last executing test programs: 1m23.916879409s ago: executing program 0 (id=622): pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r1, 0x2, 0x100000000000003) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00932a5e128000000005f5ffffff00"/28], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3b1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) (async) tee(r0, r1, 0x2, 0x100000000000003) (async) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00932a5e128000000005f5ffffff00"/28], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3b1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) 1m9.060931569s ago: executing program 0 (id=622): pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r1, 0x2, 0x100000000000003) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00932a5e128000000005f5ffffff00"/28], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3b1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) (async) tee(r0, r1, 0x2, 0x100000000000003) (async) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00932a5e128000000005f5ffffff00"/28], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3b1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) 55.460017837s ago: executing program 0 (id=622): pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r1, 0x2, 0x100000000000003) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00932a5e128000000005f5ffffff00"/28], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3b1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) (async) tee(r0, r1, 0x2, 0x100000000000003) (async) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00932a5e128000000005f5ffffff00"/28], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3b1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) 39.731089433s ago: executing program 0 (id=622): pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r1, 0x2, 0x100000000000003) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00932a5e128000000005f5ffffff00"/28], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3b1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) (async) tee(r0, r1, 0x2, 0x100000000000003) (async) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00932a5e128000000005f5ffffff00"/28], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3b1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) 24.640933381s ago: executing program 0 (id=622): pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r1, 0x2, 0x100000000000003) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00932a5e128000000005f5ffffff00"/28], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3b1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) (async) tee(r0, r1, 0x2, 0x100000000000003) (async) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00932a5e128000000005f5ffffff00"/28], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3b1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) 10.660529355s ago: executing program 0 (id=622): pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r1, 0x2, 0x100000000000003) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00932a5e128000000005f5ffffff00"/28], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3b1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) (async) tee(r0, r1, 0x2, 0x100000000000003) (async) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00932a5e128000000005f5ffffff00"/28], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3b1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) 3.650839132s ago: executing program 3 (id=1153): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c503"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, &(0x7f0000000040)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x1, 0x24}, 0x28) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r5, 0x0, 0x3, 0x0, &(0x7f0000001180)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, 0x0}, 0x64) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) sendfile(r8, r8, 0x0, 0x7ffff000) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000000300)=""/27, 0x1b}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x2, 0x6, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), 0x0, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r6}, 0x41) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000480)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000096e92fbc763d9ed608eb281c9ebe1fb9e688aefb83bc5a30d50b31a6656f7a5d1fe0447fc80d491c16da13246c9714f9c295dd686030c56633199bd76c43b511df441d603820197580233e4c4c69f484a0faeb8ec41c887d9f465067f34f2caf6879fb89f6a550", @ANYRES16=r4, @ANYBLOB="050000010000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0500530000000000"], 0x24}}, 0x0) 3.061853989s ago: executing program 3 (id=1157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000002c0)={0x0, 0xd, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1a4}}, 0x0) unshare(0x62040200) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, 0x0, 0x10da) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000380000000000019078ac1e0001ac1414aa0b00907803000000450000ac14140ae00000010420460022eb00009334f65dc1592b12e7339bfabceeca6197"], 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x7a, 0x0, 0xa3}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) write$cgroup_subtree(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="2d63707561636374202b63707561636374202d6e6574202d726c696d6974202dea656d6f7279202d6e6574202d637075736574202db43b67bd11284b0cd0d09e7d3ff660e77f65b89909eecd3679b1d384ffd0c56b02bd526ddf0b80c808bd83db1bfae591ff1c1ebce53fec05726b772ea5a9d5619cca12ffa62c0c0a0bf02f4039392a728b289de2fdd1b5273a1929be53f7c86ed1ca622d9575df4931a5e3ca6bd828880000"], 0x34) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000040000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x2042a, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00b64b05000000b30000007f00000000000000", @ANYRES32, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18080000b00000000000000004000400851000000600000018100000", @ANYRES32=r8, @ANYBLOB="000000000000000066000000f101100018000000f8ffffff00000000011040009500000000000000360a00000000610018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500000006000000950000000000000073f0f567e66b8fe8bf2a1287"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) setsockopt$inet6_tcp_int(r7, 0x6, 0x0, &(0x7f0000000180)=0x7ff57fc4, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.433000819s ago: executing program 2 (id=1160): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@security={'security\x00', 0xe, 0x4, 0x310, 0xffffffff, 0x98, 0x158, 0x0, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xffffffff, 'batadv0\x00', 'vxcan1\x00', {0xff}, {}, 0x8, 0x3, 0x4}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x3, 0x401}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xf8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x5}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x42}, 0xff000000, 0xff, 'ip6erspan0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x0, 0x1, 0x53}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x56}}, @common=@inet=@ecn={{0x28}, {0x20, 0x20, 0xe, 0x6}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4, 0x7, 0x4, 0x7, 0x8, 0x1], 0x6, 0x7}, {0x1, [0x5, 0x0, 0x0, 0x6, 0x3, 0x4], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(0xffffffffffffffff, r1, 0x0, 0x9c) 2.351530818s ago: executing program 1 (id=1162): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, 0x0, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}], 0x1, 0x0) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xfffc, 0x2}, 0x6) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 2.256969653s ago: executing program 2 (id=1163): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@updsa={0x188, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@empty}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0x0, 0xfffffffffffffff7}, {}, {0x0, 0x2, 0xffffffd6}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}, @algo_aead={0x4c, 0x12, {{'authencesn(vmac(khazad),ctr-aes-neonbs-sync)\x00'}, 0x0, 0xa0}}]}, 0x188}}, 0x4000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r7 = socket(0x11, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000005c0)=0x420000) setsockopt(r7, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) close(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) r9 = socket(0x2b, 0x80801, 0x1) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) sendmsg$NL80211_CMD_ADD_TX_TS(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x24004000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r12 = accept4(r0, 0x0, &(0x7f0000000400), 0x80800) r13 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r13, 0x29, 0xc8, 0x0, 0x0) r14 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r14, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @mcast2, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) r15 = socket(0x8, 0x6, 0x5) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, r2, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40040}, 0x8001) 2.217974252s ago: executing program 1 (id=1164): r0 = socket$tipc(0x1e, 0x2, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000001500)={0x28, 0x0, 0x2710, @host}, 0x10) (async) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) (async) unshare(0x22020600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) (async) connect$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}, 0x3}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0}, 0x50) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FICLONE(r4, 0x40049409, r4) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000000)=0x5, 0x12) (async) sendfile(r6, r5, 0x0, 0x1) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, r7, 0x4}, 0x38) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r8, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xf, 0x1, &(0x7f0000000040)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f00000000c0)='syzkaller\x00', 0xfffffff9, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @cgroup_device=0x13, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xdf) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r10, &(0x7f0000000000)=0x8, 0x12) close(r10) (async) splice(r9, 0x0, r10, 0x0, 0x74, 0x0) 2.058792295s ago: executing program 2 (id=1165): bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000610000005400010000000001950000000000000052132a62b2754c74bbd75ae259531a31ff7fffffdb400ffcbe4db16b9a6f2fffb73fe9056542f61a8cedd5a2cb9d90461c8b708ce5fcd6cd8af818f4831659a1f1d316aa6132dafed69af792e7ed65d1e7"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@ipv6_getnexthop={0x34, 0x6a, 0x109, 0x70bd28, 0x25dfdbfb, {}, [@NHA_MASTER={0x5}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x2100, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0x1a, 0x0, 0x0, @u64=0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x2406c089}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.936896063s ago: executing program 4 (id=1166): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x1000000000000000}]}}]}, 0x40}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r7, 0x89e3, &(0x7f0000000000)={0x7c, 0x7, 0xa, 0x4, 0x2, 0x81}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x15, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x0, 0x1, 0x6, 0x9, 0xfffffffffffffff8, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0xd, &(0x7f00000001c0)=""/13, 0x41100, 0x1e, '\x00', r4, 0x25, r6, 0x8, &(0x7f0000000200)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xd, 0x9, 0x34cf}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r1, r1], 0x0, 0x10, 0x982}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x400, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x820}, [@IFLA_WEIGHT={0x8, 0xf, 0xda0}]}, 0x28}}, 0x0) 1.859507157s ago: executing program 3 (id=1167): socket$netlink(0x10, 0x3, 0x7) (async) r0 = socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r0, @ANYBLOB="0000000046146224280012800b0001006d61637365630000180002800c0004000100000100c28000050003000f"], 0x48}}, 0x40000) 1.742655563s ago: executing program 2 (id=1168): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="850000008c0000009c3bccdc000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xe, 0xfc76, &(0x7f0000000180)=""/153, 0x0, 0xea, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x61, 0x10, &(0x7f0000000000), 0xfffffffffffffe77}, 0x48) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc01000000020000000200000000000000000000000000000800"], 0xe0}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x8, 0x6, 0x5f0, 0x3e0, 0x0, 0x3e0, 0x3e0, 0x2f0, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0x108, 0x130, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x4, {0x3}}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@local, 0x0, 0x32, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x21}, [0xffffff00, 0xff, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff, 0xffffffff], 'veth0_virt_wifi\x00', 'vlan0\x00', {0xff}, {0xff}, 0x21, 0x8, 0x0, 0x4e}, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@hbh={{0x48}, {0x101, 0x0, 0x1, [0x8, 0xc, 0x8001, 0x8, 0x2, 0x2, 0x9, 0x4, 0x579, 0xf7fd, 0x6, 0xfff8, 0x6, 0x1, 0x2, 0x9], 0x10}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) 1.532913869s ago: executing program 4 (id=1169): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) (fail_nth: 6) 1.520585606s ago: executing program 3 (id=1170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_EMATCHES={0x34, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x9, 0x9, 0x40}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) r10 = socket$kcm(0x29, 0x0, 0x0) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000180)={0x0, 'wg1\x00', {0x4}, 0x4}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r11, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r13, &(0x7f00000000c0), 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x800000) sendfile(r13, r1, 0x0, 0x10000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) r14 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r14, 0x1, 0x41, &(0x7f0000000100)=0x8080, 0x4) 1.20266505s ago: executing program 2 (id=1171): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@type_tag={0x5, 0x0, 0x0, 0x12, 0x3}, @const={0xd, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x5f]}}, &(0x7f0000000380)=""/67, 0x33, 0x43, 0x1, 0xffffe25c}, 0x28) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@restrict={0xe, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x5f]}}, &(0x7f0000000500)=""/221, 0x27, 0xdd, 0x1, 0x6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xc, 0xffff5e4e, 0x5, 0x100, 0x2408, r0, 0x3f8f, '\x00', r1, r2, 0x5, 0x5, 0x2}, 0x50) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtaction={0xe4, 0x30, 0x109, 0x0, 0x0, {}, [{0xd0, 0x1, [@m_nat={0xcc, 0x1, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @remote, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x1, 0x3, 0x80000000, 0x2}, @rand_addr=0x64010100, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd064, 0x7f, 0x1, 0x7ff, 0xe}, @broadcast, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x1a, 0x1, {{0x5e, 0x4, 0x10000000, 0x0, 0x3}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe4}}, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000280)=""/252, &(0x7f0000000100)=0xfc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r8, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x40) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r11, 0x2000000, 0x6, 0x0, &(0x7f00000000c0)="13435c46632b", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)={0x28, r10, 0x1, 0x3, 0x0, {{0xa}, {@void, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_IDX={0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48881}, 0x40) 972.799241ms ago: executing program 4 (id=1172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x44000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000080)={0x11, 0xe, 0x0, 0x1, 0x6}, 0x14) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x3, 0x9, 0xa4}, 0x20) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1073eeda8705da74bc83496e", 0xc}], 0x1}}], 0x1, 0x8810) socket(0x2b, 0x80801, 0x1) r8 = socket$inet6(0xa, 0x80803, 0x83) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xae}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast1, 0x4000, 0x0, 0x0, 0x0, 0x9}}, 0xe8) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r10, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r11 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) ioctl$SIOCAX25GETINFOOLD(r11, 0x89e9, &(0x7f00000001c0)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) sendmsg$nl_route(r10, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000007115040029bd7000fedbdf2507000000", @ANYRES32=r12, @ANYBLOB="0c0001800500060002000000"], 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$alg(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4040001}, 0x0) 923.224442ms ago: executing program 1 (id=1173): r0 = socket$igmp6(0xa, 0x3, 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000001bc0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f80)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0xe0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x6}, {0x0, 0x5, 0x2}, {0xffffffffffffffff, 0x2, 0x2}, 0x401, 0xe1}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0xfff, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) 608.944045ms ago: executing program 4 (id=1174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="12000000180001002bbd7000fbdbdf251d"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4044800) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = gettid() (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async) shutdown(r6, 0x1) close(r6) (async) sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, 0x0, 0x0) (async) setsockopt$inet_tcp_int(r8, 0x6, 0x3, &(0x7f0000000000)=0x3, 0x4) close(0x4) (async) r9 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) (async) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0xfffffffd, @private2}, 0x1c) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a"], 0x110}}, 0x0) (async) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) recvmsg$unix(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x1c0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000061114a0000000000160000000000000095007400000000001fd5f90f8c8e63aee15682dd69927c5807eb0ad66d218f5403d013b43b92b5bb790d7cc68967b9b4a81e77ceb33f66b339eb5b66066aed758fe4719389fd919835bc6ae05bc28cd1a8d34034b6"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) 608.323856ms ago: executing program 1 (id=1175): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003e00070100000000fcdbdf25047c0000040000001400018008001600", @ANYRES32=0x0, @ANYBLOB="0600060080"], 0x2c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000000c0)={0x0, 0xffffffffffffffdf, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8011}, 0x4000) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() sendmsg$unix(0xffffffffffffffff, 0x0, 0x4004881) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x24000000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)='e', &(0x7f0000000000)=""/6, 0x2}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) 505.256704ms ago: executing program 3 (id=1176): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x709d27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40f55, 0x403a2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x20040040) 485.527099ms ago: executing program 4 (id=1177): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x5811, 0x9, 0xfffffffb, 0xffff}, 0x6f) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r3, 0x852ac000) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0xf7, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r3, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@private2, @in=@empty, 0x4e23, 0x1, 0x4e21, 0x7ff, 0xa, 0xa0, 0xa0, 0x2c, 0x0, r2}, {0x100, 0x17, 0x9, 0x7, 0xa4e, 0x6, 0x4, 0xfffffffffffffffd}, {0x55a, 0xac, 0x2, 0x7}, 0x7, 0x6e6bbb, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x4d6, 0x6c}, 0x2, @in=@remote, 0x34ff, 0x2, 0x2, 0x9, 0x2e4d, 0xfffffffd, 0x6}}, 0xe8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1}, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0xf, 0x8, 0x80000000, 0xfffffffb, 0x24, 0x9, 0xd}, &(0x7f0000000240)=0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac1414210000000000000000000000002001000000000000000000000000000000000000000000000000020000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000580)=r7, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000380)={'tunl0\x00', r1, 0x7, 0x1, 0x0, 0x6, {{0x5, 0x4, 0x2, 0x2d, 0x14, 0x64, 0x0, 0xe0, 0x2f, 0x0, @local, @empty}}}}) r10 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010104, @in=@loopback, 0x0, 0x0, 0x400, 0xfffc, 0xa, 0x0, 0x0, 0x0, r9}, {0x703e, 0x2, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x8000000000000000, 0x9, 0x53e5, 0x21}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in=@loopback, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1406, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xf9) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@local, @remote, 0x17, 0xe}}) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 421.488615ms ago: executing program 1 (id=1178): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0xbb}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 192.04746ms ago: executing program 3 (id=1179): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='mm_page_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061109a000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x140e, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x40) r6 = epoll_create1(0x80000) r7 = socket$unix(0x1, 0x1, 0x0) close(r7) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0xa0028000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) write(r2, &(0x7f0000000240)="94", 0x1) vmsplice(r10, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r1, r10, 0x8f5, 0x0) write(r8, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0xc, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r12, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r11}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r13, &(0x7f0000000500)="b4767c", &(0x7f0000000400)=""/198}, 0x20) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000004) 156.630088ms ago: executing program 4 (id=1180): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r3, 0x4010744d, 0x0) (async) ioctl$PPPIOCSMRRU(r3, 0x4010744d, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="9fbeb3fea816fffdffffffff86dd600a843500140601fe8000000000000000000000000000bbfe80000000000000a9f0dd0a000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000020000008500000089000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x1e00, 0x61, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000280)=0xfffffffffffffff8) (async) ioctl$int_in(r6, 0x5452, &(0x7f0000000280)=0xfffffffffffffff8) close(r6) (async) close(r6) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000006c0)={0x0, 0x81, 0x30, 0xe6, 0xfff}, &(0x7f0000000700)=0x18) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000740)={r7, @in={{0x2, 0x4e22, @empty}}}, 0x84) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0x43, 0xa0, 0x238, 0x98, 0x330, 0x178, 0x178, 0x330, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1f0, 0x238, 0x0, {0x0, 0x7a010000}, [@common=@inet=@hashlimit3={{0x158}, {'bond_slave_0\x00', {0x9, 0x0, 0x57, 0x0, 0x0, 0x1, 0xe1, 0x3}}}, @inet=@rpfilter={{0x28}, {0xbb}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x428) (async) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0x43, 0xa0, 0x238, 0x98, 0x330, 0x178, 0x178, 0x330, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1f0, 0x238, 0x0, {0x0, 0x7a010000}, [@common=@inet=@hashlimit3={{0x158}, {'bond_slave_0\x00', {0x9, 0x0, 0x57, 0x0, 0x0, 0x1, 0xe1, 0x3}}}, @inet=@rpfilter={{0x28}, {0xbb}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x428) syz_emit_ethernet(0x470, &(0x7f0000000b40)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd600a8435043a0601fe8000000000000000000000000000aafe8000000000000000000000000000aa670009e06800000033030000000000000108000000000000000004010000010001030000000401042f2200000000000005020001010700000000000000c20400000006040109000100c910fc0100000000000000000000000000000738000000010c0804000000000004000000fffffffffeffffff090000000000000004000000000000000700000000000000010000000000000004aaf726594562a96a1f473277b6566f9f97813d8dba0ba44d200ae6dbbdcf15e2361384d94b46bdc9b26c3593d0e0e434c0db90461d543ad8dfde3d521009171c8f0779b4e0f59c110510a45e261096d657a88321aacb43e0b73450b18f441094326a6cca233ccf0b766ef9aac4fb48e04dbe4c9ab59498668d3c7a00e831c5e766e0de0b45cd3962adb6a3bf2f3db6ad6639dda453704a895e034827bcf38d8fd37fc3198f67dace645f0100000000000000110c040604680200fe8000000000000000000000000000bbfc000000000000000000000000000000fc020000000000000000000000000001fc010000000000000000000000000000fe800000000000000000000000000030000000000000000000000000000000011d0500000000000004010d000100000100000100050201ffc91000000000000000000000ffff7f00000105020006010100c20400000006003a02040113080e00fc0000000000000000000000000000010802040103080184fe8000000000000000000000000000bb013d000000000000f378bc141eef4b6d41ea8b5e324ee561ee5ff92f7268fdf2796a63cd1a91456c084553336a286cfa934c60e1488ac20415e892cbbacf3022e51fc05e387489be7a5fb7bfa619c8b1f13bc8cc056bbab7ea0edc60e31c24fd3b4908f595f7fde8f0c6a4e43931fbade282cf97bc7de168f65b86253da0b383b03d0728000000000810d4a0090000000000000000000000000000000700000000000000000000000000000005b9776c8a3fb7922d21e90dc8b1c5802115defafa48a88dd685aa6789ab89e44ca9e3ddd489829835b4ed43a1dfdcbaae6a747023e6fed469c1938f0a7569a266e9fdfc4307a264197c208d9edd0be73a36951d9358e9ed0eabfdc598ff16467bde49206f48c7b32d0f1ee7385df95e1d6a81d0a024030db3d31a942711fc4c86d13cfd083372ba1b7108f93951f106d9c5996991e247d46c59fadc3c4849063fd3a0ee27c1400be0acae0b9d2005580d7efcfe95e67caf2918a2040106c204000000060730000000020a070300a70000000000000001000100000000000f00000000000000070000000000000023770000000000001052add39cd634e58130ec333f5e6692b14a1a44defe0fc0cbb87e058e9e0ad9812f5e50fa5ed9979b697c6244e9ef8f0f24fc9617d5977ede9a3934083e37250d31405b702e51b0581871010928dd972210e354000000004e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a00200009078000013123defe84aba89e207000000f8ffffff4fe5000000"], 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@delqdisc={0xd8, 0x25, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0xffea, 0x1}, {0x13, 0xb}}, [@TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x6, 0x5, 0x4, 0x2, 0x1, 0x1, 0x1}}, {0x6, 0x2, [0xff]}}, {{0x1c, 0x1, {0x0, 0x8, 0x7f, 0xa60, 0x1, 0x6, 0x8, 0x7}}, {0x12, 0x2, [0x8, 0x8000, 0x4a8, 0x1e2, 0xb0c, 0x8, 0xc]}}, {{0x1c, 0x1, {0x81, 0x8, 0x1, 0x1, 0x0, 0x2181, 0x4, 0x6}}, {0x10, 0x2, [0x4, 0x100, 0xff, 0xe5, 0xd, 0x8]}}]}, @TCA_RATE={0x6, 0x5, {0xc, 0xc}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x48a}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0xae}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@delqdisc={0xd8, 0x25, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0xffea, 0x1}, {0x13, 0xb}}, [@TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x6, 0x5, 0x4, 0x2, 0x1, 0x1, 0x1}}, {0x6, 0x2, [0xff]}}, {{0x1c, 0x1, {0x0, 0x8, 0x7f, 0xa60, 0x1, 0x6, 0x8, 0x7}}, {0x12, 0x2, [0x8, 0x8000, 0x4a8, 0x1e2, 0xb0c, 0x8, 0xc]}}, {{0x1c, 0x1, {0x81, 0x8, 0x1, 0x1, 0x0, 0x2181, 0x4, 0x6}}, {0x10, 0x2, [0x4, 0x100, 0xff, 0xe5, 0xd, 0x8]}}]}, @TCA_RATE={0x6, 0x5, {0xc, 0xc}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x48a}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0xae}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="000010000000000014001280000400028008000a00"/32, @ANYRES32=r10, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r11], 0x5c}}, 0x40) 80.570641ms ago: executing program 1 (id=1181): r0 = socket$tipc(0x1e, 0x4, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111520000000000850000008900000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x4}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="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", 0x14d}, {&(0x7f0000000280)="5b4ea80f20d7212327afde5e7a457cde2dff9073f71979", 0x17}, {&(0x7f00000002c0)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383f1c9f5be8e55148723ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae22356781c580df817f3168269eaeeae014fa9b1878bd89e2acb4853ffd7b9a06d7f5ff090c605f5d343e6d93c80d747365d21acea325c44fbb87f6271a2d9333e9b9dd1d36dfea61641d34fd54cd2970ac14acdadd04357bdd44bc926d0adef887b2e25c2f435ce79bac1d1f473c3a49a12aa5c5cfa4bfa4fd2470308ed259e62c218aee67006a3ca187c9aa13a806d99b2275341fd6022940537b1cb1fd2389f417ea92c6e77a09a9d09a98c4e2f0912d36b47588ff991aa98c3c650055bacb669aaf68dd4f8a7b43569c9af62e7cee6ba05278fe8642feafa5c436cb13fa45b3cdf750f8956c493acf7c561b12259331a363c74fb5f2947652ced415b0986b673680e8ad7bad823ff84c30681cbe45114510d9aa6f423f212bcdf1c244178ae31474d9f176707e9c481057f72d489372f7daeba51e3ea86895c8eed109566ad19f3957d0df21a671fce2d674c207d8643c85a018834f4e8e3992e6991d815", 0x1e0}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000000080)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc78a12ad1a30e4f7038336f1af1d61b0409988f1755e9b3ba9919b2a4952ceda920f5f0e22dd247d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870691200e428d5dcae697fa5a1e48df472ebb098aeb32e4049eba9f92be1ef1b6609f2b91c449dca240f", 0x95}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x4000000000001f4, 0x81) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x0, 0x1, 0x0, &(0x7f0000001c80)) socketpair(0x27, 0x5, 0x9, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$kcm(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="dd3fe0e65cb1a2bd3f2fe37a55d54d86218b3a8269c91bf2ef9d9063b8febb524389fade7877e690bb7c0d6d2f3e120fb36bc6cc42ee555325aef444da06b3af4523d47d5f4257ff081bf0531cb5fdcfbbd82b258f075b674517a4694e28ed68fef27c7ed58ac4d16bbd2e578267b031f34cebb7", 0x74}], 0x1}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000240)='kfree_skb\x00', r1, 0x0, 0x8}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 0s ago: executing program 2 (id=1182): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) (fail_nth: 7) kernel console output (not intermixed with test programs): 0 [ 201.310846][ T7633] ? import_iovec+0x74/0xa0 [ 201.310873][ T7633] ___sys_sendmsg+0x21f/0x2a0 [ 201.310893][ T7633] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.310956][ T7633] ? __fget_files+0x2a/0x420 [ 201.310979][ T7633] ? __fget_files+0x3a0/0x420 [ 201.311016][ T7633] __x64_sys_sendmsg+0x19b/0x260 [ 201.311037][ T7633] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 201.311066][ T7633] ? __pfx_ksys_write+0x10/0x10 [ 201.311085][ T7633] ? rcu_is_watching+0x15/0xb0 [ 201.311113][ T7633] ? do_syscall_64+0xbe/0x3b0 [ 201.311144][ T7633] do_syscall_64+0xfa/0x3b0 [ 201.311167][ T7633] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.311190][ T7633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.311209][ T7633] ? clear_bhb_loop+0x60/0xb0 [ 201.311232][ T7633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.311249][ T7633] RIP: 0033:0x7fa0f6f8e929 [ 201.311268][ T7633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.311282][ T7633] RSP: 002b:00007fa0f7e66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.311304][ T7633] RAX: ffffffffffffffda RBX: 00007fa0f71b5fa0 RCX: 00007fa0f6f8e929 [ 201.311317][ T7633] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 201.311328][ T7633] RBP: 00007fa0f7e66090 R08: 0000000000000000 R09: 0000000000000000 [ 201.311339][ T7633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.311349][ T7633] R13: 0000000000000000 R14: 00007fa0f71b5fa0 R15: 00007ffda2632348 [ 201.311394][ T7633] [ 201.313951][ T7633] debugfs: out of free dentries, can not create file 'netdev@ffff888034b7c610' [ 202.046780][ T7639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.087084][ T7646] IPVS: set_ctl: invalid protocol: 50 172.30.3.1:20003 [ 202.095624][ T7639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.109666][ T7646] Cannot find add_set index 3 as target [ 202.552084][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 202.585065][ T7664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.424'. [ 202.705399][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 202.728227][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 202.757341][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 202.972756][ T7682] netlink: 'syz.1.428': attribute type 1 has an invalid length. [ 203.133738][ T7682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.272653][ T7687] bond1: (slave ip6gretap1): making interface the new active one [ 203.294272][ T7687] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 203.360149][ T7682] veth3: entered promiscuous mode [ 203.374642][ T7682] bond1: (slave veth3): Enslaving as an active interface with a down link [ 203.582979][ T7706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.432'. [ 203.640737][ T7706] netem: change failed [ 203.699996][ T7712] Bluetooth: MGMT ver 1.23 [ 203.710480][ T5908] IPVS: starting estimator thread 0... [ 203.730330][ T5862] Bluetooth: hci4: link tx timeout [ 203.735694][ T5862] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 203.782202][ T7712] geneve3: entered promiscuous mode [ 203.796686][ T6348] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.826072][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'. [ 203.835415][ T7719] IPVS: using max 26 ests per chain, 62400 per kthread [ 203.889878][ T6348] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.055942][ T6348] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.082822][ T6348] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.356749][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'. [ 204.407485][ T7738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.500190][ T7738] x_tables: duplicate underflow at hook 4 [ 204.555299][ T6348] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.603797][ T6348] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.099423][ T6348] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.122880][ T6348] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.779046][ T5862] Bluetooth: hci4: command 0x0405 tx timeout [ 206.563187][ T7809] netlink: 96 bytes leftover after parsing attributes in process `syz.4.462'. [ 206.858850][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.461'. [ 206.912328][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.461'. [ 206.948656][ T7815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 207.035937][ T7830] netlink: 'syz.0.467': attribute type 1 has an invalid length. [ 207.345746][ T7841] netlink: 56 bytes leftover after parsing attributes in process `syz.0.471'. [ 207.626498][ T7850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.472'. [ 207.662049][ T7849] 8021q: VLANs not supported on vcan0 [ 208.066565][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.479'. [ 208.211165][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.480'. [ 208.440608][ T7871] bond0: Device is already in use. [ 208.511155][ T7874] netlink: 128 bytes leftover after parsing attributes in process `syz.2.482'. [ 208.673052][ T5217] udevd[5217]: worker [6092] terminated by signal 33 (Unknown signal 33) [ 208.709980][ T5217] udevd[5217]: worker [6092] failed while handling '/devices/virtual/block/loop4' [ 209.031205][ T7889] openvswitch: netlink: IP tunnel TTL not specified. [ 209.234892][ T7896] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 209.300055][ T7900] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 209.307895][ T7900] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 209.777301][ T7914] netlink: 28 bytes leftover after parsing attributes in process `syz.0.493'. [ 209.829157][ T7914] netlink: 28 bytes leftover after parsing attributes in process `syz.0.493'. [ 210.246118][ T7923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.336137][ T7925] vlan2: entered promiscuous mode [ 210.351393][ T7925] dummy0: entered promiscuous mode [ 211.327210][ T7955] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 211.413466][ T7955] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 211.833387][ T7962] __nla_validate_parse: 3 callbacks suppressed [ 211.833407][ T7962] netlink: 20 bytes leftover after parsing attributes in process `syz.0.506'. [ 211.868881][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 211.874999][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 211.878821][ T5856] Bluetooth: hci2: command 0x0406 tx timeout [ 211.881162][ T5167] Bluetooth: hci3: command 0x0406 tx timeout [ 212.115348][ T7968] netlink: 60 bytes leftover after parsing attributes in process `syz.2.508'. [ 212.279649][ T7972] netlink: 'syz.3.510': attribute type 2 has an invalid length. [ 212.304889][ T7972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.510'. [ 212.389245][ T7975] netlink: 'syz.4.511': attribute type 1 has an invalid length. [ 212.568332][ T7982] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 212.606090][ T7975] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.684557][ T30] audit: type=1800 audit(1752696104.023:2): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.512" name=14 dev="tmpfs" ino=563 res=0 errno=0 [ 212.878376][ T7977] bond2: (slave veth5): Enslaving as an active interface with a down link [ 213.160936][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'. [ 213.174011][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.515'. [ 213.199183][ T7999] netlink: 52 bytes leftover after parsing attributes in process `syz.1.515'. [ 213.227348][ T7998] gretap2: entered promiscuous mode [ 213.263028][ T7998] gretap2: entered allmulticast mode [ 213.376310][ T8004] bond3 (unregistering): Released all slaves [ 213.387660][ T8011] netlink: 28 bytes leftover after parsing attributes in process `syz.4.517'. [ 213.438003][ T8013] netlink: 28 bytes leftover after parsing attributes in process `syz.3.518'. [ 213.617496][ T8019] sit1: entered promiscuous mode [ 213.770711][ T8021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.522'. [ 213.799534][ T8021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.522'. [ 214.539659][ T6366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.557239][ T6366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.974707][ T8100] netlink: 'syz.3.547': attribute type 39 has an invalid length. [ 216.382641][ T8108] netlink: 'syz.3.550': attribute type 58 has an invalid length. [ 216.674001][ T8114] FAULT_INJECTION: forcing a failure. [ 216.674001][ T8114] name failslab, interval 1, probability 0, space 0, times 0 [ 216.758541][ T8114] CPU: 1 UID: 0 PID: 8114 Comm: syz.2.553 Not tainted 6.16.0-rc5-syzkaller-01458-gc3886ccaadf8 #0 PREEMPT(full) [ 216.758582][ T8114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.758594][ T8114] Call Trace: [ 216.758601][ T8114] [ 216.758608][ T8114] dump_stack_lvl+0x189/0x250 [ 216.758636][ T8114] ? __pfx____ratelimit+0x10/0x10 [ 216.758662][ T8114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.758684][ T8114] ? __pfx__printk+0x10/0x10 [ 216.758712][ T8114] ? __pfx___might_resched+0x10/0x10 [ 216.758735][ T8114] ? fs_reclaim_acquire+0x7d/0x100 [ 216.758766][ T8114] should_fail_ex+0x414/0x560 [ 216.758801][ T8114] should_failslab+0xa8/0x100 [ 216.758827][ T8114] __kmalloc_cache_noprof+0x70/0x3d0 [ 216.758850][ T8114] ? alloc_netdev_mqs+0xb90/0x1170 [ 216.758869][ T8114] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 216.758900][ T8114] alloc_netdev_mqs+0xb90/0x1170 [ 216.758930][ T8114] rtnl_create_link+0x31f/0xd10 [ 216.758960][ T8114] rtnl_newlink_create+0x25c/0xb00 [ 216.758995][ T8114] ? __pfx_aa_get_newest_label+0x10/0x10 [ 216.759027][ T8114] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 216.759050][ T8114] ? rtnl_newlink+0x8db/0x1c70 [ 216.759075][ T8114] ? __pfx___mutex_lock+0x10/0x10 [ 216.759112][ T8114] ? ns_capable+0x8a/0xf0 [ 216.759136][ T8114] rtnl_newlink+0x16d6/0x1c70 [ 216.759181][ T8114] ? __pfx_rtnl_newlink+0x10/0x10 [ 216.759203][ T8114] ? is_bpf_text_address+0x26/0x2b0 [ 216.759232][ T8114] ? __lock_acquire+0xab9/0xd20 [ 216.759265][ T8114] ? __lock_acquire+0xab9/0xd20 [ 216.759308][ T8114] ? is_bpf_text_address+0x26/0x2b0 [ 216.759332][ T8114] ? is_bpf_text_address+0x292/0x2b0 [ 216.759350][ T8114] ? is_bpf_text_address+0x26/0x2b0 [ 216.759372][ T8114] ? kernel_text_address+0xa5/0xe0 [ 216.759404][ T8114] ? __lock_acquire+0xab9/0xd20 [ 216.759451][ T8114] ? __pfx_rtnl_newlink+0x10/0x10 [ 216.759474][ T8114] rtnetlink_rcv_msg+0x7cc/0xb70 [ 216.759499][ T8114] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 216.759519][ T8114] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 216.759564][ T8114] netlink_rcv_skb+0x205/0x470 [ 216.759599][ T8114] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 216.759623][ T8114] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 216.759662][ T8114] ? netlink_deliver_tap+0x2e/0x1b0 [ 216.759687][ T8114] ? netlink_deliver_tap+0x2e/0x1b0 [ 216.759720][ T8114] netlink_unicast+0x759/0x8e0 [ 216.759756][ T8114] netlink_sendmsg+0x805/0xb30 [ 216.759796][ T8114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.759825][ T8114] ? aa_sock_msg_perm+0x94/0x160 [ 216.759855][ T8114] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 216.759883][ T8114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.759907][ T8114] __sock_sendmsg+0x21c/0x270 [ 216.759932][ T8114] ____sys_sendmsg+0x505/0x830 [ 216.759966][ T8114] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.760005][ T8114] ? import_iovec+0x74/0xa0 [ 216.760032][ T8114] ___sys_sendmsg+0x21f/0x2a0 [ 216.760053][ T8114] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.760115][ T8114] ? __fget_files+0x2a/0x420 [ 216.760137][ T8114] ? __fget_files+0x3a0/0x420 [ 216.760172][ T8114] __x64_sys_sendmsg+0x19b/0x260 [ 216.760192][ T8114] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 216.760222][ T8114] ? __pfx_ksys_write+0x10/0x10 [ 216.760240][ T8114] ? rcu_is_watching+0x15/0xb0 [ 216.760267][ T8114] ? do_syscall_64+0xbe/0x3b0 [ 216.760297][ T8114] do_syscall_64+0xfa/0x3b0 [ 216.760320][ T8114] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.760342][ T8114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.760359][ T8114] ? clear_bhb_loop+0x60/0xb0 [ 216.760380][ T8114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.760396][ T8114] RIP: 0033:0x7fc6a5b8e929 [ 216.760415][ T8114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.760430][ T8114] RSP: 002b:00007fc6a6ad5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.760453][ T8114] RAX: ffffffffffffffda RBX: 00007fc6a5db5fa0 RCX: 00007fc6a5b8e929 [ 216.760465][ T8114] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 216.760476][ T8114] RBP: 00007fc6a6ad5090 R08: 0000000000000000 R09: 0000000000000000 [ 216.760488][ T8114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.760497][ T8114] R13: 0000000000000000 R14: 00007fc6a5db5fa0 R15: 00007ffe2287eb98 [ 216.760530][ T8114] [ 217.286629][ T8122] IPVS: Error connecting to the multicast addr [ 218.029312][ T8147] __nla_validate_parse: 17 callbacks suppressed [ 218.029331][ T8147] netlink: 14 bytes leftover after parsing attributes in process `syz.4.562'. [ 218.131936][ T55] block nbd1: Possible stuck request ffff8880258a5080: control (read@0,1024B). Runtime 30 seconds [ 218.144485][ T55] block nbd1: Possible stuck request ffff8880258a5240: control (read@1024,1024B). Runtime 30 seconds [ 218.157185][ T55] block nbd1: Possible stuck request ffff8880258a5400: control (read@2048,1024B). Runtime 30 seconds [ 218.170062][ T55] block nbd1: Possible stuck request ffff8880258a55c0: control (read@3072,1024B). Runtime 30 seconds [ 218.447677][ T8147] bond0 (unregistering): Released all slaves [ 218.856622][ T8157] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 219.137218][ T8161] FAULT_INJECTION: forcing a failure. [ 219.137218][ T8161] name failslab, interval 1, probability 0, space 0, times 0 [ 219.160784][ T8161] CPU: 1 UID: 0 PID: 8161 Comm: syz.4.566 Not tainted 6.16.0-rc5-syzkaller-01458-gc3886ccaadf8 #0 PREEMPT(full) [ 219.160811][ T8161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.160822][ T8161] Call Trace: [ 219.160830][ T8161] [ 219.160838][ T8161] dump_stack_lvl+0x189/0x250 [ 219.160867][ T8161] ? __pfx____ratelimit+0x10/0x10 [ 219.160893][ T8161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.160915][ T8161] ? __pfx__printk+0x10/0x10 [ 219.160944][ T8161] ? __pfx___might_resched+0x10/0x10 [ 219.160966][ T8161] ? fs_reclaim_acquire+0x7d/0x100 [ 219.160998][ T8161] should_fail_ex+0x414/0x560 [ 219.161031][ T8161] should_failslab+0xa8/0x100 [ 219.161058][ T8161] __kmalloc_cache_noprof+0x70/0x3d0 [ 219.161080][ T8161] ? alloc_netdev_mqs+0xbf1/0x1170 [ 219.161107][ T8161] alloc_netdev_mqs+0xbf1/0x1170 [ 219.161137][ T8161] rtnl_create_link+0x31f/0xd10 [ 219.161167][ T8161] rtnl_newlink_create+0x25c/0xb00 [ 219.161200][ T8161] ? __mutex_lock+0x51b/0xe80 [ 219.161233][ T8161] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 219.161258][ T8161] ? rtnl_newlink+0x8db/0x1c70 [ 219.161285][ T8161] ? __pfx___mutex_lock+0x10/0x10 [ 219.161322][ T8161] ? ns_capable+0x8a/0xf0 [ 219.161349][ T8161] rtnl_newlink+0x16d6/0x1c70 [ 219.161399][ T8161] ? __pfx_rtnl_newlink+0x10/0x10 [ 219.161421][ T8161] ? is_bpf_text_address+0x26/0x2b0 [ 219.161452][ T8161] ? __lock_acquire+0xab9/0xd20 [ 219.161487][ T8161] ? __lock_acquire+0xab9/0xd20 [ 219.161533][ T8161] ? is_bpf_text_address+0x26/0x2b0 [ 219.161567][ T8161] ? is_bpf_text_address+0x292/0x2b0 [ 219.161587][ T8161] ? is_bpf_text_address+0x26/0x2b0 [ 219.161611][ T8161] ? kernel_text_address+0xa5/0xe0 [ 219.161646][ T8161] ? __lock_acquire+0xab9/0xd20 [ 219.161697][ T8161] ? __pfx_rtnl_newlink+0x10/0x10 [ 219.161721][ T8161] rtnetlink_rcv_msg+0x7cc/0xb70 [ 219.161751][ T8161] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 219.161775][ T8161] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 219.161821][ T8161] netlink_rcv_skb+0x205/0x470 [ 219.161849][ T8161] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 219.161876][ T8161] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 219.161918][ T8161] ? netlink_deliver_tap+0x2e/0x1b0 [ 219.161942][ T8161] ? netlink_deliver_tap+0x2e/0x1b0 [ 219.161975][ T8161] netlink_unicast+0x759/0x8e0 [ 219.162013][ T8161] netlink_sendmsg+0x805/0xb30 [ 219.162052][ T8161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.162083][ T8161] ? aa_sock_msg_perm+0x94/0x160 [ 219.162113][ T8161] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 219.162139][ T8161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.162166][ T8161] __sock_sendmsg+0x21c/0x270 [ 219.162194][ T8161] ____sys_sendmsg+0x505/0x830 [ 219.162231][ T8161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.162271][ T8161] ? import_iovec+0x74/0xa0 [ 219.162297][ T8161] ___sys_sendmsg+0x21f/0x2a0 [ 219.162319][ T8161] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.162383][ T8161] ? __fget_files+0x2a/0x420 [ 219.162407][ T8161] ? __fget_files+0x3a0/0x420 [ 219.162445][ T8161] __x64_sys_sendmsg+0x19b/0x260 [ 219.162467][ T8161] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.162498][ T8161] ? __pfx_ksys_write+0x10/0x10 [ 219.162515][ T8161] ? rcu_is_watching+0x15/0xb0 [ 219.162552][ T8161] ? do_syscall_64+0xbe/0x3b0 [ 219.162582][ T8161] do_syscall_64+0xfa/0x3b0 [ 219.162604][ T8161] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.162626][ T8161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.162644][ T8161] ? clear_bhb_loop+0x60/0xb0 [ 219.162667][ T8161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.162684][ T8161] RIP: 0033:0x7f0ade58e929 [ 219.162701][ T8161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.162715][ T8161] RSP: 002b:00007f0adc3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.162736][ T8161] RAX: ffffffffffffffda RBX: 00007f0ade7b5fa0 RCX: 00007f0ade58e929 [ 219.162749][ T8161] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 219.162761][ T8161] RBP: 00007f0adc3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 219.162772][ T8161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 219.162783][ T8161] R13: 0000000000000000 R14: 00007f0ade7b5fa0 R15: 00007ffd23bb9eb8 [ 219.162817][ T8161] [ 219.779657][ T5857] Bluetooth: hci4: command 0x0405 tx timeout [ 220.120633][ T8175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.570'. [ 220.134154][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.571'. [ 220.573191][ T8193] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 220.740662][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'. [ 221.731966][ T8219] FAULT_INJECTION: forcing a failure. [ 221.731966][ T8219] name failslab, interval 1, probability 0, space 0, times 0 [ 221.751254][ T8219] CPU: 1 UID: 0 PID: 8219 Comm: syz.1.582 Not tainted 6.16.0-rc5-syzkaller-01458-gc3886ccaadf8 #0 PREEMPT(full) [ 221.751281][ T8219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.751292][ T8219] Call Trace: [ 221.751300][ T8219] [ 221.751309][ T8219] dump_stack_lvl+0x189/0x250 [ 221.751337][ T8219] ? __pfx____ratelimit+0x10/0x10 [ 221.751363][ T8219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.751385][ T8219] ? __pfx__printk+0x10/0x10 [ 221.751417][ T8219] ? __pfx___might_resched+0x10/0x10 [ 221.751437][ T8219] ? fs_reclaim_acquire+0x7d/0x100 [ 221.751466][ T8219] should_fail_ex+0x414/0x560 [ 221.751497][ T8219] ? alloc_netdev_mqs+0xc59/0x1170 [ 221.751516][ T8219] should_failslab+0xa8/0x100 [ 221.751547][ T8219] __kvmalloc_node_noprof+0x161/0x5f0 [ 221.751571][ T8219] ? alloc_netdev_mqs+0xc59/0x1170 [ 221.751588][ T8219] ? alloc_netdev_mqs+0xbf1/0x1170 [ 221.751615][ T8219] alloc_netdev_mqs+0xc59/0x1170 [ 221.751644][ T8219] rtnl_create_link+0x31f/0xd10 [ 221.751674][ T8219] rtnl_newlink_create+0x25c/0xb00 [ 221.751707][ T8219] ? __mutex_lock+0x51b/0xe80 [ 221.751739][ T8219] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 221.751763][ T8219] ? rtnl_newlink+0x8db/0x1c70 [ 221.751790][ T8219] ? __pfx___mutex_lock+0x10/0x10 [ 221.751829][ T8219] ? ns_capable+0x8a/0xf0 [ 221.751856][ T8219] rtnl_newlink+0x16d6/0x1c70 [ 221.751882][ T8219] ? netlink_sendmsg+0x805/0xb30 [ 221.751923][ T8219] ? __pfx_rtnl_newlink+0x10/0x10 [ 221.751976][ T8219] ? kasan_quarantine_put+0xdd/0x220 [ 221.751996][ T8219] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.752028][ T8219] ? nlmon_xmit+0xb0/0x100 [ 221.752048][ T8219] ? kmem_cache_free+0x18f/0x400 [ 221.752079][ T8219] ? __local_bh_enable_ip+0x12d/0x1c0 [ 221.752100][ T8219] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.752125][ T8219] ? __local_bh_enable_ip+0x12d/0x1c0 [ 221.752145][ T8219] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 221.752172][ T8219] ? __dev_queue_xmit+0x27b/0x3b50 [ 221.752217][ T8219] ? __lock_acquire+0xab9/0xd20 [ 221.752267][ T8219] ? __pfx_rtnl_newlink+0x10/0x10 [ 221.752291][ T8219] rtnetlink_rcv_msg+0x7cc/0xb70 [ 221.752321][ T8219] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 221.752343][ T8219] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 221.752364][ T8219] ? ref_tracker_free+0x63a/0x7d0 [ 221.752388][ T8219] ? __copy_skb_header+0xa7/0x550 [ 221.752408][ T8219] ? __pfx_ref_tracker_free+0x10/0x10 [ 221.752449][ T8219] netlink_rcv_skb+0x205/0x470 [ 221.752474][ T8219] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 221.752501][ T8219] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.752543][ T8219] ? netlink_deliver_tap+0x2e/0x1b0 [ 221.752567][ T8219] ? netlink_deliver_tap+0x2e/0x1b0 [ 221.752600][ T8219] netlink_unicast+0x759/0x8e0 [ 221.752638][ T8219] netlink_sendmsg+0x805/0xb30 [ 221.752675][ T8219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.752705][ T8219] ? aa_sock_msg_perm+0x94/0x160 [ 221.752734][ T8219] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 221.752760][ T8219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.752788][ T8219] __sock_sendmsg+0x21c/0x270 [ 221.752816][ T8219] ____sys_sendmsg+0x505/0x830 [ 221.752850][ T8219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.752889][ T8219] ? import_iovec+0x74/0xa0 [ 221.752916][ T8219] ___sys_sendmsg+0x21f/0x2a0 [ 221.752934][ T8219] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.752996][ T8219] ? __fget_files+0x2a/0x420 [ 221.753019][ T8219] ? __fget_files+0x3a0/0x420 [ 221.753055][ T8219] __x64_sys_sendmsg+0x19b/0x260 [ 221.753074][ T8219] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 221.753102][ T8219] ? __pfx_ksys_write+0x10/0x10 [ 221.753119][ T8219] ? rcu_is_watching+0x15/0xb0 [ 221.753146][ T8219] ? do_syscall_64+0xbe/0x3b0 [ 221.753175][ T8219] do_syscall_64+0xfa/0x3b0 [ 221.753206][ T8219] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.753230][ T8219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.753249][ T8219] ? clear_bhb_loop+0x60/0xb0 [ 221.753273][ T8219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.753291][ T8219] RIP: 0033:0x7fa08df8e929 [ 221.753309][ T8219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.753324][ T8219] RSP: 002b:00007fa08ee6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.753345][ T8219] RAX: ffffffffffffffda RBX: 00007fa08e1b5fa0 RCX: 00007fa08df8e929 [ 221.753358][ T8219] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 221.753369][ T8219] RBP: 00007fa08ee6a090 R08: 0000000000000000 R09: 0000000000000000 [ 221.753380][ T8219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.753391][ T8219] R13: 0000000000000000 R14: 00007fa08e1b5fa0 R15: 00007fff390a8168 [ 221.753425][ T8219] [ 222.227863][ T8223] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.913537][ T8243] netlink: 'syz.1.588': attribute type 1 has an invalid length. [ 222.986192][ T8243] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.054800][ T8243] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 224.896438][ T8246] bond2: (slave veth5): Enslaving as an active interface with a down link [ 225.061492][ T8257] netlink: 'syz.3.592': attribute type 39 has an invalid length. [ 225.143069][ T8260] veth0: entered promiscuous mode [ 225.189412][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.591'. [ 225.530811][ T8260] veth0 (unregistering): left promiscuous mode [ 226.073226][ T8289] FAULT_INJECTION: forcing a failure. [ 226.073226][ T8289] name failslab, interval 1, probability 0, space 0, times 0 [ 226.089000][ T8289] CPU: 0 UID: 0 PID: 8289 Comm: syz.2.597 Not tainted 6.16.0-rc5-syzkaller-01458-gc3886ccaadf8 #0 PREEMPT(full) [ 226.089027][ T8289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.089038][ T8289] Call Trace: [ 226.089046][ T8289] [ 226.089054][ T8289] dump_stack_lvl+0x189/0x250 [ 226.089083][ T8289] ? __pfx____ratelimit+0x10/0x10 [ 226.089107][ T8289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.089128][ T8289] ? __pfx__printk+0x10/0x10 [ 226.089175][ T8289] ? __pfx___might_resched+0x10/0x10 [ 226.089203][ T8289] should_fail_ex+0x414/0x560 [ 226.089237][ T8289] should_failslab+0xa8/0x100 [ 226.089263][ T8289] __kmalloc_cache_noprof+0x70/0x3d0 [ 226.089286][ T8289] ? macvlan_changelink_sources+0x8be/0x1620 [ 226.089309][ T8289] ? dev_addr_check+0x20/0x250 [ 226.089342][ T8289] macvlan_changelink_sources+0x8be/0x1620 [ 226.089382][ T8289] macvlan_common_newlink+0xe70/0x1980 [ 226.089407][ T8289] ? alloc_netdev_mqs+0xc59/0x1170 [ 226.089439][ T8289] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 226.089472][ T8289] ? __pfx_macvlan_newlink+0x10/0x10 [ 226.089502][ T8289] rtnl_newlink_create+0x30d/0xb00 [ 226.089536][ T8289] ? __mutex_lock+0x51b/0xe80 [ 226.089569][ T8289] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 226.089594][ T8289] ? rtnl_newlink+0x8db/0x1c70 [ 226.089622][ T8289] ? __pfx___mutex_lock+0x10/0x10 [ 226.089660][ T8289] ? ns_capable+0x8a/0xf0 [ 226.089687][ T8289] rtnl_newlink+0x16d6/0x1c70 [ 226.089732][ T8289] ? __pfx_rtnl_newlink+0x10/0x10 [ 226.089755][ T8289] ? is_bpf_text_address+0x26/0x2b0 [ 226.089785][ T8289] ? __lock_acquire+0xab9/0xd20 [ 226.089822][ T8289] ? __lock_acquire+0xab9/0xd20 [ 226.089867][ T8289] ? is_bpf_text_address+0x26/0x2b0 [ 226.089894][ T8289] ? is_bpf_text_address+0x292/0x2b0 [ 226.089913][ T8289] ? is_bpf_text_address+0x26/0x2b0 [ 226.089937][ T8289] ? kernel_text_address+0xa5/0xe0 [ 226.089972][ T8289] ? __lock_acquire+0xab9/0xd20 [ 226.090023][ T8289] ? __pfx_rtnl_newlink+0x10/0x10 [ 226.090046][ T8289] rtnetlink_rcv_msg+0x7cc/0xb70 [ 226.090076][ T8289] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 226.090100][ T8289] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 226.090146][ T8289] netlink_rcv_skb+0x205/0x470 [ 226.090181][ T8289] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 226.090209][ T8289] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.090251][ T8289] ? netlink_deliver_tap+0x2e/0x1b0 [ 226.090276][ T8289] ? netlink_deliver_tap+0x2e/0x1b0 [ 226.090308][ T8289] netlink_unicast+0x759/0x8e0 [ 226.090346][ T8289] netlink_sendmsg+0x805/0xb30 [ 226.090384][ T8289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.090426][ T8289] ? aa_sock_msg_perm+0x94/0x160 [ 226.090456][ T8289] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 226.090483][ T8289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.090510][ T8289] __sock_sendmsg+0x21c/0x270 [ 226.090538][ T8289] ____sys_sendmsg+0x505/0x830 [ 226.090574][ T8289] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.090615][ T8289] ? import_iovec+0x74/0xa0 [ 226.090642][ T8289] ___sys_sendmsg+0x21f/0x2a0 [ 226.090664][ T8289] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.090729][ T8289] ? __fget_files+0x2a/0x420 [ 226.090752][ T8289] ? __fget_files+0x3a0/0x420 [ 226.090790][ T8289] __x64_sys_sendmsg+0x19b/0x260 [ 226.090812][ T8289] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.090845][ T8289] ? rcu_is_watching+0x15/0xb0 [ 226.090874][ T8289] ? do_syscall_64+0xbe/0x3b0 [ 226.090904][ T8289] do_syscall_64+0xfa/0x3b0 [ 226.090927][ T8289] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.090951][ T8289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.090969][ T8289] ? clear_bhb_loop+0x60/0xb0 [ 226.090994][ T8289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.091011][ T8289] RIP: 0033:0x7fc6a5b8e929 [ 226.091029][ T8289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.091044][ T8289] RSP: 002b:00007fc6a6ad5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.091066][ T8289] RAX: ffffffffffffffda RBX: 00007fc6a5db5fa0 RCX: 00007fc6a5b8e929 [ 226.091079][ T8289] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 226.091090][ T8289] RBP: 00007fc6a6ad5090 R08: 0000000000000000 R09: 0000000000000000 [ 226.091102][ T8289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.091113][ T8289] R13: 0000000000000000 R14: 00007fc6a5db5fa0 R15: 00007ffe2287eb98 [ 226.091147][ T8289] [ 226.576650][ T8296] netlink: 'syz.1.598': attribute type 1 has an invalid length. [ 226.623195][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.600'. [ 226.784427][ T8300] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 226.818062][ T8302] 8021q: adding VLAN 0 to HW filter on device bond3 [ 226.826859][ T6366] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 226.950881][ T6348] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 227.438054][ T8296] veth7: entered promiscuous mode [ 227.473566][ T8296] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 227.731341][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 227.796907][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 227.846939][ T8320] wireguard0: entered promiscuous mode [ 227.883711][ T8320] wireguard0: entered allmulticast mode [ 227.910751][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.604'. [ 227.947564][ T8327] netlink: 'syz.1.604': attribute type 2 has an invalid length. [ 227.972139][ T8327] netlink: 16 bytes leftover after parsing attributes in process `syz.1.604'. [ 228.379591][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'. [ 228.579837][ T8354] FAULT_INJECTION: forcing a failure. [ 228.579837][ T8354] name failslab, interval 1, probability 0, space 0, times 0 [ 228.609819][ T8354] CPU: 1 UID: 0 PID: 8354 Comm: syz.3.610 Not tainted 6.16.0-rc5-syzkaller-01458-gc3886ccaadf8 #0 PREEMPT(full) [ 228.609848][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.609858][ T8354] Call Trace: [ 228.609865][ T8354] [ 228.609873][ T8354] dump_stack_lvl+0x189/0x250 [ 228.609900][ T8354] ? __pfx____ratelimit+0x10/0x10 [ 228.609924][ T8354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.609947][ T8354] ? __pfx__printk+0x10/0x10 [ 228.609978][ T8354] ? __pfx___might_resched+0x10/0x10 [ 228.609999][ T8354] ? fs_reclaim_acquire+0x7d/0x100 [ 228.610029][ T8354] should_fail_ex+0x414/0x560 [ 228.610061][ T8354] should_failslab+0xa8/0x100 [ 228.610087][ T8354] __kmalloc_cache_noprof+0x70/0x3d0 [ 228.610120][ T8354] ? register_netdevice+0x58b/0x1ae0 [ 228.610145][ T8354] register_netdevice+0x58b/0x1ae0 [ 228.610184][ T8354] ? __kasan_kmalloc+0x93/0xb0 [ 228.610207][ T8354] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 228.610230][ T8354] ? __pfx_register_netdevice+0x10/0x10 [ 228.610252][ T8354] ? macvlan_changelink_sources+0x12f5/0x1620 [ 228.610288][ T8354] macvlan_common_newlink+0x120a/0x1980 [ 228.610312][ T8354] ? alloc_netdev_mqs+0xc59/0x1170 [ 228.610345][ T8354] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 228.610373][ T8354] ? __pfx_macvlan_newlink+0x10/0x10 [ 228.610400][ T8354] rtnl_newlink_create+0x30d/0xb00 [ 228.610435][ T8354] ? __pfx_aa_get_newest_label+0x10/0x10 [ 228.610463][ T8354] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 228.610484][ T8354] ? rtnl_newlink+0x8db/0x1c70 [ 228.610511][ T8354] ? __pfx___mutex_lock+0x10/0x10 [ 228.610549][ T8354] ? ns_capable+0x8a/0xf0 [ 228.610575][ T8354] rtnl_newlink+0x16d6/0x1c70 [ 228.610619][ T8354] ? __pfx_rtnl_newlink+0x10/0x10 [ 228.610642][ T8354] ? is_bpf_text_address+0x26/0x2b0 [ 228.610672][ T8354] ? __lock_acquire+0xab9/0xd20 [ 228.610707][ T8354] ? __lock_acquire+0xab9/0xd20 [ 228.610750][ T8354] ? is_bpf_text_address+0x26/0x2b0 [ 228.610775][ T8354] ? is_bpf_text_address+0x292/0x2b0 [ 228.610793][ T8354] ? is_bpf_text_address+0x26/0x2b0 [ 228.610814][ T8354] ? kernel_text_address+0xa5/0xe0 [ 228.610854][ T8354] ? __lock_acquire+0xab9/0xd20 [ 228.610905][ T8354] ? __pfx_rtnl_newlink+0x10/0x10 [ 228.610928][ T8354] rtnetlink_rcv_msg+0x7cc/0xb70 [ 228.610957][ T8354] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 228.610981][ T8354] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 228.611028][ T8354] netlink_rcv_skb+0x205/0x470 [ 228.611056][ T8354] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 228.611083][ T8354] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 228.611126][ T8354] ? netlink_deliver_tap+0x2e/0x1b0 [ 228.611151][ T8354] ? netlink_deliver_tap+0x2e/0x1b0 [ 228.611193][ T8354] netlink_unicast+0x759/0x8e0 [ 228.611231][ T8354] netlink_sendmsg+0x805/0xb30 [ 228.611269][ T8354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.611300][ T8354] ? aa_sock_msg_perm+0x94/0x160 [ 228.611329][ T8354] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 228.611354][ T8354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.611380][ T8354] __sock_sendmsg+0x21c/0x270 [ 228.611407][ T8354] ____sys_sendmsg+0x505/0x830 [ 228.611442][ T8354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.611479][ T8354] ? import_iovec+0x74/0xa0 [ 228.611504][ T8354] ___sys_sendmsg+0x21f/0x2a0 [ 228.611524][ T8354] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.611583][ T8354] ? __fget_files+0x2a/0x420 [ 228.611605][ T8354] ? __fget_files+0x3a0/0x420 [ 228.611640][ T8354] __x64_sys_sendmsg+0x19b/0x260 [ 228.611661][ T8354] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 228.611690][ T8354] ? __pfx_ksys_write+0x10/0x10 [ 228.611708][ T8354] ? rcu_is_watching+0x15/0xb0 [ 228.611736][ T8354] ? do_syscall_64+0xbe/0x3b0 [ 228.611766][ T8354] do_syscall_64+0xfa/0x3b0 [ 228.611789][ T8354] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.611812][ T8354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.611831][ T8354] ? clear_bhb_loop+0x60/0xb0 [ 228.611853][ T8354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.611871][ T8354] RIP: 0033:0x7fe2edd8e929 [ 228.611889][ T8354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.611904][ T8354] RSP: 002b:00007fe2eeb50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.611924][ T8354] RAX: ffffffffffffffda RBX: 00007fe2edfb5fa0 RCX: 00007fe2edd8e929 [ 228.611938][ T8354] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 228.611949][ T8354] RBP: 00007fe2eeb50090 R08: 0000000000000000 R09: 0000000000000000 [ 228.611960][ T8354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 228.611971][ T8354] R13: 0000000000000000 R14: 00007fe2edfb5fa0 R15: 00007fff98147c68 [ 228.612004][ T8354] [ 229.115713][ T8350] netlink: 16 bytes leftover after parsing attributes in process `syz.4.612'. [ 229.132495][ T8350] netlink: 60 bytes leftover after parsing attributes in process `syz.4.612'. [ 229.558207][ T8372] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 229.822072][ T8379] netlink: 'syz.2.620': attribute type 10 has an invalid length. [ 230.306184][ T8392] FAULT_INJECTION: forcing a failure. [ 230.306184][ T8392] name failslab, interval 1, probability 0, space 0, times 0 [ 230.342144][ T8392] CPU: 0 UID: 0 PID: 8392 Comm: syz.4.626 Not tainted 6.16.0-rc5-syzkaller-01458-gc3886ccaadf8 #0 PREEMPT(full) [ 230.342173][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 230.342184][ T8392] Call Trace: [ 230.342192][ T8392] [ 230.342201][ T8392] dump_stack_lvl+0x189/0x250 [ 230.342240][ T8392] ? __pfx____ratelimit+0x10/0x10 [ 230.342267][ T8392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.342290][ T8392] ? __pfx__printk+0x10/0x10 [ 230.342324][ T8392] ? __pfx___might_resched+0x10/0x10 [ 230.342353][ T8392] should_fail_ex+0x414/0x560 [ 230.342387][ T8392] should_failslab+0xa8/0x100 [ 230.342410][ T8392] __kmalloc_cache_noprof+0x70/0x3d0 [ 230.342430][ T8392] ? macvlan_changelink_sources+0x8be/0x1620 [ 230.342453][ T8392] ? dev_addr_check+0x20/0x250 [ 230.342485][ T8392] macvlan_changelink_sources+0x8be/0x1620 [ 230.342526][ T8392] macvlan_common_newlink+0xe70/0x1980 [ 230.342551][ T8392] ? alloc_netdev_mqs+0xc59/0x1170 [ 230.342585][ T8392] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 230.342617][ T8392] ? __pfx_macvlan_newlink+0x10/0x10 [ 230.342648][ T8392] rtnl_newlink_create+0x30d/0xb00 [ 230.342682][ T8392] ? __mutex_lock+0x51b/0xe80 [ 230.342715][ T8392] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 230.342740][ T8392] ? rtnl_newlink+0x8db/0x1c70 [ 230.342768][ T8392] ? __pfx___mutex_lock+0x10/0x10 [ 230.342806][ T8392] ? ns_capable+0x8a/0xf0 [ 230.342833][ T8392] rtnl_newlink+0x16d6/0x1c70 [ 230.342878][ T8392] ? __pfx_rtnl_newlink+0x10/0x10 [ 230.342914][ T8392] ? __lock_acquire+0xab9/0xd20 [ 230.342950][ T8392] ? __lock_acquire+0xab9/0xd20 [ 230.342996][ T8392] ? is_bpf_text_address+0x26/0x2b0 [ 230.343045][ T8392] ? is_bpf_text_address+0x292/0x2b0 [ 230.343065][ T8392] ? is_bpf_text_address+0x26/0x2b0 [ 230.343089][ T8392] ? kernel_text_address+0xa5/0xe0 [ 230.343124][ T8392] ? __lock_acquire+0xab9/0xd20 [ 230.343181][ T8392] ? __pfx_rtnl_newlink+0x10/0x10 [ 230.343206][ T8392] rtnetlink_rcv_msg+0x7cc/0xb70 [ 230.343245][ T8392] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 230.343269][ T8392] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 230.343316][ T8392] netlink_rcv_skb+0x205/0x470 [ 230.343344][ T8392] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 230.343371][ T8392] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 230.343414][ T8392] ? netlink_deliver_tap+0x2e/0x1b0 [ 230.343439][ T8392] ? netlink_deliver_tap+0x2e/0x1b0 [ 230.343471][ T8392] netlink_unicast+0x759/0x8e0 [ 230.343508][ T8392] netlink_sendmsg+0x805/0xb30 [ 230.343547][ T8392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.343578][ T8392] ? aa_sock_msg_perm+0x94/0x160 [ 230.343608][ T8392] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 230.343635][ T8392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.343662][ T8392] __sock_sendmsg+0x21c/0x270 [ 230.343690][ T8392] ____sys_sendmsg+0x505/0x830 [ 230.343728][ T8392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.343769][ T8392] ? import_iovec+0x74/0xa0 [ 230.343796][ T8392] ___sys_sendmsg+0x21f/0x2a0 [ 230.343818][ T8392] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.343884][ T8392] ? __fget_files+0x2a/0x420 [ 230.343907][ T8392] ? __fget_files+0x3a0/0x420 [ 230.343946][ T8392] __x64_sys_sendmsg+0x19b/0x260 [ 230.343968][ T8392] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 230.344000][ T8392] ? __pfx_ksys_write+0x10/0x10 [ 230.344019][ T8392] ? rcu_is_watching+0x15/0xb0 [ 230.344048][ T8392] ? do_syscall_64+0xbe/0x3b0 [ 230.344079][ T8392] do_syscall_64+0xfa/0x3b0 [ 230.344103][ T8392] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.344127][ T8392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.344146][ T8392] ? clear_bhb_loop+0x60/0xb0 [ 230.344168][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.344183][ T8392] RIP: 0033:0x7f0ade58e929 [ 230.344200][ T8392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.344213][ T8392] RSP: 002b:00007f0adc3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.344241][ T8392] RAX: ffffffffffffffda RBX: 00007f0ade7b5fa0 RCX: 00007f0ade58e929 [ 230.344253][ T8392] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 230.344264][ T8392] RBP: 00007f0adc3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 230.344275][ T8392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.344285][ T8392] R13: 0000000000000000 R14: 00007f0ade7b5fa0 R15: 00007ffd23bb9eb8 [ 230.344317][ T8392] [ 230.344856][ T8394] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 230.886231][ T2948] bridge_slave_1: left allmulticast mode [ 230.902637][ T2948] bridge_slave_1: left promiscuous mode [ 230.910662][ T2948] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.938898][ T2948] bridge_slave_0: left allmulticast mode [ 230.964948][ T2948] bridge_slave_0: left promiscuous mode [ 230.979304][ T2948] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.206197][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 231.217941][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 231.229590][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 231.250042][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 231.274790][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 231.415162][ T2948] bond1 (unregistering): (slave gretap1): Releasing active interface [ 231.732710][ T2948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.744373][ T2948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.755472][ T2948] bond0 (unregistering): (slave team0): Releasing backup interface [ 231.767478][ T2948] bond0 (unregistering): Released all slaves [ 231.892995][ T2948] bond1 (unregistering): Released all slaves [ 231.913646][ T2948] bond2 (unregistering): Released all slaves [ 232.037583][ T2948] bond3 (unregistering): (slave veth3): Releasing active interface [ 232.047139][ T2948] bond3 (unregistering): Released all slaves [ 232.406660][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 232.661699][ T8433] netlink: 52 bytes leftover after parsing attributes in process `syz.4.635'. [ 232.687745][ T8433] netlink: 'syz.4.635': attribute type 10 has an invalid length. [ 232.737793][ T8433] team0: Port device 0! added [ 232.744630][ T8437] netlink: 'syz.4.635': attribute type 10 has an invalid length. [ 232.817961][ T8440] netlink: 'syz.1.637': attribute type 1 has an invalid length. [ 232.836235][ T8437] team0: Failed to send options change via netlink (err -105) [ 232.852121][ T8437] team0: Failed to send port change of device 0! via netlink (err -105) [ 232.871800][ T8437] team0: Port device 0! removed [ 233.159802][ T8453] tipc: Enabled bearer , priority 0 [ 233.213424][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 233.223280][ T8445] syzkaller0: entered promiscuous mode [ 233.228946][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.641'. [ 233.228986][ T8457] netlink: 46 bytes leftover after parsing attributes in process `syz.4.641'. [ 233.268203][ T8445] syzkaller0: entered allmulticast mode [ 233.396185][ T5857] Bluetooth: hci4: command tx timeout [ 233.446831][ T8411] chnl_net:caif_netlink_parms(): no params data found [ 233.466093][ T8452] tipc: Resetting bearer [ 233.590472][ T8444] tipc: Resetting bearer [ 233.633272][ T8444] tipc: Disabling bearer [ 233.704986][ T2948] hsr_slave_0: left promiscuous mode [ 233.752400][ T2948] hsr_slave_1: left promiscuous mode [ 233.770339][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.791802][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.469635][ T2948] team0 (unregistering): Port device team_slave_1 removed [ 234.529399][ T2948] team0 (unregistering): Port device team_slave_0 removed [ 234.651519][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 234.875488][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.650'. [ 235.464842][ T5857] Bluetooth: hci4: command tx timeout [ 235.755988][ T8411] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.788783][ T8411] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.806350][ T8411] bridge_slave_0: entered allmulticast mode [ 235.820227][ T8513] FAULT_INJECTION: forcing a failure. [ 235.820227][ T8513] name failslab, interval 1, probability 0, space 0, times 0 [ 235.822736][ T8411] bridge_slave_0: entered promiscuous mode [ 235.855203][ T8513] CPU: 1 UID: 0 PID: 8513 Comm: syz.4.657 Not tainted 6.16.0-rc5-syzkaller-01458-gc3886ccaadf8 #0 PREEMPT(full) [ 235.855232][ T8513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.855243][ T8513] Call Trace: [ 235.855250][ T8513] [ 235.855259][ T8513] dump_stack_lvl+0x189/0x250 [ 235.855288][ T8513] ? __pfx____ratelimit+0x10/0x10 [ 235.855312][ T8513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.855335][ T8513] ? __pfx__printk+0x10/0x10 [ 235.855360][ T8513] ? __pfx___might_resched+0x10/0x10 [ 235.855381][ T8513] ? fs_reclaim_acquire+0x7d/0x100 [ 235.855424][ T8513] should_fail_ex+0x414/0x560 [ 235.855457][ T8513] should_failslab+0xa8/0x100 [ 235.855483][ T8513] __kmalloc_noprof+0xcb/0x4f0 [ 235.855503][ T8513] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 235.855529][ T8513] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 235.855558][ T8513] genl_family_rcv_msg_doit+0xb8/0x300 [ 235.855583][ T8513] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 235.855606][ T8513] ? rcu_is_watching+0x15/0xb0 [ 235.855631][ T8513] ? apparmor_capable+0x137/0x1b0 [ 235.855655][ T8513] ? bpf_lsm_capable+0x9/0x20 [ 235.855673][ T8513] ? security_capable+0x7e/0x2e0 [ 235.855704][ T8513] genl_rcv_msg+0x60e/0x790 [ 235.855731][ T8513] ? __pfx_genl_rcv_msg+0x10/0x10 [ 235.855749][ T8513] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 235.855766][ T8513] ? __pfx_nl80211_set_tid_config+0x10/0x10 [ 235.855782][ T8513] ? __pfx_nl80211_post_doit+0x10/0x10 [ 235.855825][ T8513] netlink_rcv_skb+0x205/0x470 [ 235.855852][ T8513] ? __pfx_genl_rcv_msg+0x10/0x10 [ 235.855873][ T8513] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 235.855919][ T8513] ? down_read+0x1ad/0x2e0 [ 235.855950][ T8513] genl_rcv+0x28/0x40 [ 235.855967][ T8513] netlink_unicast+0x759/0x8e0 [ 235.856004][ T8513] netlink_sendmsg+0x805/0xb30 [ 235.856041][ T8513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.856072][ T8513] ? aa_sock_msg_perm+0x94/0x160 [ 235.856101][ T8513] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 235.856126][ T8513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.856220][ T8513] __sock_sendmsg+0x21c/0x270 [ 235.856258][ T8513] ____sys_sendmsg+0x505/0x830 [ 235.856292][ T8513] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.856333][ T8513] ? import_iovec+0x74/0xa0 [ 235.856357][ T8513] ___sys_sendmsg+0x21f/0x2a0 [ 235.856396][ T8513] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.856458][ T8513] ? __fget_files+0x2a/0x420 [ 235.856482][ T8513] ? __fget_files+0x3a0/0x420 [ 235.856519][ T8513] __x64_sys_sendmsg+0x19b/0x260 [ 235.856541][ T8513] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 235.856572][ T8513] ? __pfx_ksys_write+0x10/0x10 [ 235.856590][ T8513] ? rcu_is_watching+0x15/0xb0 [ 235.856614][ T8411] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.856616][ T8513] ? do_syscall_64+0xbe/0x3b0 [ 235.856646][ T8513] do_syscall_64+0xfa/0x3b0 [ 235.856665][ T8513] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.856685][ T8513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.856701][ T8513] ? clear_bhb_loop+0x60/0xb0 [ 235.856721][ T8513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.856737][ T8513] RIP: 0033:0x7f0ade58e929 [ 235.856754][ T8513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.856767][ T8513] RSP: 002b:00007f0adc3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.856786][ T8513] RAX: ffffffffffffffda RBX: 00007f0ade7b5fa0 RCX: 00007f0ade58e929 [ 235.856798][ T8513] RDX: 0000000000004050 RSI: 000020000000d040 RDI: 0000000000000003 [ 235.856808][ T8513] RBP: 00007f0adc3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 235.856818][ T8513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.856828][ T8513] R13: 0000000000000000 R14: 00007f0ade7b5fa0 R15: 00007ffd23bb9eb8 [ 235.856858][ T8513] [ 236.288790][ T8411] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.296079][ T8411] bridge_slave_1: entered allmulticast mode [ 236.331061][ T8411] bridge_slave_1: entered promiscuous mode [ 236.486205][ T8411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.532927][ T8411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.826599][ T8411] team0: Port device team_slave_0 added [ 236.861481][ T8411] team0: Port device team_slave_1 added [ 237.181763][ T8411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.233050][ T8411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.308387][ T8411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.380169][ T2948] IPVS: stop unused estimator thread 0... [ 237.438936][ T8411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.485549][ T8411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.539226][ T5857] Bluetooth: hci4: command tx timeout [ 237.545435][ T5217] udevd[5217]: worker [6181] terminated by signal 33 (Unknown signal 33) [ 237.618631][ T8411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.911643][ T8411] hsr_slave_0: entered promiscuous mode [ 237.918743][ T8411] hsr_slave_1: entered promiscuous mode [ 237.935498][ T8411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.968614][ T8411] Cannot create hsr debugfs directory [ 238.953560][ T8587] vlan2: entered promiscuous mode [ 239.029105][ T8587] bridge0: entered promiscuous mode [ 239.259763][ T8604] netlink: 'syz.2.683': attribute type 1 has an invalid length. [ 239.310706][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.683'. [ 239.432568][ T8604] bond2: entered promiscuous mode [ 239.453759][ T8604] bond2: entered allmulticast mode [ 239.534595][ T8605] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 239.565403][ T8605] bond2: (slave bridge2): making interface the new active one [ 239.573989][ T8605] bridge2: entered promiscuous mode [ 239.581434][ T8605] bridge2: entered allmulticast mode [ 239.591953][ T8605] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 239.619204][ T5857] Bluetooth: hci4: command tx timeout [ 239.831781][ T8620] ..@ÿ: renamed from bond_slave_0 [ 240.082915][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.689'. [ 240.426613][ T8643] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 240.616908][ T8647] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 240.641467][ T8647] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 240.785102][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.696'. [ 240.798112][ T8411] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 240.831391][ T8411] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 240.895814][ T8411] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 240.922968][ T8411] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 240.953428][ T8664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.698'. [ 240.980732][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.698'. [ 241.177206][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.700'. [ 241.318480][ T8411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.400768][ T8411] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.486576][ T6378] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.493840][ T6378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.595530][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.602780][ T6366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.803263][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.709'. [ 241.817722][ T8411] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 241.881879][ T8411] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.907318][ T8710] netlink: 'syz.1.711': attribute type 1 has an invalid length. [ 242.263361][ T8727] netlink: 40 bytes leftover after parsing attributes in process `syz.3.715'. [ 242.270612][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.714'. [ 242.282670][ T8725] bond2: (slave bridge2): Releasing active interface [ 242.290384][ T8727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.715'. [ 242.300870][ T8725] bridge2: left promiscuous mode [ 242.306367][ T8725] bridge2: left allmulticast mode [ 242.322360][ T8731] netlink: 'syz.2.713': attribute type 10 has an invalid length. [ 242.325229][ T8728] Bluetooth: MGMT ver 1.23 [ 242.365999][ T8731] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 242.476377][ T8411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.496946][ T8733] syz_tun: entered promiscuous mode [ 242.699661][ T8411] veth0_vlan: entered promiscuous mode [ 242.774776][ T8411] veth1_vlan: entered promiscuous mode [ 242.987744][ T8411] veth0_macvtap: entered promiscuous mode [ 243.033222][ T8411] veth1_macvtap: entered promiscuous mode [ 243.142065][ T8411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.197192][ T8411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.286795][ T6371] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.323352][ T6371] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.387253][ T6371] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.418414][ T6371] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.764833][ T6371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.796911][ T6371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.925074][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.974090][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.068008][ T8797] x_tables: duplicate underflow at hook 2 [ 244.272921][ T8803] SET target dimension over the limit! [ 244.772215][ T8812] __nla_validate_parse: 8 callbacks suppressed [ 244.772236][ T8812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.740'. [ 244.801196][ T8822] bond2: (slave veth5): Releasing active interface [ 244.861268][ T6346] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.996298][ T6346] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.184332][ T6346] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.207548][ T8833] netlink: 'syz.2.745': attribute type 5 has an invalid length. [ 245.316447][ T6346] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.515234][ T8844] netlink: 'syz.1.748': attribute type 3 has an invalid length. [ 245.609592][ T8846] ip6gretap1: entered promiscuous mode [ 245.645850][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.750'. [ 245.723274][ T8856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.021566][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.753'. [ 246.039423][ T8862] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 246.066136][ T8858] x_tables: duplicate underflow at hook 1 [ 246.085351][ T6346] bridge_slave_1: left allmulticast mode [ 246.099002][ T6346] bridge_slave_1: left promiscuous mode [ 246.108976][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.134271][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.146146][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.155814][ T6346] bridge_slave_0: left allmulticast mode [ 246.162554][ T6346] bridge_slave_0: left promiscuous mode [ 246.169864][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.178875][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.203639][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.218248][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.771458][ T8884] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.759'. [ 247.025395][ T6346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.046568][ T6346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.066690][ T6346] bond0 (unregistering): Released all slaves [ 247.352755][ T8898] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 247.563973][ T8905] sch_tbf: burst 2 is lower than device batadv0 mtu (1514) ! [ 248.052041][ T8942] netlink: 20 bytes leftover after parsing attributes in process `syz.4.773'. [ 248.074582][ T6346] hsr_slave_0: left promiscuous mode [ 248.076429][ T8942] netlink: 'syz.4.773': attribute type 4 has an invalid length. [ 248.122061][ T6346] hsr_slave_1: left promiscuous mode [ 248.139721][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.170523][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.189077][ T55] block nbd1: Possible stuck request ffff8880258a5080: control (read@0,1024B). Runtime 60 seconds [ 248.200358][ T55] block nbd1: Possible stuck request ffff8880258a5240: control (read@1024,1024B). Runtime 60 seconds [ 248.211940][ T55] block nbd1: Possible stuck request ffff8880258a5400: control (read@2048,1024B). Runtime 60 seconds [ 248.223619][ T55] block nbd1: Possible stuck request ffff8880258a55c0: control (read@3072,1024B). Runtime 60 seconds [ 248.248188][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.258965][ T5850] Bluetooth: hci4: command tx timeout [ 248.283832][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.361456][ T6346] veth1_macvtap: left promiscuous mode [ 248.375493][ T6346] veth0_macvtap: left promiscuous mode [ 248.388453][ T6346] veth1_vlan: left promiscuous mode [ 248.401365][ T6346] veth0_vlan: left promiscuous mode [ 249.219849][ T6346] team0 (unregistering): Port device team_slave_1 removed [ 249.262416][ T6346] team0 (unregistering): Port device team_slave_0 removed [ 249.717083][ T8944] netlink: 'syz.1.774': attribute type 5 has an invalid length. [ 249.787567][ T8966] netlink: 'syz.1.776': attribute type 3 has an invalid length. [ 249.810731][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.776'. [ 250.215163][ T8985] tunl0: entered promiscuous mode [ 250.233499][ T8985] netlink: 'syz.2.781': attribute type 4 has an invalid length. [ 250.268663][ T8985] netlink: 9 bytes leftover after parsing attributes in process `syz.2.781'. [ 250.315468][ T8864] chnl_net:caif_netlink_parms(): no params data found [ 250.338742][ T5850] Bluetooth: hci4: command 0x041b tx timeout [ 250.540684][ T8995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.782'. [ 250.555581][ T8995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.782'. [ 250.888396][ T9006] delete_channel: no stack [ 250.895783][ T8864] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.914563][ T9011] netlink: 'syz.1.785': attribute type 4 has an invalid length. [ 250.923028][ T8864] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.939422][ T8864] bridge_slave_0: entered allmulticast mode [ 250.948129][ T8864] bridge_slave_0: entered promiscuous mode [ 251.293484][ T8864] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.317643][ T8864] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.328053][ T8864] bridge_slave_1: entered allmulticast mode [ 251.342749][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.790'. [ 251.371505][ T8864] bridge_slave_1: entered promiscuous mode [ 251.488061][ T9036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.789'. [ 251.623590][ T9042] netlink: 'syz.3.792': attribute type 10 has an invalid length. [ 251.647397][ T9042] netlink: 40 bytes leftover after parsing attributes in process `syz.3.792'. [ 251.684424][ T9043] netlink: 2 bytes leftover after parsing attributes in process `syz.3.792'. [ 251.706259][ T9042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.707518][ T9045] xt_l2tp: invalid flags combination: c [ 251.718447][ T9042] bridge0: port 3(batadv0) entered blocking state [ 251.733707][ T9042] bridge0: port 3(batadv0) entered disabled state [ 251.754703][ T9042] batadv0: entered allmulticast mode [ 251.776293][ T9042] batadv0: entered promiscuous mode [ 251.806207][ T9042] syz.3.792 (9042) used greatest stack depth: 19896 bytes left [ 251.873204][ T8864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.912275][ T8864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.175212][ T8864] team0: Port device team_slave_0 added [ 252.199980][ T8864] team0: Port device team_slave_1 added [ 252.211487][ T6348] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 252.221259][ T6348] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 252.310612][ T9064] netlink: 'syz.3.797': attribute type 9 has an invalid length. [ 252.321121][ T9064] netlink: 211988 bytes leftover after parsing attributes in process `syz.3.797'. [ 252.361001][ T8864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.377951][ T8864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.417743][ T8864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.433648][ T5857] Bluetooth: hci4: command 0x041b tx timeout [ 252.451620][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.798'. [ 253.123328][ T8864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.130771][ T8864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.167945][ T8864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.438192][ T8864] hsr_slave_0: entered promiscuous mode [ 253.445709][ T8864] hsr_slave_1: entered promiscuous mode [ 253.452262][ T8864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.460332][ T8864] Cannot create hsr debugfs directory [ 253.465988][ T9076] batadv_slave_0: entered promiscuous mode [ 253.632202][ T9078] batadv_slave_0 (unregistering): left promiscuous mode [ 254.434110][ T9106] netlink: 'syz.2.809': attribute type 8 has an invalid length. [ 254.462496][ T9108] --map-set only usable from mangle table [ 254.499586][ T5857] Bluetooth: hci4: command 0x041b tx timeout [ 254.570714][ T8864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 254.628013][ T8864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 254.666963][ T8864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 254.723582][ T8864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 255.047795][ T8864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.123098][ T8864] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.165969][ T6348] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.173448][ T6348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.251150][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.258410][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.402480][ T9130] x_tables: duplicate underflow at hook 2 [ 256.163519][ T9143] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 256.187385][ T8864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.579243][ T5857] Bluetooth: hci4: command 0x041b tx timeout [ 256.602792][ T8864] veth0_vlan: entered promiscuous mode [ 256.687709][ T9159] __nla_validate_parse: 6 callbacks suppressed [ 256.687731][ T9159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.823'. [ 256.954903][ T8864] veth1_vlan: entered promiscuous mode [ 257.087822][ T8864] veth0_macvtap: entered promiscuous mode [ 257.130900][ T9173] netlink: 76 bytes leftover after parsing attributes in process `syz.1.825'. [ 257.146818][ T8864] veth1_macvtap: entered promiscuous mode [ 257.225645][ T8864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.261763][ T8864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.321434][ T2960] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.348343][ T2960] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.384722][ T2960] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.415129][ T2960] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.450383][ T9182] Can't find ip_set type hash:ip$mec [ 257.693683][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.731596][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.847263][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.873762][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.393255][ T2960] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.479212][ T9203] tipc: Started in network mode [ 258.509094][ T9203] tipc: Node identity 5abd21fc9fa4, cluster identity 4711 [ 258.516787][ T9203] tipc: Enabled bearer , priority 0 [ 258.653694][ T2960] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.694789][ T9204] syzkaller0: entered promiscuous mode [ 258.703419][ T9204] syzkaller0: entered allmulticast mode [ 258.740196][ T9203] tipc: Resetting bearer [ 258.812307][ T2960] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.104220][ T2960] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.341014][ T9233] netlink: 36 bytes leftover after parsing attributes in process `syz.2.842'. [ 259.369252][ T9233] netlink: 36 bytes leftover after parsing attributes in process `syz.2.842'. [ 259.434142][ T9233] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 259.589193][ T7133] tipc: Node number set to 3306758652 [ 259.629668][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 259.639508][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 259.649451][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 259.676655][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 259.697127][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 259.855176][ T2960] bridge_slave_1: left allmulticast mode [ 259.866316][ T2960] bridge_slave_1: left promiscuous mode [ 259.880163][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.919444][ T9256] netlink: 'syz.4.846': attribute type 1 has an invalid length. [ 259.930845][ T2960] bridge_slave_0: left allmulticast mode [ 259.936717][ T2960] bridge_slave_0: left promiscuous mode [ 259.984246][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.571768][ T9272] netlink: 'syz.2.851': attribute type 2 has an invalid length. [ 260.605512][ T9272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'. [ 261.090617][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.852'. [ 261.131729][ T2960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.264534][ T2960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.265499][ T9279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.852'. [ 261.305631][ T2960] bond0 (unregistering): Released all slaves [ 261.778753][ T5857] Bluetooth: hci4: command tx timeout [ 262.236258][ T9304] netlink: 'syz.3.857': attribute type 6 has an invalid length. [ 262.304580][ T9305] netlink: 'syz.3.857': attribute type 6 has an invalid length. [ 262.409846][ T2960] hsr_slave_0: left promiscuous mode [ 262.432709][ T2960] hsr_slave_1: left promiscuous mode [ 262.444026][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.463514][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.478484][ T9313] netlink: 136784 bytes leftover after parsing attributes in process `syz.2.859'. [ 262.506503][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.530322][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.537832][ T9313] netlink: zone id is out of range [ 262.557840][ T9313] netlink: zone id is out of range [ 262.579728][ T9313] netlink: zone id is out of range [ 262.584956][ T9313] netlink: zone id is out of range [ 262.627653][ T2960] veth1_macvtap: left promiscuous mode [ 262.629577][ T9313] netlink: zone id is out of range [ 262.640446][ T2960] veth0_macvtap: left promiscuous mode [ 262.650129][ T2960] veth1_vlan: left promiscuous mode [ 262.655998][ T2960] veth0_vlan: left promiscuous mode [ 262.657332][ T9313] netlink: zone id is out of range [ 262.682875][ T9313] netlink: zone id is out of range [ 262.704988][ T9313] netlink: zone id is out of range [ 262.734615][ T9313] netlink: zone id is out of range [ 263.499874][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 263.545343][ T2960] team0 (unregistering): Port device team_slave_0 removed [ 263.864609][ T5857] Bluetooth: hci4: command tx timeout [ 264.171563][ T7125] IPVS: starting estimator thread 0... [ 264.269101][ T9352] IPVS: using max 25 ests per chain, 60000 per kthread [ 264.430070][ T9364] netlink: 'syz.4.870': attribute type 10 has an invalid length. [ 264.469244][ T9364] netlink: 40 bytes leftover after parsing attributes in process `syz.4.870'. [ 264.536356][ T9245] chnl_net:caif_netlink_parms(): no params data found [ 264.630657][ T9368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.873'. [ 264.906297][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.877'. [ 264.999165][ T9386] netlink: 244 bytes leftover after parsing attributes in process `syz.1.878'. [ 265.465436][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.880'. [ 265.493750][ T9245] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.516206][ T9245] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.540870][ T9245] bridge_slave_0: entered allmulticast mode [ 265.559573][ T9245] bridge_slave_0: entered promiscuous mode [ 265.583318][ T9245] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.610278][ T9245] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.648288][ T9245] bridge_slave_1: entered allmulticast mode [ 265.668527][ T9245] bridge_slave_1: entered promiscuous mode [ 265.936316][ T9245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.939768][ T5857] Bluetooth: hci4: command tx timeout [ 265.990279][ T9416] netlink: 'syz.3.881': attribute type 1 has an invalid length. [ 265.998131][ T9416] netlink: 224 bytes leftover after parsing attributes in process `syz.3.881'. [ 266.021200][ T9245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.383387][ T9245] team0: Port device team_slave_0 added [ 266.412313][ T9245] team0: Port device team_slave_1 added [ 266.771444][ T9245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.793116][ T9245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.831442][ T9245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.846645][ T9245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.853814][ T9245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.890037][ T9245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.222929][ T9245] hsr_slave_0: entered promiscuous mode [ 267.231125][ T9245] hsr_slave_1: entered promiscuous mode [ 267.237544][ T9245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.245230][ T9245] Cannot create hsr debugfs directory [ 268.022953][ T5857] Bluetooth: hci4: command tx timeout [ 268.401140][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.900'. [ 268.482019][ T9487] netlink: 16 bytes leftover after parsing attributes in process `syz.3.900'. [ 268.531435][ T9481] netlink: 7 bytes leftover after parsing attributes in process `syz.3.900'. [ 269.030633][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.903'. [ 269.213336][ T9506] syzkaller1: entered promiscuous mode [ 269.229311][ T9506] syzkaller1: entered allmulticast mode [ 269.368528][ T9511] netlink: 44 bytes leftover after parsing attributes in process `syz.4.911'. [ 269.383368][ T9511] bridge_slave_0: default FDB implementation only supports local addresses [ 269.439791][ T9511] netlink: 16 bytes leftover after parsing attributes in process `syz.4.911'. [ 269.474113][ T9245] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 269.520690][ T9245] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 269.557857][ T9514] tipc: Enabled bearer , priority 0 [ 269.595580][ T9245] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 269.646347][ T9245] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 269.674132][ T9511] syzkaller0: entered promiscuous mode [ 269.691924][ T9511] syzkaller0: entered allmulticast mode [ 269.711627][ T9511] tipc: Resetting bearer [ 269.782551][ T6369] tipc: Resetting bearer [ 269.822379][ T9509] tipc: Resetting bearer [ 269.866751][ T9509] tipc: Disabling bearer [ 270.200818][ T9245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.467992][ T9245] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.588364][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.596573][ T6366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.702352][ T6378] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.709599][ T6378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.130763][ T9558] syzkaller0: entered promiscuous mode [ 271.136304][ T9558] syzkaller0: entered allmulticast mode [ 271.191821][ T9561] netlink: 'syz.4.923': attribute type 9 has an invalid length. [ 271.208841][ T9561] netlink: 'syz.4.923': attribute type 6 has an invalid length. [ 271.230881][ T9558] tipc: Resetting bearer [ 271.317193][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'. [ 271.354873][ T9551] veth1: entered promiscuous mode [ 271.375298][ T9551] bridge1: port 1(macvlan10) entered blocking state [ 271.400830][ T9551] bridge1: port 1(macvlan10) entered disabled state [ 271.410274][ T9551] macvlan10: entered allmulticast mode [ 271.417643][ T9551] veth1: entered allmulticast mode [ 271.477421][ T9551] macvlan10: entered promiscuous mode [ 271.646275][ T9574] sctp: [Deprecated]: syz.2.925 (pid 9574) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.646275][ T9574] Use struct sctp_sack_info instead [ 271.760857][ T9568] tipc: Resetting bearer [ 271.936219][ T9245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.227355][ T9245] veth0_vlan: entered promiscuous mode [ 272.303393][ T9245] veth1_vlan: entered promiscuous mode [ 272.331685][ T9592] FAULT_INJECTION: forcing a failure. [ 272.331685][ T9592] name failslab, interval 1, probability 0, space 0, times 0 [ 272.402954][ T9592] CPU: 1 UID: 0 PID: 9592 Comm: syz.4.931 Not tainted 6.16.0-rc5-syzkaller-01458-gc3886ccaadf8 #0 PREEMPT(full) [ 272.402985][ T9592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.402997][ T9592] Call Trace: [ 272.403005][ T9592] [ 272.403014][ T9592] dump_stack_lvl+0x189/0x250 [ 272.403043][ T9592] ? __pfx____ratelimit+0x10/0x10 [ 272.403070][ T9592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.403091][ T9592] ? __pfx__printk+0x10/0x10 [ 272.403121][ T9592] ? __pfx___might_resched+0x10/0x10 [ 272.403148][ T9592] should_fail_ex+0x414/0x560 [ 272.403180][ T9592] should_failslab+0xa8/0x100 [ 272.403206][ T9592] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 272.403230][ T9592] ? __alloc_skb+0x112/0x2d0 [ 272.403261][ T9592] __alloc_skb+0x112/0x2d0 [ 272.403292][ T9592] netlink_sendmsg+0x5c6/0xb30 [ 272.403329][ T9592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.403360][ T9592] ? aa_sock_msg_perm+0x94/0x160 [ 272.403396][ T9592] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 272.403422][ T9592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.403449][ T9592] __sock_sendmsg+0x21c/0x270 [ 272.403476][ T9592] ____sys_sendmsg+0x505/0x830 [ 272.403512][ T9592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.403553][ T9592] ? import_iovec+0x74/0xa0 [ 272.403580][ T9592] ___sys_sendmsg+0x21f/0x2a0 [ 272.403602][ T9592] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.403664][ T9592] ? __fget_files+0x2a/0x420 [ 272.403687][ T9592] ? __fget_files+0x3a0/0x420 [ 272.403722][ T9592] __x64_sys_sendmsg+0x19b/0x260 [ 272.403745][ T9592] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 272.403775][ T9592] ? __pfx_ksys_write+0x10/0x10 [ 272.403794][ T9592] ? rcu_is_watching+0x15/0xb0 [ 272.403822][ T9592] ? do_syscall_64+0xbe/0x3b0 [ 272.403852][ T9592] do_syscall_64+0xfa/0x3b0 [ 272.403876][ T9592] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.403901][ T9592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.403929][ T9592] ? clear_bhb_loop+0x60/0xb0 [ 272.403953][ T9592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.403971][ T9592] RIP: 0033:0x7f0ade58e929 [ 272.403989][ T9592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.404006][ T9592] RSP: 002b:00007f0adc3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.404027][ T9592] RAX: ffffffffffffffda RBX: 00007f0ade7b5fa0 RCX: 00007f0ade58e929 [ 272.404041][ T9592] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000003 [ 272.404054][ T9592] RBP: 00007f0adc3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 272.404066][ T9592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.404076][ T9592] R13: 0000000000000000 R14: 00007f0ade7b5fa0 R15: 00007ffd23bb9eb8 [ 272.404110][ T9592] [ 272.708224][ T9245] veth0_macvtap: entered promiscuous mode [ 272.722759][ T9245] veth1_macvtap: entered promiscuous mode [ 272.747832][ T9245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.763135][ T9245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.846672][ T9595] netlink: 'syz.3.932': attribute type 10 has an invalid length. [ 272.856289][ T9595] netlink: 40 bytes leftover after parsing attributes in process `syz.3.932'. [ 272.872437][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.950937][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.009698][ T6369] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.018837][ T2960] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.158692][ T6369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.179159][ T6369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.378260][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.417086][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.114127][ T9627] x_tables: duplicate underflow at hook 4 [ 274.131547][ T9627] netlink: 'syz.2.941': attribute type 45 has an invalid length. [ 274.192849][ T6366] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.278637][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.942'. [ 274.396338][ T6366] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.576547][ T6366] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.750172][ T6366] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.877546][ T6366] bridge_slave_1: left allmulticast mode [ 274.884234][ T6366] bridge_slave_1: left promiscuous mode [ 274.890590][ T6366] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.904063][ T6366] bridge_slave_0: left allmulticast mode [ 274.928686][ T6366] bridge_slave_0: left promiscuous mode [ 274.934576][ T6366] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.267486][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.949'. [ 275.282213][ T9647] netlink: 24 bytes leftover after parsing attributes in process `syz.1.949'. [ 275.485667][ T9662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.952'. [ 275.726255][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.735441][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.746193][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.756469][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.768645][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.898035][ T6366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.923217][ T6366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.937455][ T6366] bond0 (unregistering): Released all slaves [ 275.962452][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.948'. [ 276.061315][ T9669] netlink: 248 bytes leftover after parsing attributes in process `syz.3.954'. [ 276.096086][ T9663] bridge2: port 1(veth7) entered blocking state [ 276.136971][ T9663] bridge2: port 1(veth7) entered disabled state [ 276.161557][ T9663] veth7: entered allmulticast mode [ 276.173249][ T9663] veth7: entered promiscuous mode [ 276.212649][ T9664] bridge2: port 2(veth0_to_bond) entered blocking state [ 276.224438][ T9664] bridge2: port 2(veth0_to_bond) entered disabled state [ 276.248073][ T9664] veth0_to_bond: entered allmulticast mode [ 276.259086][ T9676] netlink: 16 bytes leftover after parsing attributes in process `syz.2.957'. [ 276.278266][ T9664] veth0_to_bond: entered promiscuous mode [ 276.280299][ T9676] net_ratelimit: 4053 callbacks suppressed [ 276.280314][ T9676] openvswitch: netlink: Missing key (keys=40, expected=80) [ 276.329078][ T9665] vlan0: entered allmulticast mode [ 276.334260][ T9665] veth1: entered allmulticast mode [ 276.353246][ T9665] bridge2: port 3(vlan0) entered blocking state [ 276.360148][ T9665] bridge2: port 3(vlan0) entered disabled state [ 276.370907][ T9665] vlan0: entered promiscuous mode [ 276.376321][ T9665] veth1: entered promiscuous mode [ 276.865518][ T9686] FAULT_INJECTION: forcing a failure. [ 276.865518][ T9686] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 276.890230][ T9686] CPU: 0 UID: 0 PID: 9686 Comm: syz.3.960 Not tainted 6.16.0-rc5-syzkaller-01458-gc3886ccaadf8 #0 PREEMPT(full) [ 276.890261][ T9686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 276.890274][ T9686] Call Trace: [ 276.890282][ T9686] [ 276.890291][ T9686] dump_stack_lvl+0x189/0x250 [ 276.890321][ T9686] ? __pfx____ratelimit+0x10/0x10 [ 276.890348][ T9686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.890371][ T9686] ? __pfx__printk+0x10/0x10 [ 276.890399][ T9686] ? __might_fault+0xb0/0x130 [ 276.890436][ T9686] should_fail_ex+0x414/0x560 [ 276.890471][ T9686] _copy_from_iter+0x1db/0x16f0 [ 276.890498][ T9686] ? rcu_is_watching+0x15/0xb0 [ 276.890524][ T9686] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 276.890550][ T9686] ? __pfx__copy_from_iter+0x10/0x10 [ 276.890574][ T9686] ? __build_skb_around+0x257/0x3e0 [ 276.890606][ T9686] ? netlink_sendmsg+0x642/0xb30 [ 276.890632][ T9686] ? skb_put+0x11b/0x210 [ 276.890664][ T9686] netlink_sendmsg+0x6b2/0xb30 [ 276.890705][ T9686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.890735][ T9686] ? aa_sock_msg_perm+0x94/0x160 [ 276.890766][ T9686] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 276.890795][ T9686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.890824][ T9686] __sock_sendmsg+0x21c/0x270 [ 276.890853][ T9686] ____sys_sendmsg+0x505/0x830 [ 276.890889][ T9686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.890926][ T9686] ? import_iovec+0x74/0xa0 [ 276.890953][ T9686] ___sys_sendmsg+0x21f/0x2a0 [ 276.890973][ T9686] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.891034][ T9686] ? __fget_files+0x2a/0x420 [ 276.891058][ T9686] ? __fget_files+0x3a0/0x420 [ 276.891093][ T9686] __x64_sys_sendmsg+0x19b/0x260 [ 276.891125][ T9686] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 276.891156][ T9686] ? __pfx_ksys_write+0x10/0x10 [ 276.891176][ T9686] ? rcu_is_watching+0x15/0xb0 [ 276.891204][ T9686] ? do_syscall_64+0xbe/0x3b0 [ 276.891234][ T9686] do_syscall_64+0xfa/0x3b0 [ 276.891258][ T9686] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.891282][ T9686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.891301][ T9686] ? clear_bhb_loop+0x60/0xb0 [ 276.891326][ T9686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.891345][ T9686] RIP: 0033:0x7fe2edd8e929 [ 276.891364][ T9686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.891382][ T9686] RSP: 002b:00007fe2eeb50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.891405][ T9686] RAX: ffffffffffffffda RBX: 00007fe2edfb5fa0 RCX: 00007fe2edd8e929 [ 276.891419][ T9686] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000003 [ 276.891432][ T9686] RBP: 00007fe2eeb50090 R08: 0000000000000000 R09: 0000000000000000 [ 276.891444][ T9686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.891457][ T9686] R13: 0000000000000000 R14: 00007fe2edfb5fa0 R15: 00007fff98147c68 [ 276.891491][ T9686] [ 277.258764][ T9693] netlink: 212172 bytes leftover after parsing attributes in process `syz.2.957'. [ 277.345859][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.964'. [ 277.465184][ T9702] xt_recent: hitcount (4294967292) is larger than allowed maximum (65535) [ 277.606525][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.964'. [ 277.685510][ T6366] hsr_slave_0: left promiscuous mode [ 277.732919][ T6366] hsr_slave_1: left promiscuous mode [ 277.751036][ T6366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.766722][ T6366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.791720][ T6366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.804706][ T6366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.869098][ T5857] Bluetooth: hci4: command tx timeout [ 277.885838][ T6366] veth1_macvtap: left promiscuous mode [ 277.903760][ T6366] veth0_macvtap: left promiscuous mode [ 277.910091][ T6366] veth1_vlan: left promiscuous mode [ 277.915574][ T6366] veth0_vlan: left promiscuous mode [ 278.264661][ T55] block nbd1: Possible stuck request ffff8880258a5080: control (read@0,1024B). Runtime 90 seconds [ 278.276884][ T55] block nbd1: Possible stuck request ffff8880258a5240: control (read@1024,1024B). Runtime 90 seconds [ 278.299449][ T55] block nbd1: Possible stuck request ffff8880258a5400: control (read@2048,1024B). Runtime 90 seconds [ 278.313352][ T55] block nbd1: Possible stuck request ffff8880258a55c0: control (read@3072,1024B). Runtime 90 seconds [ 278.648742][ T6366] team0 (unregistering): Port device team_slave_1 removed [ 278.695868][ T6366] team0 (unregistering): Port device team_slave_0 removed [ 279.789107][ T9666] chnl_net:caif_netlink_parms(): no params data found [ 279.939144][ T5857] Bluetooth: hci4: command tx timeout [ 280.173574][ T9666] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.181415][ T9666] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.189424][ T9666] bridge_slave_0: entered allmulticast mode [ 280.198057][ T9666] bridge_slave_0: entered promiscuous mode [ 280.212206][ T9666] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.219614][ T9666] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.226857][ T9666] bridge_slave_1: entered allmulticast mode [ 280.235186][ T9666] bridge_slave_1: entered promiscuous mode [ 280.361615][ T9763] netlink: 240 bytes leftover after parsing attributes in process `syz.4.980'. [ 280.372455][ T9763] netlink: 48 bytes leftover after parsing attributes in process `syz.4.980'. [ 280.393452][ T9666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.416576][ T9666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.542397][ T9666] team0: Port device team_slave_0 added [ 280.580918][ T9666] team0: Port device team_slave_1 added [ 280.708034][ T9666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.716355][ T9666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.774237][ T9666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.803265][ T9666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.816998][ T9666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.846905][ T9666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.117350][ T9666] hsr_slave_0: entered promiscuous mode [ 281.140003][ T9666] hsr_slave_1: entered promiscuous mode [ 281.146521][ T9666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.170378][ T9666] Cannot create hsr debugfs directory [ 281.232656][ T9779] FAULT_INJECTION: forcing a failure. [ 281.232656][ T9779] name failslab, interval 1, probability 0, space 0, times 0 [ 281.258980][ T9779] CPU: 0 UID: 0 PID: 9779 Comm: syz.1.983 Not tainted 6.16.0-rc5-syzkaller-01458-gc3886ccaadf8 #0 PREEMPT(full) [ 281.259011][ T9779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.259023][ T9779] Call Trace: [ 281.259031][ T9779] [ 281.259039][ T9779] dump_stack_lvl+0x189/0x250 [ 281.259067][ T9779] ? __pfx____ratelimit+0x10/0x10 [ 281.259093][ T9779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.259115][ T9779] ? __pfx__printk+0x10/0x10 [ 281.259157][ T9779] ? __pfx___might_resched+0x10/0x10 [ 281.259178][ T9779] ? fs_reclaim_acquire+0x7d/0x100 [ 281.259210][ T9779] should_fail_ex+0x414/0x560 [ 281.259242][ T9779] should_failslab+0xa8/0x100 [ 281.259268][ T9779] __kmalloc_node_noprof+0xd1/0x4e0 [ 281.259289][ T9779] ? qdisc_alloc+0x97/0xaa0 [ 281.259320][ T9779] qdisc_alloc+0x97/0xaa0 [ 281.259356][ T9779] qdisc_create+0x12c/0xea0 [ 281.259388][ T9779] tc_modify_qdisc+0x1538/0x20e0 [ 281.259429][ T9779] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 281.259486][ T9779] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 281.259507][ T9779] rtnetlink_rcv_msg+0x779/0xb70 [ 281.259536][ T9779] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 281.259559][ T9779] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 281.259581][ T9779] ? ref_tracker_free+0x63a/0x7d0 [ 281.259605][ T9779] ? __copy_skb_header+0xa7/0x550 [ 281.259626][ T9779] ? __pfx_ref_tracker_free+0x10/0x10 [ 281.259667][ T9779] netlink_rcv_skb+0x205/0x470 [ 281.259695][ T9779] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 281.259720][ T9779] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 281.259760][ T9779] ? netlink_deliver_tap+0x2e/0x1b0 [ 281.259785][ T9779] ? netlink_deliver_tap+0x2e/0x1b0 [ 281.259818][ T9779] netlink_unicast+0x759/0x8e0 [ 281.259856][ T9779] netlink_sendmsg+0x805/0xb30 [ 281.259893][ T9779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.259921][ T9779] ? aa_sock_msg_perm+0x94/0x160 [ 281.259950][ T9779] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 281.259984][ T9779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.260011][ T9779] __sock_sendmsg+0x21c/0x270 [ 281.260038][ T9779] ____sys_sendmsg+0x505/0x830 [ 281.260075][ T9779] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.260115][ T9779] ? import_iovec+0x74/0xa0 [ 281.260147][ T9779] ___sys_sendmsg+0x21f/0x2a0 [ 281.260168][ T9779] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.260228][ T9779] ? __fget_files+0x2a/0x420 [ 281.260251][ T9779] ? __fget_files+0x3a0/0x420 [ 281.260288][ T9779] __x64_sys_sendmsg+0x19b/0x260 [ 281.260311][ T9779] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 281.260342][ T9779] ? __pfx_ksys_write+0x10/0x10 [ 281.260360][ T9779] ? rcu_is_watching+0x15/0xb0 [ 281.260389][ T9779] ? do_syscall_64+0xbe/0x3b0 [ 281.260420][ T9779] do_syscall_64+0xfa/0x3b0 [ 281.260444][ T9779] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.260467][ T9779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.260484][ T9779] ? clear_bhb_loop+0x60/0xb0 [ 281.260508][ T9779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.260525][ T9779] RIP: 0033:0x7fa08df8e929 [ 281.260543][ T9779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.260560][ T9779] RSP: 002b:00007fa08ee6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.260581][ T9779] RAX: ffffffffffffffda RBX: 00007fa08e1b5fa0 RCX: 00007fa08df8e929 [ 281.260593][ T9779] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000003 [ 281.260604][ T9779] RBP: 00007fa08ee6a090 R08: 0000000000000000 R09: 0000000000000000 [ 281.260615][ T9779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.260626][ T9779] R13: 0000000000000000 R14: 00007fa08e1b5fa0 R15: 00007fff390a8168 [ 281.260658][ T9779] [ 282.019150][ T5850] Bluetooth: hci4: command tx timeout [ 282.192648][ T9762] syz.3.981 (9762) used greatest stack depth: 17992 bytes left [ 282.465971][ T9801] syzkaller0: entered promiscuous mode [ 282.474998][ T9801] syzkaller0: entered allmulticast mode [ 282.925758][ T9816] netlink: 'syz.1.990': attribute type 1 has an invalid length. [ 284.101663][ T5850] Bluetooth: hci4: command 0x0419 tx timeout [ 284.720212][ T9816] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 285.242618][ T9666] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 285.320839][ T9666] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 285.356321][ T9666] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 285.412639][ T9666] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 285.560934][ T9854] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1002'. [ 285.788329][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1004'. [ 285.810884][ T9666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.821747][ T9866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1004'. [ 285.971259][ T9870] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1004'. [ 286.047216][ T9666] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.116852][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.124122][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.156897][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.164204][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.181551][ T5857] Bluetooth: hci4: command 0x0419 tx timeout [ 286.195389][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1008'. [ 286.914783][ T9908] netlink: 'syz.2.1016': attribute type 7 has an invalid length. [ 286.920727][ T9666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.220769][ T9921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.227331][ T9666] veth0_vlan: entered promiscuous mode [ 287.302300][ T9666] veth1_vlan: entered promiscuous mode [ 287.496306][ T9928] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1021'. [ 287.631230][ T9666] veth0_macvtap: entered promiscuous mode [ 287.677441][ T9666] veth1_macvtap: entered promiscuous mode [ 287.745427][ T9933] netlink: 'syz.1.1022': attribute type 6 has an invalid length. [ 287.757776][ T9666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.824465][ T9666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.872937][ T2960] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.901274][ T2960] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.933062][ T2960] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.955178][ T6366] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.172433][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1024'. [ 288.273287][ T2948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.292689][ T2948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.375451][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1024'. [ 288.395807][ T6369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.441879][ T6369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.568088][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1027'. [ 288.616539][ T9952] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1027'. [ 288.653012][ T9953] x_tables: duplicate underflow at hook 1 [ 289.468188][ T6348] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.688331][ T6348] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.997863][ T6348] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.098435][ T6348] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.429723][ T6348] bridge_slave_1: left allmulticast mode [ 290.435436][ T6348] bridge_slave_1: left promiscuous mode [ 290.477577][ T9997] nbd4: detected capacity change from 0 to 127 [ 290.477901][ T6348] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.585641][ T6348] bridge_slave_0: left allmulticast mode [ 290.592455][ T6348] bridge_slave_0: left promiscuous mode [ 290.600368][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.925125][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 290.934174][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 290.942250][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 290.956507][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 290.964609][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 291.115975][ T5857] block nbd4: Receive control failed (result -32) [ 291.393773][ T6348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.420410][ T6348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.437885][ T6348] bond0 (unregistering): Released all slaves [ 291.741234][T10034] syzkaller0: left promiscuous mode [ 291.755302][T10034] syzkaller0: left allmulticast mode [ 291.768004][T10034] tipc: Resetting bearer [ 291.947018][T10042] vlan2: entered promiscuous mode [ 291.953504][T10042] vlan1: entered promiscuous mode [ 291.958905][T10042] erspan0: entered promiscuous mode [ 292.275149][ T6348] hsr_slave_0: left promiscuous mode [ 292.297294][ T6348] hsr_slave_1: left promiscuous mode [ 292.322365][ T6348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.358093][ T6348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.383605][ T6348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.407465][ T6348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.489505][ T6348] veth1_macvtap: left promiscuous mode [ 292.495102][ T6348] veth0_macvtap: left promiscuous mode [ 292.518581][ T6348] veth1_vlan: left promiscuous mode [ 292.531024][ T6348] veth0_vlan: left promiscuous mode [ 292.746087][T10063] __nla_validate_parse: 2 callbacks suppressed [ 292.746106][T10063] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1054'. [ 292.934807][T10065] netlink: 'syz.2.1055': attribute type 27 has an invalid length. [ 293.060386][ T5857] Bluetooth: hci4: command tx timeout [ 294.144760][ T6348] team0 (unregistering): Port device team_slave_1 removed [ 294.211319][T10081] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1058'. [ 294.221971][ T6348] team0 (unregistering): Port device team_slave_0 removed [ 294.743016][T10063] batadv_slave_1: entered promiscuous mode [ 294.759554][T10063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.885067][T10084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1059'. [ 294.961919][T10084] vlan0: entered promiscuous mode [ 295.044197][T10091] x_tables: duplicate underflow at hook 2 [ 295.079428][T10019] chnl_net:caif_netlink_parms(): no params data found [ 295.140393][ T5857] Bluetooth: hci4: command tx timeout [ 295.173329][T10093] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 295.870173][T10019] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.877381][T10019] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.906476][T10019] bridge_slave_0: entered allmulticast mode [ 295.931126][T10019] bridge_slave_0: entered promiscuous mode [ 295.959942][T10019] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.978442][T10019] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.993212][T10019] bridge_slave_1: entered allmulticast mode [ 296.014398][T10019] bridge_slave_1: entered promiscuous mode [ 296.535424][T10019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.590897][T10019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.706848][T10019] team0: Port device team_slave_0 added [ 296.734804][T10019] team0: Port device team_slave_1 added [ 296.761029][T10131] netlink: 844 bytes leftover after parsing attributes in process `syz.3.1071'. [ 296.832768][T10019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.852605][T10019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.891704][T10019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.924067][T10019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.939943][T10019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.968993][T10019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.131623][T10143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1076'. [ 297.151292][T10143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'. [ 297.165316][T10019] hsr_slave_0: entered promiscuous mode [ 297.180530][T10019] hsr_slave_1: entered promiscuous mode [ 297.191271][T10019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.207918][T10019] Cannot create hsr debugfs directory [ 297.220964][ T5857] Bluetooth: hci4: command tx timeout [ 297.424447][T10152] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 297.449878][T10152] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 297.511898][T10156] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1078'. [ 297.537757][T10156] netlink: 37 bytes leftover after parsing attributes in process `syz.2.1078'. [ 297.573522][T10156] netlink: 37 bytes leftover after parsing attributes in process `syz.2.1078'. [ 298.352923][T10170] set match dimension is over the limit! [ 298.622904][T10019] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 298.645171][T10019] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 298.735410][T10019] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 298.795781][T10019] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 298.865948][T10184] tipc: Enabling of bearer rejected, failed to enable media [ 298.927189][T10190] openvswitch: netlink: IPv6 tunnel dst address is zero [ 299.204378][T10199] gretap0: left promiscuous mode [ 299.221228][T10199] macsec1: left promiscuous mode [ 299.227055][T10199] macsec1: left allmulticast mode [ 299.303307][ T5857] Bluetooth: hci4: command tx timeout [ 299.317560][T10207] netlink: 'syz.3.1092': attribute type 27 has an invalid length. [ 299.380544][T10199] wireguard0: left promiscuous mode [ 299.386150][T10199] wireguard0: left allmulticast mode [ 299.423940][T10199] ip6gretap1: left promiscuous mode [ 299.634085][T10019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.696464][T10019] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.750953][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.758222][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.782485][T10221] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1095'. [ 299.821864][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.829096][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.944908][T10223] batman_adv: batadv0: Adding interface: ip6gretap2 [ 299.960644][T10223] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.026880][T10223] batman_adv: batadv0: Interface activated: ip6gretap2 [ 300.692156][T10019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.867399][T10019] veth0_vlan: entered promiscuous mode [ 300.912686][T10019] veth1_vlan: entered promiscuous mode [ 301.011694][T10240] netlink: 'syz.4.1100': attribute type 1 has an invalid length. [ 301.045232][T10240] bridge0: entered promiscuous mode [ 301.105127][T10019] veth0_macvtap: entered promiscuous mode [ 301.123595][T10019] veth1_macvtap: entered promiscuous mode [ 301.183637][T10239] bridge0: left promiscuous mode [ 301.287523][T10019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.373974][T10019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.476567][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1104'. [ 301.554388][ T2948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.579771][ T2948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.655932][ T2948] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.682656][ T2948] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.213352][ T6348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.242347][ T6348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.397883][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.423550][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.927041][T10274] veth0_to_hsr: entered allmulticast mode [ 302.935516][T10276] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1109'. [ 302.970712][T10276] syzkaller1: entered promiscuous mode [ 302.977620][T10276] syzkaller1: entered allmulticast mode [ 303.286191][ T6378] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.546476][ T6378] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.652447][ T6378] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.727980][ T6378] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.932769][ T6378] bridge_slave_1: left allmulticast mode [ 303.938439][ T6378] bridge_slave_1: left promiscuous mode [ 303.946049][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.958185][ T6378] bridge_slave_0: left allmulticast mode [ 303.966342][ T6378] bridge_slave_0: left promiscuous mode [ 303.972843][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.323171][T10293] netlink: 'syz.3.1113': attribute type 33 has an invalid length. [ 304.344592][T10290] netlink: 'syz.2.1112': attribute type 1 has an invalid length. [ 304.359280][T10293] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1113'. [ 304.365289][T10290] netlink: 'syz.2.1112': attribute type 2 has an invalid length. [ 304.391776][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1113'. [ 304.409494][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1112'. [ 304.428493][T10298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1113'. [ 304.466106][T10290] netlink: 'syz.2.1112': attribute type 11 has an invalid length. [ 304.475809][T10290] netlink: 'syz.2.1112': attribute type 4 has an invalid length. [ 304.484915][T10290] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1112'. [ 304.502530][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1113'. [ 304.696788][ T6378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.728453][ T6378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.755799][ T6378] bond0 (unregistering): Released all slaves [ 304.831816][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 304.844638][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 304.854098][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 304.874513][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 304.885918][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.305013][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1119'. [ 305.394337][T10327] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1121'. [ 305.550334][ T6378] hsr_slave_0: left promiscuous mode [ 305.605760][ T6378] hsr_slave_1: left promiscuous mode [ 305.619731][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.627173][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.692263][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.717128][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.750849][T10344] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1124'. [ 305.769022][ T6378] veth1_macvtap: left promiscuous mode [ 305.774632][ T6378] veth0_macvtap: left promiscuous mode [ 305.791628][ T6378] veth1_vlan: left promiscuous mode [ 305.797032][ T6378] veth0_vlan: left promiscuous mode [ 305.845482][T10346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1125'. [ 306.322234][T10357] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 306.981800][ T5850] Bluetooth: hci4: command tx timeout [ 307.343135][ T6378] team0 (unregistering): Port device team_slave_1 removed [ 307.392732][ T6378] team0 (unregistering): Port device team_slave_0 removed [ 307.937455][T10346] xfrm1: entered promiscuous mode [ 307.970313][T10346] xfrm1: entered allmulticast mode [ 308.044525][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'. [ 308.104420][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1129'. [ 308.342572][ T55] block nbd1: Possible stuck request ffff8880258a5080: control (read@0,1024B). Runtime 120 seconds [ 308.354367][ T55] block nbd1: Possible stuck request ffff8880258a5240: control (read@1024,1024B). Runtime 120 seconds [ 308.367137][ T55] block nbd1: Possible stuck request ffff8880258a5400: control (read@2048,1024B). Runtime 120 seconds [ 308.379980][ T55] block nbd1: Possible stuck request ffff8880258a55c0: control (read@3072,1024B). Runtime 120 seconds [ 308.397961][T10380] x_tables: unsorted underflow at hook 2 [ 308.612079][T10307] chnl_net:caif_netlink_parms(): no params data found [ 308.769605][T10395] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1137'. [ 309.059562][ T5850] Bluetooth: hci4: command tx timeout [ 309.247097][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1141'. [ 309.402373][T10307] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.411311][T10307] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.420119][T10307] bridge_slave_0: entered allmulticast mode [ 309.428448][T10307] bridge_slave_0: entered promiscuous mode [ 309.440554][T10307] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.447895][T10307] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.456322][T10307] bridge_slave_1: entered allmulticast mode [ 309.474301][T10307] bridge_slave_1: entered promiscuous mode [ 309.583821][T10307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.606368][T10420] netlink: 'syz.4.1146': attribute type 1 has an invalid length. [ 309.615368][T10420] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1146'. [ 309.636197][T10307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.806733][T10307] team0: Port device team_slave_0 added [ 309.843764][T10307] team0: Port device team_slave_1 added [ 310.021037][T10307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.039523][T10307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.074055][T10307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.104564][T10307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.112385][T10307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.144329][T10307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.271075][T10307] hsr_slave_0: entered promiscuous mode [ 310.277468][T10307] hsr_slave_1: entered promiscuous mode [ 310.304009][T10307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.314987][T10307] Cannot create hsr debugfs directory [ 310.596343][T10456] bridge_slave_0: left allmulticast mode [ 310.619717][T10456] bridge_slave_0: left promiscuous mode [ 310.630947][T10456] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.695986][T10456] bridge_slave_1: left allmulticast mode [ 310.704533][T10456] bridge_slave_1: left promiscuous mode [ 310.711021][T10456] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.736330][T10458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1155'. [ 310.753174][T10456] bond0: (slave bond_slave_0): Releasing backup interface [ 310.765109][T10456] bond0: (slave bond_slave_1): Releasing backup interface [ 310.776652][T10456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.786359][T10465] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1157'. [ 310.786732][T10456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.822822][T10456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.875320][T10456] gretap1: left allmulticast mode [ 310.885574][T10456] gretap1: left promiscuous mode [ 310.914351][T10456] bridge0: port 3(gretap1) entered disabled state [ 310.933014][T10472] netlink: 'syz.3.1157': attribute type 4 has an invalid length. [ 310.951692][T10473] netlink: 'syz.4.1159': attribute type 10 has an invalid length. [ 310.965240][T10456] bond1: (slave ip6gretap1): Releasing active interface [ 310.973327][T10456] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 0a:b3:ca:72:f6:12 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 311.010967][T10456] bond1: (slave veth3): Releasing active interface [ 311.030791][T10456] bond2: (slave veth5): Releasing active interface [ 311.050275][T10456] bond3: (slave ip6gretap2): Removing an active aggregator [ 311.060367][T10456] bond3: (slave ip6gretap2): Releasing backup interface [ 311.067360][T10456] bond3: (slave ip6gretap2): the permanent HWaddr of slave - 8a:59:ed:f0:cf:ea - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 311.098007][T10456] bond3: (slave veth7): Releasing backup interface [ 311.121626][T10456] macvlan10: left allmulticast mode [ 311.137930][T10456] veth1: left allmulticast mode [ 311.143974][ T5850] Bluetooth: hci4: command tx timeout [ 311.151011][T10456] macvlan10: left promiscuous mode [ 311.156605][T10456] bridge1: port 1(macvlan10) entered disabled state [ 311.327088][T10478] x_tables: duplicate underflow at hook 2 [ 311.454938][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1161'. [ 311.550732][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1161'. [ 311.565699][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1161'. [ 311.585309][T10481] netlink: 'syz.4.1161': attribute type 1 has an invalid length. [ 311.595754][T10481] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1161'. [ 311.767411][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1165'. [ 311.840917][T10494] netlink: 'syz.2.1165': attribute type 10 has an invalid length. [ 312.160285][T10509] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 312.250028][T10511] FAULT_INJECTION: forcing a failure. [ 312.250028][T10511] name failslab, interval 1, probability 0, space 0, times 0 [ 312.293896][T10511] CPU: 1 UID: 0 PID: 10511 Comm: syz.4.1169 Not tainted 6.16.0-rc5-syzkaller-01458-gc3886ccaadf8 #0 PREEMPT(full) [ 312.293926][T10511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.293937][T10511] Call Trace: [ 312.293945][T10511] [ 312.293964][T10511] dump_stack_lvl+0x189/0x250 [ 312.293993][T10511] ? __pfx____ratelimit+0x10/0x10 [ 312.294020][T10511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.294044][T10511] ? __pfx__printk+0x10/0x10 [ 312.294076][T10511] ? __pfx___might_resched+0x10/0x10 [ 312.294097][T10511] ? fs_reclaim_acquire+0x7d/0x100 [ 312.294128][T10511] should_fail_ex+0x414/0x560 [ 312.294161][T10511] should_failslab+0xa8/0x100 [ 312.294186][T10511] __kmalloc_noprof+0xcb/0x4f0 [ 312.294206][T10511] ? nl80211_set_tid_config+0x31f/0x14c0 [ 312.294231][T10511] nl80211_set_tid_config+0x31f/0x14c0 [ 312.294249][T10511] ? __mutex_lock+0x51b/0xe80 [ 312.294280][T10511] ? netdev_run_todo+0xe1d/0xea0 [ 312.294306][T10511] ? __pfx___mutex_lock+0x10/0x10 [ 312.294331][T10511] ? __pfx_netdev_run_todo+0x10/0x10 [ 312.294352][T10511] ? __pfx_nl80211_set_tid_config+0x10/0x10 [ 312.294389][T10511] ? nl80211_pre_doit+0x4f1/0x930 [ 312.294418][T10511] genl_family_rcv_msg_doit+0x212/0x300 [ 312.294449][T10511] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 312.294486][T10511] ? bpf_lsm_capable+0x9/0x20 [ 312.294505][T10511] ? security_capable+0x7e/0x2e0 [ 312.294539][T10511] genl_rcv_msg+0x60e/0x790 [ 312.294568][T10511] ? __pfx_genl_rcv_msg+0x10/0x10 [ 312.294585][T10511] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 312.294602][T10511] ? __pfx_nl80211_set_tid_config+0x10/0x10 [ 312.294619][T10511] ? __pfx_nl80211_post_doit+0x10/0x10 [ 312.294656][T10511] netlink_rcv_skb+0x205/0x470 [ 312.294683][T10511] ? __pfx_genl_rcv_msg+0x10/0x10 [ 312.294704][T10511] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 312.294750][T10511] ? down_read+0x1ad/0x2e0 [ 312.294781][T10511] genl_rcv+0x28/0x40 [ 312.294799][T10511] netlink_unicast+0x759/0x8e0 [ 312.294837][T10511] netlink_sendmsg+0x805/0xb30 [ 312.294883][T10511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.294913][T10511] ? aa_sock_msg_perm+0x94/0x160 [ 312.294944][T10511] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.294979][T10511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.295006][T10511] __sock_sendmsg+0x21c/0x270 [ 312.295033][T10511] ____sys_sendmsg+0x505/0x830 [ 312.295070][T10511] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.295110][T10511] ? import_iovec+0x74/0xa0 [ 312.295137][T10511] ___sys_sendmsg+0x21f/0x2a0 [ 312.295159][T10511] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.295225][T10511] ? __fget_files+0x2a/0x420 [ 312.295248][T10511] ? __fget_files+0x3a0/0x420 [ 312.295286][T10511] __x64_sys_sendmsg+0x19b/0x260 [ 312.295309][T10511] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.295340][T10511] ? __pfx_ksys_write+0x10/0x10 [ 312.295358][T10511] ? rcu_is_watching+0x15/0xb0 [ 312.295388][T10511] ? do_syscall_64+0xbe/0x3b0 [ 312.295420][T10511] do_syscall_64+0xfa/0x3b0 [ 312.295443][T10511] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.295466][T10511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.295486][T10511] ? clear_bhb_loop+0x60/0xb0 [ 312.295511][T10511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.295529][T10511] RIP: 0033:0x7f0ade58e929 [ 312.295548][T10511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.295564][T10511] RSP: 002b:00007f0adc3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.295585][T10511] RAX: ffffffffffffffda RBX: 00007f0ade7b5fa0 RCX: 00007f0ade58e929 [ 312.295599][T10511] RDX: 0000000000004050 RSI: 000020000000d040 RDI: 0000000000000003 [ 312.295611][T10511] RBP: 00007f0adc3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 312.295623][T10511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.295634][T10511] R13: 0000000000000000 R14: 00007f0ade7b5fa0 R15: 00007ffd23bb9eb8 [ 312.295669][T10511] [ 312.934219][T10514] sock: sock_timestamping_bind_phc: sock not bind to device [ 312.950776][T10525] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 312.972793][T10527] syz.4.1172 uses old SIOCAX25GETINFO [ 313.216697][T10307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 313.219450][ T5857] Bluetooth: hci4: command tx timeout [ 313.301383][T10307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 313.349065][T10307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 313.376422][T10307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 313.453191][T10544] bond1: entered promiscuous mode [ 313.467622][T10544] bond1: entered allmulticast mode [ 313.659467][T10307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.744222][T10307] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.803418][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.810689][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.852973][T10559] ipt_rpfilter: unknown options [ 313.858429][T10561] ipt_rpfilter: unknown options [ 313.866517][T10559] netlink: 'syz.4.1180': attribute type 1 has an invalid length. [ 313.871286][T10567] FAULT_INJECTION: forcing a failure. [ 313.871286][T10567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.872330][T10567] [ 313.872337][T10567] ====================================================== [ 313.872344][T10567] WARNING: possible circular locking dependency detected [ 313.872352][T10567] 6.16.0-rc5-syzkaller-01458-gc3886ccaadf8 #0 Not tainted [ 313.872362][T10567] ------------------------------------------------------ [ 313.872369][T10567] syz.2.1182/10567 is trying to acquire lock: [ 313.872378][T10567] ffffffff8e133380 (console_owner){-...}-{0:0}, at: vprintk_emit+0x444/0x7a0 [ 313.872425][T10567] [ 313.872425][T10567] but task is already holding lock: [ 313.872430][T10567] ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 313.872466][T10567] [ 313.872466][T10567] which lock already depends on the new lock. [ 313.872466][T10567] [ 313.872472][T10567] [ 313.872472][T10567] the existing dependency chain (in reverse order) is: [ 313.872478][T10567] [ 313.872478][T10567] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 313.872500][T10567] lock_acquire+0x120/0x360 [ 313.872516][T10567] _raw_spin_lock_nested+0x32/0x50 [ 313.872535][T10567] raw_spin_rq_lock_nested+0x2a/0x140 [ 313.872550][T10567] task_rq_lock+0xbc/0x470 [ 313.872566][T10567] cgroup_move_task+0x9a/0x590 [ 313.872583][T10567] css_set_move_task+0x658/0x9e0 [ 313.872601][T10567] cgroup_post_fork+0x1ef/0x790 [ 313.872619][T10567] copy_process+0x37e6/0x3b80 [ 313.872635][T10567] kernel_clone+0x21e/0x870 [ 313.872653][T10567] user_mode_thread+0xdd/0x140 [ 313.872670][T10567] rest_init+0x23/0x300 [ 313.872683][T10567] start_kernel+0x47d/0x500 [ 313.872698][T10567] x86_64_start_reservations+0x24/0x30 [ 313.872726][T10567] x86_64_start_kernel+0x143/0x1c0 [ 313.872745][T10567] common_startup_64+0x13e/0x147 [ 313.872765][T10567] [ 313.872765][T10567] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 313.872786][T10567] lock_acquire+0x120/0x360 [ 313.872799][T10567] _raw_spin_lock_irqsave+0xa7/0xf0 [ 313.872816][T10567] try_to_wake_up+0x6e/0x1290 [ 313.872835][T10567] __wake_up_common_lock+0x137/0x1f0 [ 313.872856][T10567] tty_port_default_wakeup+0xa2/0xf0 [ 313.872875][T10567] serial8250_tx_chars+0x72e/0x970 [ 313.872892][T10567] serial8250_handle_irq+0x633/0xbb0 [ 313.872908][T10567] serial8250_default_handle_irq+0xbf/0x1b0 [ 313.872928][T10567] serial8250_interrupt+0xa5/0x1d0 [ 313.872942][T10567] __handle_irq_event_percpu+0x28c/0x980 [ 313.872962][T10567] handle_irq_event+0x8b/0x1e0 [ 313.872981][T10567] handle_edge_irq+0x267/0x9c0 [ 313.872998][T10567] __common_interrupt+0x140/0x250 [ 313.873011][T10567] common_interrupt+0xb6/0xe0 [ 313.873025][T10567] asm_common_interrupt+0x26/0x40 [ 313.873040][T10567] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 313.873056][T10567] rcu_core+0xc1e/0x1710 [ 313.873071][T10567] handle_softirqs+0x286/0x870 [ 313.873086][T10567] run_ksoftirqd+0x9b/0x100 [ 313.873103][T10567] smpboot_thread_fn+0x53f/0xa60 [ 313.873119][T10567] kthread+0x70e/0x8a0 [ 313.873138][T10567] ret_from_fork+0x3fc/0x770 [ 313.873152][T10567] ret_from_fork_asm+0x1a/0x30 [ 313.873171][T10567] [ 313.873171][T10567] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 313.873192][T10567] lock_acquire+0x120/0x360 [ 313.873206][T10567] _raw_spin_lock_irqsave+0xa7/0xf0 [ 313.873222][T10567] __wake_up_common_lock+0x2f/0x1f0 [ 313.873242][T10567] tty_port_default_wakeup+0xa2/0xf0 [ 313.873261][T10567] serial8250_tx_chars+0x72e/0x970 [ 313.873277][T10567] serial8250_handle_irq+0x633/0xbb0 [ 313.873293][T10567] serial8250_default_handle_irq+0xbf/0x1b0 [ 313.873312][T10567] serial8250_interrupt+0xa5/0x1d0 [ 313.873325][T10567] __handle_irq_event_percpu+0x28c/0x980 [ 313.873345][T10567] handle_irq_event+0x8b/0x1e0 [ 313.873363][T10567] handle_edge_irq+0x267/0x9c0 [ 313.873381][T10567] __common_interrupt+0x140/0x250 [ 313.873393][T10567] common_interrupt+0xb6/0xe0 [ 313.873407][T10567] asm_common_interrupt+0x26/0x40 [ 313.873421][T10567] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 313.873437][T10567] uart_port_unlock_deref+0x111/0x2f0 [ 313.873454][T10567] uart_write+0xe8/0x130 [ 313.873469][T10567] n_tty_write+0xd35/0x11d0 [ 313.873489][T10567] file_tty_write+0x503/0x990 [ 313.873504][T10567] vfs_write+0x54b/0xa90 [ 313.873519][T10567] ksys_write+0x145/0x250 [ 313.873534][T10567] do_syscall_64+0xfa/0x3b0 [ 313.873553][T10567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.873567][T10567] [ 313.873567][T10567] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 313.873588][T10567] lock_acquire+0x120/0x360 [ 313.873602][T10567] _raw_spin_lock_irqsave+0xa7/0xf0 [ 313.873618][T10567] serial8250_console_write+0x17e/0x1ba0 [ 313.873637][T10567] console_flush_all+0x728/0xc40 [ 313.873655][T10567] console_unlock+0xc4/0x270 [ 313.873672][T10567] vprintk_emit+0x5b7/0x7a0 [ 313.873689][T10567] _printk+0xcf/0x120 [ 313.873707][T10567] register_console+0xa8b/0xf90 [ 313.873733][T10567] univ8250_console_init+0x52/0x90 [ 313.873751][T10567] console_init+0x1a1/0x670 [ 313.873768][T10567] start_kernel+0x2cc/0x500 [ 313.873782][T10567] x86_64_start_reservations+0x24/0x30 [ 313.873801][T10567] x86_64_start_kernel+0x143/0x1c0 [ 313.873819][T10567] common_startup_64+0x13e/0x147 [ 313.873838][T10567] [ 313.873838][T10567] -> #0 (console_owner){-...}-{0:0}: [ 313.873858][T10567] validate_chain+0xb9b/0x2140 [ 313.873875][T10567] __lock_acquire+0xab9/0xd20 [ 313.873889][T10567] lock_acquire+0x120/0x360 [ 313.873902][T10567] vprintk_emit+0x460/0x7a0 [ 313.873918][T10567] _printk+0xcf/0x120 [ 313.873936][T10567] should_fail_ex+0x3f5/0x560 [ 313.873955][T10567] strncpy_from_user+0x36/0x290 [ 313.873973][T10567] strncpy_from_user_nofault+0x72/0x150 [ 313.873995][T10567] bpf_probe_read_compat_str+0xe2/0x180 [ 313.874011][T10567] bpf_prog_c1796171ffc7efef+0x3e/0x44 [ 313.874023][T10567] bpf_trace_run4+0x28e/0x4a0 [ 313.874043][T10567] __bpf_trace_sched_switch+0x17a/0x1e0 [ 313.874063][T10567] __traceiter_sched_switch+0x9d/0xd0 [ 313.874082][T10567] __schedule+0x2328/0x4d00 [ 313.874099][T10567] schedule+0x165/0x360 [ 313.874115][T10567] schedule_preempt_disabled+0x13/0x30 [ 313.874132][T10567] __mutex_lock+0x724/0xe80 [ 313.874150][T10567] nl80211_pre_doit+0x5f/0x930 [ 313.874166][T10567] genl_family_rcv_msg_doit+0x1be/0x300 [ 313.874182][T10567] genl_rcv_msg+0x60e/0x790 [ 313.874195][T10567] netlink_rcv_skb+0x205/0x470 [ 313.874213][T10567] genl_rcv+0x28/0x40 [ 313.874226][T10567] netlink_unicast+0x759/0x8e0 [ 313.874242][T10567] netlink_sendmsg+0x805/0xb30 [ 313.874260][T10567] __sock_sendmsg+0x21c/0x270 [ 313.874276][T10567] ____sys_sendmsg+0x505/0x830 [ 313.874299][T10567] ___sys_sendmsg+0x21f/0x2a0 [ 313.874312][T10567] __x64_sys_sendmsg+0x19b/0x260 [ 313.874325][T10567] do_syscall_64+0xfa/0x3b0 [ 313.874346][T10567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.874361][T10567] [ 313.874361][T10567] other info that might help us debug this: [ 313.874361][T10567] [ 313.874367][T10567] Chain exists of: [ 313.874367][T10567] console_owner --> &p->pi_lock --> &rq->__lock [ 313.874367][T10567] [ 313.874395][T10567] Possible unsafe locking scenario: [ 313.874395][T10567] [ 313.874401][T10567] CPU0 CPU1 [ 313.874406][T10567] ---- ---- [ 313.874411][T10567] lock(&rq->__lock); [ 313.874423][T10567] lock(&p->pi_lock); [ 313.874434][T10567] lock(&rq->__lock); [ 313.874446][T10567] lock(console_owner); [ 313.874457][T10567] [ 313.874457][T10567] *** DEADLOCK *** [ 313.874457][T10567] [ 313.874462][T10567] 4 locks held by syz.2.1182/10567: [ 313.874472][T10567] #0: ffffffff8f5856b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 313.874504][T10561] netlink: 'syz.4.1180': attribute type 1 has an invalid length. [ 313.874512][T10567] #1: ffffffff8f520648 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 313.874551][T10567] #2: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 313.874593][T10567] #3: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 313.874638][T10567] [ 313.874638][T10567] stack backtrace: [ 313.874647][T10567] CPU: 1 UID: 0 PID: 10567 Comm: syz.2.1182 Not tainted 6.16.0-rc5-syzkaller-01458-gc3886ccaadf8 #0 PREEMPT(full) [ 313.874668][T10567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 313.874678][T10567] Call Trace: [ 313.874684][T10567] [ 313.874691][T10567] dump_stack_lvl+0x189/0x250 [ 313.874713][T10567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.874739][T10567] ? __pfx__printk+0x10/0x10 [ 313.874759][T10567] ? print_lock_name+0xde/0x100 [ 313.874781][T10567] print_circular_bug+0x2ee/0x310 [ 313.874805][T10567] check_noncircular+0x134/0x160 [ 313.874828][T10567] validate_chain+0xb9b/0x2140 [ 313.874858][T10567] __lock_acquire+0xab9/0xd20 [ 313.874879][T10567] ? vprintk_emit+0x444/0x7a0 [ 313.874897][T10567] lock_acquire+0x120/0x360 [ 313.874914][T10567] ? vprintk_emit+0x444/0x7a0 [ 313.874939][T10567] ? do_raw_spin_unlock+0x122/0x240 [ 313.874962][T10567] ? vprintk_emit+0x444/0x7a0 [ 313.874982][T10567] vprintk_emit+0x460/0x7a0 [ 313.875001][T10567] ? vprintk_emit+0x444/0x7a0 [ 313.875022][T10567] ? __pfx_vprintk_emit+0x10/0x10 [ 313.875053][T10567] _printk+0xcf/0x120 [ 313.875074][T10567] ? __pfx____ratelimit+0x10/0x10 [ 313.875098][T10567] ? __pfx__printk+0x10/0x10 [ 313.875126][T10567] should_fail_ex+0x3f5/0x560 [ 313.875150][T10567] strncpy_from_user+0x36/0x290 [ 313.875175][T10567] strncpy_from_user_nofault+0x72/0x150 [ 313.875203][T10567] bpf_probe_read_compat_str+0xe2/0x180 [ 313.875223][T10567] bpf_prog_c1796171ffc7efef+0x3e/0x44 [ 313.875237][T10567] bpf_trace_run4+0x28e/0x4a0 [ 313.875255][T10567] ? bpf_trace_run4+0x19c/0x4a0 [ 313.875275][T10567] ? __pfx_bpf_trace_run4+0x10/0x10 [ 313.875297][T10567] ? kvm_sched_clock_read+0x11/0x20 [ 313.875318][T10567] ? sched_clock_cpu+0x74/0x430 [ 313.875339][T10567] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 313.875367][T10567] __bpf_trace_sched_switch+0x17a/0x1e0 [ 313.875391][T10567] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 313.875414][T10567] ? psi_group_change+0xbc7/0x1210 [ 313.875435][T10567] ? rcu_read_lock_sched_held+0x89/0x100 [ 313.875456][T10567] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 313.875480][T10567] ? psi_task_switch+0x39a/0x6d0 [ 313.875505][T10567] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 313.875531][T10567] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 313.875556][T10567] __traceiter_sched_switch+0x9d/0xd0 [ 313.875583][T10567] __schedule+0x2328/0x4d00 [ 313.875610][T10567] ? __lock_acquire+0xab9/0xd20 [ 313.875629][T10567] ? schedule+0x165/0x360 [ 313.875651][T10567] ? __pfx___schedule+0x10/0x10 [ 313.875680][T10567] ? schedule+0x91/0x360 [ 313.875701][T10567] schedule+0x165/0x360 [ 313.875731][T10567] schedule_preempt_disabled+0x13/0x30 [ 313.875752][T10567] __mutex_lock+0x724/0xe80 [ 313.875776][T10567] ? __mutex_lock+0x51b/0xe80 [ 313.875800][T10567] ? nl80211_pre_doit+0x5f/0x930 [ 313.875819][T10567] ? __pfx___mutex_lock+0x10/0x10 [ 313.875847][T10567] ? __nla_parse+0x40/0x60 [ 313.875861][T10567] nl80211_pre_doit+0x5f/0x930 [ 313.875874][T10567] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 313.875891][T10567] genl_family_rcv_msg_doit+0x1be/0x300 [ 313.875908][T10567] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 313.875926][T10567] ? bpf_lsm_capable+0x9/0x20 [ 313.875941][T10567] ? security_capable+0x7e/0x2e0 [ 313.875962][T10567] genl_rcv_msg+0x60e/0x790 [ 313.875979][T10567] ? __pfx_genl_rcv_msg+0x10/0x10 [ 313.875992][T10567] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 313.876005][T10567] ? __pfx_nl80211_set_tid_config+0x10/0x10 [ 313.876018][T10567] ? __pfx_nl80211_post_doit+0x10/0x10 [ 313.876036][T10567] netlink_rcv_skb+0x205/0x470 [ 313.876054][T10567] ? __pfx_genl_rcv_msg+0x10/0x10 [ 313.876068][T10567] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 313.876091][T10567] ? down_read+0x1ad/0x2e0 [ 313.876111][T10567] genl_rcv+0x28/0x40 [ 313.876123][T10567] netlink_unicast+0x759/0x8e0 [ 313.876142][T10567] netlink_sendmsg+0x805/0xb30 [ 313.876163][T10567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.876182][T10567] ? aa_sock_msg_perm+0x94/0x160 [ 313.876201][T10567] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 313.876221][T10567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.876239][T10567] __sock_sendmsg+0x21c/0x270 [ 313.876256][T10567] ____sys_sendmsg+0x505/0x830 [ 313.876278][T10567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.876301][T10567] ? import_iovec+0x74/0xa0 [ 313.876317][T10567] ___sys_sendmsg+0x21f/0x2a0 [ 313.876330][T10567] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.876353][T10567] ? __fget_files+0x2a/0x420 [ 313.876371][T10567] ? __fget_files+0x3a0/0x420 [ 313.876391][T10567] __x64_sys_sendmsg+0x19b/0x260 [ 313.876404][T10567] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 313.876419][T10567] ? __pfx_ksys_write+0x10/0x10 [ 313.876433][T10567] ? rcu_is_watching+0x15/0xb0 [ 313.876450][T10567] ? do_syscall_64+0xbe/0x3b0 [ 313.876470][T10567] do_syscall_64+0xfa/0x3b0 [ 313.876486][T10567] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.876503][T10567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.876516][T10567] ? clear_bhb_loop+0x60/0xb0 [ 313.876531][T10567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.876545][T10567] RIP: 0033:0x7fc6a5b8e929 [ 313.876557][T10567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.876569][T10567] RSP: 002b:00007fc6a6ad5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.876585][T10567] RAX: ffffffffffffffda RBX: 00007fc6a5db5fa0 RCX: 00007fc6a5b8e929 [ 313.876595][T10567] RDX: 0000000000004050 RSI: 000020000000d040 RDI: 0000000000000003 [ 313.876604][T10567] RBP: 00007fc6a6ad5090 R08: 0000000000000000 R09: 0000000000000000 [ 313.876613][T10567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.876621][T10567] R13: 0000000000000000 R14: 00007fc6a5db5fa0 R15: 00007ffe2287eb98 [ 313.876637][T10567] [ 315.257579][T10567] CPU: 1 UID: 0 PID: 10567 Comm: syz.2.1182 Not tainted 6.16.0-rc5-syzkaller-01458-gc3886ccaadf8 #0 PREEMPT(full) [ 315.257599][T10567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.257607][T10567] Call Trace: [ 315.257615][T10567] [ 315.257622][T10567] dump_stack_lvl+0x189/0x250 [ 315.257641][T10567] ? __pfx____ratelimit+0x10/0x10 [ 315.257661][T10567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.257674][T10567] ? __pfx__printk+0x10/0x10 [ 315.257691][T10567] should_fail_ex+0x414/0x560 [ 315.257707][T10567] strncpy_from_user+0x36/0x290 [ 315.257722][T10567] strncpy_from_user_nofault+0x72/0x150 [ 315.257740][T10567] bpf_probe_read_compat_str+0xe2/0x180 [ 315.257755][T10567] bpf_prog_c1796171ffc7efef+0x3e/0x44 [ 315.257766][T10567] bpf_trace_run4+0x28e/0x4a0 [ 315.257781][T10567] ? bpf_trace_run4+0x19c/0x4a0 [ 315.257797][T10567] ? __pfx_bpf_trace_run4+0x10/0x10 [ 315.257811][T10567] ? kvm_sched_clock_read+0x11/0x20 [ 315.257824][T10567] ? sched_clock_cpu+0x74/0x430 [ 315.257837][T10567] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 315.257854][T10567] __bpf_trace_sched_switch+0x17a/0x1e0 [ 315.257870][T10567] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 315.257884][T10567] ? psi_group_change+0xbc7/0x1210 [ 315.257897][T10567] ? rcu_read_lock_sched_held+0x89/0x100 [ 315.257910][T10567] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 315.257924][T10567] ? psi_task_switch+0x39a/0x6d0 [ 315.257938][T10567] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 315.257953][T10567] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 315.257969][T10567] __traceiter_sched_switch+0x9d/0xd0 [ 315.257985][T10567] __schedule+0x2328/0x4d00 [ 315.258002][T10567] ? __lock_acquire+0xab9/0xd20 [ 315.258013][T10567] ? schedule+0x165/0x360 [ 315.258027][T10567] ? __pfx___schedule+0x10/0x10 [ 315.258043][T10567] ? schedule+0x91/0x360 [ 315.258055][T10567] schedule+0x165/0x360 [ 315.258068][T10567] schedule_preempt_disabled+0x13/0x30 [ 315.258081][T10567] __mutex_lock+0x724/0xe80 [ 315.258096][T10567] ? __mutex_lock+0x51b/0xe80 [ 315.258111][T10567] ? nl80211_pre_doit+0x5f/0x930 [ 315.258123][T10567] ? __pfx___mutex_lock+0x10/0x10 [ 315.258141][T10567] ? __nla_parse+0x40/0x60 [ 315.258152][T10567] nl80211_pre_doit+0x5f/0x930 [ 315.258163][T10567] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 315.258178][T10567] genl_family_rcv_msg_doit+0x1be/0x300 [ 315.258191][T10567] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 315.258205][T10567] ? bpf_lsm_capable+0x9/0x20 [ 315.258217][T10567] ? security_capable+0x7e/0x2e0 [ 315.258234][T10567] genl_rcv_msg+0x60e/0x790 [ 315.258246][T10567] ? __pfx_genl_rcv_msg+0x10/0x10 [ 315.258256][T10567] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 315.258266][T10567] ? __pfx_nl80211_set_tid_config+0x10/0x10 [ 315.258277][T10567] ? __pfx_nl80211_post_doit+0x10/0x10 [ 315.258291][T10567] netlink_rcv_skb+0x205/0x470 [ 315.258305][T10567] ? __pfx_genl_rcv_msg+0x10/0x10 [ 315.258316][T10567] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.258334][T10567] ? down_read+0x1ad/0x2e0 [ 315.258349][T10567] genl_rcv+0x28/0x40 [ 315.258359][T10567] netlink_unicast+0x759/0x8e0 [ 315.258374][T10567] netlink_sendmsg+0x805/0xb30 [ 315.258392][T10567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.258407][T10567] ? aa_sock_msg_perm+0x94/0x160 [ 315.258423][T10567] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 315.258439][T10567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.258453][T10567] __sock_sendmsg+0x21c/0x270 [ 315.258467][T10567] ____sys_sendmsg+0x505/0x830 [ 315.258485][T10567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.258503][T10567] ? import_iovec+0x74/0xa0 [ 315.258516][T10567] ___sys_sendmsg+0x21f/0x2a0 [ 315.258526][T10567] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.258544][T10567] ? __fget_files+0x2a/0x420 [ 315.258558][T10567] ? __fget_files+0x3a0/0x420 [ 315.258573][T10567] __x64_sys_sendmsg+0x19b/0x260 [ 315.258584][T10567] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 315.258596][T10567] ? __pfx_ksys_write+0x10/0x10 [ 315.258607][T10567] ? rcu_is_watching+0x15/0xb0 [ 315.258621][T10567] ? do_syscall_64+0xbe/0x3b0 [ 315.258636][T10567] do_syscall_64+0xfa/0x3b0 [ 315.258650][T10567] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.258668][T10567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.258679][T10567] ? clear_bhb_loop+0x60/0xb0 [ 315.258691][T10567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.258701][T10567] RIP: 0033:0x7fc6a5b8e929 [ 315.258713][T10567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.258723][T10567] RSP: 002b:00007fc6a6ad5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.258736][T10567] RAX: ffffffffffffffda RBX: 00007fc6a5db5fa0 RCX: 00007fc6a5b8e929 [ 315.258744][T10567] RDX: 0000000000004050 RSI: 000020000000d040 RDI: 0000000000000003 [ 315.258752][T10567] RBP: 00007fc6a6ad5090 R08: 0000000000000000 R09: 0000000000000000 [ 315.258759][T10567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.258765][T10567] R13: 0000000000000000 R14: 00007fc6a5db5fa0 R15: 00007ffe2287eb98 [ 315.258777][T10567] [ 315.259098][ T6378] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.418981][ T5857] Bluetooth: hci4: command 0x0405 tx timeout [ 315.419746][ T6378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.687369][T10574] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1183'. [ 315.756892][T10307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 315.794638][T10307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.047528][T10307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.112973][T10307] veth0_vlan: entered promiscuous mode [ 316.122517][T10307] veth1_vlan: entered promiscuous mode [ 316.144725][T10307] veth0_macvtap: entered promiscuous mode [ 316.153725][T10307] veth1_macvtap: entered promiscuous mode [ 316.167148][T10307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.181072][T10307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.197062][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.207342][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.217784][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.228325][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.254584][T10307] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht' [ 316.274549][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.275818][T10307] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht' [ 316.285738][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.307466][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.317132][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.970735][ T2948] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.422384][ T2948] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.482227][ T2948] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.543438][ T2948] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.608216][ T2948] bridge_slave_1: left allmulticast mode [ 319.614559][ T2948] bridge_slave_1: left promiscuous mode [ 319.623240][ T2948] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.631543][ T2948] bridge_slave_0: left allmulticast mode [ 319.637211][ T2948] bridge_slave_0: left promiscuous mode [ 319.643309][ T2948] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.754101][ T2948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.764109][ T2948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.774111][ T2948] bond0 (unregistering): Released all slaves [ 319.973887][ T2948] hsr_slave_0: left promiscuous mode [ 319.981803][ T2948] hsr_slave_1: left promiscuous mode [ 319.987432][ T2948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.994858][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.004512][ T2948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.011935][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.025080][ T2948] veth1_macvtap: left promiscuous mode [ 320.030766][ T2948] veth0_macvtap: left promiscuous mode [ 320.036276][ T2948] veth1_vlan: left promiscuous mode [ 320.044900][ T2948] veth0_vlan: left promiscuous mode [ 320.194992][ T2948] team0 (unregistering): Port device team_slave_1 removed [ 320.216143][ T2948] team0 (unregistering): Port device team_slave_0 removed