589787][T10115] __x64_sys_sendmsg+0x1b1/0x290 [ 1574.589851][T10115] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1574.589903][T10115] do_syscall_64+0x166/0x520 [ 1574.589932][T10115] ? trace_irq_disable+0x3b/0x140 [ 1574.589952][T10115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.589973][T10115] ? clear_bhb_loop+0x70/0xc0 [ 1574.589999][T10115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.590019][T10115] RIP: 0033:0x7fe03bd9e159 [ 1574.590039][T10115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1574.590058][T10115] RSP: 002b:00007fe03cbcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1574.590080][T10115] RAX: ffffffffffffffda RBX: 00007fe03c025fa0 RCX: 00007fe03bd9e159 [ 1574.590096][T10115] RDX: 0000000030004001 RSI: 0000200000000080 RDI: 0000000000000004 [ 1574.590110][T10115] RBP: 00007fe03cbcf090 R08: 0000000000000000 R09: 0000000000000000 [ 1574.590123][T10115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1574.590136][T10115] R13: 00007fe03c026038 R14: 00007fe03c025fa0 R15: 00007ffc348f34e8 [ 1574.590169][T10115] [ 1575.163533][T10134] netlink: 'syz.4.8195': attribute type 1 has an invalid length. [ 1575.401582][T10134] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1575.506486][T10119] syzkaller0: entered promiscuous mode [ 1575.506516][T10119] syzkaller0: entered allmulticast mode [ 1575.557838][T10139] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1575.576722][T10139] bond5: (slave batadv1): making interface the new active one [ 1575.578189][T10139] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 1575.893508][T10152] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1578.234097][T10168] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8199'. [ 1579.175203][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1580.571897][T10134] syzkaller1: entered promiscuous mode [ 1580.571923][T10134] syzkaller1: entered allmulticast mode [ 1581.054026][T10181] FAULT_INJECTION: forcing a failure. [ 1581.054026][T10181] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.054060][T10181] CPU: 1 UID: 0 PID: 10181 Comm: syz.1.8203 Not tainted syzkaller #0 PREEMPT(full) [ 1581.054084][T10181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1581.054096][T10181] Call Trace: [ 1581.054104][T10181] [ 1581.054114][T10181] dump_stack_lvl+0xe8/0x150 [ 1581.054148][T10181] should_fail_ex+0x410/0x560 [ 1581.054179][T10181] should_failslab+0xa8/0x100 [ 1581.054204][T10181] ? dst_alloc+0x105/0x170 [ 1581.054224][T10181] kmem_cache_alloc_noprof+0xa1/0x600 [ 1581.054269][T10181] ? __pfx_find_exception+0x10/0x10 [ 1581.054383][T10181] ? dst_alloc+0x105/0x170 [ 1581.054403][T10181] ? fib_lookup+0x76/0x440 [ 1581.054427][T10181] dst_alloc+0x105/0x170 [ 1581.054453][T10181] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 1581.054484][T10181] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1581.054510][T10181] ip_route_output_key_hash+0x18d/0x2a0 [ 1581.054537][T10181] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1581.054558][T10181] ? __asan_memset+0x22/0x50 [ 1581.054594][T10181] tcp_v4_connect+0x6fd/0x1950 [ 1581.054668][T10181] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1581.054705][T10181] mptcp_connect+0x527/0x7f0 [ 1581.054739][T10181] __inet_stream_connect+0x258/0xe00 [ 1581.054772][T10181] ? rcu_is_watching+0x16/0xb0 [ 1581.054798][T10181] ? __pfx___inet_stream_connect+0x10/0x10 [ 1581.054821][T10181] ? __kasan_kmalloc+0x93/0xb0 [ 1581.054846][T10181] ? __kmalloc_cache_noprof+0x321/0x600 [ 1581.054868][T10181] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1581.054887][T10181] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1581.054912][T10181] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1581.054944][T10181] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 1581.054977][T10181] mptcp_sendmsg_fastopen+0x17b/0x540 [ 1581.055011][T10181] mptcp_sendmsg+0x1a69/0x1d10 [ 1581.055053][T10181] ? __lock_acquire+0x747/0x2de0 [ 1581.055079][T10181] ? __lock_acquire+0x747/0x2de0 [ 1581.055100][T10181] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1581.055129][T10181] ? aa_sock_msg_perm+0xfc/0x210 [ 1581.055161][T10181] ? inet_sendmsg+0x298/0x320 [ 1581.055186][T10181] ? __pfx_inet_sendmsg+0x10/0x10 [ 1581.055207][T10181] sock_sendmsg_nosec+0x10f/0x190 [ 1581.055240][T10181] ____sys_sendmsg+0x54e/0x850 [ 1581.055274][T10181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1581.055312][T10181] ? import_iovec+0x73/0xa0 [ 1581.055342][T10181] ___sys_sendmsg+0x2a5/0x360 [ 1581.055369][T10181] ? __lock_acquire+0x747/0x2de0 [ 1581.055394][T10181] ? __pfx____sys_sendmsg+0x10/0x10 [ 1581.055460][T10181] ? __fget_files+0x2a/0x420 [ 1581.055487][T10181] ? __fget_files+0x3a2/0x420 [ 1581.055526][T10181] __x64_sys_sendmsg+0x1b1/0x290 [ 1581.055557][T10181] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1581.055608][T10181] do_syscall_64+0x166/0x520 [ 1581.055638][T10181] ? trace_irq_disable+0x3b/0x140 [ 1581.055659][T10181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.055680][T10181] ? clear_bhb_loop+0x70/0xc0 [ 1581.055705][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.055725][T10181] RIP: 0033:0x7f1c6319e159 [ 1581.055745][T10181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1581.055763][T10181] RSP: 002b:00007f1c64113028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1581.055785][T10181] RAX: ffffffffffffffda RBX: 00007f1c63425fa0 RCX: 00007f1c6319e159 [ 1581.055801][T10181] RDX: 0000000030004001 RSI: 0000200000000080 RDI: 0000000000000004 [ 1581.055815][T10181] RBP: 00007f1c64113090 R08: 0000000000000000 R09: 0000000000000000 [ 1581.055829][T10181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1581.055841][T10181] R13: 00007f1c63426038 R14: 00007f1c63425fa0 R15: 00007ffc62849ee8 [ 1581.055876][T10181] [ 1581.477217][ T31] audit: type=1804 audit(1791069654.865:36): pid=10178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8201" name="/newroot/493/cgroup.controllers" dev="tmpfs" ino=2556 res=1 errno=0 [ 1581.477297][ T31] audit: type=1800 audit(1791069654.865:37): pid=10178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8201" name="cgroup.controllers" dev="tmpfs" ino=2556 res=0 errno=0 [ 1581.601403][T10186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8205'. [ 1581.601440][T10186] netlink: 'syz.0.8205': attribute type 1 has an invalid length. [ 1581.645174][T10180] netlink: 'syz.2.8202': attribute type 1 has an invalid length. [ 1581.654912][T10186] geneve4: entered promiscuous mode [ 1581.676223][ T5588] macvlan0: left promiscuous mode [ 1581.742165][T10187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8202'. [ 1581.799564][T10180] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8202'. [ 1581.929723][T10195] netlink: 'syz.1.8206': attribute type 16 has an invalid length. [ 1581.929746][T10195] netlink: 'syz.1.8206': attribute type 17 has an invalid length. [ 1582.058957][T10195] lo: left promiscuous mode [ 1582.158810][T10195] tunl0: left promiscuous mode [ 1582.199549][T10195] gre0: left promiscuous mode [ 1582.257119][T10195] gretap0: left promiscuous mode [ 1582.281703][T10195] erspan0: left promiscuous mode [ 1582.302626][T10195] ip_vti0: left promiscuous mode [ 1582.342964][T10195] sit0: left promiscuous mode [ 1582.413962][T10195] ip6gre0: left promiscuous mode [ 1582.493791][T10195] bridge0: port 2(ip6gretap0) entered blocking state [ 1582.493917][T10195] bridge0: port 2(ip6gretap0) entered forwarding state [ 1582.494252][T10195] bridge0: port 1(syz_tun) entered blocking state [ 1582.494372][T10195] bridge0: port 1(syz_tun) entered forwarding state [ 1582.528183][T10195] bridge0: left promiscuous mode [ 1582.550860][T10195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1582.589726][T10195] 8021q: adding VLAN 0 to HW filter on device team0 [ 1582.611106][T10195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1582.874643][T10224] FAULT_INJECTION: forcing a failure. [ 1582.874643][T10224] name failslab, interval 1, probability 0, space 0, times 0 [ 1582.874680][T10224] CPU: 1 UID: 0 PID: 10224 Comm: syz.2.8216 Not tainted syzkaller #0 PREEMPT(full) [ 1582.874702][T10224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1582.874714][T10224] Call Trace: [ 1582.874722][T10224] [ 1582.874730][T10224] dump_stack_lvl+0xe8/0x150 [ 1582.874764][T10224] should_fail_ex+0x410/0x560 [ 1582.874794][T10224] should_failslab+0xa8/0x100 [ 1582.874820][T10224] ? __inet_hash_connect+0x1689/0x2630 [ 1582.874851][T10224] kmem_cache_alloc_noprof+0xa1/0x600 [ 1582.874881][T10224] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1582.874905][T10224] ? __inet_hash_connect+0xef0/0x2630 [ 1582.874930][T10224] ? __inet_hash_connect+0x1689/0x2630 [ 1582.874963][T10224] __inet_hash_connect+0x1689/0x2630 [ 1582.875007][T10224] ? __inet_hash_connect+0x62e/0x2630 [ 1582.875041][T10224] ? __pfx___inet_hash_connect+0x10/0x10 [ 1582.875073][T10224] ? inet_hash_connect+0xf1/0x380 [ 1582.875107][T10224] tcp_v4_connect+0xcee/0x1950 [ 1582.875150][T10224] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1582.875187][T10224] mptcp_connect+0x527/0x7f0 [ 1582.875230][T10224] __inet_stream_connect+0x258/0xe00 [ 1582.875264][T10224] ? rcu_is_watching+0x16/0xb0 [ 1582.875288][T10224] ? __pfx___inet_stream_connect+0x10/0x10 [ 1582.875310][T10224] ? __kasan_kmalloc+0x93/0xb0 [ 1582.875336][T10224] ? __kmalloc_cache_noprof+0x321/0x600 [ 1582.875357][T10224] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1582.875377][T10224] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1582.875401][T10224] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1582.875432][T10224] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 1582.875463][T10224] mptcp_sendmsg_fastopen+0x17b/0x540 [ 1582.875502][T10224] mptcp_sendmsg+0x1a69/0x1d10 [ 1582.875551][T10224] ? __lock_acquire+0x747/0x2de0 [ 1582.875578][T10224] ? __lock_acquire+0x747/0x2de0 [ 1582.875602][T10224] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1582.875631][T10224] ? aa_sock_msg_perm+0xfc/0x210 [ 1582.875677][T10224] ? inet_sendmsg+0x298/0x320 [ 1582.875703][T10224] ? __pfx_inet_sendmsg+0x10/0x10 [ 1582.875723][T10224] sock_sendmsg_nosec+0x10f/0x190 [ 1582.875749][T10224] ____sys_sendmsg+0x54e/0x850 [ 1582.875782][T10224] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1582.875820][T10224] ? import_iovec+0x73/0xa0 [ 1582.875850][T10224] ___sys_sendmsg+0x2a5/0x360 [ 1582.875875][T10224] ? __lock_acquire+0x747/0x2de0 [ 1582.875900][T10224] ? __pfx____sys_sendmsg+0x10/0x10 [ 1582.875962][T10224] ? __fget_files+0x2a/0x420 [ 1582.875987][T10224] ? __fget_files+0x3a2/0x420 [ 1582.876023][T10224] __x64_sys_sendmsg+0x1b1/0x290 [ 1582.876054][T10224] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1582.876105][T10224] do_syscall_64+0x166/0x520 [ 1582.876134][T10224] ? trace_irq_disable+0x3b/0x140 [ 1582.876155][T10224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.876176][T10224] ? clear_bhb_loop+0x70/0xc0 [ 1582.876201][T10224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.876230][T10224] RIP: 0033:0x7fb27139e159 [ 1582.876250][T10224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1582.876268][T10224] RSP: 002b:00007fb2721e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1582.876291][T10224] RAX: ffffffffffffffda RBX: 00007fb271625fa0 RCX: 00007fb27139e159 [ 1582.876306][T10224] RDX: 0000000030004001 RSI: 0000200000000080 RDI: 0000000000000004 [ 1582.876320][T10224] RBP: 00007fb2721e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1582.876330][T10224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1582.876343][T10224] R13: 00007fb271626038 R14: 00007fb271625fa0 R15: 00007ffee55c5818 [ 1582.876376][T10224] [ 1583.149738][T10195] veth1_vlan: left promiscuous mode [ 1583.159419][T10195] v: left promiscuous mode [ 1583.172423][T10195] v: entered promiscuous mode [ 1583.203402][T10195] veth1_vlan: entered promiscuous mode [ 1583.275540][T10195] veth1_macvtap: left promiscuous mode [ 1583.288846][T10195] veth0_macvtap: left promiscuous mode [ 1583.290012][T10195] veth0_macvtap: entered promiscuous mode [ 1583.291363][T10195] veth1_macvtap: entered promiscuous mode [ 1583.313012][T10195] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1583.313434][T10195] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1583.329954][T10195] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1583.339467][T10195] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1583.357943][T10195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1583.363856][T10195] veth3: left allmulticast mode [ 1583.425848][T10195] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1583.474410][T10195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1583.505749][ T4829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.652674][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8219'. [ 1583.715938][T10214] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1583.723181][T10212] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1583.732976][T21465] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.742640][T21465] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.052402][T10213] bridge0: entered promiscuous mode [ 1585.194512][T10262] x_tables: duplicate underflow at hook 1 [ 1585.206551][ T5724] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1585.244049][T10231] bond6: left promiscuous mode [ 1585.258840][ T5588] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.279110][ T5596] bond7: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 1585.282776][ T5596] bond7: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 1585.626749][ T1987] block nbd5: Possible stuck request ffff888027b5e000: control (read@0,1024B). Runtime 150 seconds [ 1585.626793][ T1987] block nbd5: Possible stuck request ffff888027b5e1c0: control (read@1024,1024B). Runtime 150 seconds [ 1585.626820][ T1987] block nbd5: Possible stuck request ffff888027b5e380: control (read@2048,1024B). Runtime 150 seconds [ 1585.626845][ T1987] block nbd5: Possible stuck request ffff888027b5e540: control (read@3072,1024B). Runtime 150 seconds [ 1585.897373][ T9498] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1587.274907][T10294] netlink: 'syz.0.8233': attribute type 1 has an invalid length. [ 1587.364650][T10243] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1587.951073][T10314] FAULT_INJECTION: forcing a failure. [ 1587.951073][T10314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1587.951107][T10314] CPU: 1 UID: 0 PID: 10314 Comm: syz.1.8242 Not tainted syzkaller #0 PREEMPT(full) [ 1587.951127][T10314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1587.951140][T10314] Call Trace: [ 1587.951148][T10314] [ 1587.951157][T10314] dump_stack_lvl+0xe8/0x150 [ 1587.951189][T10314] should_fail_ex+0x410/0x560 [ 1587.951219][T10314] _copy_from_user+0x2d/0xb0 [ 1587.951247][T10314] ___sys_sendmsg+0x1c6/0x360 [ 1587.951278][T10314] ? __lock_acquire+0x747/0x2de0 [ 1587.951304][T10314] ? __pfx____sys_sendmsg+0x10/0x10 [ 1587.951366][T10314] ? __fget_files+0x2a/0x420 [ 1587.951393][T10314] ? __fget_files+0x3a2/0x420 [ 1587.951430][T10314] __x64_sys_sendmsg+0x1b1/0x290 [ 1587.951461][T10314] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1587.951510][T10314] do_syscall_64+0x166/0x520 [ 1587.951539][T10314] ? trace_irq_disable+0x3b/0x140 [ 1587.951558][T10314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.951579][T10314] ? clear_bhb_loop+0x70/0xc0 [ 1587.951604][T10314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.951624][T10314] RIP: 0033:0x7f1c6319e159 [ 1587.951643][T10314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1587.951661][T10314] RSP: 002b:00007f1c64113028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1587.951689][T10314] RAX: ffffffffffffffda RBX: 00007f1c63425fa0 RCX: 00007f1c6319e159 [ 1587.951705][T10314] RDX: 00000000200400d0 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1587.951719][T10314] RBP: 00007f1c64113090 R08: 0000000000000000 R09: 0000000000000000 [ 1587.951732][T10314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1587.951745][T10314] R13: 00007f1c63426038 R14: 00007f1c63425fa0 R15: 00007ffc62849ee8 [ 1587.951777][T10314] [ 1588.202861][T10318] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1588.248645][T10316] openvswitch: ovs-dp0: Dropping previously announced user features [ 1588.343758][T10320] xt_hashlimit: size too large, truncated to 1048576 [ 1588.430618][T10321] netlink: 'syz.1.8245': attribute type 2 has an invalid length. [ 1588.430642][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8245'. [ 1588.914686][T10335] Bluetooth: hci0: unsupported parameter 5135 [ 1588.914712][T10335] Bluetooth: hci0: unsupported parameter 8192 [ 1588.914746][T10335] Bluetooth: hci0: unsupported parameter 5135 [ 1588.914759][T10335] Bluetooth: hci0: unsupported parameter 8192 [ 1589.196589][T10359] FAULT_INJECTION: forcing a failure. [ 1589.196589][T10359] name failslab, interval 1, probability 0, space 0, times 0 [ 1589.196623][T10359] CPU: 1 UID: 0 PID: 10359 Comm: syz.1.8255 Not tainted syzkaller #0 PREEMPT(full) [ 1589.196646][T10359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1589.196658][T10359] Call Trace: [ 1589.196666][T10359] [ 1589.196675][T10359] dump_stack_lvl+0xe8/0x150 [ 1589.196708][T10359] should_fail_ex+0x410/0x560 [ 1589.196735][T10359] ? __alloc_skb+0x1db/0x7a0 [ 1589.196851][T10359] should_failslab+0xa8/0x100 [ 1589.196878][T10359] ? __alloc_skb+0x1db/0x7a0 [ 1589.196899][T10359] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1589.196930][T10359] ? __alloc_skb+0x18d/0x7a0 [ 1589.196954][T10359] ? __alloc_skb+0x1db/0x7a0 [ 1589.196985][T10359] __alloc_skb+0x1db/0x7a0 [ 1589.197014][T10359] netlink_sendmsg+0x5d4/0xb40 [ 1589.197046][T10359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1589.197075][T10359] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1589.197101][T10359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1589.197121][T10359] sock_sendmsg_nosec+0x14e/0x190 [ 1589.197144][T10359] ____sys_sendmsg+0x54e/0x850 [ 1589.197178][T10359] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1589.197214][T10359] ? import_iovec+0x73/0xa0 [ 1589.197244][T10359] ___sys_sendmsg+0x2a5/0x360 [ 1589.197271][T10359] ? __lock_acquire+0x747/0x2de0 [ 1589.197295][T10359] ? __pfx____sys_sendmsg+0x10/0x10 [ 1589.197353][T10359] ? __fget_files+0x2a/0x420 [ 1589.197380][T10359] ? __fget_files+0x3a2/0x420 [ 1589.197416][T10359] __x64_sys_sendmsg+0x1b1/0x290 [ 1589.197447][T10359] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1589.197496][T10359] do_syscall_64+0x166/0x520 [ 1589.197524][T10359] ? trace_irq_disable+0x3b/0x140 [ 1589.197545][T10359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.197566][T10359] ? clear_bhb_loop+0x70/0xc0 [ 1589.197597][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.197617][T10359] RIP: 0033:0x7f1c6319e159 [ 1589.197637][T10359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1589.197655][T10359] RSP: 002b:00007f1c64113028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1589.197677][T10359] RAX: ffffffffffffffda RBX: 00007f1c63425fa0 RCX: 00007f1c6319e159 [ 1589.197693][T10359] RDX: 00000000200400d0 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1589.197707][T10359] RBP: 00007f1c64113090 R08: 0000000000000000 R09: 0000000000000000 [ 1589.197720][T10359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1589.197733][T10359] R13: 00007f1c63426038 R14: 00007f1c63425fa0 R15: 00007ffc62849ee8 [ 1589.197766][T10359] [ 1589.728716][T10369] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8257'. [ 1589.734770][T10371] netlink: 'syz.4.8258': attribute type 1 has an invalid length. [ 1589.763179][T10370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8259'. [ 1589.870431][T10371] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8258'. [ 1590.020803][T10377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8260'. [ 1590.023288][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8260'. [ 1590.540586][T10400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8268'. [ 1590.540612][T10400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8268'. [ 1590.790496][T10400] netlink: 'syz.3.8268': attribute type 16 has an invalid length. [ 1590.790522][T10400] netlink: 'syz.3.8268': attribute type 17 has an invalid length. [ 1590.834472][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8268'. [ 1590.852616][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8270'. [ 1591.297416][ T9498] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1591.300813][T10400] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 1591.432964][T10409] ip6gre2: entered promiscuous mode [ 1591.432987][T10409] ip6gre2: entered allmulticast mode [ 1591.857149][ T9498] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1591.964957][T10413] sctp: [Deprecated]: syz.1.8272 (pid 10413) Use of int in maxseg socket option. [ 1591.964957][T10413] Use struct sctp_assoc_value instead [ 1592.041354][T10421] sctp: [Deprecated]: syz.1.8272 (pid 10421) Use of int in maxseg socket option. [ 1592.041354][T10421] Use struct sctp_assoc_value instead [ 1592.431664][T10432] FAULT_INJECTION: forcing a failure. [ 1592.431664][T10432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1592.431697][T10432] CPU: 0 UID: 0 PID: 10432 Comm: syz.0.8271 Not tainted syzkaller #0 PREEMPT(full) [ 1592.431720][T10432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1592.431733][T10432] Call Trace: [ 1592.431741][T10432] [ 1592.431750][T10432] dump_stack_lvl+0xe8/0x150 [ 1592.431782][T10432] should_fail_ex+0x410/0x560 [ 1592.431810][T10432] _copy_from_iter+0x1d3/0x1660 [ 1592.431835][T10432] ? __alloc_skb+0x27a/0x7a0 [ 1592.431859][T10432] ? __alloc_skb+0x27a/0x7a0 [ 1592.431884][T10432] ? __alloc_skb+0x27a/0x7a0 [ 1592.431907][T10432] ? __pfx__copy_from_iter+0x10/0x10 [ 1592.431928][T10432] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1592.431959][T10432] ? __alloc_skb+0x27a/0x7a0 [ 1592.431980][T10432] ? __alloc_skb+0x27a/0x7a0 [ 1592.432009][T10432] ? netlink_sendmsg+0x650/0xb40 [ 1592.432030][T10432] ? skb_put+0x112/0x210 [ 1592.432058][T10432] netlink_sendmsg+0x6c0/0xb40 [ 1592.432088][T10432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1592.432117][T10432] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1592.432144][T10432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1592.432164][T10432] sock_sendmsg_nosec+0x14e/0x190 [ 1592.432188][T10432] ____sys_sendmsg+0x54e/0x850 [ 1592.432220][T10432] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1592.432256][T10432] ? import_iovec+0x73/0xa0 [ 1592.432284][T10432] ___sys_sendmsg+0x2a5/0x360 [ 1592.432310][T10432] ? __lock_acquire+0x747/0x2de0 [ 1592.432341][T10432] ? __pfx____sys_sendmsg+0x10/0x10 [ 1592.432406][T10432] ? __fget_files+0x2a/0x420 [ 1592.432433][T10432] ? __fget_files+0x3a2/0x420 [ 1592.432469][T10432] __x64_sys_sendmsg+0x1b1/0x290 [ 1592.432498][T10432] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1592.432546][T10432] do_syscall_64+0x166/0x520 [ 1592.432574][T10432] ? trace_irq_disable+0x3b/0x140 [ 1592.432593][T10432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.432614][T10432] ? clear_bhb_loop+0x70/0xc0 [ 1592.432638][T10432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.432658][T10432] RIP: 0033:0x7fe03bd9e159 [ 1592.432676][T10432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1592.432694][T10432] RSP: 002b:00007fe03cbcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1592.432716][T10432] RAX: ffffffffffffffda RBX: 00007fe03c025fa0 RCX: 00007fe03bd9e159 [ 1592.432732][T10432] RDX: 00000000200400d0 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1592.432746][T10432] RBP: 00007fe03cbcf090 R08: 0000000000000000 R09: 0000000000000000 [ 1592.432760][T10432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1592.432772][T10432] R13: 00007fe03c026038 R14: 00007fe03c025fa0 R15: 00007ffc348f34e8 [ 1592.432806][T10432] [ 1592.963947][T10439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8277'. [ 1593.442356][T10452] ip6tnl3: entered allmulticast mode [ 1593.454095][ T5596] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1593.459338][ T5596] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1593.466554][T23702] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1593.630689][T10456] bridge0: port 3(gretap0) entered blocking state [ 1593.631199][T10456] bridge0: port 3(gretap0) entered disabled state [ 1593.631534][T10456] gretap0: entered allmulticast mode [ 1593.642300][T10456] gretap0: entered promiscuous mode [ 1593.645036][T10456] bridge0: port 3(gretap0) entered blocking state [ 1593.645130][T10456] bridge0: port 3(gretap0) entered forwarding state [ 1593.734626][T10459] ip_tables: iptables: counters copy to user failed while replacing table [ 1593.946639][T23698] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1594.460998][T10485] netlink: 'syz.4.8288': attribute type 10 has an invalid length. [ 1594.466415][T23702] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1594.767624][T10491] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1594.839588][T10495] IPv6: NLM_F_CREATE should be specified when creating new route [ 1594.839682][T10495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1594.839693][T10495] IPv6: NLM_F_CREATE should be set when creating new route [ 1594.839741][T10495] IPv6: NLM_F_CREATE should be set when creating new route [ 1594.839879][T10495] IPv6: NLM_F_CREATE should be set when creating new route [ 1594.948636][T10491] bond6 (unregistering): Released all slaves [ 1595.257686][T10503] FAULT_INJECTION: forcing a failure. [ 1595.257686][T10503] name failslab, interval 1, probability 0, space 0, times 0 [ 1595.257720][T10503] CPU: 0 UID: 0 PID: 10503 Comm: syz.3.8293 Not tainted syzkaller #0 PREEMPT(full) [ 1595.257743][T10503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1595.257755][T10503] Call Trace: [ 1595.257764][T10503] [ 1595.257773][T10503] dump_stack_lvl+0xe8/0x150 [ 1595.257805][T10503] should_fail_ex+0x410/0x560 [ 1595.257835][T10503] should_failslab+0xa8/0x100 [ 1595.257860][T10503] ? dst_alloc+0x105/0x170 [ 1595.257881][T10503] kmem_cache_alloc_noprof+0xa1/0x600 [ 1595.257911][T10503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.257931][T10503] ? __pfx_find_exception+0x10/0x10 [ 1595.257950][T10503] ? dst_alloc+0x105/0x170 [ 1595.257975][T10503] dst_alloc+0x105/0x170 [ 1595.257995][T10503] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 1595.258025][T10503] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1595.258051][T10503] ip_route_output_key_hash+0x18d/0x2a0 [ 1595.258077][T10503] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1595.258098][T10503] ? call_rcu+0x64d/0x8b0 [ 1595.258139][T10503] ip_route_output_flow+0x2a/0x150 [ 1595.258162][T10503] tcp_v4_connect+0xd86/0x1950 [ 1595.258206][T10503] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1595.258242][T10503] mptcp_connect+0x527/0x7f0 [ 1595.258274][T10503] __inet_stream_connect+0x258/0xe00 [ 1595.258307][T10503] ? rcu_is_watching+0x16/0xb0 [ 1595.258331][T10503] ? __pfx___inet_stream_connect+0x10/0x10 [ 1595.258353][T10503] ? __kasan_kmalloc+0x93/0xb0 [ 1595.258378][T10503] ? __kmalloc_cache_noprof+0x321/0x600 [ 1595.258399][T10503] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1595.258419][T10503] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1595.258441][T10503] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1595.258471][T10503] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 1595.258500][T10503] mptcp_sendmsg_fastopen+0x17b/0x540 [ 1595.258538][T10503] mptcp_sendmsg+0x1a69/0x1d10 [ 1595.258584][T10503] ? __lock_acquire+0x747/0x2de0 [ 1595.258610][T10503] ? __lock_acquire+0x747/0x2de0 [ 1595.258632][T10503] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1595.258668][T10503] ? aa_sock_msg_perm+0xfc/0x210 [ 1595.258699][T10503] ? inet_sendmsg+0x298/0x320 [ 1595.258722][T10503] ? __pfx_inet_sendmsg+0x10/0x10 [ 1595.258742][T10503] sock_sendmsg_nosec+0x10f/0x190 [ 1595.258765][T10503] ____sys_sendmsg+0x54e/0x850 [ 1595.258796][T10503] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1595.258830][T10503] ? import_iovec+0x73/0xa0 [ 1595.258860][T10503] ___sys_sendmsg+0x2a5/0x360 [ 1595.258886][T10503] ? __lock_acquire+0x747/0x2de0 [ 1595.258909][T10503] ? __pfx____sys_sendmsg+0x10/0x10 [ 1595.258968][T10503] ? __fget_files+0x2a/0x420 [ 1595.258992][T10503] ? __fget_files+0x3a2/0x420 [ 1595.259028][T10503] __x64_sys_sendmsg+0x1b1/0x290 [ 1595.259059][T10503] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1595.259111][T10503] do_syscall_64+0x166/0x520 [ 1595.259139][T10503] ? trace_irq_disable+0x3b/0x140 [ 1595.259158][T10503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.259180][T10503] ? clear_bhb_loop+0x70/0xc0 [ 1595.259203][T10503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.259223][T10503] RIP: 0033:0x7fe01a19e159 [ 1595.259241][T10503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1595.259257][T10503] RSP: 002b:00007fe01af9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1595.259278][T10503] RAX: ffffffffffffffda RBX: 00007fe01a425fa0 RCX: 00007fe01a19e159 [ 1595.259293][T10503] RDX: 0000000030004001 RSI: 0000200000000080 RDI: 0000000000000004 [ 1595.259307][T10503] RBP: 00007fe01af9a090 R08: 0000000000000000 R09: 0000000000000000 [ 1595.259319][T10503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1595.259331][T10503] R13: 00007fe01a426038 R14: 00007fe01a425fa0 R15: 00007fff1d16d088 [ 1595.259366][T10503] [ 1595.943206][T10521] syz_tun: entered allmulticast mode [ 1596.112607][T10507] syz_tun: left allmulticast mode [ 1596.282485][T10536] netlink: 'syz.2.8303': attribute type 1 has an invalid length. [ 1596.282511][T10536] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8303'. [ 1596.440524][T10543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8306'. [ 1596.561746][T10550] x_tables: duplicate underflow at hook 1 [ 1596.703069][T10557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8306'. [ 1596.948279][T10568] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1596.967375][T10557] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1597.302205][T10546] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8306'. [ 1597.415186][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1597.761863][T10591] netlink: 'syz.4.8319': attribute type 6 has an invalid length. [ 1597.769872][T10591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8319'. [ 1597.855251][T10599] netlink: 84 bytes leftover after parsing attributes in process `syz.4.8319'. [ 1598.096967][T10605] netlink: 'syz.3.8322': attribute type 10 has an invalid length. [ 1598.242114][T10605] team_slave_0: left promiscuous mode [ 1598.366483][T10619] x_tables: duplicate underflow at hook 3 [ 1598.439277][T10614] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8323'. [ 1598.861584][T10605] team0 (unregistering): Port device team_slave_0 removed [ 1598.862000][T10605] team_slave_1: left promiscuous mode [ 1598.888626][T10605] team0 (unregistering): Port device team_slave_1 removed [ 1598.889050][T10605] veth0: left promiscuous mode [ 1598.920994][T10605] team0 (unregistering): Port device veth0 removed [ 1598.953803][T10607] netlink: 'syz.4.8323': attribute type 29 has an invalid length. [ 1598.953827][T10607] netlink: 'syz.4.8323': attribute type 31 has an invalid length. [ 1598.998583][T10618] gtp3: entered allmulticast mode [ 1599.108649][T10615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8324'. [ 1599.108675][T10615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8324'. [ 1599.137104][T10625] team0: Device is already in use. [ 1599.791686][T10648] syzkaller0: entered promiscuous mode [ 1599.791709][T10648] syzkaller0: entered allmulticast mode [ 1599.826617][T10648] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 1599.838815][T10648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8331'. [ 1600.888798][T10679] netlink: 'syz.2.8337': attribute type 1 has an invalid length. [ 1600.888826][T10679] NCSI netlink: No device for ifindex 0 [ 1601.396291][T10698] openvswitch: netlink: IP tunnel dst address not specified [ 1601.449533][T10701] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1601.837554][T10706] xt_CT: No such helper "netbios-ns" [ 1601.948164][T10714] __nla_validate_parse: 2 callbacks suppressed [ 1601.948185][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8348'. [ 1602.494897][T10722] tipc: Enabled bearer , priority 1 [ 1602.562507][T10727] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1602.744204][T10737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8352'. [ 1602.810342][T10721] tipc: Resetting bearer [ 1602.946911][T10721] tipc: Disabling bearer [ 1603.082007][T10742] openvswitch: netlink: Multiple metadata blocks provided [ 1603.629072][T10767] openvswitch: netlink: EtherType 300 is less than min 600 [ 1604.095961][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8359'. [ 1604.097035][T10780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8359'. [ 1604.182920][T10787] bridge8: entered allmulticast mode [ 1604.291872][T10779] bridge0: port 3(veth1_to_bond) entered disabled state [ 1604.338172][T10779] veth1_to_bond (unregistering): left allmulticast mode [ 1604.338199][T10779] veth1_to_bond (unregistering): left promiscuous mode [ 1604.338285][T10779] bridge0: port 3(veth1_to_bond) entered disabled state [ 1604.736500][T10804] xt_HMARK: proto mask must be zero with L3 mode [ 1605.338528][T10819] syzkaller0: entered promiscuous mode [ 1605.338701][T10819] syzkaller0: entered allmulticast mode [ 1605.508251][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8372'. [ 1605.693788][T10836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8372'. [ 1606.055168][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1606.332616][T10846] bond8: entered promiscuous mode [ 1606.332640][T10846] bond8: entered allmulticast mode [ 1606.333079][T10834] macvlan0: entered promiscuous mode [ 1607.337579][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1607.918668][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8383'. [ 1607.978822][T10891] ipvlan2: entered allmulticast mode [ 1607.979893][T10891] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1607.982957][T10891] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1608.003443][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8384'. [ 1608.790989][T10918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8389'. [ 1608.820691][T10918] netlink: 'syz.0.8389': attribute type 5 has an invalid length. [ 1608.820713][T10918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8389'. [ 1609.199490][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8393'. [ 1609.216304][T10929] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1609.968604][T10956] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8397'. [ 1610.879353][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8399'. [ 1610.909719][T10968] IPv6: NLM_F_CREATE should be specified when creating new route [ 1610.909809][T10968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1610.909820][T10968] IPv6: NLM_F_CREATE should be set when creating new route [ 1610.909861][T10968] IPv6: NLM_F_CREATE should be set when creating new route [ 1610.909886][T10968] IPv6: NLM_F_CREATE should be set when creating new route [ 1610.912246][T10968] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.8399'. [ 1611.052498][T10974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8400'. [ 1611.063364][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8402'. [ 1611.211193][T10974] netlink: 'syz.0.8400': attribute type 1 has an invalid length. [ 1612.405750][T11012] dvmrp0: entered allmulticast mode [ 1612.455181][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1613.224136][T11047] __nla_validate_parse: 4 callbacks suppressed [ 1613.224155][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8417'. [ 1613.253056][T11047] bond0: Unable to set down delay as MII monitoring is disabled [ 1613.772735][T11064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8422'. [ 1613.929817][T11064] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8422'. [ 1613.954280][T11064] netlink: 120 bytes leftover after parsing attributes in process `syz.2.8422'. [ 1614.034152][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8425'. [ 1614.064204][T11072] vlan2: entered allmulticast mode [ 1614.064226][T11072] bridge9: entered allmulticast mode [ 1614.077771][T11072] bridge9: port 1(erspan0) entered blocking state [ 1614.077947][T11072] bridge9: port 1(erspan0) entered disabled state [ 1614.078099][T11072] erspan0: entered allmulticast mode [ 1614.080023][T11072] erspan0: entered promiscuous mode [ 1614.087164][T11066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1614.179647][T11072] netlink: 'syz.0.8425': attribute type 4 has an invalid length. [ 1614.274166][T11073] syzkaller1: entered promiscuous mode [ 1614.287495][T11073] syzkaller1: entered allmulticast mode [ 1614.554941][T11080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8427'. [ 1614.782114][T11081] vxcan4: entered allmulticast mode [ 1614.813123][T11089] ip_tables: iptables: counters copy to user failed while replacing table [ 1615.328067][T11105] syzkaller1: entered promiscuous mode [ 1615.328091][T11105] syzkaller1: entered allmulticast mode [ 1615.345382][ T4983] udevd[4983]: worker [6235] /devices/virtual/block/nbd5 timeout; kill it [ 1615.346885][ T4983] udevd[4983]: seq 35964 '/devices/virtual/block/nbd5' killed [ 1615.658328][ T1987] block nbd5: Possible stuck request ffff888027b5e000: control (read@0,1024B). Runtime 180 seconds [ 1615.658371][ T1987] block nbd5: Possible stuck request ffff888027b5e1c0: control (read@1024,1024B). Runtime 180 seconds [ 1615.658399][ T1987] block nbd5: Possible stuck request ffff888027b5e380: control (read@2048,1024B). Runtime 180 seconds [ 1615.658426][ T1987] block nbd5: Possible stuck request ffff888027b5e540: control (read@3072,1024B). Runtime 180 seconds [ 1617.238709][T11127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8441'. [ 1617.508970][T11134] netlink: zone id is out of range [ 1618.198484][T11148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8445'. [ 1618.509293][T11155] netlink: 'syz.3.8447': attribute type 12 has an invalid length. [ 1620.076029][T11193] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.8460'. [ 1620.294198][T11207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1620.363276][T11207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1620.428801][T11211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1620.784766][T11226] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1621.089395][T11232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8466'. [ 1622.341274][T11276] bond10: option fail_over_mac: invalid value (127) [ 1622.354233][T11276] bond10 (unregistering): Released all slaves [ 1622.749439][T11293] sctp: [Deprecated]: syz.2.8475 (pid 11293) Use of int in max_burst socket option. [ 1622.749439][T11293] Use struct sctp_assoc_value instead [ 1622.846949][T11297] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1623.335273][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1623.498716][T11322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8484'. [ 1623.522753][T11322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8484'. [ 1623.687759][T11335] netlink: 'syz.3.8489': attribute type 1 has an invalid length. [ 1623.956087][T11339] SET target dimension over the limit! [ 1624.806128][T11363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8496'. [ 1624.806383][T11363] openvswitch: netlink: Message has 4 unknown bytes. [ 1624.806535][T11369] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8498'. [ 1624.806675][T11369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8498'. [ 1624.927781][T11381] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8501'. [ 1625.180326][T11386] netlink: 'syz.2.8500': attribute type 3 has an invalid length. [ 1625.180349][T11386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8500'. [ 1625.456586][T11389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8502'. [ 1625.759393][ T31] audit: type=1800 audit(1791069699.145:38): pid=11405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8507" name=680B20 dev="tmpfs" ino=2463 res=0 errno=0 [ 1625.922686][T11413] netlink: 'syz.4.8509': attribute type 4 has an invalid length. [ 1625.922710][T11413] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8509'. [ 1625.964051][T11413] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1626.113875][ T5632] IPVS: starting estimator thread 0... [ 1626.178735][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8515'. [ 1626.179410][T11415] IPVS: Unknown mcast interface: nr0 [ 1626.200943][T11419] IPVS: using max 35 ests per chain, 84000 per kthread [ 1626.258250][T11418] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:15, vlan:0) [ 1626.977164][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8520'. [ 1626.981063][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8520'. [ 1627.063072][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8521'. [ 1627.160311][T11457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8520'. [ 1627.609766][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8525'. [ 1627.611404][T11465] xt_l2tp: invalid flags combination: 0 [ 1627.613665][T11465] xt_l2tp: invalid flags combination: 0 [ 1627.614127][T11465] xt_l2tp: invalid flags combination: 0 [ 1627.615375][T11465] xt_l2tp: invalid flags combination: 0 [ 1627.615788][T11465] xt_l2tp: invalid flags combination: 0 [ 1627.617275][T11465] xt_l2tp: invalid flags combination: 0 [ 1627.618887][T11465] xt_l2tp: invalid flags combination: 0 [ 1627.620292][T11465] xt_l2tp: invalid flags combination: 0 [ 1627.621399][T11465] xt_l2tp: invalid flags combination: 0 [ 1627.623112][T11465] xt_l2tp: invalid flags combination: 0 [ 1628.242597][T11486] vlan2: entered promiscuous mode [ 1628.260050][T11488] gretap0: left allmulticast mode [ 1628.260077][T11488] gretap0: left promiscuous mode [ 1628.260299][T11488] bridge0: port 3(gretap0) entered disabled state [ 1628.292414][T11488] syz_tun: left allmulticast mode [ 1628.292442][T11488] syz_tun: left promiscuous mode [ 1628.292794][T11488] bridge0: port 1(syz_tun) entered disabled state [ 1628.364746][T11492] xt_hashlimit: overflow, try lower: 18446744073709551615/8388608 [ 1628.383056][T11488] ip6gretap0: left allmulticast mode [ 1628.383082][T11488] ip6gretap0: left promiscuous mode [ 1628.383369][T11488] bridge0: port 2(ip6gretap0) entered disabled state [ 1628.428080][T11488] bond0: (slave netdevsim1): Releasing backup interface [ 1628.846550][T11504] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8536'. [ 1628.846575][T11504] tc_dump_action: action bad kind [ 1628.963898][T11505] Bluetooth: hci0: too big key_count value 38657 [ 1630.211346][T11539] __nla_validate_parse: 3 callbacks suppressed [ 1630.211369][T11539] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8542'. [ 1630.211390][T11539] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8542'. [ 1630.283864][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8542'. [ 1630.334284][T11547] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1630.335307][T11547] netlink: 'syz.4.8544': attribute type 1 has an invalid length. [ 1630.466229][T11558] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8546'. [ 1630.493978][T11547] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1630.498822][T11547] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8544'. [ 1630.631797][T11566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8545'. [ 1631.241338][T11589] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8556'. [ 1631.357185][T11595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8559'. [ 1631.357221][T11595] netlink: 'syz.1.8559': attribute type 1 has an invalid length. [ 1631.357235][T11595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8559'. [ 1631.439843][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8561'. [ 1631.801884][T11611] bond9: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1631.820221][T11611] bond9 (unregistering): Released all slaves [ 1631.955814][T11616] ip6tnl5: entered allmulticast mode [ 1632.284085][ T4822] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1632.286148][ T4822] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1632.306575][ T1221] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1632.721842][T11641] syzkaller0: entered promiscuous mode [ 1632.721866][T11641] syzkaller0: entered allmulticast mode [ 1632.776962][ T1221] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1632.778018][T11645] netlink: 'syz.1.8571': attribute type 1 has an invalid length. [ 1632.925482][T11645] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1633.257591][ T1221] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1633.744007][T11683] IPVS: Unknown mcast interface: vcan0 [ 1633.774549][T11686] IPVS: Unknown mcast interface: vcan0 [ 1634.235395][ T1221] page_pool_release_retry() stalled pool shutdown: id 452, 1 inflight 60 sec [ 1634.373705][T11693] macsec1: entered promiscuous mode [ 1635.156719][T11731] ip_tables: iptables: counters copy to user failed while replacing table [ 1635.484290][T11715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1635.485138][T11715] bridge0: port 1(bridge_slave_0) entered disabled state [ 1635.946022][T11715] tipc: Resetting bearer [ 1635.946506][T11715] tipc: Resetting bearer [ 1636.277211][T11715] ip6gretap0: left allmulticast mode [ 1636.615169][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1636.705572][ T5588] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1636.705604][ T5588] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.706474][ T5588] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1636.706503][ T5588] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.706541][ T5588] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1636.706566][ T5588] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.859424][T11748] macsec0: entered promiscuous mode [ 1637.068266][T11748] pim6reg1: entered promiscuous mode [ 1637.068288][T11748] pim6reg1: entered allmulticast mode [ 1637.157228][T11764] __nla_validate_parse: 7 callbacks suppressed [ 1637.157277][T11764] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8599'. [ 1637.187732][T11743] macsec0: left promiscuous mode [ 1637.382478][T11763] netlink: 'syz.1.8600': attribute type 1 has an invalid length. [ 1637.383317][T11763] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8600'. [ 1637.810657][T11788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8603'. [ 1638.122853][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8606'. [ 1638.369267][T11798] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8606'. [ 1638.471773][T11798] bond5: (slave batadv0): Releasing active interface [ 1638.792750][T11813] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1639.159872][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8615'. [ 1639.159901][T11826] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8615'. [ 1639.237612][T11832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8614'. [ 1639.237646][T11832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8614'. [ 1639.239792][T11832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8614'. [ 1641.153896][T11867] netlink: 'syz.1.8629': attribute type 18 has an invalid length. [ 1641.206574][T11878] syz_tun: entered allmulticast mode [ 1641.208209][T11877] syz_tun: left allmulticast mode [ 1641.215566][ T5632] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 1641.215792][ T5632] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 1641.216006][ T5632] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 1641.216218][ T5632] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 1642.038570][T11900] netlink: 'syz.4.8638': attribute type 1 has an invalid length. [ 1642.038597][T11900] netlink: 'syz.4.8638': attribute type 1 has an invalid length. [ 1642.608405][T11926] __nla_validate_parse: 5 callbacks suppressed [ 1642.608426][T11926] netlink: 404 bytes leftover after parsing attributes in process `syz.2.8646'. [ 1642.832041][T11931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8646'. [ 1643.006610][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8652'. [ 1643.102780][T11952] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1643.356534][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8656'. [ 1643.796648][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8656'. [ 1643.799889][T11979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1644.214892][T11991] netlink: zone id is out of range [ 1644.214908][T11991] netlink: zone id is out of range [ 1644.382524][T11987] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1644.577151][T12001] vlan0: entered promiscuous mode [ 1645.036529][T12028] IPVS: length: 107 != 24 [ 1645.735150][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1645.796875][T12046] syzkaller0: entered promiscuous mode [ 1645.796899][T12046] syzkaller0: entered allmulticast mode [ 1645.867389][ T1987] block nbd5: Possible stuck request ffff888027b5e000: control (read@0,1024B). Runtime 210 seconds [ 1645.867430][ T1987] block nbd5: Possible stuck request ffff888027b5e1c0: control (read@1024,1024B). Runtime 210 seconds [ 1645.867466][ T1987] block nbd5: Possible stuck request ffff888027b5e380: control (read@2048,1024B). Runtime 210 seconds [ 1645.867492][ T1987] block nbd5: Possible stuck request ffff888027b5e540: control (read@3072,1024B). Runtime 210 seconds [ 1646.346271][T12072] syzkaller0: entered promiscuous mode [ 1646.346297][T12072] syzkaller0: entered allmulticast mode [ 1646.351506][T12072] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1646.689955][T12086] netlink: 'syz.2.8690': attribute type 1 has an invalid length. [ 1646.823046][T12098] netlink: 'syz.3.8692': attribute type 9 has an invalid length. [ 1646.857949][T12086] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1646.987828][T12104] IPVS: set_ctl: invalid protocol: 255 100.1.1.1:20004 [ 1647.033175][T12091] bond8: (slave veth13): Enslaving as an active interface with a down link [ 1647.484544][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8695'. [ 1647.632262][T12122] ip6tnl6: entered promiscuous mode [ 1647.638463][T12118] syzkaller1: entered promiscuous mode [ 1647.638639][T12118] syzkaller1: entered allmulticast mode [ 1647.974841][T12139] ip6erspan1: entered allmulticast mode [ 1648.153417][T12148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8701'. [ 1648.400275][T12160] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8704'. [ 1648.658702][T12167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8705'. [ 1648.861240][T12179] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8708'. [ 1649.870651][T12223] netlink: 'syz.4.8716': attribute type 1 has an invalid length. [ 1649.870676][T12223] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8716'. [ 1650.203378][T12236] netlink: 'syz.3.8720': attribute type 1 has an invalid length. [ 1650.304590][T12240] bond7: (slave geneve4): making interface the new active one [ 1650.311437][T12240] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 1650.325230][ T5601] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1650.325306][ T5601] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1650.325341][ T5601] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1650.325374][ T5601] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1650.404729][T12236] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8720'. [ 1650.429567][T12236] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1650.781113][T12248] netlink: Unknown conntrack attr (type=7942, max=9) [ 1650.781154][T12248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1650.875511][T17400] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1650.972210][T12246] bridge0: port 1(netdevsim0) entered blocking state [ 1650.972374][T12246] bridge0: port 1(netdevsim0) entered disabled state [ 1651.035773][ T9498] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1651.066938][T12246] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1651.260159][T12254] syzkaller1: entered promiscuous mode [ 1651.260185][T12254] syzkaller1: entered allmulticast mode [ 1651.370738][T12259] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1651.428296][T12259] bond8 (unregistering): Released all slaves [ 1652.145569][T12272] netlink: 'syz.0.8731': attribute type 10 has an invalid length. [ 1652.751574][T12295] FAULT_INJECTION: forcing a failure. [ 1652.751574][T12295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1652.751608][T12295] CPU: 1 UID: 0 PID: 12295 Comm: syz.3.8737 Not tainted syzkaller #0 PREEMPT(full) [ 1652.751632][T12295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1652.751644][T12295] Call Trace: [ 1652.751652][T12295] [ 1652.751661][T12295] dump_stack_lvl+0xe8/0x150 [ 1652.751694][T12295] should_fail_ex+0x410/0x560 [ 1652.751725][T12295] strncpy_from_user+0x36/0x2c0 [ 1652.751845][T12295] do_getname+0x77/0x250 [ 1652.751874][T12295] user_path_at+0x2a/0x160 [ 1652.751907][T12295] bpf_uprobe_multi_link_attach+0x490/0x11b0 [ 1652.751948][T12295] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 1652.751970][T12295] ? __fget_files+0x2a/0x420 [ 1652.752001][T12295] ? __fget_files+0x2a/0x420 [ 1652.752029][T12295] ? __fget_files+0x2a/0x420 [ 1652.752060][T12295] ? bpf_prog_attach_check_attach_type+0x46a/0x570 [ 1652.752092][T12295] link_create+0x621/0x850 [ 1652.752122][T12295] __sys_bpf+0x760/0xd90 [ 1652.752154][T12295] ? __pfx___sys_bpf+0x10/0x10 [ 1652.752188][T12295] ? __fget_files+0x2a/0x420 [ 1652.752236][T12295] ? ksys_write+0x242/0x270 [ 1652.752269][T12295] ? __pfx_ksys_write+0x10/0x10 [ 1652.752304][T12295] __x64_sys_bpf+0xba/0xd0 [ 1652.752328][T12295] do_syscall_64+0x166/0x520 [ 1652.752357][T12295] ? trace_irq_disable+0x3b/0x140 [ 1652.752377][T12295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.752398][T12295] ? clear_bhb_loop+0x70/0xc0 [ 1652.752423][T12295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.752443][T12295] RIP: 0033:0x7fe01a19e159 [ 1652.752469][T12295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1652.752487][T12295] RSP: 002b:00007fe01af9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1652.752509][T12295] RAX: ffffffffffffffda RBX: 00007fe01a425fa0 RCX: 00007fe01a19e159 [ 1652.752525][T12295] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 000000000000001c [ 1652.752538][T12295] RBP: 00007fe01af9a090 R08: 0000000000000000 R09: 0000000000000000 [ 1652.752552][T12295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1652.752565][T12295] R13: 00007fe01a426038 R14: 00007fe01a425fa0 R15: 00007fff1d16d088 [ 1652.752598][T12295] [ 1652.965043][T12300] tc_dump_action: action bad kind [ 1653.017138][T12292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1653.087559][T12303] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8739'. [ 1653.220980][T12292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8736'. [ 1653.238878][T12303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8739'. [ 1653.238909][T12303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8739'. [ 1653.282135][T12303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8739'. [ 1653.361135][T12302] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8736'. [ 1653.529785][T12321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8742'. [ 1653.602852][T12323] netlink: 'syz.1.8742': attribute type 2 has an invalid length. [ 1653.857186][T12329] x_tables: duplicate underflow at hook 1 [ 1654.391940][T12348] block nbd0: reconnected socket [ 1654.396626][ T5616] block nbd0: Receive control failed (result -107) [ 1654.403608][T12351] FAULT_INJECTION: forcing a failure. [ 1654.403608][T12351] name failslab, interval 1, probability 0, space 0, times 0 [ 1654.403639][T12351] CPU: 1 UID: 0 PID: 12351 Comm: syz.4.8750 Not tainted syzkaller #0 PREEMPT(full) [ 1654.403662][T12351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1654.403673][T12351] Call Trace: [ 1654.403681][T12351] [ 1654.403689][T12351] dump_stack_lvl+0xe8/0x150 [ 1654.403720][T12351] should_fail_ex+0x410/0x560 [ 1654.403749][T12351] should_failslab+0xa8/0x100 [ 1654.403775][T12351] __kmalloc_cache_noprof+0xa3/0x600 [ 1654.403796][T12351] ? bpf_uprobe_multi_link_attach+0x6c9/0x11b0 [ 1654.403819][T12351] ? bpf_uprobe_multi_link_attach+0x6c9/0x11b0 [ 1654.403849][T12351] bpf_uprobe_multi_link_attach+0x6c9/0x11b0 [ 1654.403886][T12351] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 1654.403915][T12351] ? __fget_files+0x2a/0x420 [ 1654.403945][T12351] ? __fget_files+0x2a/0x420 [ 1654.403972][T12351] ? __fget_files+0x2a/0x420 [ 1654.404000][T12351] ? bpf_prog_attach_check_attach_type+0x46a/0x570 [ 1654.404031][T12351] link_create+0x621/0x850 [ 1654.404060][T12351] __sys_bpf+0x760/0xd90 [ 1654.404089][T12351] ? __pfx___sys_bpf+0x10/0x10 [ 1654.404122][T12351] ? __fget_files+0x2a/0x420 [ 1654.404165][T12351] ? ksys_write+0x242/0x270 [ 1654.404195][T12351] ? __pfx_ksys_write+0x10/0x10 [ 1654.404232][T12351] __x64_sys_bpf+0xba/0xd0 [ 1654.404255][T12351] do_syscall_64+0x166/0x520 [ 1654.404282][T12351] ? trace_irq_disable+0x3b/0x140 [ 1654.404301][T12351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.404321][T12351] ? clear_bhb_loop+0x70/0xc0 [ 1654.404344][T12351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.404364][T12351] RIP: 0033:0x7f410099e159 [ 1654.404385][T12351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1654.404405][T12351] RSP: 002b:00007f41017f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1654.404426][T12351] RAX: ffffffffffffffda RBX: 00007f4100c25fa0 RCX: 00007f410099e159 [ 1654.404441][T12351] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 000000000000001c [ 1654.404454][T12351] RBP: 00007f41017f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1654.404467][T12351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1654.404479][T12351] R13: 00007f4100c26038 R14: 00007f4100c25fa0 R15: 00007fff23c5fc08 [ 1654.404510][T12351] [ 1654.616441][T12356] pim6reg: entered allmulticast mode [ 1654.950626][T12364] bond9: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1654.990905][T12364] bond9 (unregistering): Released all slaves [ 1655.051705][T12377] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20003 [ 1655.098974][T12369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8756'. [ 1655.487800][T12392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8762'. [ 1655.729306][T12395] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8761'. [ 1655.908482][T31792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1655.932862][T31792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1655.933922][T31792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1655.950492][T31792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1655.968641][T31792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1656.396695][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1656.401139][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1656.405772][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1656.430544][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1656.439792][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1656.479572][ T5616] [ 1656.481944][ T5616] ====================================================== [ 1656.489001][ T5616] WARNING: possible circular locking dependency detected [ 1656.496039][ T5616] syzkaller #0 Not tainted [ 1656.500447][ T5616] ------------------------------------------------------ [ 1656.507453][ T5616] kworker/u9:2/5616 is trying to acquire lock: [ 1656.513588][ T5616] ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 1656.524022][ T5616] [ 1656.524022][ T5616] but task is already holding lock: [ 1656.531373][ T5616] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 1656.540765][ T5616] [ 1656.540765][ T5616] which lock already depends on the new lock. [ 1656.540765][ T5616] [ 1656.551168][ T5616] [ 1656.551168][ T5616] the existing dependency chain (in reverse order) is: [ 1656.560169][ T5616] [ 1656.560169][ T5616] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 1656.568179][ T5616] down_write+0x96/0x200 [ 1656.573017][ T5616] kernfs_add_one+0x41/0x6f0 [ 1656.578116][ T5616] kernfs_create_dir_ns+0x1a1/0x230 [ 1656.583829][ T5616] internal_create_group+0x440/0x1180 [ 1656.589716][ T5616] cpuhp_invoke_callback+0x434/0x810 [ 1656.595530][ T5616] cpuhp_issue_call+0x3f0/0x750 [ 1656.600899][ T5616] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 1656.607478][ T5616] __cpuhp_setup_state+0x3f/0x60 [ 1656.612930][ T5616] do_one_initcall+0x250/0x870 [ 1656.618205][ T5616] do_initcall_level+0x10a/0x1a0 [ 1656.623662][ T5616] do_initcalls+0x59/0xa0 [ 1656.628504][ T5616] kernel_init_freeable+0x29d/0x3e0 [ 1656.634216][ T5616] kernel_init+0x22/0x1d0 [ 1656.639055][ T5616] ret_from_fork+0x514/0xb70 [ 1656.644166][ T5616] ret_from_fork_asm+0x1a/0x30 [ 1656.649446][ T5616] [ 1656.649446][ T5616] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1656.657257][ T5616] [ 1656.657257][ T5616] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1656.664976][ T5616] cpus_read_lock+0x42/0x160 [ 1656.670085][ T5616] static_key_slow_inc+0x12/0x30 [ 1656.675533][ T5616] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1656.681870][ T5616] nbd_genl_foreach_sock+0x265/0x450 [ 1656.687661][ T5616] nbd_genl_reconfigure+0xbbb/0x1040 [ 1656.693453][ T5616] genl_family_rcv_msg_doit+0x233/0x340 [ 1656.699513][ T5616] genl_rcv_msg+0x614/0x7a0 [ 1656.704529][ T5616] netlink_rcv_skb+0x226/0x4a0 [ 1656.709800][ T5616] genl_rcv+0x28/0x40 [ 1656.714294][ T5616] netlink_unicast+0x7bd/0x940 [ 1656.719572][ T5616] netlink_sendmsg+0x813/0xb40 [ 1656.724845][ T5616] sock_sendmsg_nosec+0x14e/0x190 [ 1656.730379][ T5616] ____sys_sendmsg+0x54e/0x850 [ 1656.735657][ T5616] ___sys_sendmsg+0x2a5/0x360 [ 1656.740852][ T5616] __x64_sys_sendmsg+0x1b1/0x290 [ 1656.746301][ T5616] do_syscall_64+0x166/0x520 [ 1656.751410][ T5616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.757810][ T5616] [ 1656.757810][ T5616] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1656.765461][ T5616] __mutex_lock+0x19d/0x1550 [ 1656.770594][ T5616] nbd_queue_rq+0x373/0xff0 [ 1656.775616][ T5616] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1656.781789][ T5616] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1656.788697][ T5616] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1656.795231][ T5616] blk_mq_run_work_fn+0x16c/0x300 [ 1656.800786][ T5616] process_scheduled_works+0xc3d/0x1630 [ 1656.806847][ T5616] worker_thread+0xa47/0xfb0 [ 1656.811955][ T5616] kthread+0x38b/0x480 [ 1656.816534][ T5616] ret_from_fork+0x514/0xb70 [ 1656.821670][ T5616] ret_from_fork_asm+0x1a/0x30 [ 1656.826959][ T5616] [ 1656.826959][ T5616] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1656.834160][ T5616] __mutex_lock+0x19d/0x1550 [ 1656.839270][ T5616] nbd_queue_rq+0xc1/0xff0 [ 1656.844218][ T5616] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1656.850283][ T5616] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1656.857127][ T5616] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1656.863620][ T5616] blk_mq_run_work_fn+0x16c/0x300 [ 1656.869162][ T5616] process_scheduled_works+0xc3d/0x1630 [ 1656.875225][ T5616] worker_thread+0xa47/0xfb0 [ 1656.880333][ T5616] kthread+0x38b/0x480 [ 1656.884911][ T5616] ret_from_fork+0x514/0xb70 [ 1656.890030][ T5616] ret_from_fork_asm+0x1a/0x30 [ 1656.895335][ T5616] [ 1656.895335][ T5616] -> #4 (set->srcu){.+.+}-{0:0}: [ 1656.902490][ T5616] __synchronize_srcu+0xc9/0x2f0 [ 1656.907955][ T5616] elevator_switch+0x1e8/0x7b0 [ 1656.913341][ T5616] elevator_change+0x2fa/0x480 [ 1656.918639][ T5616] elevator_set_default+0x375/0x440 [ 1656.924353][ T5616] blk_register_queue+0x3f3/0x4e0 [ 1656.929973][ T5616] __add_disk+0x6b8/0xdb0 [ 1656.934829][ T5616] add_disk_fwnode+0x100/0x3a0 [ 1656.940110][ T5616] nbd_dev_add+0x733/0xb60 [ 1656.945042][ T5616] nbd_init+0x168/0x1f0 [ 1656.949712][ T5616] do_one_initcall+0x250/0x870 [ 1656.955011][ T5616] do_initcall_level+0x10a/0x1a0 [ 1656.960575][ T5616] do_initcalls+0x59/0xa0 [ 1656.965436][ T5616] kernel_init_freeable+0x29d/0x3e0 [ 1656.971182][ T5616] kernel_init+0x22/0x1d0 [ 1656.976021][ T5616] ret_from_fork+0x514/0xb70 [ 1656.981129][ T5616] ret_from_fork_asm+0x1a/0x30 [ 1656.986410][ T5616] [ 1656.986410][ T5616] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1656.994225][ T5616] __mutex_lock+0x19d/0x1550 [ 1656.999334][ T5616] elevator_change+0x1af/0x480 [ 1657.004610][ T5616] elevator_set_none+0xb5/0x140 [ 1657.009973][ T5616] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1657.016295][ T5616] nbd_start_device+0x189/0xb30 [ 1657.021667][ T5616] nbd_genl_connect+0x167d/0x1cd0 [ 1657.027202][ T5616] genl_family_rcv_msg_doit+0x233/0x340 [ 1657.033268][ T5616] genl_rcv_msg+0x614/0x7a0 [ 1657.038286][ T5616] netlink_rcv_skb+0x226/0x4a0 [ 1657.043564][ T5616] genl_rcv+0x28/0x40 [ 1657.048059][ T5616] netlink_unicast+0x7bd/0x940 [ 1657.053342][ T5616] netlink_sendmsg+0x813/0xb40 [ 1657.058613][ T5616] sock_sendmsg_nosec+0x14e/0x190 [ 1657.064148][ T5616] ____sys_sendmsg+0x54e/0x850 [ 1657.069429][ T5616] ___sys_sendmsg+0x2a5/0x360 [ 1657.074620][ T5616] __x64_sys_sendmsg+0x1b1/0x290 [ 1657.080074][ T5616] do_syscall_64+0x166/0x520 [ 1657.085183][ T5616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.091592][ T5616] [ 1657.091592][ T5616] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 1657.100187][ T5616] blk_alloc_queue+0x544/0x690 [ 1657.105472][ T5616] __blk_mq_alloc_disk+0x194/0x390 [ 1657.111101][ T5616] nbd_dev_add+0x494/0xb60 [ 1657.116031][ T5616] nbd_init+0x168/0x1f0 [ 1657.120701][ T5616] do_one_initcall+0x250/0x870 [ 1657.126025][ T5616] do_initcall_level+0x10a/0x1a0 [ 1657.131481][ T5616] do_initcalls+0x59/0xa0 [ 1657.136329][ T5616] kernel_init_freeable+0x29d/0x3e0 [ 1657.142073][ T5616] kernel_init+0x22/0x1d0 [ 1657.146913][ T5616] ret_from_fork+0x514/0xb70 [ 1657.152027][ T5616] ret_from_fork_asm+0x1a/0x30 [ 1657.157311][ T5616] [ 1657.157311][ T5616] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1657.164514][ T5616] fs_reclaim_acquire+0x71/0x100 [ 1657.169964][ T5616] kmem_cache_alloc_noprof+0x5f/0x600 [ 1657.175855][ T5616] __kernfs_iattrs+0xdd/0x380 [ 1657.181046][ T5616] kernfs_iop_setattr+0xe6/0x3f0 [ 1657.186502][ T5616] notify_change+0xbba/0xea0 [ 1657.191604][ T5616] do_truncate+0x1c2/0x250 [ 1657.196537][ T5616] path_openat+0x15b5/0x1d60 [ 1657.201639][ T5616] do_file_open+0x23e/0x4a0 [ 1657.206654][ T5616] do_sys_openat2+0x115/0x200 [ 1657.211870][ T5616] __x64_sys_openat+0x138/0x170 [ 1657.217235][ T5616] do_syscall_64+0x166/0x520 [ 1657.222343][ T5616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.228750][ T5616] [ 1657.228750][ T5616] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1657.237256][ T5616] __lock_acquire+0x164c/0x2de0 [ 1657.242625][ T5616] lock_acquire+0x115/0x350 [ 1657.247636][ T5616] down_write+0x96/0x200 [ 1657.252387][ T5616] kernfs_link_sibling+0x4c7/0x5a0 [ 1657.258010][ T5616] kernfs_add_one+0x2db/0x6f0 [ 1657.263238][ T5616] kernfs_create_dir_ns+0x1a1/0x230 [ 1657.268972][ T5616] sysfs_create_dir_ns+0x12f/0x2a0 [ 1657.274601][ T5616] kobject_add_internal+0x622/0xcd0 [ 1657.280413][ T5616] kobject_add+0x163/0x240 [ 1657.285336][ T5616] device_add+0x3fa/0xb80 [ 1657.290175][ T5616] hci_conn_add_sysfs+0xd5/0x210 [ 1657.295677][ T5616] hci_conn_complete_evt+0x8a8/0x1350 [ 1657.301593][ T5616] hci_event_packet+0x6cd/0xf10 [ 1657.306954][ T5616] hci_rx_work+0x3ee/0x1020 [ 1657.311967][ T5616] process_scheduled_works+0xc3d/0x1630 [ 1657.318021][ T5616] worker_thread+0xa47/0xfb0 [ 1657.323123][ T5616] kthread+0x38b/0x480 [ 1657.327700][ T5616] ret_from_fork+0x514/0xb70 [ 1657.332806][ T5616] ret_from_fork_asm+0x1a/0x30 [ 1657.338088][ T5616] [ 1657.338088][ T5616] other info that might help us debug this: [ 1657.338088][ T5616] [ 1657.348303][ T5616] Chain exists of: [ 1657.348303][ T5616] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1657.348303][ T5616] [ 1657.362719][ T5616] Possible unsafe locking scenario: [ 1657.362719][ T5616] [ 1657.370154][ T5616] CPU0 CPU1 [ 1657.375503][ T5616] ---- ---- [ 1657.380851][ T5616] lock(&root->kernfs_rwsem); [ 1657.385602][ T5616] lock(cpuhp_state_mutex); [ 1657.392699][ T5616] lock(&root->kernfs_rwsem); [ 1657.399996][ T5616] lock(&root->kernfs_iattr_rwsem); [ 1657.405271][ T5616] [ 1657.405271][ T5616] *** DEADLOCK *** [ 1657.405271][ T5616] [ 1657.413403][ T5616] locks held by kworker/u9:2/5616: 4, last CPU#1: [ 1657.419802][ T5616] #0: ffff888047553940 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1657.430770][ T5616] #1: ffffc900045bfc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1657.442770][ T5616] #2: ffff8880401040b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 1657.452605][ T5616] #3: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 1657.462429][ T5616] [ 1657.462429][ T5616] stack backtrace: [ 1657.468307][ T5616] CPU: 1 UID: 0 PID: 5616 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 1657.477751][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1657.487799][ T5616] Workqueue: hci1 hci_rx_work [ 1657.492473][ T5616] Call Trace: [ 1657.495744][ T5616] [ 1657.498665][ T5616] dump_stack_lvl+0xe8/0x150 [ 1657.503253][ T5616] print_circular_bug+0x2e2/0x300 [ 1657.508296][ T5616] check_noncircular+0x12f/0x150 [ 1657.513229][ T5616] __lock_acquire+0x164c/0x2de0 [ 1657.518071][ T5616] ? __lock_acquire+0x747/0x2de0 [ 1657.523005][ T5616] lock_acquire+0x115/0x350 [ 1657.527498][ T5616] ? kernfs_link_sibling+0x4c7/0x5a0 [ 1657.532781][ T5616] down_write+0x96/0x200 [ 1657.537010][ T5616] ? kernfs_link_sibling+0x4c7/0x5a0 [ 1657.542292][ T5616] ? __pfx_down_write+0x10/0x10 [ 1657.547129][ T5616] ? kernfs_root+0x1c/0x230 [ 1657.551621][ T5616] ? kernfs_root+0x1c/0x230 [ 1657.556139][ T5616] ? kernfs_root+0x1c/0x230 [ 1657.560632][ T5616] ? kernfs_root+0x1ea/0x230 [ 1657.565207][ T5616] kernfs_link_sibling+0x4c7/0x5a0 [ 1657.570313][ T5616] kernfs_add_one+0x2db/0x6f0 [ 1657.574982][ T5616] kernfs_create_dir_ns+0x1a1/0x230 [ 1657.580179][ T5616] sysfs_create_dir_ns+0x12f/0x2a0 [ 1657.585289][ T5616] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1657.590917][ T5616] ? do_raw_spin_unlock+0xf5/0x200 [ 1657.596025][ T5616] kobject_add_internal+0x622/0xcd0 [ 1657.601218][ T5616] kobject_add+0x163/0x240 [ 1657.605626][ T5616] ? __pfx_kobject_add+0x10/0x10 [ 1657.610555][ T5616] ? get_device_parent+0x366/0x3a0 [ 1657.615656][ T5616] device_add+0x3fa/0xb80 [ 1657.619980][ T5616] hci_conn_add_sysfs+0xd5/0x210 [ 1657.624908][ T5616] hci_conn_complete_evt+0x8a8/0x1350 [ 1657.630278][ T5616] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1657.636255][ T5616] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 1657.642055][ T5616] ? skb_pull_data+0xf0/0x200 [ 1657.646732][ T5616] hci_event_packet+0x6cd/0xf10 [ 1657.651577][ T5616] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 1657.657377][ T5616] ? __pfx_hci_event_packet+0x10/0x10 [ 1657.662738][ T5616] ? audit_filter_rules+0x36b0/0x5d10 [ 1657.668107][ T5616] ? hci_send_to_monitor+0xe2/0x590 [ 1657.673384][ T5616] hci_rx_work+0x3ee/0x1020 [ 1657.677885][ T5616] ? process_scheduled_works+0x97a/0x1630 [ 1657.683603][ T5616] process_scheduled_works+0xc3d/0x1630 [ 1657.689151][ T5616] ? __pfx_process_scheduled_works+0x10/0x10 [ 1657.695130][ T5616] ? assign_work+0x3cf/0x5d0 [ 1657.699711][ T5616] worker_thread+0xa47/0xfb0 [ 1657.704302][ T5616] kthread+0x38b/0x480 [ 1657.708365][ T5616] ? __pfx_worker_thread+0x10/0x10 [ 1657.713469][ T5616] ? __pfx_kthread+0x10/0x10 [ 1657.718046][ T5616] ret_from_fork+0x514/0xb70 [ 1657.722647][ T5616] ? __pfx_ret_from_fork+0x10/0x10 [ 1657.727784][ T5616] ? __switch_to+0xc89/0x1420 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1657.732481][ T5616] ? __pfx_kthread+0x10/0x10 [ 1657.737081][ T5616] ret_from_fork_asm+0x1a/0x30 [ 1657.741857][ T5616] [ 1657.795351][T12412] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8767'. [ 1658.471974][ T979] team0: Port device syz_tun removed [ 1658.640589][ T5601] smbdirect: ib_dev[s`z1] removed [ 1659.132971][ T4816] bridge_slave_1: left allmulticast mode [ 1659.132995][ T4816] bridge_slave_1: left promiscuous mode [ 1659.133136][ T4816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1659.156173][ T4816] bridge_slave_0: left allmulticast mode [ 1659.156206][ T4816] bridge_slave_0: left promiscuous mode [ 1659.156371][ T4816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1659.185885][ T4816] pim6reg: left allmulticast mode [ 1659.380533][ T4816] batman_adv: batadv0: Removing interface: gretap0 [ 1659.533085][ T4816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1659.534064][ T4816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1659.534596][ T4816] bond0 (unregistering): Released all slaves [ 1659.562371][ T4816] bond1 (unregistering): Released all slaves [ 1659.579674][ T4816] bond2 (unregistering): Released all slaves [ 1659.584914][ T4816] bond3 (unregistering): Released all slaves [ 1659.629930][ T4816] bond4 (unregistering): Released all slaves [ 1659.658546][ T4816] bond5 (unregistering): (slave batadv1): Releasing active interface [ 1659.659844][ T4816] bond5 (unregistering): Released all slaves [ 1659.676246][ T4816] bond6 (unregistering): Released all slaves [ 1659.718192][ T4816] bond7 (unregistering): Released all slaves [ 1659.736332][ T4816] bond8 (unregistering): Released all slaves [ 1659.908747][ T4816] tipc: Left network mode [ 1660.199853][ T4816] batman_adv: batadv0: Removing interface: macvlan3 [ 1660.280690][ T4816] hsr_slave_0: left promiscuous mode [ 1660.282191][ T4816] hsr_slave_1: left promiscuous mode [ 1660.282717][ T4816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1660.284286][ T4816] batman_adv: batadv0: Removing interface: vlan4 [ 1660.533947][ T4816] team0 (unregistering): Port device team_slave_1 removed [ 1660.552574][ T4816] team0 (unregistering): Port device team_slave_0 removed [ 1660.661323][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1661.054279][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1661.341619][ T4816] IPVS: stop unused estimator thread 0... [ 1661.472470][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1661.840947][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1663.015096][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!