last executing test programs: 2.256476227s ago: executing program 4 (id=1892): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbf}]}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x24000144}, 0x2000) close(r1) 2.09708086s ago: executing program 3 (id=1894): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x9, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffff8, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x80ffffff, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) 2.091366157s ago: executing program 4 (id=1896): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket(0x15, 0x5, 0x0) r3 = accept4$alg(r2, 0x0, 0x0, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async, rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (rerun: 32) sendmsg$can_j1939(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x1d, r8, 0x3, {0x1, 0xff, 0x1}, 0xff}, 0x18, &(0x7f0000000280)={&(0x7f00000001c0)="ccfa11b4a19d33c361fa364d1a50a03a6bb49b2c0fc6db1fd0d5dd412a3a3b1a910e22621f7a82", 0x27}, 0x1, 0x0, 0x0, 0x24004084}, 0x1) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r9, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000400)=0x4000) (async, rerun: 64) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRES32=r11], 0x38}}, 0x0) (async) setsockopt$sock_int(r10, 0x1, 0x28, &(0x7f0000000100)=0x91, 0x65) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x70bd26, 0x0, {0x7, 0x0, 0x0, 0x0, 0x7048, 0x77219}, [@IFLA_MASTER={0x8, 0xa, r14}]}, 0x28}}, 0x0) (async) bind$inet6(r10, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000000}, 0x1c) listen(r9, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 2.003560324s ago: executing program 3 (id=1897): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0xfffffffffffffdd1, 0x1, [{0x70, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x176e}}]}, @action_gd=@TCA_ACT_TAB={0xffffffffffffff71, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000101c0012800b00010062726964676500000c00028004001c"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6}, 0xaf) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)=0x100) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x128, 0x8, 0xa, 0x201, 0x0, 0x0, {0xf, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88be}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8848}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6558}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0xac, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x44, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x8001}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x10000}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x100, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1f0}, 0x1, 0x0, 0x0, 0x8000}, 0x24000051) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000010006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.970845485s ago: executing program 1 (id=1898): r0 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r1, &(0x7f00000006c0)=[{0xfffffffffffffffe}], 0x1, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x484, 0x0, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000000000000008fe040001000000", 0x24) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000006900030500000000000000000081"], 0x18}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x8000, 0x8, 0x100, 0x8, {{0x17, 0x4, 0x0, 0x6, 0x5c, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @rand_addr=0x64010100, {[@timestamp={0x44, 0x14, 0x19, 0x0, 0x6, [0x9, 0xffffffff, 0x8, 0x6]}, @generic={0x82, 0x11, "f4b3c2efe8c37c3b0739b9603c133f"}, @cipso={0x86, 0xc, 0x1, [{0x5, 0x2}, {0x0, 0x2}, {0x6, 0x2}]}, @timestamp={0x44, 0xc, 0x1b, 0x0, 0x2, [0x5, 0x7]}, @timestamp={0x44, 0x4, 0xf2, 0x0, 0x8}, @generic={0x88, 0x4, "ec46"}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0x1, 0x58, &(0x7f00000006c0)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x0, 0x8a, 0x6, 0x9, 0x20, @private0, @mcast1, 0xabdf2b7e91c30a92, 0x7848, 0x8, 0xfffeffff}}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) 1.668996201s ago: executing program 4 (id=1903): r0 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x53, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) 1.533329307s ago: executing program 0 (id=1904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f08000440000000370800024000000002240001800a0001007265646972000000140002800800014000000004080002400600000c0900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) close(0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000080)=""/13, 0x2}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x48, 0x30, 0xffff, 0x3, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c080}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008110000b7030000020000008500000017"], 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x22051, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x840) write$nci(r8, &(0x7f0000000b00)=ANY=[@ANYBLOB="610502080758000000003719d905"], 0xa6) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0100000000000000ffff01000000"], 0x14}}, 0xc800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) splice(r5, 0x0, r7, 0x0, 0x10d00, 0xf) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0400001800dd8d00000000000000000200000000000006000000000600150001000000080416800404010000000000000000000000040000000000fe80000000000000000000000000000000000000000000000000ffff0a010102fc00000000000000000000000000000000000000000000000000ffff00000000fe8000000000000000000000000000aaff02000000000000000000000000000100000000000000000000000000000000ff020000000000000000000000000001fe8000000000000000000000000000aaff01000000000000000000000000000100000000000000000000ffffe0000001ff020000000000000000000000000001ff010000000000000000000000000001fe8000000000000000000000000000aafe8000000000000000000000000000bb00000000000000000000ffffffffffffff010000000000000000000000000001fc010000000000000000000000000000fe8800000000000000000000000000012001000000000000000000000000000200000000000000000000ffffac141400fe8000000000000000000000000000bbfe880000000000000000000000000001ff010000000000000000000000000001fc00000000000000000000000000000100000000000000000000000000000000ff020000000000000000000000000001ff020000000000000000000000000001fc000000000000000000000000000000fc020000000000000000000000000000ff020000000000000000000000000001fe800000000000000000000019000000fe800000000000000000000000000000fe8800000000000000000000000000010000000000000000000000000000000100000000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000000000000001fc020000000000000000000000000000fe880000000000000000000000000001ff010000000000000000000000000001ff01000000000000000000000000000100000000000000000000000000000000fe8000000000000000000000000000aafc010000000000000000000000000000ff010000000000000000000000000001ff01000000000000000000000000000120010000000000000000000000000002ff01000000000000000000000000000100000000000000000000ffff00000000ff020000000000000000000000000001ff01000000000000000000000000000100000000000000000000000000000001fe88000000000000000000000000000100000000000000000000ffffac1414bb0001fc020000000000000000000000000000fe880000000000000000000000000001fc0100000000000000000000000000002001000000000000000000000000000100000000000000000000000000000001fe88000000000000000000000000200100000000000000000000000000000000fb8e0765722fa38ae395767bf325f47117813fc4958201e5035300066f10789e707e7bee966034ae25ae8c96c933ba919cd180c9c1a886dba8806380891105eb48e4701d7f6eac62ce6c1ddcd317e49a8d"], 0x42c}}, 0x4000040) 1.533096396s ago: executing program 4 (id=1905): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0xe, 0xffffffff}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.532532874s ago: executing program 1 (id=1906): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0x80008, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7a, &(0x7f00000000c0)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00040211000000160016000a0002000048035c3b61c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 1.49874518s ago: executing program 3 (id=1907): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x9, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffff8, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xffffff80, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) 1.471633675s ago: executing program 2 (id=1908): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140), 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 1.372775737s ago: executing program 3 (id=1909): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) recvmsg(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000580)=""/18, 0x12}], 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x6f, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @opaque="6046bcac7ead75b79a775a498827ca82717eaf2f40827015aa936726371a1f8259cbe4f0a9063097ea65b9cab7bfe2b309214596e1e5b6e0f29044411d1e17912370b7070a"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) syz_emit_ethernet(0x73, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaf23eb8c44a108004e4100650066000006069078ac141429e000000244245121640101000000bcf80828760b52c4000a640101000000000bffffffff000043510000000000000000000000000000000000004e2100004e22e48c45848842958658000000020000000300000004"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) r7 = socket$inet6(0xa, 0x800, 0x6) setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f0000000440)={0x0, {{0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1a}}, {{0xa, 0x4e27, 0x3, @local, 0x9}}}, 0x108) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x20) 1.344328564s ago: executing program 4 (id=1910): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2000, 0x1}, 0xe) listen(r0, 0xa1) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x400002) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x4004) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071121f000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB="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"/3584], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x3a, 0x44, 0x0, &(0x7f0000000280)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d50000ff010000001400000500242f09880bd320d98a61a90057e9bf", 0x0, 0x401, 0x0, 0x31e, 0xa6, &(0x7f00000011c0)="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", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd, 0xb}, 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2000, 0x1}, 0xe) (async) listen(r0, 0xa1) (async) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x2a, 0x2, 0x400002) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x4004) (async) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) (async) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071121f000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB="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"/3584], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x3a, 0x44, 0x0, &(0x7f0000000280)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d50000ff010000001400000500242f09880bd320d98a61a90057e9bf", 0x0, 0x401, 0x0, 0x31e, 0xa6, &(0x7f00000011c0)="59235bd7a9324ff307d87177332368fbdeefaa1544600ea1870645446c357de433206896637019b84d57c3de1ea07638e494dd701db1af6fc15db78cf79f5ab4bc7aee8553677ffe377a35b4afdb989fb7da1ff63956ffb796d51daf1c268b9f1a4a06583f8c03ecfa75637aa8a495c1b006fa5f2f3a54a46aeee8005b178b9516d2b928984ccb942fa2278a2e33a0b619f2dd814fc91942e03c48fd9b7d19d9a6612b46805b267ef3132a724cbfcd1c715be67930e2ae2b9a2479c5a4b2fecd301a745a6fd67598a5e5ecc1e56e58159c47def7f9285acfedc980596377e6f9ee076fa094e5d8f838b718ed63ff8265a1dbc1549bed03e6b27b6fc2b8a07373506a1a41d5a71cbf0eaa24ec737b02a8a2d5114c3c4e5810a2c3eae3373fd341800cfb0fb35cefe04ca4da2b02a83c40126e23cdf3c817b530bbe7b431bc0b7d864e3e6dd1ab90259a8bd7ad7dd4c6366ea6da661fd016b394adcce5988fff85fbc832a927c97b89337e195f562cd284911eef1ee52e4ff033b33beedea7cf43c4d0cc0471fa91011e1e7e8733bf82c01346d6ecb49f1a84e92d063c81a7227d89be33f7273b87e29ae53a5f38dc94cf391fcb82c9432821ef1a0f6bbfe8f7d6574479a8f621e1d8f7d9bb20f3d8d469e6d232d7d7837ff12a224a65c604907e787baaf7c863ad48a5edecbe1470c20507a6ee5dee75e9ef84c71af5af800a9ce9787ebdee9e1c8189fbf66048d5c3757fb2b697ce68cfd316a7b25a385111e0cd2fddb81602e36e74c4f99b403cb304a4774e648054c0456c7869f9d97873ff80e2664c1265292941a9b767c7f40767cfccdbcaa156453d6a910fd5440f7a2bf8f4bb6d6d9fd443f2304617a684b6afa99c157dcf70e51fdb55fd0dbf5c6733841024599f8d1791a07c5dc3a4ccaf4d7c0ca3d101b2beba3a49d2378c9fe4fdb10babd95083a0c4db5a30c4490828d97efe807a13e587fbac1089843964facfd27d287262759384fe9b610f81048be430c1e8fe6327c0f2fd003021d28649c958da2e02cb3848c76924492678889c18bea02ed5ee080106e9838cbca9ad5f66c0434182225b13a236b342cf80562c10d4a3459aea17589b84904d3d2c2b", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd, 0xb}, 0x50) (async) 1.330212751s ago: executing program 1 (id=1911): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r2, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/218, 0xda}], 0x1}}], 0x1, 0x41, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x9}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000100)={r3, 0xa1, "337b6f9d99d22e8dc04a6eb51f5427093dedaf5415ea4d99a7386845a12d4e7d1baaeb893255608e573db629706a818696da0f3bb0a13448ded54e8bd22af1267f8943f22004ef3544711a7ff390b92e5eb3e0fadc488457fb66910fccde65ec5673dd00b5d403703b7061b52ee6578bd6fcf522ba330b721a32cb46a1b336b96e192f46c09de68d63559958359be64e31bcf0aad941d95459056095bcdf4823cf"}, &(0x7f00000001c0)=0xa9) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000200), &(0x7f0000000240)=0x4) 1.261830021s ago: executing program 2 (id=1912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0xac00}, 0x0) 1.11258319s ago: executing program 1 (id=1913): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.039782652s ago: executing program 0 (id=1914): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f00000000c0)={0xa, 0x0, @multicast2}, 0x10, 0x0}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f00000000c0)={0xa, 0x0, @multicast2}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000000000000079cc41a4b85c57f6cc08d8268c4c0ec95293ab3172e05e3114d6e08614eb12383c1f81f80e7c002499de012c042e0429ac298a3a9acea390dcf5a3d779a08a148d1ef0966b95df181e54f595deb0fa577d4e304027ee50f9d608b4b7d6ed0c2f6d2d2dde12ecb52d572d6d376fe0e5c73ca4b4f70f54b6a63a2ea20a776567e3c16628a1cf1dcf17506b251cfb71bc7633609b959780b70eca3a02397603"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 950.041867ms ago: executing program 1 (id=1915): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x49920d862a921d1b, 0x4000000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x3c}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x8000, 0x9, [0x2, 0x0, 0xfffe, 0x4, 0x9, 0x9, 0xb, 0xffff, 0x101]}, &(0x7f0000000100)=0x1a) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x8}, &(0x7f00000008c0)=0x8) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth1_to_team\x00', 0x0}) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000900)=0x1000, 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000200)="05178100", 0x4, 0x4000, &(0x7f0000000080)={0x11, 0x8100, r6, 0x1, 0x0, 0x6, @remote}, 0x14) 865.41708ms ago: executing program 0 (id=1916): r0 = socket(0x2, 0x3, 0xff) r1 = socket$inet6(0xa, 0x805, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={r3, 0x0, 0x0}, 0x0) getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) r4 = socket$pptp(0x18, 0x1, 0x2) accept4(r4, 0x0, 0x0, 0x800) sendmmsg$inet(r0, &(0x7f0000005700)=[{{&(0x7f0000000280)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001300)="0000000035fdca249bf6ffffffffffffff556eab", 0x14}], 0x1, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @empty}}}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4800) 671.93504ms ago: executing program 4 (id=1917): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x2, 0x2) shutdown(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000070000000000000900020000000000000004000800410073697700140033"], 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r2, @ANYRES64=r2], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 629.859836ms ago: executing program 2 (id=1918): r0 = socket(0x11, 0x2, 0x9) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ID={0x8, 0x6, 0xf2}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4402}, 0x8880) (async) r1 = socket$inet(0x2, 0x80001, 0x84) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000140)={[{0x2b, 'hugetlb'}, {0x2b, 'freezer'}, {0x2b, 'net_cls'}]}, 0x1b) (async) listen(r1, 0x2f) (async) listen(r1, 0x0) listen(r1, 0xaca) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002000)=ANY=[@ANYBLOB="54000000210001002dbd7000fedbdf250a348002080000030300000014000200fe8000000000000000000000000000aa14000100fc020000000000000000000000000001080004009b6c000008000d0005000000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async, rerun: 32) r6 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000901000000000000000000000000010800054046ac9c05cb6d69a073797a31000000000c000480080001400051fe"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x24, 0x24, 0x8, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000080)="fc") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) syz_emit_ethernet(0x73, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaa3faaaaaae400ff003d3a00fc020000000000000000000000000000ff02000000000000000000000000000102009078000000006000000000002a00fe88000000000000020000000000010100c9964dec0000000000ffffe0000001330006d16600000017c17f0791000000000000"], 0x0) (async) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x3, @remote, 0x200}}, 0x0, 0x0, 0xa, 0x0, "3696bff50f8d52ea8a93e812cb7fd1ed89620dcc406950b357433503159462ce8611a1132784ab6ac32486246ed31cf470af9df7919d00a0fffba22be8c1b1f8065000a070b1f437bc01cdbfa2b3adc5"}, 0xd8) r10 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000000071401000000000000070000"], 0x10}}, 0x0) 629.409988ms ago: executing program 0 (id=1919): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x9, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffff8, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x100000000000000, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) 480.775213ms ago: executing program 0 (id=1920): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x6, 0xfffffffffffffe0c, "328fd99f5a8e3a7342c56bd3cb03f397f16fb6ed14107b883abc4b6fa10fee8638cbd9c47568eb3b44f741ce19530a2273a1a12b1a6b071844905c291c4f016ba064dd47985ff2126f00"/85}, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711214000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 322.305794ms ago: executing program 1 (id=1921): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000040) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "d482449a"}}}}}}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x884000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000001000000000000000a3c000000120a01010000000000000000020000000900020073797a31000000000800044000000000090001"], 0x64}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4010000100001000000000000000000fc000000000000000000000000000000200100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff6fa420497d5c3a00000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900"/228], 0x1a4}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf25090002007379fa32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8810) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600050a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x30}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r7, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast}) 319.9971ms ago: executing program 2 (id=1922): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [{0x4, 0x5, 0x9}], "63d038"}, @datasec={0x0, 0x52, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 255.803016ms ago: executing program 3 (id=1923): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0xfffffffc, {0xa, 0x0, 0x0, 0xfe}}, 0x18}}, 0x0) (async, rerun: 32) r1 = socket$inet(0x2, 0x3, 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="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"/1504, 0x5e0}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f0000000cc0)="f2a0f0f863621b483b19e7ecfce0d34e53fbf295927214684f4d69e90f0ec506442d2126c3f5ab0cdfd79dc1815274c3ee57068b3793c25fab48eb353478689f452328afb023f75f93229060bc2c82dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e600000000f5be12a64e075c60dd63e0b00e8f42bfb7671a56925477029cec7e7f16b358404edfb5e7a055fdeb2ba044d0d54e341d1d1ef1eb2c317f587f591626ceed08555ca0b2f31a3e7bf5ba7541db275e6a6b6501b87cc74c4804f6da7d3de93327287204cc97f9cb747576d2ab23a6e35c6da6b3240c92ae18b31cb6e7bc60066994e2cb401c76b1840d3e231621355f10ff35ea91ffd463228d000000000000000e454d3c36efee949f6311c6ad78b5a8f091d2ebb008925107e4a4584dab83f7f0cb5ad94266e71e2b7aaa01cf4f9f5e1d52e1e5086e9633cbee8126a200"/349, 0x15d}, {&(0x7f0000000e40)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed", 0x91}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040850}, 0x20040880) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x700, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r6, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) 145.350093ms ago: executing program 0 (id=1924): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0xfdff, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000280)={{r1, &(0x7f0000000040)='+.!(\'\x7f/#-/\x00', 0x2002c0, &(0x7f0000000080)={@align=0xf769, {0x186d, 0x8, 0x0, 0x100}}, 0x4, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x40}, {[0x1ff, 0xffffffff, 0x4, 0x8000000]}, 0xffffff16, 0xb2, &(0x7f00000001c0)=""/178}) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f0000000080), 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000cc0)=0x1e3, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x18, &(0x7f0000001880)=[{&(0x7f0000000200)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d3ca7", 0x2a}], 0x1}, 0x20008060) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, r3, 0x5, 0x2, 0x1}, 0x50) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000380)={0xb, 0x8203, 0x33c, 0x3ff, 0x0}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000400)={r6, @in={{0x2, 0x4e23, @empty}}}, &(0x7f00000004c0)=0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18060000000000000000000000000000711076000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020025797a30000000000800410072786500140033"], 0x38}}, 0x0) 142.436241ms ago: executing program 2 (id=1925): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 71.054593ms ago: executing program 3 (id=1926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac9}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x59, 0x0, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000001c0), 0x0, 0x81, &(0x7f0000000280)={0x11, 0xc, r5, 0x1, 0x5, 0x6, @broadcast}, 0x14) 0s ago: executing program 2 (id=1927): r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x13, @void}, 0x10) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x2, 0xd1, 0x5, 0xff, 0xfffffff7}) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000012c0)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xbf7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000140)='GPL\x00', 0x8, 0x1000, &(0x7f0000000180)=""/4096, 0x41000, 0x13, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000011c0)={0x2, 0x2, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001200)=[0x1, 0xffffffffffffffff], &(0x7f0000001240)=[{0x3, 0x1, 0xd, 0x8}, {0x2, 0x3, 0x3, 0x1}, {0x2, 0x3, 0xd, 0x9}, {0x4, 0x5, 0x10, 0x8}, {0x4, 0x5, 0x10, 0x5}], 0x10, 0x7}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001380)={r0, r1, 0x4, r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000001400)={0x7, 0x3, 0xc, 0x3, 0x3, 0x20, 0x5}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001580)={r5, &(0x7f00000014c0)="2284b2f20ac3341ee6d32681c62d76df1544b1cbc89eebd59adb6169f74bd56f56cacabd5c0d8df0f0d2ed39d87068a8cd3481c899bf87027b5ab8d2824366edfa6dfb", &(0x7f0000001540)}, 0x20) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f00000015c0)) connect(r4, &(0x7f0000001640)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x4, 0x4, 0x2, {0xa, 0x4e20, 0xfffffff8, @empty, 0xfffff800}}}, 0x80) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, &(0x7f00000016c0)={0x20000000}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001700)={0x0, 0x5, 0x1, [0x7]}, &(0x7f0000001740)=0xa) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000001780)=@sack_info={r7, 0xfffffffc, 0x3}, &(0x7f00000017c0)=0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000001800), &(0x7f0000001880)=0x68) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000018c0), 0x1, 0x0) ioctl$PPPIOCGIDLE64(r9, 0x8010743f, &(0x7f0000001900)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000001940)=[@in6={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00', 0x6}], 0x1c) socket$can_raw(0x1d, 0x3, 0x1) r10 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r10, 0x28, 0x0, &(0x7f0000001980)=0x7, 0x8) writev(r5, &(0x7f0000001a00)=[{&(0x7f00000019c0)="93d3d02be01a4f9d6d365757983e5f0d5b", 0x11}], 0x1) socket$inet_sctp(0x2, 0x5, 0x84) r11 = accept(r8, &(0x7f0000001a40)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000001ac0)=0x80) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001b00)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xf875, '\x00', 0x0, r11, 0x4, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001c00)={{r12}, &(0x7f0000001b80), &(0x7f0000001bc0)='%+9llu \x00'}, 0x20) r13 = syz_genetlink_get_family_id$smc(&(0x7f0000001c80), r11) sendmsg$SMC_PNETID_GET(r11, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x54, r13, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040001}, 0x10) kernel console output (not intermixed with test programs): port 2(bridge_slave_1) entered disabled state [ 99.439611][ T6334] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.479167][ T6339] netlink: 76 bytes leftover after parsing attributes in process `syz.1.144'. [ 99.505285][ T6339] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.512544][ T6339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.520120][ T6339] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.527310][ T6339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.548487][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.555798][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.824904][ T3317] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.858246][ T3317] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.938742][ T3317] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.967931][ T3317] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.334665][ T6384] x_tables: duplicate entry at hook 2 [ 100.470999][ T6397] bridge1: port 1(veth0_to_bond) entered blocking state [ 100.485034][ T6397] bridge1: port 1(veth0_to_bond) entered disabled state [ 100.499273][ T6397] veth0_to_bond: entered allmulticast mode [ 100.526330][ T6397] veth0_to_bond: entered promiscuous mode [ 100.550056][ T6397] bridge1: port 1(veth0_to_bond) entered blocking state [ 100.557180][ T6397] bridge1: port 1(veth0_to_bond) entered forwarding state [ 100.626972][ T6240] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.651305][ T6240] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.676936][ T6409] sctp: [Deprecated]: syz.4.165 (pid 6409) Use of int in max_burst socket option deprecated. [ 100.676936][ T6409] Use struct sctp_assoc_value instead [ 100.706301][ T6240] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.817440][ T6409] sctp: [Deprecated]: syz.4.165 (pid 6409) Use of int in max_burst socket option deprecated. [ 100.817440][ T6409] Use struct sctp_assoc_value instead [ 100.847946][ T6240] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.863283][ T6409] sctp: [Deprecated]: syz.4.165 (pid 6409) Use of int in max_burst socket option deprecated. [ 100.863283][ T6409] Use struct sctp_assoc_value instead [ 100.863541][ T6419] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 100.879759][ T6409] sctp: [Deprecated]: syz.4.165 (pid 6409) Use of int in max_burst socket option deprecated. [ 100.879759][ T6409] Use struct sctp_assoc_value instead [ 100.931875][ T6409] sctp: [Deprecated]: syz.4.165 (pid 6409) Use of int in max_burst socket option deprecated. [ 100.931875][ T6409] Use struct sctp_assoc_value instead [ 100.945512][ T6424] netlink: 'syz.1.169': attribute type 3 has an invalid length. [ 100.957344][ T6409] sctp: [Deprecated]: syz.4.165 (pid 6409) Use of int in max_burst socket option deprecated. [ 100.957344][ T6409] Use struct sctp_assoc_value instead [ 100.974668][ T6409] sctp: [Deprecated]: syz.4.165 (pid 6409) Use of int in max_burst socket option deprecated. [ 100.974668][ T6409] Use struct sctp_assoc_value instead [ 101.037935][ T6409] sctp: [Deprecated]: syz.4.165 (pid 6409) Use of int in max_burst socket option deprecated. [ 101.037935][ T6409] Use struct sctp_assoc_value instead [ 101.067597][ T6409] sctp: [Deprecated]: syz.4.165 (pid 6409) Use of int in max_burst socket option deprecated. [ 101.067597][ T6409] Use struct sctp_assoc_value instead [ 101.108242][ T6409] sctp: [Deprecated]: syz.4.165 (pid 6409) Use of int in max_burst socket option deprecated. [ 101.108242][ T6409] Use struct sctp_assoc_value instead [ 101.493353][ T6447] bridge2: entered promiscuous mode [ 101.506831][ T6447] bridge2: entered allmulticast mode [ 101.529012][ T6450] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 101.559628][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.575137][ T6453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.582695][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.589956][ T6453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.679433][ T6468] Bluetooth: MGMT ver 1.23 [ 101.688933][ T6453] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.696315][ T6453] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.704759][ T6455] syzkaller0: entered promiscuous mode [ 101.710433][ T6455] syzkaller0: entered allmulticast mode [ 101.724142][ T6465] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.047138][ T6482] netlink: 'syz.2.188': attribute type 30 has an invalid length. [ 102.378890][ T6502] netlink: 'syz.2.195': attribute type 64 has an invalid length. [ 102.595679][ T6514] __nla_validate_parse: 10 callbacks suppressed [ 102.595696][ T6514] netlink: 48 bytes leftover after parsing attributes in process `syz.1.200'. [ 102.756389][ T6525] ve: renamed from sit0 (while UP) [ 102.762030][ T6527] xt_SECMARK: invalid mode: 9 [ 102.787857][ T6525] netlink: 'syz.0.203': attribute type 19 has an invalid length. [ 102.985205][ T6539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.210'. [ 103.202465][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'. [ 103.228580][ T6544] syzkaller0: entered promiscuous mode [ 103.247852][ T6544] syzkaller0: entered allmulticast mode [ 103.475954][ T6567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.217'. [ 103.489375][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.216'. [ 103.516507][ T6569] syzkaller1: entered promiscuous mode [ 103.534968][ T6569] syzkaller1: entered allmulticast mode [ 103.557612][ T6567] netlink: 28 bytes leftover after parsing attributes in process `syz.3.217'. [ 103.607336][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.221'. [ 103.728644][ T6582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.221'. [ 103.814838][ T6583] IPv6: sit1: Disabled Multicast RS [ 103.905113][ T6593] netlink: 36 bytes leftover after parsing attributes in process `syz.0.225'. [ 104.002268][ T6597] syzkaller0: entered promiscuous mode [ 104.019147][ T6597] syzkaller0: entered allmulticast mode [ 104.037755][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.229'. [ 104.270175][ T6609] xt_socket: unknown flags 0x8 [ 104.274757][ T6616] x_tables: duplicate entry at hook 3 [ 104.284457][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f644800: rx timeout, send abort [ 104.785276][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029092400: rx timeout, send abort [ 104.794220][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f644800: abort rx timeout. Force session deactivation [ 104.795970][ T6644] gretap1: entered promiscuous mode [ 104.851095][ T6644] batman_adv: batadv0: Adding interface: gretap1 [ 104.866374][ T6644] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 104.943168][ T6655] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 104.943168][ T6655] Please contact the netfilter-devel mailing list or update your nftables rules. [ 104.950439][ T6644] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 105.297023][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029092400: abort rx timeout. Force session deactivation [ 106.467167][ T6677] syzkaller0: entered promiscuous mode [ 106.472938][ T6677] syzkaller0: entered allmulticast mode [ 107.246668][ T6733] blkio.reset_stats is deprecated [ 107.329596][ T6729] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.526565][ T6749] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 107.559322][ T6749] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 107.571661][ T6749] team0: Failed to send options change via netlink (err -105) [ 107.579312][ T6749] team0: Port device batadv1 added [ 107.808892][ T6777] xt_TCPMSS: Only works on TCP SYN packets [ 107.875760][ T6779] ±ÿ: renamed from team_slave_1 (while UP) [ 108.108162][ T6790] netlink: 'syz.0.292': attribute type 1 has an invalid length. [ 108.175972][ T6795] __nla_validate_parse: 15 callbacks suppressed [ 108.175989][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.294'. [ 108.199212][ T6790] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 108.203463][ T6797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.293'. [ 108.387979][ T6805] netlink: 'syz.0.297': attribute type 1 has an invalid length. [ 108.415142][ T6807] IPVS: ip_vs_add_dest(): server weight less than zero [ 108.426277][ T9] IPVS: starting estimator thread 0... [ 108.518095][ T6805] 8021q: adding VLAN 0 to HW filter on device bond3 [ 108.540830][ T6809] IPVS: using max 35 ests per chain, 84000 per kthread [ 108.594232][ T6815] bond3: (slave veth3): Enslaving as an active interface with a down link [ 108.612426][ T6805] bond3: (slave veth0_to_bond): making interface the new active one [ 108.632881][ T6805] veth0_to_bond: entered promiscuous mode [ 108.639308][ T6822] Cannot find set identified by id 65534 to match [ 108.645906][ T6805] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 108.661413][ T6819] geneve2: entered promiscuous mode [ 108.666820][ T6819] geneve2: entered allmulticast mode [ 108.683832][ T6807] netlink: 'syz.4.296': attribute type 49 has an invalid length. [ 108.691945][ T6229] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 108.712381][ T6229] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 108.741417][ T6822] netlink: 104 bytes leftover after parsing attributes in process `syz.1.302'. [ 108.824053][ T6828] netlink: 44 bytes leftover after parsing attributes in process `syz.0.304'. [ 108.847774][ T6831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.306'. [ 108.873413][ T6807] ip6gretap0: entered promiscuous mode [ 108.879060][ T6807] ip6gretap0: entered allmulticast mode [ 108.906267][ T6229] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 108.915945][ T6229] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 109.024316][ T6836] netlink: 40 bytes leftover after parsing attributes in process `syz.1.307'. [ 109.037407][ T6840] netlink: 16 bytes leftover after parsing attributes in process `syz.3.308'. [ 109.049529][ T6835] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.307'. [ 109.232605][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.311'. [ 109.417118][ T6867] netlink: 'syz.1.314': attribute type 1 has an invalid length. [ 109.564029][ T6867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.673607][ T6880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.318'. [ 109.783820][ T6869] bond1: (slave veth3): Enslaving as an active interface with a down link [ 109.835550][ T6873] bond1: (slave veth0_to_bond): making interface the new active one [ 109.851564][ T6873] veth0_to_bond: entered promiscuous mode [ 109.875196][ T6873] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 110.091285][ T6901] tipc: Started in network mode [ 110.112720][ T6901] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 110.148967][ T6901] tipc: Enabling of bearer rejected, failed to enable media [ 110.461261][ T6923] nbd: must specify at least one socket [ 110.629026][ T6937] veth1_macvtap: entered allmulticast mode [ 110.791382][ T6943] veth1_macvtap (unregistering): left allmulticast mode [ 110.925640][ T6950] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 110.954299][ T6950] syzkaller1: linktype set to 823 [ 111.161150][ T6967] : renamed from bond0 (while UP) [ 111.221626][ T6973] nbd: illegal input index 2958377 [ 111.242585][ T6974] netlink: 'syz.3.345': attribute type 9 has an invalid length. [ 111.275113][ T6973] net_ratelimit: 44 callbacks suppressed [ 111.275129][ T6973] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 111.322545][ T6981] xt_SECMARK: invalid mode: 9 [ 111.328316][ T6973] nbd: illegal input index 2958377 [ 111.336308][ T6983] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 111.479117][ T6984] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 111.498050][ T6999] netlink: 'syz.4.348': attribute type 1 has an invalid length. [ 111.498819][ T6984] bond1 (unregistering): Released all slaves [ 111.612773][ T6989] netlink: 'syz.4.348': attribute type 1 has an invalid length. [ 111.618534][ T6999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.668701][ T6989] netlink: 'syz.4.348': attribute type 2 has an invalid length. [ 111.692779][ T7000] bond0: (slave veth0_to_bond): making interface the new active one [ 111.702239][ T7000] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 111.873153][ T7013] syzkaller0: entered promiscuous mode [ 111.895566][ T7013] syzkaller0: entered allmulticast mode [ 111.972446][ T7013] tipc: Enabled bearer , priority 0 [ 111.999620][ T7011] tipc: Resetting bearer [ 112.094497][ T7011] tipc: Disabling bearer [ 112.127305][ T7020] bond1: (slave veth0_to_bond): Releasing active interface [ 112.139616][ T7020] veth0_to_bond: left promiscuous mode [ 112.326840][ T7039] xt_SECMARK: invalid mode: 9 [ 112.517297][ T7050] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.524534][ T7050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.532089][ T7050] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.539275][ T7050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.566020][ T7050] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.573363][ T7050] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.676327][ T7054] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.684620][ T7054] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.821100][ T7061] : renamed from team0 (while UP) [ 113.035584][ T7072] Driver unsupported XDP return value 0 on prog (id 117) dev N/A, expect packet loss! [ 113.106882][ T7082] xt_SECMARK: invalid mode: 9 [ 113.129645][ T7086] netlink: 'syz.2.374': attribute type 1 has an invalid length. [ 113.216936][ T7091] syzkaller0: entered promiscuous mode [ 113.230112][ T7091] syzkaller0: entered allmulticast mode [ 113.256529][ T7091] 0: reclassify loop, rule prio 0, protocol 700 [ 113.337723][ T7099] netlink: 'syz.1.377': attribute type 1 has an invalid length. [ 113.528221][ T7099] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 113.887649][ T7135] netlink: 'syz.4.385': attribute type 61 has an invalid length. [ 113.933140][ T7135] __nla_validate_parse: 10 callbacks suppressed [ 113.933157][ T7135] netlink: 16 bytes leftover after parsing attributes in process `syz.4.385'. [ 114.030851][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'. [ 114.042929][ T7141] xt_SECMARK: invalid mode: 9 [ 114.157816][ T7147] Cannot find del_set index 0 as target [ 114.297505][ T7155] dvmrp0: entered allmulticast mode [ 114.452379][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 114.651654][ T7172] netlink: 'syz.1.398': attribute type 1 has an invalid length. [ 114.681231][ T7172] netlink: 'syz.1.398': attribute type 2 has an invalid length. [ 114.696601][ T7177] xt_SECMARK: invalid mode: 9 [ 114.707212][ T7172] netlink: 'syz.1.398': attribute type 1 has an invalid length. [ 114.720593][ T7182] netlink: 56 bytes leftover after parsing attributes in process `syz.0.402'. [ 114.732681][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.402'. [ 114.748133][ T7172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.398'. [ 114.766798][ T7182] netlink: 31 bytes leftover after parsing attributes in process `syz.0.402'. [ 114.791464][ T7182] netlink: 'syz.0.402': attribute type 2 has an invalid length. [ 114.821855][ T7182] netlink: 31 bytes leftover after parsing attributes in process `syz.0.402'. [ 114.963038][ T7194] netlink: 20 bytes leftover after parsing attributes in process `syz.4.406'. [ 114.993584][ T7197] netlink: 52 bytes leftover after parsing attributes in process `syz.0.408'. [ 115.019072][ T7197] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.026363][ T7197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.035736][ T7197] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.042954][ T7197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.105760][ T7197] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.113107][ T7197] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.449696][ T7224] netlink: 'syz.0.415': attribute type 11 has an invalid length. [ 115.493368][ T7228] netlink: 'syz.1.419': attribute type 1 has an invalid length. [ 115.524893][ T7223] nbd: socks must be embedded in a SOCK_ITEM attr [ 115.539751][ T7231] sock: sock_set_timeout: `syz.3.418' (pid 7231) tries to set negative timeout [ 115.664553][ T7228] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.947481][ T7235] bond2: (slave veth5): Enslaving as an active interface with a down link [ 115.974596][ T7238] bond2: (slave veth0_to_bond): making interface the new active one [ 115.984122][ T7238] veth0_to_bond: entered promiscuous mode [ 115.991695][ T7238] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 116.058975][ T7245] veth1_macvtap: renamed from vlan0 [ 116.143134][ T7244] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 116.454774][ T7276] netlink: 'syz.0.429': attribute type 4 has an invalid length. [ 117.036159][ T7325] netlink: 'syz.0.439': attribute type 1 has an invalid length. [ 117.083742][ T7325] 8021q: adding VLAN 0 to HW filter on device bond4 [ 117.123526][ T7325] bond3: (slave veth0_to_bond): Releasing active interface [ 117.142720][ T7325] veth0_to_bond: left promiscuous mode [ 117.171046][ T7330] xt_cgroup: invalid path, errno=-2 [ 117.208114][ T7325] bond4: (slave veth0_to_bond): making interface the new active one [ 117.233546][ T7325] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 119.547038][ T7287] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 119.804822][ T7367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.831975][ T7369] openvswitch: netlink: EtherType 50a is less than min 600 [ 119.874997][ T7377] netlink: 'syz.3.452': attribute type 10 has an invalid length. [ 120.026911][ T7383] __nla_validate_parse: 6 callbacks suppressed [ 120.026928][ T7383] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.454'. [ 120.060986][ T7382] trusted_key: syz.0.455 sent an empty control message without MSG_MORE. [ 120.096016][ T7386] netlink: 'syz.4.457': attribute type 1 has an invalid length. [ 120.114738][ T7386] netlink: 224 bytes leftover after parsing attributes in process `syz.4.457'. [ 120.395038][ T7406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.460'. [ 120.434773][ T7406] netlink: 'syz.2.460': attribute type 1 has an invalid length. [ 120.480169][ T7412] netlink: 'syz.1.463': attribute type 1 has an invalid length. [ 120.500239][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.462'. [ 120.503278][ T7412] netlink: 224 bytes leftover after parsing attributes in process `syz.1.463'. [ 120.681883][ T7424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.466'. [ 120.748908][ T7424] xfrm1: entered promiscuous mode [ 120.764316][ T7424] xfrm1: entered allmulticast mode [ 121.215271][ T7452] netem: change failed [ 121.239468][ T7449] netem: change failed [ 121.257970][ T7449] netlink: 'syz.2.470': attribute type 11 has an invalid length. [ 121.267699][ T7452] netlink: 224 bytes leftover after parsing attributes in process `syz.1.473'. [ 121.308005][ T7449] netlink: 132 bytes leftover after parsing attributes in process `syz.2.470'. [ 121.457565][ T7464] netlink: 'syz.0.476': attribute type 1 has an invalid length. [ 121.512930][ T7464] netlink: 24 bytes leftover after parsing attributes in process `syz.0.476'. [ 121.627097][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'. [ 121.663186][ T7470] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 121.743328][ T7470] team1: entered promiscuous mode [ 121.755969][ T7470] team1: entered allmulticast mode [ 121.798452][ T7482] syzkaller0: entered promiscuous mode [ 121.822530][ T7482] syzkaller0: entered allmulticast mode [ 121.995050][ T7492] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.002324][ T7492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.010035][ T7492] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.017221][ T7492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.034021][ T7492] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.041348][ T7492] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.335475][ T7510] netlink: 'syz.0.493': attribute type 1 has an invalid length. [ 122.349636][ T7510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 122.357610][ T7510] IPv6: NLM_F_CREATE should be set when creating new route [ 122.373897][ T7510] netlink: 'syz.0.493': attribute type 1 has an invalid length. [ 122.382326][ T7510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 122.833380][ T7536] xt_CONNSECMARK: invalid mode: 0 [ 123.004862][ T7544] ieee802154 phy0 wpan0: encryption failed: -22 [ 123.391984][ T7570] netlink: 'syz.2.515': attribute type 1 has an invalid length. [ 123.438756][ T7563] netlink: 'syz.1.513': attribute type 3 has an invalid length. [ 123.512659][ T7570] bond1: entered promiscuous mode [ 123.520443][ T7570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.539049][ T7569] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 123.558022][ T7569] 0ªX¹¦Dö»: entered allmulticast mode [ 123.571717][ T7563] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 123.825630][ T7603] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.833797][ T7603] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.992414][ T7612] block nbd0: Unsupported socket: should be TCP or UNIX. [ 124.042617][ T7617] ipt_REJECT: TCP_RESET invalid for non-tcp [ 124.091409][ T7618] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 124.103809][ T7618] syzkaller1: linktype set to 823 [ 124.771535][ T7661] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 125.041110][ T7680] __nla_validate_parse: 22 callbacks suppressed [ 125.041129][ T7680] netlink: 52 bytes leftover after parsing attributes in process `syz.3.547'. [ 125.111128][ T7680] netlink: 76 bytes leftover after parsing attributes in process `syz.3.547'. [ 125.136666][ T7680] netlink: 52 bytes leftover after parsing attributes in process `syz.3.547'. [ 125.180258][ T7688] xt_SECMARK: invalid mode: 9 [ 125.237437][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.550'. [ 125.407084][ T7706] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 125.422051][ T7706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.553'. [ 125.961961][ T7738] netlink: 52 bytes leftover after parsing attributes in process `syz.4.561'. [ 125.988275][ T7738] netlink: 76 bytes leftover after parsing attributes in process `syz.4.561'. [ 126.013803][ T7738] netlink: 52 bytes leftover after parsing attributes in process `syz.4.561'. [ 126.170591][ T7757] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 126.665932][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'. [ 126.783352][ T7794] validate_nla: 2 callbacks suppressed [ 126.783369][ T7794] netlink: 'syz.1.574': attribute type 2 has an invalid length. [ 126.845669][ T7794] netlink: 'syz.1.574': attribute type 2 has an invalid length. [ 126.857632][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.575'. [ 127.044309][ T7800] netlink: 'syz.2.577': attribute type 9 has an invalid length. [ 127.072665][ T6231] veth0_to_bond: left promiscuous mode [ 127.140914][ T7817] netlink: 'syz.1.581': attribute type 11 has an invalid length. [ 127.169104][ T7817] netlink: 'syz.1.581': attribute type 4 has an invalid length. [ 127.345692][ T7829] FAULT_INJECTION: forcing a failure. [ 127.345692][ T7829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.395592][ T7829] CPU: 0 UID: 0 PID: 7829 Comm: syz.3.583 Not tainted syzkaller #0 PREEMPT(full) [ 127.395614][ T7829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 127.395622][ T7829] Call Trace: [ 127.395628][ T7829] [ 127.395635][ T7829] dump_stack_lvl+0xe8/0x150 [ 127.395660][ T7829] should_fail_ex+0x412/0x560 [ 127.395685][ T7829] _copy_from_user+0x2d/0xb0 [ 127.395708][ T7829] ___sys_sendmsg+0x1c6/0x360 [ 127.395728][ T7829] ? __lock_acquire+0x6b5/0x2cf0 [ 127.395749][ T7829] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.395802][ T7829] ? __fget_files+0x2a/0x420 [ 127.395819][ T7829] ? __fget_files+0x3a0/0x420 [ 127.395863][ T7829] __x64_sys_sendmsg+0x1bd/0x2a0 [ 127.395887][ T7829] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 127.395916][ T7829] ? __pfx_ksys_write+0x10/0x10 [ 127.395945][ T7829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.395960][ T7829] do_syscall_64+0x15f/0xf80 [ 127.395979][ T7829] ? trace_irq_disable+0x3b/0x140 [ 127.396000][ T7829] ? clear_bhb_loop+0x40/0x90 [ 127.396017][ T7829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.396031][ T7829] RIP: 0033:0x7f2ad339ce59 [ 127.396054][ T7829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.396067][ T7829] RSP: 002b:00007f2ad4276028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.396087][ T7829] RAX: ffffffffffffffda RBX: 00007f2ad3615fa0 RCX: 00007f2ad339ce59 [ 127.396096][ T7829] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 127.396104][ T7829] RBP: 00007f2ad4276090 R08: 0000000000000000 R09: 0000000000000000 [ 127.396112][ T7829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.396119][ T7829] R13: 00007f2ad3616038 R14: 00007f2ad3615fa0 R15: 00007fffe0b09258 [ 127.396143][ T7829] [ 127.708058][ T7838] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.716338][ T7838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.723939][ T7838] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.731148][ T7838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.753492][ T7838] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.760819][ T7838] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.159177][ T7871] FAULT_INJECTION: forcing a failure. [ 128.159177][ T7871] name failslab, interval 1, probability 0, space 0, times 0 [ 128.217064][ T7871] CPU: 1 UID: 0 PID: 7871 Comm: syz.2.598 Not tainted syzkaller #0 PREEMPT(full) [ 128.217086][ T7871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.217096][ T7871] Call Trace: [ 128.217102][ T7871] [ 128.217109][ T7871] dump_stack_lvl+0xe8/0x150 [ 128.217133][ T7871] should_fail_ex+0x412/0x560 [ 128.217158][ T7871] should_failslab+0xa8/0x100 [ 128.217183][ T7871] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 128.217200][ T7871] ? __alloc_skb+0x186/0x7d0 [ 128.217218][ T7871] ? __alloc_skb+0x1d0/0x7d0 [ 128.217232][ T7871] ? __local_bh_enable_ip+0xd0/0x130 [ 128.217250][ T7871] __alloc_skb+0x1d0/0x7d0 [ 128.217271][ T7871] netlink_sendmsg+0x5d4/0xb40 [ 128.217297][ T7871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.217318][ T7871] ? aa_sock_msg_perm+0xf1/0x1b0 [ 128.217339][ T7871] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 128.217361][ T7871] ____sys_sendmsg+0x972/0x9f0 [ 128.217378][ T7871] ? __might_fault+0xaf/0x130 [ 128.217397][ T7871] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.217419][ T7871] ? import_iovec+0x73/0xa0 [ 128.217439][ T7871] ___sys_sendmsg+0x2a5/0x360 [ 128.217468][ T7871] ? __lock_acquire+0x6b5/0x2cf0 [ 128.217486][ T7871] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.217533][ T7871] ? __fget_files+0x2a/0x420 [ 128.217549][ T7871] ? __fget_files+0x3a0/0x420 [ 128.217575][ T7871] __x64_sys_sendmsg+0x1bd/0x2a0 [ 128.217594][ T7871] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 128.217620][ T7871] ? __pfx_ksys_write+0x10/0x10 [ 128.217647][ T7871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.217663][ T7871] do_syscall_64+0x15f/0xf80 [ 128.217682][ T7871] ? trace_irq_disable+0x3b/0x140 [ 128.217702][ T7871] ? clear_bhb_loop+0x40/0x90 [ 128.217719][ T7871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.217733][ T7871] RIP: 0033:0x7f460f59ce59 [ 128.217748][ T7871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.217759][ T7871] RSP: 002b:00007f4610474028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.217775][ T7871] RAX: ffffffffffffffda RBX: 00007f460f815fa0 RCX: 00007f460f59ce59 [ 128.217784][ T7871] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 128.217792][ T7871] RBP: 00007f4610474090 R08: 0000000000000000 R09: 0000000000000000 [ 128.217801][ T7871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.217808][ T7871] R13: 00007f460f816038 R14: 00007f460f815fa0 R15: 00007fff57b83d88 [ 128.217832][ T7871] [ 128.551787][ T7885] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.559466][ T7885] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.559787][ T7883] netlink: 'syz.1.602': attribute type 13 has an invalid length. [ 128.606401][ T7888] ip6_vti0: entered promiscuous mode [ 128.835141][ T7899] netlink: 'syz.2.607': attribute type 4 has an invalid length. [ 129.184410][ T7919] netlink: 'syz.0.615': attribute type 29 has an invalid length. [ 129.217620][ T7919] netlink: 'syz.0.615': attribute type 29 has an invalid length. [ 129.261746][ T7919] syzkaller0: entered promiscuous mode [ 129.279970][ T7919] syzkaller0: entered allmulticast mode [ 129.302549][ T7928] ip6t_rpfilter: unknown options [ 129.325966][ T7928] veth0: entered promiscuous mode [ 129.451370][ T7940] nbd: must specify a size in bytes for the device [ 129.461016][ T7936] vlan2: entered allmulticast mode [ 129.484505][ T7941] nbd: must specify a size in bytes for the device [ 129.492460][ T7936] hsr0: entered allmulticast mode [ 129.504072][ T7936] hsr_slave_0: entered allmulticast mode [ 129.529957][ T7936] hsr_slave_1: entered allmulticast mode [ 129.559094][ T7926] veth0: left promiscuous mode [ 129.630774][ T7945] veth1_virt_wifi: entered promiscuous mode [ 129.743344][ T7945] syzkaller0: entered promiscuous mode [ 129.759104][ T7945] syzkaller0: entered allmulticast mode [ 130.103946][ T7963] lo: Caught tx_queue_len zero misconfig [ 130.142678][ T7963] netem: change failed [ 130.234539][ T7969] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 130.277243][ T7969] syzkaller0: entered promiscuous mode [ 130.478730][ T7996] netlink: 'syz.3.639': attribute type 1 has an invalid length. [ 130.505014][ T7996] openvswitch: netlink: VLAN attribute unexpected. [ 130.537343][ T8003] __nla_validate_parse: 19 callbacks suppressed [ 130.537361][ T8003] netlink: 108 bytes leftover after parsing attributes in process `syz.0.640'. [ 130.679127][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'. [ 130.698937][ T8009] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 130.724219][ T8009] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 130.925613][ T8028] netlink: 'syz.2.651': attribute type 1 has an invalid length. [ 131.257089][ T8046] netlink: 14 bytes leftover after parsing attributes in process `syz.4.656'. [ 131.415887][ T8051] netlink: 1024 bytes leftover after parsing attributes in process `syz.1.659'. [ 131.440882][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.660'. [ 131.464271][ T8058] netlink: 224 bytes leftover after parsing attributes in process `syz.3.660'. [ 131.737313][ T8081] veth0: entered promiscuous mode [ 131.788353][ T8080] veth0: left promiscuous mode [ 131.951673][ T8094] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.668'. [ 131.965374][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.667'. [ 132.256630][ T8112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.293672][ T8112] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 132.316714][ T8117] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.676'. [ 132.794441][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.802909][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.833024][ T8142] validate_nla: 1 callbacks suppressed [ 132.833043][ T8142] netlink: 'syz.1.682': attribute type 1 has an invalid length. [ 132.885864][ T8142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.682'. [ 133.889521][ T8199] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 134.572253][ T8231] vcan1: entered promiscuous mode [ 134.599715][ T8231] vcan1: entered allmulticast mode [ 134.635150][ T8239] SET target dimension over the limit! [ 134.857702][ T8248] netlink: 'syz.1.710': attribute type 1 has an invalid length. [ 134.994268][ T8253] syzkaller1: entered promiscuous mode [ 135.027331][ T8253] syzkaller1: entered allmulticast mode [ 135.864182][ T8289] openvswitch: netlink: Message has -2 unknown bytes. [ 136.082405][ T8299] xt_CONNSECMARK: invalid mode: 0 [ 136.362442][ T8315] __nla_validate_parse: 3 callbacks suppressed [ 136.362458][ T8315] netlink: 52 bytes leftover after parsing attributes in process `syz.3.726'. [ 136.440593][ T8317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.727'. [ 136.450654][ T8317] netlink: 'syz.1.727': attribute type 2 has an invalid length. [ 136.623105][ T8325] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.667526][ T8320] netlink: 64 bytes leftover after parsing attributes in process `syz.1.728'. [ 136.873573][ T8341] xt_CONNSECMARK: invalid mode: 0 [ 137.032490][ T8355] netlink: 52 bytes leftover after parsing attributes in process `syz.2.740'. [ 137.143071][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.741'. [ 137.172498][ T8362] netlink: 76 bytes leftover after parsing attributes in process `syz.4.743'. [ 137.202259][ T8360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.742'. [ 137.203885][ T8362] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.218422][ T8362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.226019][ T8362] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.233224][ T8362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.254179][ T8362] netlink: 52 bytes leftover after parsing attributes in process `syz.4.743'. [ 137.292242][ T8362] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.299538][ T8362] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.362936][ T8371] netlink: 'syz.1.746': attribute type 1 has an invalid length. [ 137.405171][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.748'. [ 137.428249][ T8371] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.436242][ T5637] Bluetooth: hci3: command tx timeout [ 137.496285][ T8371] bond2: (slave veth0_to_bond): Releasing active interface [ 137.532832][ T8371] bond3: (slave veth0_to_bond): making interface the new active one [ 137.543563][ T8371] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 137.636932][ T8390] netlink: 52 bytes leftover after parsing attributes in process `syz.4.752'. [ 137.649109][ T8389] netlink: 'syz.0.751': attribute type 8 has an invalid length. [ 137.684131][ T8379] 8021q: adding VLAN 0 to HW filter on device bond4 [ 137.709336][ T8379] bond3: (slave bond4): Enslaving as an active interface with a down link [ 137.720870][ T8397] Cannot find del_set index 0 as target [ 137.787505][ T8395] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.794782][ T8395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.802355][ T8395] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.809572][ T8395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.302055][ T8404] nbd0: detected capacity change from 0 to 63 [ 138.336870][ T5641] block nbd0: Receive control failed (result -32) [ 138.336870][ T5637] block nbd0: Receive control failed (result -32) [ 138.359938][ T5635] block nbd0: Dead connection, failed to find a fallback [ 138.368151][ T5635] block nbd0: shutting down sockets [ 138.374946][ T5635] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.386615][ T5635] Buffer I/O error on dev nbd0, logical block 0, async page read [ 138.395427][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.407685][ T8426] can: request_module (can-proto-5) failed. [ 138.408633][ T5635] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.447249][ T5635] Buffer I/O error on dev nbd0, logical block 1, async page read [ 138.456351][ T5635] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.466687][ T5635] Buffer I/O error on dev nbd0, logical block 2, async page read [ 138.482095][ T5635] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.522038][ T5635] Buffer I/O error on dev nbd0, logical block 3, async page read [ 138.544422][ T5635] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.555536][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.609560][ T5635] Buffer I/O error on dev nbd0, logical block 0, async page read [ 138.637924][ T5635] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.676282][ T5635] Buffer I/O error on dev nbd0, logical block 1, async page read [ 138.698101][ T8436] syzkaller1: entered promiscuous mode [ 138.716002][ T5635] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.720146][ T8436] syzkaller1: entered allmulticast mode [ 138.747971][ T8443] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20003 [ 138.758784][ T5635] Buffer I/O error on dev nbd0, logical block 2, async page read [ 138.792777][ T5635] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.836517][ T5635] Buffer I/O error on dev nbd0, logical block 3, async page read [ 138.873287][ T5635] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.902833][ T5635] Buffer I/O error on dev nbd0, logical block 0, async page read [ 138.937765][ T5635] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.969790][ T5635] Buffer I/O error on dev nbd0, logical block 1, async page read [ 138.997108][ T5635] ldm_validate_partition_table(): Disk read failed. [ 139.054550][ T5635] Dev nbd0: unable to read RDB block 0 [ 139.093599][ T5635] nbd0: unable to read partition table [ 139.147716][ T5635] ldm_validate_partition_table(): Disk read failed. [ 139.157490][ T5635] Dev nbd0: unable to read RDB block 0 [ 139.165858][ T5635] nbd0: unable to read partition table [ 139.198778][ T8450] 8021q: adding VLAN 0 to HW filter on device bond5 [ 139.201137][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.265081][ T8455] ipvlan2: entered allmulticast mode [ 139.282787][ T8455] bond5: entered allmulticast mode [ 139.321056][ T8450] bond5: (slave ipip0): refused to change device type [ 139.445405][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.569798][ T8459] macvlan0: entered promiscuous mode [ 139.595598][ T8459] IPVS: length: 130 != 19976 [ 139.613282][ T8459] netlink: 'syz.2.774': attribute type 9 has an invalid length. [ 140.133984][ T8499] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.141235][ T8499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.148796][ T8499] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.156026][ T8499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.176288][ T8499] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.183606][ T8499] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.351195][ T8515] netlink: 'syz.0.793': attribute type 21 has an invalid length. [ 140.366932][ T8515] IPv6: NLM_F_CREATE should be specified when creating new route [ 140.435514][ T8510] tipc: Invalid UDP bearer configuration [ 140.435562][ T8510] tipc: Enabling of bearer rejected, failed to enable media [ 140.473433][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.486528][ T8515] team0 (unregistering): Port device team_slave_0 removed [ 140.515317][ T8515] team0 (unregistering): Port device team_slave_1 removed [ 140.612617][ T8525] xt_CONNSECMARK: invalid mode: 0 [ 140.718395][ T8527] ip_vti0: entered allmulticast mode [ 141.175429][ T8561] netlink: 'syz.1.809': attribute type 1 has an invalid length. [ 141.225173][ T8564] xt_CONNSECMARK: invalid mode: 0 [ 141.356509][ T8567] 8021q: adding VLAN 0 to HW filter on device bond7 [ 141.367095][ T8567] bond6: (slave bond7): making interface the new active one [ 141.375318][ T8567] bond6: (slave bond7): Enslaving as an active interface with an up link [ 141.399535][ T8572] bond6: (slave gretap0): Enslaving as a backup interface with an up link [ 141.418055][ T8571] __nla_validate_parse: 23 callbacks suppressed [ 141.418078][ T8571] netlink: 16 bytes leftover after parsing attributes in process `syz.3.812'. [ 141.457720][ T8582] netlink: 76 bytes leftover after parsing attributes in process `syz.2.815'. [ 141.468618][ T8582] netlink: 52 bytes leftover after parsing attributes in process `syz.2.815'. [ 141.505315][ T8571] netlink: 'syz.3.812': attribute type 83 has an invalid length. [ 141.514554][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.652226][ T8593] openvswitch: netlink: Message has 1 unknown bytes. [ 141.681251][ T8593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.960839][ T8615] xt_SECMARK: invalid mode: 9 [ 142.156044][ T8623] netlink: 'syz.0.826': attribute type 10 has an invalid length. [ 142.185163][ T8623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.209789][ T8623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.231202][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.247477][ T8623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.273067][ T8623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.546836][ T8641] netlink: 76 bytes leftover after parsing attributes in process `syz.2.830'. [ 142.557524][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.614069][ T8641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.830'. [ 143.135213][ T8663] netlink: 14 bytes leftover after parsing attributes in process `syz.4.838'. [ 143.287535][ T8682] openvswitch: netlink: IPv4 tun info is not correct [ 143.333521][ T8665] netlink: 32 bytes leftover after parsing attributes in process `syz.0.839'. [ 143.383817][ T8682] pim6reg: entered allmulticast mode [ 143.402318][ T8677] pim6reg: left allmulticast mode [ 143.422396][ T8682] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.449208][ T8684] bridge_slave_0: left allmulticast mode [ 143.457784][ T8684] bridge_slave_0: left promiscuous mode [ 143.467861][ T8684] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.536915][ T8684] bridge_slave_1: left allmulticast mode [ 143.560465][ T8684] bridge_slave_1: left promiscuous mode [ 143.580180][ T8684] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.594054][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.598110][ T8691] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 143.764753][ T8697] FAULT_INJECTION: forcing a failure. [ 143.764753][ T8697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.798651][ T8697] CPU: 0 UID: 0 PID: 8697 Comm: syz.0.849 Not tainted syzkaller #0 PREEMPT(full) [ 143.798674][ T8697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 143.798683][ T8697] Call Trace: [ 143.798691][ T8697] [ 143.798699][ T8697] dump_stack_lvl+0xe8/0x150 [ 143.798724][ T8697] should_fail_ex+0x412/0x560 [ 143.798750][ T8697] _copy_from_user+0x2d/0xb0 [ 143.798773][ T8697] kstrtouint_from_user+0xd6/0x180 [ 143.798795][ T8697] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 143.798831][ T8697] proc_fail_nth_write+0x8e/0x210 [ 143.798855][ T8697] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 143.798880][ T8697] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 143.798901][ T8697] vfs_write+0x29a/0xb90 [ 143.798928][ T8697] ? __pfx_vfs_write+0x10/0x10 [ 143.798949][ T8697] ? __fget_files+0x2a/0x420 [ 143.798973][ T8697] ? __fget_files+0x3a0/0x420 [ 143.798989][ T8697] ? __fget_files+0x2a/0x420 [ 143.799016][ T8697] ksys_write+0x150/0x270 [ 143.799040][ T8697] ? __pfx_ksys_write+0x10/0x10 [ 143.799070][ T8697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.799088][ T8697] do_syscall_64+0x15f/0xf80 [ 143.799109][ T8697] ? trace_irq_disable+0x3b/0x140 [ 143.799130][ T8697] ? clear_bhb_loop+0x40/0x90 [ 143.799151][ T8697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.799166][ T8697] RIP: 0033:0x7f706915d68e [ 143.799182][ T8697] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 143.799193][ T8697] RSP: 002b:00007f7069f96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 143.799211][ T8697] RAX: ffffffffffffffda RBX: 00007f7069f976c0 RCX: 00007f706915d68e [ 143.799222][ T8697] RDX: 0000000000000001 RSI: 00007f7069f970a0 RDI: 0000000000000005 [ 143.799232][ T8697] RBP: 00007f7069f97090 R08: 0000000000000000 R09: 0000000000000000 [ 143.799241][ T8697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.799250][ T8697] R13: 00007f7069416038 R14: 00007f7069415fa0 R15: 00007ffdceeba6d8 [ 143.799279][ T8697] [ 144.039172][ T8703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.852'. [ 144.630731][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.280178][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.675553][ T8684] bond3: (slave veth0_to_bond): Releasing active interface [ 145.684112][ T8684] bond3: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 145.911206][ T8684] bond0: (slave bond_slave_0): Releasing backup interface [ 145.937250][ T8684] bond0: (slave bond_slave_1): Releasing backup interface [ 145.955767][ T8684] team0: Port device team_slave_0 removed [ 145.964543][ T8684] team0: Port device team_slave_1 removed [ 145.971476][ T8684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.978980][ T8684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.990757][ T8684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.998334][ T8684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.011345][ T8685] ip6gre1: entered allmulticast mode [ 146.022195][ T8685] team0: Port device ip6gre1 added [ 146.029732][ T8701] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 146.114898][ T8711] xt_CONNSECMARK: invalid mode: 0 [ 146.200157][ T8715] netlink: 'syz.1.855': attribute type 10 has an invalid length. [ 146.221199][ T8715] netlink: 228 bytes leftover after parsing attributes in process `syz.1.855'. [ 146.248029][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.855'. [ 146.314031][ T8727] netlink: 'syz.0.858': attribute type 1 has an invalid length. [ 146.712016][ T5744] net_ratelimit: 3 callbacks suppressed [ 146.712032][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.972617][ T8761] syzkaller1: entered promiscuous mode [ 146.998052][ T8761] syzkaller1: entered allmulticast mode [ 147.013216][ T8765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.866'. [ 147.028044][ T8773] af_packet: tpacket_rcv: packet too big, clamped from 4028 to 3952. macoff=96 [ 147.042022][ T8767] xt_CONNSECMARK: invalid mode: 0 [ 147.050621][ T8765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.866'. [ 147.252038][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.870'. [ 147.510917][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.753534][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.802088][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.880'. [ 147.813912][ T6240] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.814716][ T8813] netlink: 'syz.4.878': attribute type 1 has an invalid length. [ 147.863715][ T6240] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.898605][ T8817] netlink: 'syz.0.880': attribute type 4 has an invalid length. [ 147.988392][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'. [ 148.058060][ T8813] bond2: entered promiscuous mode [ 148.068433][ T8813] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.076910][ T8819] netlink: 'syz.0.880': attribute type 2 has an invalid length. [ 148.088152][ T6240] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.098995][ T6240] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.100728][ T8832] netlink: 16 bytes leftover after parsing attributes in process `syz.3.881'. [ 148.174248][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.334634][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.491424][ T8853] netlink: 'syz.3.888': attribute type 1 has an invalid length. [ 148.528365][ T8853] netlink: 'syz.3.888': attribute type 1 has an invalid length. [ 148.654252][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'. [ 148.795655][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.925632][ T8873] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 148.961975][ T8873] bond1 (unregistering): Released all slaves [ 148.987372][ T8881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.895'. [ 149.235417][ T8887] openvswitch: netlink: Key type 30 is not supported [ 149.578194][ T8909] xt_CONNSECMARK: invalid mode: 0 [ 149.810491][ T8928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.906'. [ 149.819709][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.909'. [ 149.833690][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.863558][ T8928] netlink: 'syz.2.906': attribute type 10 has an invalid length. [ 149.886860][ T8927] netlink: 'syz.4.909': attribute type 1 has an invalid length. [ 150.073205][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.084937][ T8939] syzkaller1: entered promiscuous mode [ 150.126393][ T8939] syzkaller1: entered allmulticast mode [ 150.184069][ T8949] xt_NFQUEUE: number of total queues is 0 [ 150.436393][ T8960] netlink: 'syz.3.918': attribute type 1 has an invalid length. [ 150.528454][ T8960] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.899707][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.935121][ T8989] syzkaller1: entered promiscuous mode [ 150.946636][ T8989] syzkaller1: entered allmulticast mode [ 151.419066][ T9016] netlink: 'syz.1.934': attribute type 1 has an invalid length. [ 151.566051][ T9022] netlink: 'syz.3.936': attribute type 21 has an invalid length. [ 151.574871][ T9020] SET target dimension over the limit! [ 151.913403][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.024678][ T9049] __nla_validate_parse: 11 callbacks suppressed [ 152.024696][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'. [ 152.249129][ T9063] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.951'. [ 152.266933][ T9065] netlink: 72 bytes leftover after parsing attributes in process `syz.0.949'. [ 152.278335][ T9065] netlink: 64 bytes leftover after parsing attributes in process `syz.0.949'. [ 152.297343][ T9068] nbd: nbd0 already in use [ 152.377543][ T9076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.949'. [ 152.558054][ T9087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.565405][ T9087] IPv6: NLM_F_CREATE should be set when creating new route [ 152.572800][ T9087] IPv6: NLM_F_CREATE should be set when creating new route [ 152.580073][ T9087] IPv6: NLM_F_CREATE should be set when creating new route [ 152.623665][ T9090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.765140][ T9097] macvtap0: mtu less than device minimum [ 152.830326][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.959'. [ 152.916398][ T9103] netlink: 32 bytes leftover after parsing attributes in process `syz.1.961'. [ 152.954140][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.096784][ T9114] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 153.113243][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.333799][ T9127] netlink: 16 bytes leftover after parsing attributes in process `syz.1.968'. [ 153.411578][ T9134] netlink: 52 bytes leftover after parsing attributes in process `syz.2.969'. [ 153.659386][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.972'. [ 153.991090][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.185461][ T9174] netlink: 'syz.4.981': attribute type 49 has an invalid length. [ 155.043820][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.211231][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.613367][ T9184] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 156.072509][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.181929][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.193729][ T9221] netlink: 'syz.2.995': attribute type 15 has an invalid length. [ 156.320864][ T9227] netlink: 'syz.4.997': attribute type 1 has an invalid length. [ 156.356853][ T9227] nbd: error processing sock list [ 156.585615][ T9242] netlink: 'syz.3.1001': attribute type 1 has an invalid length. [ 156.906430][ T9262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.016483][ T9264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.025120][ T9268] xt_SECMARK: invalid mode: 9 [ 157.098197][ T9264] __nla_validate_parse: 5 callbacks suppressed [ 157.098213][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1009'. [ 157.119008][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.122861][ T9264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1009'. [ 157.230432][ T9275] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 157.443418][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1015'. [ 157.682069][ T9304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1021'. [ 157.731517][ T9308] xt_SECMARK: invalid mode: 9 [ 157.928500][ T9315] xt_CT: No such helper "snmp_trap" [ 158.042759][ T9326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1027'. [ 158.152611][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.294878][ T9337] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 158.374012][ T9344] xt_SECMARK: invalid mode: 9 [ 159.040982][ T9378] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 159.194184][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.202353][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.367944][ T9397] netlink: 'syz.2.1055': attribute type 2 has an invalid length. [ 159.383896][ T9397] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1055'. [ 159.592967][ T9411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.640151][ T9408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1059'. [ 159.818490][ T9424] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.1063'. [ 160.126712][ T9452] pim6reg1: entered promiscuous mode [ 160.161603][ T9452] pim6reg1: entered allmulticast mode [ 160.227445][ T9457] xt_TCPMSS: Only works on TCP SYN packets [ 160.234774][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.311474][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.342035][ T9459] netlink: 'syz.2.1073': attribute type 1 has an invalid length. [ 160.390612][ T9459] netlink: 'syz.2.1073': attribute type 4 has an invalid length. [ 160.468030][ T9459] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1073'. [ 160.532180][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 161.274762][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.274969][ T9439] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x3e [ 161.386454][ T9501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.420986][ T9498] syzkaller0: entered promiscuous mode [ 161.440976][ T9498] syzkaller0: entered allmulticast mode [ 161.938943][ T9527] xt_CONNSECMARK: invalid mode: 0 [ 162.107506][ T9534] __nla_validate_parse: 5 callbacks suppressed [ 162.107522][ T9534] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1097'. [ 162.312801][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.396444][ T9544] syzkaller0: entered promiscuous mode [ 162.420566][ T9544] syzkaller0: entered allmulticast mode [ 162.444017][ T9555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1102'. [ 162.560843][ T9561] xt_CONNSECMARK: invalid mode: 0 [ 162.696177][ T9569] x_tables: ip_tables: socket.3 match: invalid size 8 (kernel) != (user) 48 [ 162.718125][ T9570] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1111'. [ 162.799276][ T9573] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 162.867653][ T9579] SET target dimension over the limit! [ 163.049585][ T9587] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1117'. [ 163.064073][ T9587] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1117'. [ 163.108999][ T9591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1116'. [ 163.132846][ T9594] netlink: 'syz.1.1118': attribute type 1 has an invalid length. [ 163.144227][ T9597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1119'. [ 163.251432][ T9594] 8021q: adding VLAN 0 to HW filter on device bond8 [ 163.350725][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.358876][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.878783][ T9617] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 164.391667][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.790958][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.430700][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.439472][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.673703][ T9570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.861517][ T9627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1125'. [ 166.033393][ T9640] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1129'. [ 166.052981][ T9640] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1129'. [ 166.392119][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.471158][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.554852][ T9660] netlink: 'syz.1.1137': attribute type 2 has an invalid length. [ 166.912295][ T9693] bond4: Unable to set up delay as MII monitoring is disabled [ 166.926465][ T9693] bond4 (unregistering): Released all slaves [ 167.083629][ T9705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.138441][ T9709] xt_SECMARK: invalid mode: 9 [ 167.208321][ T9713] __nla_validate_parse: 9 callbacks suppressed [ 167.208337][ T9713] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1156'. [ 167.377292][ T9717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1158'. [ 167.512798][ T5766] net_ratelimit: 1 callbacks suppressed [ 167.512814][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.749700][ T9736] netlink: 'syz.4.1165': attribute type 2 has an invalid length. [ 167.769330][ T9734] netlink: 211456 bytes leftover after parsing attributes in process `syz.3.1164'. [ 167.788644][ T9734] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1164'. [ 167.836074][ T9743] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1168'. [ 167.974491][ T9747] netlink: 'syz.0.1170': attribute type 11 has an invalid length. [ 167.997181][ T9753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1172'. [ 168.008830][ T9747] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.1170'. [ 168.253674][ T6233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.285336][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.295798][ T6233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.374456][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.549586][ T9787] netlink: 'syz.0.1185': attribute type 1 has an invalid length. [ 168.559023][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.675419][ T9792] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1186'. [ 168.717322][ T9787] 8021q: adding VLAN 0 to HW filter on device bond7 [ 168.810046][ T9804] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1187'. [ 168.829061][ T9807] rdma_op ffff88807d43d1f0 conn xmit_rdma 0000000000000000 [ 168.842039][ T9789] bond7: (slave veth5): Enslaving as an active interface with a down link [ 168.854916][ T9793] bond4: (slave veth0_to_bond): Releasing active interface [ 168.868699][ T9808] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1187'. [ 168.904057][ T9810] rdma_op ffff8880558261f0 conn xmit_rdma 0000000000000000 [ 168.927178][ T9793] bond7: (slave veth0_to_bond): making interface the new active one [ 168.952630][ T9793] veth0_to_bond: entered promiscuous mode [ 168.962177][ T9793] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 169.123647][ T9820] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 169.204376][ T9820] xt_hashlimit: size too large, truncated to 1048576 [ 169.245977][ T9818] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 169.353522][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.432121][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.591502][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.636475][ T9849] team0: No ports can be present during mode change [ 169.774627][ T9859] openvswitch: netlink: IP tunnel dst address not specified [ 169.994239][ T9877] xt_SECMARK: invalid mode: 9 [ 171.190645][ T5641] Bluetooth: hci2: command 0x0401 tx timeout [ 172.710756][ T5744] net_ratelimit: 4 callbacks suppressed [ 172.710774][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.752321][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.791221][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.032145][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.510139][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.830906][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.872526][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.920742][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.550268][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.950667][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.950049][ T178] veth0_to_bond: left promiscuous mode [ 179.991600][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.150135][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.031786][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.591259][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.071679][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.112440][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.152687][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.630719][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.638989][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.191031][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.231906][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.470329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.271266][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.670134][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.310971][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.352191][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.391034][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.710283][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.430720][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.670973][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.473052][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.979248][ T9937] xt_SECMARK: invalid mode: 9 [ 193.252307][ T9959] __nla_validate_parse: 1 callbacks suppressed [ 193.252330][ T9959] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1229'. [ 193.362746][ T9966] vlan2: entered allmulticast mode [ 193.363929][ T9969] netlink: 'syz.2.1232': attribute type 1 has an invalid length. [ 193.380683][ T9966] bridge_slave_0: entered allmulticast mode [ 193.400587][ T9970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.424389][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'. [ 193.462006][ T9969] bond3: entered promiscuous mode [ 193.468026][ T9969] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.478051][ T9966] tipc: Enabling of bearer rejected, failed to enable media [ 193.511670][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.569104][ T9978] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.604278][ T9978] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 193.616411][ T9978] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 193.635782][ T9978] bond3: (slave ip6gre1): making interface the new active one [ 193.643990][ T9978] ip6gre1: entered promiscuous mode [ 193.655077][ T9978] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 193.676727][ T9983] xt_SECMARK: invalid mode: 9 [ 193.751055][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.088542][ T9996] "syz.3.1237" (9996) uses obsolete ecb(arc4) skcipher [ 194.233123][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.242084][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.248569][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.533329][T10037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1248'. [ 194.544638][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1248'. [ 194.563608][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.076472][T10061] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 195.094968][T10068] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1252'. [ 195.105188][T10061] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 195.228012][T10073] netlink: 'syz.1.1254': attribute type 1 has an invalid length. [ 195.275722][T10073] 8021q: adding VLAN 0 to HW filter on device bond9 [ 195.337167][T10073] bond9: (slave veth7): Enslaving as an active interface with a down link [ 195.368082][T10080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1254'. [ 195.521588][T10073] bond9: (slave veth9): Enslaving as an active interface with a down link [ 195.531202][T10073] netlink: 'syz.1.1254': attribute type 1 has an invalid length. [ 195.541813][T10084] netlink: 'syz.4.1258': attribute type 1 has an invalid length. [ 195.551246][T10073] netlink: 'syz.1.1254': attribute type 2 has an invalid length. [ 195.579393][T10084] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.592931][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.637782][T10084] bond4: (slave veth3): Enslaving as an active interface with a down link [ 195.700099][T10086] bond0: (slave veth0_to_bond): Releasing active interface [ 195.728470][T10086] bond4: (slave veth0_to_bond): making interface the new active one [ 195.739307][T10086] veth0_to_bond: entered promiscuous mode [ 195.747550][T10086] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 196.139757][T10107] netlink: 'syz.4.1263': attribute type 9 has an invalid length. [ 196.160163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.187789][T10109] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1264'. [ 196.216010][T10109] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1264'. [ 196.239585][T10109] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1264'. [ 196.278959][T10113] xt_CONNSECMARK: invalid mode: 0 [ 196.495997][T10117] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 196.553233][T10117] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 196.573093][T10117] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 196.631921][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.724971][T10133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.792238][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.856483][T10135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1274'. [ 197.256959][T10144] xt_l2tp: invalid flags combination: 8 [ 197.398581][T10150] vlan2: entered promiscuous mode [ 197.412135][T10150] geneve1: entered promiscuous mode [ 197.422860][T10150] vlan2: entered allmulticast mode [ 197.435141][T10150] geneve1: entered allmulticast mode [ 197.693343][T10159] veth5: entered promiscuous mode [ 197.712606][T10159] veth5: entered allmulticast mode [ 197.953851][T10175] raw_sendmsg: syz.4.1287 forgot to set AF_INET. Fix it! [ 198.322939][T10187] __nla_validate_parse: 10 callbacks suppressed [ 198.322956][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1290'. [ 198.537977][T10197] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1293'. [ 198.578168][T10197] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1293'. [ 198.680884][T10209] net_ratelimit: 1 callbacks suppressed [ 198.680901][T10209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.711859][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.043500][T10222] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1301'. [ 199.054400][T10222] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1301'. [ 199.065726][T10222] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.073001][T10222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.080614][T10222] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.087797][T10222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.097346][T10222] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1301'. [ 199.386418][T10230] netlink: 'syz.0.1305': attribute type 30 has an invalid length. [ 199.418252][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1306'. [ 199.727066][T10247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.736607][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.752265][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.845750][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.867929][T10253] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1312'. [ 199.882223][T10253] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1312'. [ 199.899909][T10253] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1312'. [ 200.056132][T10267] sock: sock_set_timeout: `syz.1.1317' (pid 10267) tries to set negative timeout [ 200.076465][T10268] netlink: 'syz.0.1314': attribute type 1 has an invalid length. [ 200.113155][T10270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.121472][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.178179][T10272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.557121][T10292] IPv6: sit3: Disabled Multicast RS [ 201.430319][ T5639] Bluetooth: hci3: command 0x0406 tx timeout [ 201.436716][ T5645] Bluetooth: hci2: command 0x0401 tx timeout [ 201.442899][ T5639] Bluetooth: hci1: command 0x0406 tx timeout [ 201.618004][T10202] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 203.183171][T10368] xt_SECMARK: invalid mode: 9 [ 203.376902][T10378] FAULT_INJECTION: forcing a failure. [ 203.376902][T10378] name failslab, interval 1, probability 0, space 0, times 0 [ 203.482431][T10378] CPU: 1 UID: 0 PID: 10378 Comm: syz.1.1356 Not tainted syzkaller #0 PREEMPT(full) [ 203.482454][T10378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 203.482463][T10378] Call Trace: [ 203.482470][T10378] [ 203.482476][T10378] dump_stack_lvl+0xe8/0x150 [ 203.482501][T10378] should_fail_ex+0x412/0x560 [ 203.482526][T10378] should_failslab+0xa8/0x100 [ 203.482550][T10378] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 203.482571][T10378] ? __alloc_skb+0x186/0x7d0 [ 203.482588][T10378] ? __alloc_skb+0x1d0/0x7d0 [ 203.482604][T10378] ? __local_bh_enable_ip+0xd0/0x130 [ 203.482625][T10378] __alloc_skb+0x1d0/0x7d0 [ 203.482648][T10378] nfc_genl_device_removed+0x84/0x370 [ 203.482672][T10378] ? __fsnotify_parent+0x267/0x620 [ 203.482692][T10378] ? __pfx_nfc_genl_device_removed+0x10/0x10 [ 203.482722][T10378] nfc_unregister_rfkill+0x32/0x280 [ 203.482746][T10378] nci_unregister_device+0x47/0x260 [ 203.482766][T10378] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 203.482787][T10378] virtual_ncidev_close+0x56/0x90 [ 203.482806][T10378] __fput+0x44f/0xa60 [ 203.482834][T10378] fput_close_sync+0x11f/0x240 [ 203.482851][T10378] ? __pfx_fput_close_sync+0x10/0x10 [ 203.482872][T10378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.482890][T10378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.482907][T10378] __x64_sys_close+0x7e/0x110 [ 203.482926][T10378] do_syscall_64+0x15f/0xf80 [ 203.482945][T10378] ? trace_irq_disable+0x3b/0x140 [ 203.482967][T10378] ? clear_bhb_loop+0x40/0x90 [ 203.482986][T10378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.483001][T10378] RIP: 0033:0x7fe320d9ce59 [ 203.483016][T10378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.483027][T10378] RSP: 002b:00007fe321cea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 203.483044][T10378] RAX: ffffffffffffffda RBX: 00007fe321015fa0 RCX: 00007fe320d9ce59 [ 203.483054][T10378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 203.483062][T10378] RBP: 00007fe321cea090 R08: 0000000000000000 R09: 0000000000000000 [ 203.483071][T10378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.483080][T10378] R13: 00007fe321016038 R14: 00007fe321015fa0 R15: 00007ffe5093a518 [ 203.483105][T10378] [ 203.899480][ T5814] net_ratelimit: 11 callbacks suppressed [ 203.899491][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.959992][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.056699][T10399] xt_CONNSECMARK: invalid mode: 0 [ 204.501907][T10415] __nla_validate_parse: 9 callbacks suppressed [ 204.501924][T10415] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1364'. [ 204.563231][T10417] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1364'. [ 204.587670][T10415] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.594983][T10415] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.627083][T10417] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.634345][T10417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.641889][T10417] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.649077][T10417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.693566][T10417] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1364'. [ 204.749001][T10421] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1366'. [ 204.896472][T10417] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.903792][T10417] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.975644][T10435] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 205.030930][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.076123][T10435] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 205.137350][T10435] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 205.171892][T10435] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 205.257266][T10435] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 205.274556][T10449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1375'. [ 205.315629][T10435] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 205.364372][T10451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1377'. [ 205.367899][T10435] bridge12: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 205.374298][T10449] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1375'. [ 205.402604][T10435] bridge13: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 205.476318][T10435] bridge14: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 205.527628][T10435] bridge15: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 205.562626][T10435] bridge16: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 205.609648][T10435] bridge17: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 205.631022][T10462] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1379'. [ 205.653017][T10435] bridge18: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 205.674600][T10463] SET target dimension over the limit! [ 205.684835][T10435] bridge19: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 205.773121][T10435] bridge20: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 205.841225][T10470] netlink: 'syz.0.1381': attribute type 12 has an invalid length. [ 205.878169][T10470] netlink: 'syz.0.1381': attribute type 29 has an invalid length. [ 205.908912][T10470] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1381'. [ 205.920816][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.934907][T10470] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1381'. [ 205.953357][T10477] netlink: 'syz.2.1385': attribute type 1 has an invalid length. [ 206.071202][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.359630][T10499] SET target dimension over the limit! [ 206.375047][T10501] xt_SECMARK: invalid mode: 9 [ 206.536202][T10514] bridge: RTM_NEWNEIGH with invalid ether address [ 206.560338][T10512] bridge: RTM_NEWNEIGH with invalid ether address [ 206.829172][T10533] SET target dimension over the limit! [ 206.892524][T10538] xt_SECMARK: invalid mode: 9 [ 206.978003][T10543] tipc: Enabling of bearer rejected, failed to enable media [ 207.014462][T10545] openvswitch: netlink: Unknown nsh attribute 0 [ 207.104866][ T9441] veth0_to_bond: left promiscuous mode [ 207.113134][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.205313][T10558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.215355][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.371919][T10566] syzkaller0: entered promiscuous mode [ 207.385007][T10566] syzkaller0: entered allmulticast mode [ 207.501339][T10572] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 207.583775][T10577] syzkaller0: entered promiscuous mode [ 207.603666][T10583] xt_SECMARK: invalid mode: 9 [ 207.612628][T10577] syzkaller0: entered allmulticast mode [ 208.068907][T10614] lo: entered promiscuous mode [ 208.077529][T10614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.102996][T10614] xfrm1: entered allmulticast mode [ 208.236454][T10621] xt_SECMARK: invalid mode: 9 [ 208.394948][T10631] x_tables: duplicate underflow at hook 1 [ 208.953031][ T9] net_ratelimit: 1 callbacks suppressed [ 208.953045][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.191227][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.590879][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.606716][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.241882][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.596600][T10584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.984482][T10670] __nla_validate_parse: 11 callbacks suppressed [ 210.984498][T10670] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1450'. [ 211.023973][T10653] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.036278][T10653] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.047390][T10677] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1450'. [ 211.098632][ T5612] IPVS: starting estimator thread 0... [ 211.115804][T10672] netlink: 'syz.3.1451': attribute type 3 has an invalid length. [ 211.124862][T10672] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1451'. [ 211.134528][T10677] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.141775][T10677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.149366][T10677] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.156571][T10677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.168247][T10677] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1450'. [ 211.180468][T10677] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.187737][T10677] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.200251][T10681] IPVS: using max 32 ests per chain, 76800 per kthread [ 211.273883][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.320661][T10653] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.339580][T10685] xt_CONNSECMARK: invalid mode: 0 [ 211.340886][T10653] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.544522][T10653] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.559041][T10653] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.614738][T10701] netlink: 'syz.1.1455': attribute type 58 has an invalid length. [ 211.626478][T10701] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1455'. [ 211.751924][T10653] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.763626][T10653] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.981299][ T6238] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.993455][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.994871][ T6238] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.025739][ T6243] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.035594][ T6243] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.080811][ T6243] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.092574][T10712] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 212.100487][ T6243] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.183176][ T6238] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.193944][ T6238] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.236493][T10726] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 212.308207][T10729] openvswitch: netlink: IP tunnel dst address not specified [ 212.321869][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.332006][T10731] netlink: 'syz.0.1467': attribute type 7 has an invalid length. [ 212.349977][T10731] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1467'. [ 212.413945][T10734] ip6tnl0: Caught tx_queue_len zero misconfig [ 212.432152][T10734] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1468'. [ 212.558743][T10740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1470'. [ 212.797262][T10750] vlan2: entered allmulticast mode [ 212.810599][T10753] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1473'. [ 212.820667][T10750] bond0: entered allmulticast mode [ 213.134183][T10763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1476'. [ 213.294793][T10753] bond0 (unregistering): Released all slaves [ 213.628423][T10780] netlink: 'syz.1.1480': attribute type 7 has an invalid length. [ 213.640455][T10780] netlink: 'syz.1.1480': attribute type 8 has an invalid length. [ 213.896438][ T9] IPVS: starting estimator thread 0... [ 213.991007][T10802] IPVS: using max 32 ests per chain, 76800 per kthread [ 214.011030][T10807] net_ratelimit: 8 callbacks suppressed [ 214.011044][T10807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.027293][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.149549][T10817] netlink: 'syz.0.1488': attribute type 7 has an invalid length. [ 214.185329][T10817] netlink: 'syz.0.1488': attribute type 8 has an invalid length. [ 214.270328][T10829] xt_nfacct: accounting object `syz1' does not exist [ 214.396632][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.615120][T10851] syzkaller0: entered promiscuous mode [ 214.616576][T10849] SET target dimension over the limit! [ 214.621090][T10851] syzkaller0: entered allmulticast mode [ 214.758785][T10856] xt_limit: Overflow, try lower: 604147548/4200216962 [ 214.938948][T10711] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 215.030245][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.069587][T10876] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 215.128980][T10880] macvlan3: entered allmulticast mode [ 215.134832][T10880] dummy0: entered allmulticast mode [ 215.141265][T10880] dummy0: entered promiscuous mode [ 215.184419][T10884] netlink: 'syz.3.1506': attribute type 1 has an invalid length. [ 215.203246][T10886] No such timeout policy "syz0" [ 215.434674][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.535547][T10899] tipc: Enabling of bearer rejected, media not registered [ 215.607086][T10904] bond0: option all_slaves_active: invalid value (16) [ 215.616637][T10904] bond0 (unregistering): Released all slaves [ 215.773654][T10909] netlink: 'syz.1.1514': attribute type 10 has an invalid length. [ 215.933936][T10913] 0: reclassify loop, rule prio 0, protocol 700 [ 216.107423][T10917] xt_CONNSECMARK: invalid mode: 0 [ 216.187479][T10921] syzkaller0: entered promiscuous mode [ 216.228774][T10921] syzkaller0: entered allmulticast mode [ 216.491406][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.915894][T10954] xt_CONNSECMARK: invalid mode: 0 [ 217.519137][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.537348][T10975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.568631][T10980] netlink: 'syz.4.1537': attribute type 1 has an invalid length. [ 217.721401][T10988] xt_CONNSECMARK: invalid mode: 0 [ 218.299586][T11016] __nla_validate_parse: 10 callbacks suppressed [ 218.299601][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1553'. [ 218.307274][T11019] netlink: 'syz.4.1554': attribute type 3 has an invalid length. [ 218.500144][T11027] xt_CONNSECMARK: invalid mode: 0 [ 218.745687][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1560'. [ 218.757570][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1560'. [ 218.896583][T11048] netlink: 'syz.4.1562': attribute type 32 has an invalid length. [ 219.056013][T11058] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1564'. [ 219.213275][T11066] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 219.232275][T11066] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 219.409501][T11080] net_ratelimit: 6 callbacks suppressed [ 219.409520][T11080] openvswitch: netlink: IP tunnel dst address not specified [ 219.417388][T11081] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1573'. [ 219.591006][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.842869][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.081862][T11113] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.1581'. [ 220.284035][T11116] xt_CONNSECMARK: invalid mode: 0 [ 220.648499][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.662505][ T9441] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 220.664351][T11149] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1589'. [ 221.161239][T11187] xt_CONNSECMARK: invalid mode: 0 [ 221.198437][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1597'. [ 221.207462][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1597'. [ 221.350329][T11136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 221.554870][T11199] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 221.639721][T11196] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1601'. [ 221.681780][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.920790][T11219] xt_CONNSECMARK: invalid mode: 0 [ 222.074777][T11231] netlink: 'syz.1.1612': attribute type 1 has an invalid length. [ 222.197386][T11237] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 222.206171][T11239] openvswitch: netlink: Multiple metadata blocks provided [ 222.427967][T11257] xt_CONNSECMARK: invalid mode: 0 [ 222.565986][T11261] xt_SECMARK: invalid mode: 9 [ 222.728705][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.849053][T11283] netlink: 'syz.4.1632': attribute type 2 has an invalid length. [ 222.857080][T11283] netlink: 'syz.4.1632': attribute type 2 has an invalid length. [ 222.876641][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.881074][T11279] bond0: invalid ARP target 0.0.0.0 specified for addition [ 222.910469][T11279] bond0: option arp_ip_target: invalid value (0) [ 222.920683][T11279] bond0 (unregistering): Released all slaves [ 222.939232][T11291] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 222.954994][T11278] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 222.956652][T11291] xt_hashlimit: size too large, truncated to 1048576 [ 223.270787][T11309] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 223.313061][T11312] __nla_validate_parse: 7 callbacks suppressed [ 223.313078][T11312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1634'. [ 223.534051][T11312] veth0_macvtap: left promiscuous mode [ 223.536341][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1640'. [ 223.834967][T11331] syzkaller0: entered promiscuous mode [ 223.850410][T11331] syzkaller0: entered allmulticast mode [ 223.899027][T11334] netlink: zone id is out of range [ 224.054587][T11338] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 224.098710][T11352] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1652'. [ 224.372018][T11370] syzkaller0: entered promiscuous mode [ 224.382590][T11370] syzkaller0: entered allmulticast mode [ 224.479554][T11376] nbd: must specify at least one socket [ 224.815360][T11390] bridge3: entered promiscuous mode [ 224.829923][T11390] bridge3: entered allmulticast mode [ 225.093938][T11407] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1667'. [ 225.209432][T11414] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 225.358678][T11422] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1673'. [ 225.396191][T11424] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1671'. [ 225.545013][T11435] tc_dump_action: action bad kind [ 225.610738][T11441] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1678'. [ 225.777219][T11449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1682'. [ 225.834974][T11454] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1684'. [ 225.956028][T11460] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1685'. [ 226.594584][T11491] bridge_slave_0: left allmulticast mode [ 226.603736][T11491] bridge_slave_0: left promiscuous mode [ 226.617071][T11491] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.669000][T11491] bridge_slave_1: left allmulticast mode [ 226.680339][T11491] bridge_slave_1: left promiscuous mode [ 226.693548][T11491] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.724111][T11491] veth0_to_bond: left allmulticast mode [ 226.729707][T11491] veth0_to_bond: left promiscuous mode [ 226.735459][T11491] bridge1: port 1(veth0_to_bond) entered disabled state [ 226.754428][T11491] bond0: (slave bond_slave_0): Releasing backup interface [ 226.764778][T11491] bond0: (slave bond_slave_1): Releasing backup interface [ 226.783976][T11491] team0: Port device team_slave_0 removed [ 226.794183][T11491] team0: Port device team_slave_1 removed [ 226.800949][T11491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.808389][T11491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.818447][T11491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.826344][T11491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.835575][T11491] net_ratelimit: 142 callbacks suppressed [ 226.835586][T11491] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 226.942916][T11504] ip6gre2: entered allmulticast mode [ 226.984093][T11504] team0: Port device ip6gre2 added [ 227.038020][T11511] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20001 [ 227.211343][T11520] FAULT_INJECTION: forcing a failure. [ 227.211343][T11520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.254743][T11520] CPU: 1 UID: 0 PID: 11520 Comm: syz.3.1710 Not tainted syzkaller #0 PREEMPT(full) [ 227.254765][T11520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 227.254775][T11520] Call Trace: [ 227.254781][T11520] [ 227.254788][T11520] dump_stack_lvl+0xe8/0x150 [ 227.254812][T11520] should_fail_ex+0x412/0x560 [ 227.254836][T11520] _copy_from_iter+0x4ff/0x1670 [ 227.254868][T11520] ? __pfx__copy_from_iter+0x10/0x10 [ 227.254895][T11520] ? netlink_sendmsg+0x650/0xb40 [ 227.254915][T11520] ? skb_put+0x11b/0x210 [ 227.254938][T11520] netlink_sendmsg+0x6c0/0xb40 [ 227.254978][T11520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.254998][T11520] ? aa_sock_msg_perm+0xf1/0x1b0 [ 227.255018][T11520] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 227.255043][T11520] ____sys_sendmsg+0x972/0x9f0 [ 227.255072][T11520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.255102][T11520] ? import_iovec+0x73/0xa0 [ 227.255126][T11520] ___sys_sendmsg+0x2a5/0x360 [ 227.255145][T11520] ? __lock_acquire+0x6b5/0x2cf0 [ 227.255165][T11520] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.255215][T11520] ? __fget_files+0x2a/0x420 [ 227.255233][T11520] ? __fget_files+0x3a0/0x420 [ 227.255261][T11520] __x64_sys_sendmsg+0x1bd/0x2a0 [ 227.255283][T11520] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 227.255310][T11520] ? __pfx_ksys_write+0x10/0x10 [ 227.255339][T11520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.255354][T11520] do_syscall_64+0x15f/0xf80 [ 227.255373][T11520] ? trace_irq_disable+0x3b/0x140 [ 227.255395][T11520] ? clear_bhb_loop+0x40/0x90 [ 227.255415][T11520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.255431][T11520] RIP: 0033:0x7f2ad339ce59 [ 227.255446][T11520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.255458][T11520] RSP: 002b:00007f2ad4276028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.255475][T11520] RAX: ffffffffffffffda RBX: 00007f2ad3615fa0 RCX: 00007f2ad339ce59 [ 227.255486][T11520] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 227.255495][T11520] RBP: 00007f2ad4276090 R08: 0000000000000000 R09: 0000000000000000 [ 227.255505][T11520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.255514][T11520] R13: 00007f2ad3616038 R14: 00007f2ad3615fa0 R15: 00007fffe0b09258 [ 227.255540][T11520] [ 227.607312][T11528] netlink: 'syz.3.1714': attribute type 19 has an invalid length. [ 228.491423][T11566] __nla_validate_parse: 3 callbacks suppressed [ 228.491440][T11566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1727'. [ 228.511264][T11566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1727'. [ 228.520731][T11566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1727'. [ 228.530279][T11566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1727'. [ 228.607390][T11571] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 228.671235][T11574] openvswitch: netlink: Key type 30 is not supported [ 228.973977][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1739'. [ 229.124897][T11603] netlink: 'syz.2.1741': attribute type 2 has an invalid length. [ 229.133067][T11602] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1742'. [ 229.173323][T11609] openvswitch: netlink: Key type 30 is not supported [ 229.179545][T11603] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1741'. [ 229.316209][T11615] netlink: 'syz.2.1746': attribute type 1 has an invalid length. [ 229.350911][T11619] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 229.373532][T11623] netlink: 'syz.2.1746': attribute type 1 has an invalid length. [ 229.610271][T11633] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1752'. [ 229.862401][T11643] veth11: entered promiscuous mode [ 229.874432][T11643] veth11: entered allmulticast mode [ 229.890317][T11651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1756'. [ 229.934467][T11651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1756'. [ 230.159082][T11667] netlink: 'syz.2.1762': attribute type 11 has an invalid length. [ 230.215956][T11667] netlink: 'syz.2.1762': attribute type 11 has an invalid length. [ 230.697831][T11712] FAULT_INJECTION: forcing a failure. [ 230.697831][T11712] name failslab, interval 1, probability 0, space 0, times 0 [ 230.740595][T11712] CPU: 1 UID: 0 PID: 11712 Comm: syz.1.1777 Not tainted syzkaller #0 PREEMPT(full) [ 230.740620][T11712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.740629][T11712] Call Trace: [ 230.740636][T11712] [ 230.740643][T11712] dump_stack_lvl+0xe8/0x150 [ 230.740667][T11712] should_fail_ex+0x412/0x560 [ 230.740693][T11712] should_failslab+0xa8/0x100 [ 230.740717][T11712] __kmalloc_cache_noprof+0x88/0x660 [ 230.740737][T11712] ? __pfx_stack_trace_save+0x10/0x10 [ 230.740759][T11712] ? rtnl_newlink+0x136/0x1bb0 [ 230.740783][T11712] rtnl_newlink+0x136/0x1bb0 [ 230.740803][T11712] ? kasan_save_track+0x3e/0x80 [ 230.740821][T11712] ? kasan_save_free_info+0x46/0x50 [ 230.740836][T11712] ? __kasan_slab_free+0x5c/0x80 [ 230.740855][T11712] ? dev_hard_start_xmit+0x2cd/0x830 [ 230.740875][T11712] ? __dev_queue_xmit+0x14d9/0x3950 [ 230.740894][T11712] ? __netlink_deliver_tap+0x5ad/0x850 [ 230.740913][T11712] ? netlink_deliver_tap+0x19c/0x1b0 [ 230.740930][T11712] ? netlink_unicast+0x730/0x8e0 [ 230.740946][T11712] ? netlink_sendmsg+0x813/0xb40 [ 230.740965][T11712] ? __pfx_rtnl_newlink+0x10/0x10 [ 230.740982][T11712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.741031][T11712] ? kasan_quarantine_put+0xbb/0x1f0 [ 230.741050][T11712] ? lockdep_hardirqs_on+0x7a/0x110 [ 230.741074][T11712] ? nlmon_xmit+0xb0/0x100 [ 230.741092][T11712] ? kmem_cache_free+0x182/0x650 [ 230.741130][T11712] ? __lock_acquire+0x6b5/0x2cf0 [ 230.741152][T11712] ? __dev_queue_xmit+0x2b6/0x3950 [ 230.741180][T11712] ? __local_bh_enable_ip+0xd0/0x130 [ 230.741196][T11712] ? lockdep_hardirqs_on+0x7a/0x110 [ 230.741215][T11712] ? __dev_queue_xmit+0x2b6/0x3950 [ 230.741234][T11712] ? __local_bh_enable_ip+0xd0/0x130 [ 230.741249][T11712] ? __dev_queue_xmit+0x2b6/0x3950 [ 230.741276][T11712] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 230.741308][T11712] ? __pfx_rtnl_newlink+0x10/0x10 [ 230.741326][T11712] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 230.741348][T11712] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 230.741366][T11712] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 230.741382][T11712] ? ref_tracker_free+0x693/0x840 [ 230.741406][T11712] ? __pfx_ref_tracker_free+0x10/0x10 [ 230.741435][T11712] netlink_rcv_skb+0x232/0x4b0 [ 230.741456][T11712] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 230.741480][T11712] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 230.741512][T11712] ? netlink_deliver_tap+0x2e/0x1b0 [ 230.741531][T11712] ? netlink_deliver_tap+0x2e/0x1b0 [ 230.741556][T11712] netlink_unicast+0x75c/0x8e0 [ 230.741582][T11712] netlink_sendmsg+0x813/0xb40 [ 230.741611][T11712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.741634][T11712] ? aa_sock_msg_perm+0xf1/0x1b0 [ 230.741656][T11712] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 230.741681][T11712] ____sys_sendmsg+0x972/0x9f0 [ 230.741711][T11712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.741740][T11712] ? import_iovec+0x73/0xa0 [ 230.741765][T11712] ___sys_sendmsg+0x2a5/0x360 [ 230.741785][T11712] ? __lock_acquire+0x6b5/0x2cf0 [ 230.741806][T11712] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.741858][T11712] ? __fget_files+0x2a/0x420 [ 230.741877][T11712] ? __fget_files+0x3a0/0x420 [ 230.741904][T11712] __x64_sys_sendmsg+0x1bd/0x2a0 [ 230.741927][T11712] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 230.741957][T11712] ? __pfx_ksys_write+0x10/0x10 [ 230.741986][T11712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.742002][T11712] do_syscall_64+0x15f/0xf80 [ 230.742024][T11712] ? clear_bhb_loop+0x40/0x90 [ 230.742043][T11712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.742058][T11712] RIP: 0033:0x7fe320d9ce59 [ 230.742073][T11712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.742086][T11712] RSP: 002b:00007fe321cea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.742104][T11712] RAX: ffffffffffffffda RBX: 00007fe321015fa0 RCX: 00007fe320d9ce59 [ 230.742115][T11712] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 230.742132][T11712] RBP: 00007fe321cea090 R08: 0000000000000000 R09: 0000000000000000 [ 230.742141][T11712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.742151][T11712] R13: 00007fe321016038 R14: 00007fe321015fa0 R15: 00007ffe5093a518 [ 230.742177][T11712] [ 231.374899][ T36] nci: nci_ntf_packet: unknown ntf opcode 0xa33 [ 231.393391][ T36] nci: nci_rx_work: unknown MT 0x5 [ 231.398602][ T36] nci: nci_rx_work: unknown MT 0x7 [ 231.404425][ T36] nci: nci_rx_work: unknown MT 0x6 [ 231.862436][T11763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.873570][T11763] ipt_ECN: cannot use operation on non-tcp rule [ 234.287319][T11730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 234.298932][T11737] netlink: 'syz.2.1784': attribute type 10 has an invalid length. [ 234.309384][T11737] __nla_validate_parse: 14 callbacks suppressed [ 234.309401][T11737] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1784'. [ 234.659482][T11778] FAULT_INJECTION: forcing a failure. [ 234.659482][T11778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.705277][T11778] CPU: 1 UID: 0 PID: 11778 Comm: syz.0.1800 Not tainted syzkaller #0 PREEMPT(full) [ 234.705300][T11778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 234.705310][T11778] Call Trace: [ 234.705317][T11778] [ 234.705324][T11778] dump_stack_lvl+0xe8/0x150 [ 234.705348][T11778] should_fail_ex+0x412/0x560 [ 234.705374][T11778] _copy_from_user+0x2d/0xb0 [ 234.705417][T11778] __sys_bpf+0x229/0x950 [ 234.705443][T11778] ? __pfx___sys_bpf+0x10/0x10 [ 234.705480][T11778] ? ksys_write+0x242/0x270 [ 234.705503][T11778] ? __pfx_ksys_write+0x10/0x10 [ 234.705528][T11778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.705546][T11778] __x64_sys_bpf+0x7c/0x90 [ 234.705568][T11778] do_syscall_64+0x15f/0xf80 [ 234.705589][T11778] ? trace_irq_disable+0x3b/0x140 [ 234.705611][T11778] ? clear_bhb_loop+0x40/0x90 [ 234.705631][T11778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.705647][T11778] RIP: 0033:0x7f706919ce59 [ 234.705662][T11778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.705676][T11778] RSP: 002b:00007f7069f97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 234.705693][T11778] RAX: ffffffffffffffda RBX: 00007f7069415fa0 RCX: 00007f706919ce59 [ 234.705703][T11778] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 234.705714][T11778] RBP: 00007f7069f97090 R08: 0000000000000000 R09: 0000000000000000 [ 234.705723][T11778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.705732][T11778] R13: 00007f7069416038 R14: 00007f7069415fa0 R15: 00007ffdceeba6d8 [ 234.705760][T11778] [ 235.078090][T11802] netlink: 'syz.2.1809': attribute type 1 has an invalid length. [ 235.098637][T11802] netlink: 'syz.2.1809': attribute type 2 has an invalid length. [ 235.142615][T11802] netlink: 'syz.2.1809': attribute type 1 has an invalid length. [ 235.185115][T11802] netlink: 'syz.2.1809': attribute type 3 has an invalid length. [ 235.229878][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1809'. [ 235.539002][T11831] FAULT_INJECTION: forcing a failure. [ 235.539002][T11831] name failslab, interval 1, probability 0, space 0, times 0 [ 235.582013][T11831] CPU: 0 UID: 0 PID: 11831 Comm: syz.3.1819 Not tainted syzkaller #0 PREEMPT(full) [ 235.582035][T11831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.582045][T11831] Call Trace: [ 235.582051][T11831] [ 235.582058][T11831] dump_stack_lvl+0xe8/0x150 [ 235.582082][T11831] should_fail_ex+0x412/0x560 [ 235.582108][T11831] should_failslab+0xa8/0x100 [ 235.582132][T11831] __kmalloc_noprof+0xe8/0x760 [ 235.582153][T11831] ? bpf_test_init+0x9f/0x150 [ 235.582179][T11831] bpf_test_init+0x9f/0x150 [ 235.582202][T11831] bpf_prog_test_run_xdp+0x529/0x1160 [ 235.582242][T11831] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 235.582266][T11831] ? __fget_files+0x2a/0x420 [ 235.582289][T11831] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 235.582310][T11831] bpf_prog_test_run+0x2c7/0x340 [ 235.582330][T11831] __sys_bpf+0x643/0x950 [ 235.582354][T11831] ? __pfx___sys_bpf+0x10/0x10 [ 235.582391][T11831] ? ksys_write+0x242/0x270 [ 235.582415][T11831] ? __pfx_ksys_write+0x10/0x10 [ 235.582439][T11831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.582456][T11831] __x64_sys_bpf+0x7c/0x90 [ 235.582477][T11831] do_syscall_64+0x15f/0xf80 [ 235.582498][T11831] ? trace_irq_disable+0x3b/0x140 [ 235.582520][T11831] ? clear_bhb_loop+0x40/0x90 [ 235.582540][T11831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.582554][T11831] RIP: 0033:0x7f2ad339ce59 [ 235.582570][T11831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.582583][T11831] RSP: 002b:00007f2ad4276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.582600][T11831] RAX: ffffffffffffffda RBX: 00007f2ad3615fa0 RCX: 00007f2ad339ce59 [ 235.582611][T11831] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 235.582621][T11831] RBP: 00007f2ad4276090 R08: 0000000000000000 R09: 0000000000000000 [ 235.582631][T11831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.582640][T11831] R13: 00007f2ad3616038 R14: 00007f2ad3615fa0 R15: 00007fffe0b09258 [ 235.582667][T11831] [ 235.797112][T11834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1820'. [ 235.807875][T11834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1820'. [ 236.315470][T11862] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1830'. [ 236.328400][T11864] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1828'. [ 236.345007][T11864] netlink: 'syz.4.1828': attribute type 1 has an invalid length. [ 236.402625][ T5641] block nbd1: Receive control failed (result -110) [ 236.624329][T11888] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1836'. [ 236.677536][T11893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1833'. [ 236.732028][T11896] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1837'. [ 236.744899][T11897] FAULT_INJECTION: forcing a failure. [ 236.744899][T11897] name failslab, interval 1, probability 0, space 0, times 0 [ 236.774028][T11897] CPU: 1 UID: 0 PID: 11897 Comm: syz.4.1838 Not tainted syzkaller #0 PREEMPT(full) [ 236.774052][T11897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 236.774077][T11897] Call Trace: [ 236.774084][T11897] [ 236.774098][T11897] dump_stack_lvl+0xe8/0x150 [ 236.774122][T11897] should_fail_ex+0x412/0x560 [ 236.774149][T11897] should_failslab+0xa8/0x100 [ 236.774174][T11897] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 236.774194][T11897] ? kmem_cache_alloc_noprof+0x307/0x650 [ 236.774212][T11897] ? ovs_flow_alloc+0x24/0x1f0 [ 236.774228][T11897] ? ovs_flow_alloc+0x103/0x1f0 [ 236.774249][T11897] ovs_flow_alloc+0x103/0x1f0 [ 236.774306][T11897] ovs_flow_cmd_new+0x2b9/0xe80 [ 236.774326][T11897] ? kasan_save_track+0x3e/0x80 [ 236.774355][T11897] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 236.774433][T11897] ? __nla_parse+0x40/0x60 [ 236.774464][T11897] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 236.774480][T11897] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 236.774504][T11897] genl_family_rcv_msg_doit+0x22a/0x330 [ 236.774528][T11897] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 236.774557][T11897] ? bpf_lsm_capable+0x9/0x20 [ 236.774573][T11897] ? security_capable+0x7e/0x2c0 [ 236.774598][T11897] genl_rcv_msg+0x61c/0x7a0 [ 236.774621][T11897] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.774637][T11897] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 236.774657][T11897] ? __pfx_ref_tracker_free+0x10/0x10 [ 236.774689][T11897] netlink_rcv_skb+0x232/0x4b0 [ 236.774710][T11897] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.774729][T11897] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.774765][T11897] ? down_read+0x270/0x2e0 [ 236.774779][T11897] ? genl_rcv+0xd/0x40 [ 236.774797][T11897] genl_rcv+0x28/0x40 [ 236.774811][T11897] netlink_unicast+0x75c/0x8e0 [ 236.774841][T11897] netlink_sendmsg+0x813/0xb40 [ 236.774871][T11897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.774895][T11897] ? aa_sock_msg_perm+0xf1/0x1b0 [ 236.774917][T11897] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 236.774941][T11897] ____sys_sendmsg+0x972/0x9f0 [ 236.774962][T11897] ? __might_fault+0xaf/0x130 [ 236.774987][T11897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.775018][T11897] ? import_iovec+0x73/0xa0 [ 236.775043][T11897] ___sys_sendmsg+0x2a5/0x360 [ 236.775063][T11897] ? __lock_acquire+0x6b5/0x2cf0 [ 236.775085][T11897] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.775147][T11897] ? __fget_files+0x2a/0x420 [ 236.775165][T11897] ? __fget_files+0x3a0/0x420 [ 236.775194][T11897] __x64_sys_sendmsg+0x1bd/0x2a0 [ 236.775216][T11897] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 236.775243][T11897] ? __pfx_ksys_write+0x10/0x10 [ 236.775275][T11897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.775292][T11897] do_syscall_64+0x15f/0xf80 [ 236.775310][T11897] ? trace_irq_disable+0x3b/0x140 [ 236.775333][T11897] ? clear_bhb_loop+0x40/0x90 [ 236.775352][T11897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.775367][T11897] RIP: 0033:0x7f652359ce59 [ 236.775383][T11897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.775396][T11897] RSP: 002b:00007f6524396028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.775413][T11897] RAX: ffffffffffffffda RBX: 00007f6523815fa0 RCX: 00007f652359ce59 [ 236.775424][T11897] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 236.775433][T11897] RBP: 00007f6524396090 R08: 0000000000000000 R09: 0000000000000000 [ 236.775441][T11897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.775450][T11897] R13: 00007f6523816038 R14: 00007f6523815fa0 R15: 00007ffe676c0278 [ 236.775476][T11897] [ 237.253957][T11904] netlink: 'syz.2.1843': attribute type 2 has an invalid length. [ 237.291498][T11904] netlink: 'syz.2.1843': attribute type 2 has an invalid length. [ 237.441735][T11919] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1840'. [ 237.549034][T11923] gtp0: entered promiscuous mode [ 237.560773][T11923] gtp0: entered allmulticast mode [ 237.731723][T11946] openvswitch: netlink: Key type 30 is not supported [ 237.808032][T11947] netlink: 'syz.4.1851': attribute type 1 has an invalid length. [ 237.975735][T11947] 8021q: adding VLAN 0 to HW filter on device bond5 [ 238.109745][T11968] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 238.163335][T11951] bond4: (slave veth0_to_bond): Releasing active interface [ 238.185388][T11951] bond5: (slave veth0_to_bond): making interface the new active one [ 238.195735][T11951] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 238.221857][T11960] bond5: entered promiscuous mode [ 238.239950][T11960] veth0_to_bond: entered promiscuous mode [ 238.246175][T11960] bond5: entered allmulticast mode [ 238.252268][T11960] veth0_to_bond: entered allmulticast mode [ 238.282830][T11947] macvlan3: entered promiscuous mode [ 238.288139][T11947] macvlan3: entered allmulticast mode [ 238.314239][T11947] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 238.333212][T11947] bond5: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 238.442236][T11977] netlink: 'syz.0.1862': attribute type 12 has an invalid length. [ 238.669104][T11981] openvswitch: netlink: Key type 30 is not supported [ 238.678463][T11981] FAULT_INJECTION: forcing a failure. [ 238.678463][T11981] name failslab, interval 1, probability 0, space 0, times 0 [ 238.691931][T11981] CPU: 0 UID: 0 PID: 11981 Comm: syz.0.1863 Not tainted syzkaller #0 PREEMPT(full) [ 238.691952][T11981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 238.691962][T11981] Call Trace: [ 238.691968][T11981] [ 238.691974][T11981] dump_stack_lvl+0xe8/0x150 [ 238.691998][T11981] should_fail_ex+0x412/0x560 [ 238.692023][T11981] should_failslab+0xa8/0x100 [ 238.692045][T11981] ? skb_clone+0x212/0x3a0 [ 238.692067][T11981] kmem_cache_alloc_noprof+0x87/0x650 [ 238.692097][T11981] skb_clone+0x212/0x3a0 [ 238.692120][T11981] __netlink_deliver_tap+0x404/0x850 [ 238.692153][T11981] ? netlink_deliver_tap+0x2e/0x1b0 [ 238.692175][T11981] netlink_deliver_tap+0x19c/0x1b0 [ 238.692197][T11981] netlink_sendskb+0x68/0x140 [ 238.692220][T11981] netlink_rcv_skb+0x2b6/0x4b0 [ 238.692241][T11981] ? __pfx_genl_rcv_msg+0x10/0x10 [ 238.692259][T11981] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 238.692293][T11981] ? down_read+0x270/0x2e0 [ 238.692307][T11981] ? genl_rcv+0xd/0x40 [ 238.692325][T11981] genl_rcv+0x28/0x40 [ 238.692338][T11981] netlink_unicast+0x75c/0x8e0 [ 238.692368][T11981] netlink_sendmsg+0x813/0xb40 [ 238.692397][T11981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.692421][T11981] ? aa_sock_msg_perm+0xf1/0x1b0 [ 238.692443][T11981] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 238.692468][T11981] ____sys_sendmsg+0x972/0x9f0 [ 238.692489][T11981] ? __might_fault+0xaf/0x130 [ 238.692515][T11981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.692545][T11981] ? import_iovec+0x73/0xa0 [ 238.692571][T11981] ___sys_sendmsg+0x2a5/0x360 [ 238.692591][T11981] ? __lock_acquire+0x6b5/0x2cf0 [ 238.692612][T11981] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.692668][T11981] ? __fget_files+0x2a/0x420 [ 238.692686][T11981] ? __fget_files+0x3a0/0x420 [ 238.692713][T11981] __x64_sys_sendmsg+0x1bd/0x2a0 [ 238.692738][T11981] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 238.692767][T11981] ? __pfx_ksys_write+0x10/0x10 [ 238.692805][T11981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.692823][T11981] do_syscall_64+0x15f/0xf80 [ 238.692843][T11981] ? trace_irq_disable+0x3b/0x140 [ 238.692866][T11981] ? clear_bhb_loop+0x40/0x90 [ 238.692886][T11981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.692900][T11981] RIP: 0033:0x7f706919ce59 [ 238.692916][T11981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.692929][T11981] RSP: 002b:00007f7069f97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.692946][T11981] RAX: ffffffffffffffda RBX: 00007f7069415fa0 RCX: 00007f706919ce59 [ 238.692957][T11981] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 238.692967][T11981] RBP: 00007f7069f97090 R08: 0000000000000000 R09: 0000000000000000 [ 238.692977][T11981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 238.692986][T11981] R13: 00007f7069416038 R14: 00007f7069415fa0 R15: 00007ffdceeba6d8 [ 238.693014][T11981] [ 239.266751][T11994] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 240.467174][T12015] syzkaller0: entered promiscuous mode [ 240.473334][T12015] syzkaller0: entered allmulticast mode [ 240.491839][T11927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.978447][T12042] openvswitch: netlink: IP tunnel dst address not specified [ 240.978952][T12039] __nla_validate_parse: 4 callbacks suppressed [ 240.978965][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1882'. [ 241.015024][T12042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1883'. [ 241.031134][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1883'. [ 241.043428][T12039] syzkaller0: entered promiscuous mode [ 241.086317][T12039] syzkaller0: entered allmulticast mode [ 241.279430][T12065] validate_nla: 2 callbacks suppressed [ 241.279446][T12065] netlink: 'syz.2.1888': attribute type 1 has an invalid length. [ 241.408843][T12065] 8021q: adding VLAN 0 to HW filter on device bond6 [ 241.446379][T12076] syzkaller0: entered promiscuous mode [ 241.464154][T12076] syzkaller0: entered allmulticast mode [ 241.579479][T12085] netlink: 'syz.4.1896': attribute type 1 has an invalid length. [ 241.735602][T12095] SET target dimension over the limit! [ 241.778691][T12098] openvswitch: netlink: IP tunnel dst address not specified [ 241.795649][T12085] bond6: entered promiscuous mode [ 241.805668][T12098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.807254][T12085] 8021q: adding VLAN 0 to HW filter on device bond6 [ 241.835595][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1898'. [ 241.858530][T12092] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1897'. [ 241.868268][T12103] netlink: 'syz.2.1901': attribute type 1 has an invalid length. [ 241.889954][T12092] veth0_to_bond: default FDB implementation only supports local addresses [ 241.936994][T12103] 8021q: adding VLAN 0 to HW filter on device bond7 [ 241.944351][T12099] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1897'. [ 241.965578][T12099] veth0_to_bond: default FDB implementation only supports local addresses [ 241.998129][T12109] bond7: (slave veth3): Enslaving as an active interface with a down link [ 242.007226][T12107] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 242.030826][T12103] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 242.051992][T12099] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1897'. [ 242.084356][T12099] veth0_to_bond: default FDB implementation only supports local addresses [ 242.180406][T12118] netlink: 'syz.0.1904': attribute type 1 has an invalid length. [ 242.185740][T12119] netlink: 'syz.1.1906': attribute type 6 has an invalid length. [ 242.208342][T12118] netlink: 'syz.0.1904': attribute type 7 has an invalid length. [ 242.237870][T12118] netlink: 'syz.0.1904': attribute type 8 has an invalid length. [ 242.253530][T12118] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1904'. [ 242.481027][ T6240] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7 [ 242.720845][T12151] veth1_to_team: Caught tx_queue_len zero misconfig [ 243.425964][T12178] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1921'. [ 243.535553][T12183] openvswitch: netlink: EtherType 50a is less than min 600 [ 243.573728][T12180] lo speed is unknown, defaulting to 1000 [ 243.609173][T12180] lo speed is unknown, defaulting to 1000 [ 243.630991][T12180] [ 243.633410][T12180] ====================================================== [ 243.640415][T12180] WARNING: possible circular locking dependency detected [ 243.647442][T12180] syzkaller #0 Not tainted [ 243.651868][T12180] ------------------------------------------------------ [ 243.658963][T12180] syz.1.1921/12180 is trying to acquire lock: [ 243.665023][T12180] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 243.674343][T12180] [ 243.674343][T12180] but task is already holding lock: [ 243.681696][T12180] ffffffff8f38ddc0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 243.690562][T12180] [ 243.690562][T12180] which lock already depends on the new lock. [ 243.690562][T12180] [ 243.700953][T12180] [ 243.700953][T12180] the existing dependency chain (in reverse order) is: [ 243.709954][T12180] [ 243.709954][T12180] -> #9 (gdp_mutex){+.+.}-{4:4}: [ 243.717074][T12180] __mutex_lock+0x1a3/0x1550 [ 243.722193][T12180] get_device_parent+0x16f/0x3a0 [ 243.727659][T12180] device_add+0x2e1/0xbb0 [ 243.732508][T12180] device_create+0x269/0x300 [ 243.737623][T12180] msr_device_create+0x33/0x50 [ 243.742998][T12180] cpuhp_invoke_callback+0x445/0x860 [ 243.748892][T12180] cpuhp_thread_fun+0x36b/0x780 [ 243.754274][T12180] smpboot_thread_fn+0x541/0xa50 [ 243.759738][T12180] kthread+0x389/0x470 [ 243.764362][T12180] ret_from_fork+0x514/0xb70 [ 243.769571][T12180] ret_from_fork_asm+0x1a/0x30 [ 243.774847][T12180] [ 243.774847][T12180] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 243.782404][T12180] cpuhp_thread_fun+0x127/0x780 [ 243.787766][T12180] smpboot_thread_fn+0x541/0xa50 [ 243.793210][T12180] kthread+0x389/0x470 [ 243.797786][T12180] ret_from_fork+0x514/0xb70 [ 243.802883][T12180] ret_from_fork_asm+0x1a/0x30 [ 243.808150][T12180] [ 243.808150][T12180] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 243.815865][T12180] cpus_read_lock+0x42/0x160 [ 243.820962][T12180] static_key_disable+0x12/0x20 [ 243.826314][T12180] __inet_hash_connect+0x25bb/0x25c0 [ 243.832109][T12180] tcp_v4_connect+0xd5f/0x19b0 [ 243.837384][T12180] __inet_stream_connect+0x25a/0xdd0 [ 243.843174][T12180] inet_stream_connect+0x66/0xa0 [ 243.848618][T12180] __sys_connect+0x312/0x450 [ 243.853715][T12180] __x64_sys_connect+0x7a/0x90 [ 243.858991][T12180] do_syscall_64+0x15f/0xf80 [ 243.864088][T12180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.870488][T12180] [ 243.870488][T12180] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 243.878115][T12180] lock_sock_nested+0x41/0x100 [ 243.883386][T12180] inet_shutdown+0x6a/0x390 [ 243.888393][T12180] nbd_mark_nsock_dead+0x2e9/0x560 [ 243.894009][T12180] recv_work+0x1c2e/0x1d40 [ 243.898931][T12180] process_scheduled_works+0xb5d/0x1860 [ 243.904978][T12180] worker_thread+0xa53/0xfc0 [ 243.910070][T12180] kthread+0x389/0x470 [ 243.914645][T12180] ret_from_fork+0x514/0xb70 [ 243.919739][T12180] ret_from_fork_asm+0x1a/0x30 [ 243.925012][T12180] [ 243.925012][T12180] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 243.932638][T12180] __mutex_lock+0x1a3/0x1550 [ 243.937742][T12180] nbd_queue_rq+0x37b/0x1100 [ 243.942835][T12180] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 243.948919][T12180] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 243.955756][T12180] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 243.962243][T12180] blk_mq_run_hw_queue+0x348/0x4f0 [ 243.967867][T12180] blk_mq_dispatch_list+0xd16/0xe10 [ 243.973572][T12180] blk_mq_flush_plug_list+0x48d/0x570 [ 243.979448][T12180] __blk_flush_plug+0x3ed/0x4d0 [ 243.984803][T12180] __submit_bio+0x28d/0x580 [ 243.989806][T12180] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 243.995950][T12180] block_read_full_folio+0x599/0x830 [ 244.001746][T12180] filemap_read_folio+0x137/0x3b0 [ 244.007281][T12180] do_read_cache_folio+0x358/0x590 [ 244.012914][T12180] read_part_sector+0xb6/0x2b0 [ 244.018209][T12180] adfspart_check_ICS+0xb1/0x960 [ 244.023671][T12180] bdev_disk_changed+0x817/0x1770 [ 244.029211][T12180] blkdev_get_whole+0x380/0x510 [ 244.034575][T12180] bdev_open+0x31e/0xd30 [ 244.039323][T12180] blkdev_open+0x470/0x610 [ 244.044240][T12180] do_dentry_open+0x785/0x14e0 [ 244.049514][T12180] vfs_open+0x3b/0x340 [ 244.054087][T12180] path_openat+0x2e08/0x3860 [ 244.059194][T12180] do_file_open+0x23e/0x4a0 [ 244.064210][T12180] do_sys_openat2+0x113/0x200 [ 244.069394][T12180] __x64_sys_openat+0x138/0x170 [ 244.074746][T12180] do_syscall_64+0x15f/0xf80 [ 244.079845][T12180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.086249][T12180] [ 244.086249][T12180] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 244.093442][T12180] __mutex_lock+0x1a3/0x1550 [ 244.098540][T12180] nbd_queue_rq+0xc6/0x1100 [ 244.103546][T12180] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 244.109606][T12180] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 244.116443][T12180] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 244.122929][T12180] blk_mq_run_hw_queue+0x348/0x4f0 [ 244.128544][T12180] blk_mq_dispatch_list+0xd16/0xe10 [ 244.134273][T12180] blk_mq_flush_plug_list+0x48d/0x570 [ 244.140153][T12180] __blk_flush_plug+0x3ed/0x4d0 [ 244.145527][T12180] __submit_bio+0x28d/0x580 [ 244.150535][T12180] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 244.156677][T12180] block_read_full_folio+0x599/0x830 [ 244.162470][T12180] filemap_read_folio+0x137/0x3b0 [ 244.168009][T12180] do_read_cache_folio+0x358/0x590 [ 244.173647][T12180] read_part_sector+0xb6/0x2b0 [ 244.178930][T12180] adfspart_check_ICS+0xb1/0x960 [ 244.184377][T12180] bdev_disk_changed+0x817/0x1770 [ 244.189912][T12180] blkdev_get_whole+0x380/0x510 [ 244.195271][T12180] bdev_open+0x31e/0xd30 [ 244.200022][T12180] blkdev_open+0x470/0x610 [ 244.204940][T12180] do_dentry_open+0x785/0x14e0 [ 244.210206][T12180] vfs_open+0x3b/0x340 [ 244.214782][T12180] path_openat+0x2e08/0x3860 [ 244.219893][T12180] do_file_open+0x23e/0x4a0 [ 244.224919][T12180] do_sys_openat2+0x113/0x200 [ 244.230125][T12180] __x64_sys_openat+0x138/0x170 [ 244.235487][T12180] do_syscall_64+0x15f/0xf80 [ 244.240588][T12180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.246999][T12180] [ 244.246999][T12180] -> #3 (set->srcu){.+.+}-{0:0}: [ 244.254119][T12180] __synchronize_srcu+0xca/0x300 [ 244.259577][T12180] elevator_switch+0x1e8/0x7a0 [ 244.264851][T12180] elevator_change+0x2cc/0x450 [ 244.270125][T12180] elevator_set_default+0x36c/0x430 [ 244.275831][T12180] blk_register_queue+0x3e9/0x4e0 [ 244.281447][T12180] __add_disk+0x677/0xd50 [ 244.286280][T12180] add_disk_fwnode+0xfb/0x480 [ 244.291460][T12180] nbd_dev_add+0x72c/0xb50 [ 244.296382][T12180] nbd_init+0x168/0x1f0 [ 244.301043][T12180] do_one_initcall+0x250/0x870 [ 244.306310][T12180] do_initcall_level+0x104/0x190 [ 244.311789][T12180] do_initcalls+0x59/0xa0 [ 244.316625][T12180] kernel_init_freeable+0x2a6/0x3e0 [ 244.322328][T12180] kernel_init+0x1d/0x1d0 [ 244.327164][T12180] ret_from_fork+0x514/0xb70 [ 244.332257][T12180] ret_from_fork_asm+0x1a/0x30 [ 244.337555][T12180] [ 244.337555][T12180] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 244.345355][T12180] __mutex_lock+0x1a3/0x1550 [ 244.350457][T12180] elevator_change+0x1b3/0x450 [ 244.355729][T12180] elevator_set_none+0xb5/0x140 [ 244.361087][T12180] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 244.367407][T12180] nbd_start_device+0x17f/0xb10 [ 244.372771][T12180] nbd_genl_connect+0x165b/0x1cf0 [ 244.378303][T12180] genl_family_rcv_msg_doit+0x22a/0x330 [ 244.384351][T12180] genl_rcv_msg+0x61c/0x7a0 [ 244.389356][T12180] netlink_rcv_skb+0x232/0x4b0 [ 244.394633][T12180] genl_rcv+0x28/0x40 [ 244.399118][T12180] netlink_unicast+0x75c/0x8e0 [ 244.404384][T12180] netlink_sendmsg+0x813/0xb40 [ 244.409672][T12180] ____sys_sendmsg+0x972/0x9f0 [ 244.414941][T12180] ___sys_sendmsg+0x2a5/0x360 [ 244.420126][T12180] __x64_sys_sendmsg+0x1bd/0x2a0 [ 244.425570][T12180] do_syscall_64+0x15f/0xf80 [ 244.430668][T12180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.437069][T12180] [ 244.437069][T12180] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 244.445686][T12180] blk_alloc_queue+0x546/0x680 [ 244.450960][T12180] __blk_mq_alloc_disk+0x197/0x390 [ 244.456576][T12180] nbd_dev_add+0x499/0xb50 [ 244.461500][T12180] nbd_init+0x168/0x1f0 [ 244.466165][T12180] do_one_initcall+0x250/0x870 [ 244.471437][T12180] do_initcall_level+0x104/0x190 [ 244.476881][T12180] do_initcalls+0x59/0xa0 [ 244.481715][T12180] kernel_init_freeable+0x2a6/0x3e0 [ 244.487416][T12180] kernel_init+0x1d/0x1d0 [ 244.492252][T12180] ret_from_fork+0x514/0xb70 [ 244.497348][T12180] ret_from_fork_asm+0x1a/0x30 [ 244.502615][T12180] [ 244.502615][T12180] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 244.509807][T12180] __lock_acquire+0x15a5/0x2cf0 [ 244.515160][T12180] lock_acquire+0x106/0x350 [ 244.520165][T12180] fs_reclaim_acquire+0x71/0x100 [ 244.525609][T12180] __kmalloc_cache_noprof+0x40/0x660 [ 244.531400][T12180] get_device_parent+0x255/0x3a0 [ 244.536844][T12180] device_add+0x2e1/0xbb0 [ 244.541676][T12180] ib_register_device+0x109b/0x13e0 [ 244.547382][T12180] siw_newlink+0x8fe/0xde0 [ 244.552305][T12180] nldev_newlink+0x5bc/0x650 [ 244.557401][T12180] rdma_nl_rcv+0x6d1/0xa10 [ 244.562324][T12180] netlink_unicast+0x75c/0x8e0 [ 244.567595][T12180] netlink_sendmsg+0x813/0xb40 [ 244.572867][T12180] ____sys_sendmsg+0x972/0x9f0 [ 244.578138][T12180] ___sys_sendmsg+0x2a5/0x360 [ 244.583323][T12180] __x64_sys_sendmsg+0x1bd/0x2a0 [ 244.588767][T12180] do_syscall_64+0x15f/0xf80 [ 244.593872][T12180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.600268][T12180] [ 244.600268][T12180] other info that might help us debug this: [ 244.600268][T12180] [ 244.610476][T12180] Chain exists of: [ 244.610476][T12180] fs_reclaim --> cpuhp_state-up --> gdp_mutex [ 244.610476][T12180] [ 244.622455][T12180] Possible unsafe locking scenario: [ 244.622455][T12180] [ 244.629888][T12180] CPU0 CPU1 [ 244.635238][T12180] ---- ---- [ 244.640585][T12180] lock(gdp_mutex); [ 244.644463][T12180] lock(cpuhp_state-up); [ 244.651293][T12180] lock(gdp_mutex); [ 244.657689][T12180] lock(fs_reclaim); [ 244.661652][T12180] [ 244.661652][T12180] *** DEADLOCK *** [ 244.661652][T12180] [ 244.669777][T12180] 3 locks held by syz.1.1921/12180: [ 244.674963][T12180] #0: ffffffff9a7f47a8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x328/0xa10 [ 244.684955][T12180] #1: ffffffff8fb31768 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x429/0x650 [ 244.694336][T12180] #2: ffffffff8f38ddc0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 244.703640][T12180] [ 244.703640][T12180] stack backtrace: [ 244.709524][T12180] CPU: 0 UID: 0 PID: 12180 Comm: syz.1.1921 Not tainted syzkaller #0 PREEMPT(full) [ 244.709540][T12180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 244.709548][T12180] Call Trace: [ 244.709556][T12180] [ 244.709563][T12180] dump_stack_lvl+0xe8/0x150 [ 244.709582][T12180] print_circular_bug+0x2e1/0x300 [ 244.709600][T12180] check_noncircular+0x12e/0x150 [ 244.709617][T12180] __lock_acquire+0x15a5/0x2cf0 [ 244.709632][T12180] ? lockdep_unlock+0x5d/0xd0 [ 244.709643][T12180] ? __lock_acquire+0x146e/0x2cf0 [ 244.709658][T12180] ? __kmalloc_cache_noprof+0x40/0x660 [ 244.709674][T12180] lock_acquire+0x106/0x350 [ 244.709685][T12180] ? __kmalloc_cache_noprof+0x40/0x660 [ 244.709704][T12180] fs_reclaim_acquire+0x71/0x100 [ 244.709722][T12180] ? __kmalloc_cache_noprof+0x40/0x660 [ 244.709736][T12180] __kmalloc_cache_noprof+0x40/0x660 [ 244.709752][T12180] ? get_device_parent+0x255/0x3a0 [ 244.709766][T12180] ? do_raw_spin_unlock+0xf5/0x210 [ 244.709784][T12180] get_device_parent+0x255/0x3a0 [ 244.709801][T12180] device_add+0x2e1/0xbb0 [ 244.709817][T12180] ib_register_device+0x109b/0x13e0 [ 244.709838][T12180] ? __pfx_ib_register_device+0x10/0x10 [ 244.709855][T12180] ? xa_load+0x60/0x210 [ 244.709875][T12180] ? xa_load+0x60/0x210 [ 244.709892][T12180] ? xa_load+0x60/0x210 [ 244.709911][T12180] ? xa_load+0x60/0x210 [ 244.709930][T12180] ? xa_load+0x1db/0x210 [ 244.709954][T12180] ? __raw_spin_lock_init+0x45/0x100 [ 244.709973][T12180] siw_newlink+0x8fe/0xde0 [ 244.709993][T12180] nldev_newlink+0x5bc/0x650 [ 244.710009][T12180] ? __pfx_nldev_newlink+0x10/0x10 [ 244.710069][T12180] ? bpf_lsm_capable+0x9/0x20 [ 244.710082][T12180] ? security_capable+0x7e/0x2c0 [ 244.710098][T12180] ? __pfx_nldev_newlink+0x10/0x10 [ 244.710110][T12180] rdma_nl_rcv+0x6d1/0xa10 [ 244.710127][T12180] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 244.710147][T12180] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.710163][T12180] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.710179][T12180] netlink_unicast+0x75c/0x8e0 [ 244.710196][T12180] netlink_sendmsg+0x813/0xb40 [ 244.710221][T12180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.710237][T12180] ? __se_sys_ioctl+0x47/0x170 [ 244.710252][T12180] ? do_syscall_64+0x15f/0xf80 [ 244.710267][T12180] ? aa_sock_msg_perm+0xf1/0x1b0 [ 244.710282][T12180] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 244.710298][T12180] ____sys_sendmsg+0x972/0x9f0 [ 244.710314][T12180] ? __might_fault+0xaf/0x130 [ 244.710330][T12180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.710347][T12180] ? import_iovec+0x73/0xa0 [ 244.710365][T12180] ___sys_sendmsg+0x2a5/0x360 [ 244.710380][T12180] ? __lock_acquire+0x6b5/0x2cf0 [ 244.710394][T12180] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.710411][T12180] ? tomoyo_path_number_perm+0x219/0x630 [ 244.710433][T12180] ? __fget_files+0x2a/0x420 [ 244.710447][T12180] ? __fget_files+0x3a0/0x420 [ 244.710463][T12180] __x64_sys_sendmsg+0x1bd/0x2a0 [ 244.710479][T12180] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 244.710493][T12180] ? rcu_is_watching+0x15/0xb0 [ 244.710511][T12180] ? __pfx_kcov_ioctl+0x10/0x10 [ 244.710529][T12180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.710542][T12180] do_syscall_64+0x15f/0xf80 [ 244.710556][T12180] ? trace_irq_disable+0x3b/0x140 [ 244.710573][T12180] ? clear_bhb_loop+0x40/0x90 [ 244.710586][T12180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.710598][T12180] RIP: 0033:0x7fe320d9ce59 [ 244.710610][T12180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.710620][T12180] RSP: 002b:00007fe321cc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.710635][T12180] RAX: ffffffffffffffda RBX: 00007fe321016090 RCX: 00007fe320d9ce59 [ 244.710644][T12180] RDX: 0000000000008810 RSI: 0000200000000240 RDI: 0000000000000003 [ 244.710652][T12180] RBP: 00007fe320e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 244.710659][T12180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.710667][T12180] R13: 00007fe321016128 R14: 00007fe321016090 R15: 00007ffe5093a518 [ 244.710681][T12180] [ 245.179302][T12180] lo speed is unknown, defaulting to 1000 [ 245.184714][T12183] »»»»»»B€: renamed from lo [ 245.191050][T12180] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 245.208948][T12180] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 245.234215][T12180] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 245.246454][T12180] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 245.248571][T12190] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 245.258669][T12180] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 245.300657][T12180] »»»»»»B€ speed is unknown, defaulting to 1000 [ 245.312274][T12180] »»»»»»B€ speed is unknown, defaulting to 1000 [ 245.319642][T12180] »»»»»»B€ speed is unknown, defaulting to 1000 [ 245.330552][T12180] »»»»»»B€ speed is unknown, defaulting to 1000 [ 245.337841][T12180] »»»»»»B€ speed is unknown, defaulting to 1000