last executing test programs: 2.107475301s ago: executing program 0 (id=10469): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x3, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x0, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff010000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001160000003200000000000000000000000000ffffac14142900000000000000000000000000000000000000000000000000000000000000000008000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000ff0000000000000000000000000000000a"], 0xf8}}, 0x0) 1.892202569s ago: executing program 1 (id=10471): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x0, @local}, 0x10, 0x800) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000280)={0x6, 0x7, 0x5, 0x5134, 0x8001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001800050400000000000000000a800000fe03010100000000050014000b00000008000400", @ANYRES32=r3, @ANYBLOB="0600150003000000100016"], 0x44}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x1a, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0xffffff15}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3432f}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) 1.816537632s ago: executing program 0 (id=10472): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffb}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffb}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000400000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB="080004007f23"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000090) 1.734728547s ago: executing program 4 (id=10474): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000", 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r3, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)}}, {{&(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010105}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)='K', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r3, 0x1) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 1.664475147s ago: executing program 3 (id=10475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000000)=0x2, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x1248, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x121c, 0x3, 0x0, 0x1, [{0x1218, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1208, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "b5af372fdc67476e8d3d1a0bef85b68cfa2c9c16c590d40679e8ca9271551c37b73f6a6d0b86c37f31a98d8843266c6b280692b3cf83918c2e3f8f7f19a24aef2e0a7c036cec2e2148cf3372ac2ebd6fc75336bb38b9e196f9b2ed2c6ee7e8373997f4fbe0009d2e9e68e0c1227927ccfb9c1e945a4e8d7454afbf9543a5e449fae10a28106f7da2295ed089b968fc4215abac4f850be8a42083c51d0cd7ed6f116e0da8f3aa13d3c236befbcd1b4e53b8413dcc4e3aaa9753b66276b7f48fb98eb63a75f5be7b"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xa7, 0x1, "3fdc21e42dba83962de93b05acf83deee39f9546cfdc622810bf21242dc1ce655c685103d994e670b01cb63adb1d1b52599c585e40361c8c031bdaf54bb856566e30ba048760e9dcdd17c9962010d1c9451e36736111d72d7673c8175286f7556096726261f2ab2aa4347a0f38b8a419420c354b4c18ddd470cca8a453af7cec097aeacea8e469f9f01acb7536e661db57203e16be343d0cdd6e6e3a68644950b7b78d"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1270}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.663874793s ago: executing program 0 (id=10476): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x5, 0x0) (async) socket(0x2, 0x80805, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) (async) close(r5) (async) write(r3, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x1000000, 0x12, 0xffffffffffffffff, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x28, 0xe, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000ac0)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r8, &(0x7f0000000b00)={&(0x7f0000000b40)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0, 0x0, &(0x7f0000000b80)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x1a2}, {0x0}, &(0x7f0000000c40)=[{&(0x7f0000000c80)=""/4096, 0x1000}], 0x1, 0xff05, 0xc}}, @rdma_args={0x48, 0x114, 0x1, {{0xbbb9, 0x3}, {&(0x7f0000001c80)=""/221, 0xdd}, &(0x7f0000001d80)=[{&(0x7f0000001e00)=""/96, 0x60}, {&(0x7f0000001e80)=""/127, 0x7f}, {&(0x7f0000001f00)=""/147, 0x93}, {&(0x7f0000001fc0)=""/23, 0x17}, {&(0x7f0000002000)=""/41, 0x29}, {&(0x7f0000002040)=""/213, 0xd5}], 0x6, 0x0, 0x7}}], 0xfe3e}, 0x0) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002140)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002180)={0x11, 0x10, &(0x7f0000002240)=ANY=[@ANYBLOB="1800000009000000000000000080000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000040b7030000000000008500000083000000bf0900000000000055090100000000009500ebff00000000850000000f000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f00000022c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = socket$inet6(0xa, 0x2, 0x0) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz0\x00', 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, @mcast2, [0x0, 0xff000000, 0xffffffff, 0xff], [0xff, 0x47066fef753f41fe, 0xff000000, 0xff], 'veth1_to_hsr\x00', 'bond0\x00', {0xff}, {}, 0x87, 0x2, 0x0, 0xa}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x400, 0x1, 0x1, 'syz0\x00', 0xda}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), 0xffffffffffffffff) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000002840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002880)=0x14) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$netlink(r0, &(0x7f00000045c0)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)=[{&(0x7f0000002980)={0x2fc, 0x2e, 0x300, 0x70bd27, 0x25dfdbfe, "", [@generic="fd7e2a7651f38e836b1019924dcb77e78b190bb71f7121c7dc2d62bd30f4e2484d8340093ee90086068bb6fd7249575ef8921e1c2ab9eb09092394497b142b14cf13576e57d9eb8c49130f3bc01cb25bc6f81646d42ddd437f55d699c7ccc69f7fef0a5fa5a77e7db03b9d48d666eac13357e08db8477de75ff168c71e4a7544831d09220e99424eba63d7a0af41c0730c293ed6027a81cc4ec7c2c8389ee0090999def1c515e31d2a0c001a3570186090194f64eb4e486ee55cae6eb1d57e2ba0c0129e796c3e6a7aea4bae715c6d9664893dbb7f61eb", @typed={0xd, 0xfe, 0x0, 0x0, @str='rpfilter\x00'}, @typed={0xdb, 0xd, 0x0, 0x0, @binary="a08346dcbfd53cd56533a846c27a6d1cd466b9f4fc3cf5f4319bed778e44cef6b3f62e3a38478ef5a4bb39d927bfb749086fb507035dbc970a642836aabdcfebc4c0f3f7dacb014024a197beb931c10ae292bb59f36bba5c243b12f193ca0f0285f61b1cd33e510efdb69e0229562facc18a5ccc3f55f9e455821afa4660a9ee62c06dc6968e29ba7f544129080bcf058ff2c9b18576a88b7c62d3eab6a5edd49cf591abd7980e8b746e82752eeff81136d6593eb28a5877f251d114c0d6de37907204960a67ecf1148e56dc39bcbda8f3950809ab66d1"}, @typed={0x8, 0xbe, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x14, 0x0, 0x0, @u32=0x7f}, @nested={0x1c, 0x163, 0x0, 0x1, [@nested={0x4, 0xf6}, @typed={0x8, 0x131, 0x0, 0x0, @fd=r10}, @typed={0x8, 0x30, 0x0, 0x0, @u32=0x7}, @nested={0x4, 0x129}]}, @nested={0xfb, 0x9, 0x0, 0x1, [@nested={0x4, 0x2e}, @generic="b1849df428423f95204ba8920119c431dba483183e5c0ca20d81af6d6c0f62c1bd1f1749eccea03dbbc5cc427b3e611dd511b8404bee29a8f672a3caab0f4eecf1b3944c46a7a75aab8203b096142f463652b4725f69c897ae0ff46b717fb1af10ab4efee1babde7f363e984c225589f84aa4292e14abe0a4c1c2e6b90ced7cdc9eb99e086765e269bd1aa3e88e59c2db1d62c42237df100d323c0bc1a1cc367ae11094260e44216b0b43e1e2baaae5def5b5b9d7f5879050c0215a8ad6dad89558ecdf4c1d1a1673a0cb7ccc0688a02703581dcb725ca7629b62cae1598188a428cfd7bed4adf", @typed={0x8, 0xa8, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0xc9}]}]}, 0x2fc}], 0x1, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r14]}}, @rights={{0x20, 0x1, 0x1, [r2, r4, r2, r4]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r14, 0xffffffffffffffff, r1, r5]}}, @cred={{0x1c}}], 0xc0, 0x40}, 0x20000001) (async) r16 = syz_genetlink_get_family_id$wireguard(&(0x7f00000028c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r15, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00002000eeb9467a822dd7638e497ceee9797bf2707349e288bbad41c0111072106d37c789f07121fdd611cd216e34633805fdb6ade32d75f2fcb31ee369130d027401b1bd19ef6a5df2beb818090000004e07a6b5", @ANYRES16=r16, @ANYBLOB="0100000000000000000001000000060006004e23000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e1400020077673000"/78], 0x54}, 0x1, 0x0, 0x0, 0x4004840}, 0x40082) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r12, @ANYBLOB="aaed565c856342f4f38a1b12875b6963a19be7491e85c8abeba02dda2d69bcfce8c48105953ca3901b7961e59699c573fdddbca7e7f91121ff", @ANYRESDEC=0x0, @ANYRES16=r13, @ANYRES64=r16, @ANYRESHEX=r16, @ANYRES32=r10], 0x50) 1.662742066s ago: executing program 1 (id=10477): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e3, &(0x7f0000000000)={0x0, 0x4000, '\x00', 0x2}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@empty}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 1.650082807s ago: executing program 4 (id=10478): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1002}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r6], 0x3c}}, 0x0) write(r2, &(0x7f00000002c0)="ffffffffffff0011223344554305000f32001847c653ce1bed7d0e9c36907b618be9000000e1", 0xffb7) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f0000000000)={{0xc, @multicast2, 0x4e21, 0x3, 'nq\x00', 0x28, 0x3a6, 0x3}, {@empty, 0xfffd, 0x2000, 0x8, 0x8, 0x2000050}}, 0x44) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000080)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000004c0)={0x3, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000500)={0x3, &(0x7f0000000540)=[{0x28, 0x20, 0x0, 0xfffff034}, {0x50, 0x1, 0x7, 0x80000000}, {0x6, 0x80, 0xfd, 0x3}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1b080045c60021aad3cf12b837ad919ceb09121c00670000090290787f000001ac1463bf1c814d530fb714bb"], 0x0) 1.538182206s ago: executing program 1 (id=10479): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x42, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000500)={0x5, &(0x7f00000004c0)=[{0x1, 0xf2, 0x9, 0xfffffffb}, {0x8, 0x5d, 0xe, 0x4}, {0x8, 0x1, 0x9, 0x6}, {0x3, 0x0, 0x3, 0x27}, {0x80, 0x6, 0x0, 0x80000000}]}, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r5, &(0x7f00000001c0), 0x10) recvmmsg(r5, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/177, 0xb1}, {0x0}], 0x2}, 0x6}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x10001, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x6, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x4, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0xfffffffb, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0x7, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xb, 0x9, 0xc28, 0xd, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x7, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x6, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x400002, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x20001, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x8, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x400004, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0xa89, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40ffe, 0x180000, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9aa, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0xfffffffc, 0xd, 0xfffffffd, 0x4, 0x8, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x7, 0x0, 0x7, 0x8001, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x1000009, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x8, 0x3, 0x81, 0x3, 0x9, 0x8001, 0x20000c9, 0x5, 0x65e1, 0x10001, 0xc, 0x48001, 0x0, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0xbc4, 0x803, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x45, 0x1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9d6, 0x9, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x2, 0x5, 0x1ff, 0x4, 0x6, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8000008, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x88, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0x7, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1.445964549s ago: executing program 3 (id=10480): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000180)="636f6e6e656374201689", 0xa}], 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x81, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000400)=r5, 0x4) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000580)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(0xffffffffffffffff, 0x3) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000005c0)=0x1, &(0x7f0000000600)=0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001a00010029bd7000000000000220200000000000002000000a001e"], 0x2c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.445733212s ago: executing program 0 (id=10481): syz_emit_ethernet(0xce, 0x0, 0x0) unshare(0x600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x5, 0x0, &(0x7f00000000c0)) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0xc, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80cc85}, 0x94) 1.443589095s ago: executing program 2 (id=10482): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x3, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x0, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff010000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001160000003200000000000000000000000000ffffac14142900000000000000000000000000000000000000000000000000000000000000000000000000070000000010000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000ff0000000000000000000000000000000a"], 0xf8}}, 0x0) 1.373879292s ago: executing program 2 (id=10483): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r0) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/102, 0x66}], 0x1, &(0x7f0000000140)=""/207, 0xcf}, 0xb}], 0x2, 0x10060, 0x0) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x1}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'lo\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e23, @loopback}], 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000740)={'syztnl2\x00', &(0x7f0000000680)={'erspan0\x00', r2, 0x20, 0x80c0, 0x98c0, 0x2, {{0x26, 0x4, 0x2, 0x21, 0x98, 0x65, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x27, 0xd4, [@multicast2, @empty, @local, @remote, @broadcast, @rand_addr=0x64010101, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @ssrr={0x89, 0x1f, 0xfc, [@empty, @multicast1, @rand_addr=0x64010102, @loopback, @broadcast, @empty, @private=0xa010100]}, @timestamp={0x44, 0x14, 0x6b, 0x0, 0x6, [0x6, 0x3, 0xd, 0x280]}, @ssrr={0x89, 0x17, 0x46, [@broadcast, @local, @multicast2, @empty, @private=0xa010101]}, @noop, @generic={0x86, 0xe, "dbf5f435f3df303a1b842cc7"}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xc7, '\x00', 0x86db, 0x3, 0x100, 0xc}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1}}, {0x6, 0x2, [0x2000]}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000}, 0x4000058) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000600)='./cgroup/cgroup.procs\x00', &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x3d}}, 0x40) close(0x4) shutdown(r4, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="840000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0004000000000000640012800b000100697036746e6c00005400028014000300fc020000000000000000000000000000b9be06b86f4db18b7377bfc7f7d1ac14000200fc02000000000000000000000000000004001300080007000100000008000100", @ANYRES32=r5, @ANYBLOB="14000300fe80000000000000000000000000003d"], 0x84}}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040)=0x5, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x3c, r9, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x6}}}]}, 0x3c}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000980)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xd0, 0x1, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}]}]}]}, 0xd0}}, 0x4044041) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x4000010) 1.291508846s ago: executing program 4 (id=10484): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x40050) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2b, 'cpuset'}]}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x40050) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0) (async) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2b, 'cpuset'}]}, 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x0) (async) 1.280915817s ago: executing program 1 (id=10485): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x10001, 0x5, 0xfffffffffffffff7}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080)="35ef054eb934e9a1086da8c5674c2e223ede1cf5eb0d10e3c48b39fd23eb093d75b2e64f07e73c5401", &(0x7f00000000c0)=@tcp=r1, 0xd1cadc1dca6ffe46}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x8000000}, 0x8000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) 1.211976366s ago: executing program 0 (id=10486): socketpair(0x23, 0x3, 0x4, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0x8ac, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, r0, 0xb146d000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0xf132, 0xffffffffffffffff, 0xa4fdf000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) 1.182902092s ago: executing program 3 (id=10487): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000d80)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x89, 0x0, @private, @multicast1, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @multicast1, @local]}]}}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'bridge0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x29, 0x4, 0x3, 0x8, 0x3c, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @remote, 0x20, 0x7800, 0x100, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000740)={'syztnl2\x00', r4, 0x29, 0x84, 0x84, 0x4038a0b, 0x11, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000240)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, 0xc) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r8) getsockname$packet(r6, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x202, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x8d0) sendmsg$nl_route_sched(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)=@gettfilter={0x34, 0x2e, 0x100, 0x70bd30, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffe0}, {0xa, 0x1b}, {0xfff2, 0x8}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x8}]}, 0x34}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r11 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) connect(r11, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x44, r0, 0x10ada85e65c25349, 0x70bd2b, 0x25dfdbfc, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x4}}}}, [@NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x14, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}]}]}, 0x44}}, 0x6048004) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e, 0x0, 0x2}, 0x28) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000960900"/20, @ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB="010000000300"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x10, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=r13, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf61000000000000070100000400000085000000c2000000bf610000000000000701000004000000850000005d000000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0xa, 0x1000, &(0x7f0000001180)=""/4096, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000300)=ANY=[], 0x0, 0x34, 0x0, 0x1}, 0x28) 1.063718772s ago: executing program 4 (id=10488): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000", 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r3, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{0x0}], 0x1}}, {{&(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010105}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)='K', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r3, 0x1) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 901.311434ms ago: executing program 4 (id=10489): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x38, 0x0, 0x100, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 675.933959ms ago: executing program 2 (id=10490): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000004c0)={0x3, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000500)={0x2, &(0x7f0000000540)=[{0x28, 0x20, 0x0, 0xfffff034}, {0x6, 0x80, 0xfd, 0x3}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000800)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x31, 0x1c, 0x67, 0x0, 0x9, 0x2, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x15}}, {0x21, 0x5, 0x0, @remote}}}}}, 0x0) (fail_nth: 2) 675.317324ms ago: executing program 1 (id=10491): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 64) writev(r2, &(0x7f0000000180)=[{&(0x7f00000002c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f0000000340)="14a3db2a", 0x4}], 0x2) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000500)={0x2, 0x0, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000580)='\b\x00', 0x2}, {&(0x7f00000005c0)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b02"], 0x40}, 0x0) (async, rerun: 64) socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="1ceaf900", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xe8001, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100e1f9"]) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xba11, 0xb502, 0xefa8}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000007}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0xdca6bfcc9a561e2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 554.316797ms ago: executing program 2 (id=10492): write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000000)='yeah\x00', 0x5) 438.335046ms ago: executing program 4 (id=10493): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) (async) write$cgroup_pid(r3, &(0x7f00000000c0), 0xffffff98) r4 = socket(0x11, 0x2, 0x0) splice(r4, 0x0, r3, 0x0, 0x6, 0xa) (async) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000140)='u', 0x1}], 0x1, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, r7}) (async) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000280), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f00000002c0)=0xcde, 0x4) (async) r9 = socket$netlink(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x34, r10, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xffffff3f, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r11, 0x29, 0x4c, 0x0, 0x0) write(r0, 0x0, 0x0) (async) r12 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r12, 0x114, 0x2, &(0x7f0000000200)={{0x0}, 0x0}, 0x20) r13 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r13, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0xd, {0xa, 0x4e24, 0x0, @mcast1, 0x3}}, 0x24) 347.076914ms ago: executing program 3 (id=10494): sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20004010) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f00000002c0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @local}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000004c0)={0x3, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000500)={0x3, &(0x7f0000000540)=[{0x28, 0x20, 0x0, 0xfffff034}, {0x50, 0x1, 0x7, 0x80000000}, {0x6, 0x6, 0xfd, 0x3}]}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0a41, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x4002}) write$tun(r3, &(0x7f0000000380)={@val={0x0, 0x18}, @val={0xf73fa528ae4d4132, 0x4, 0x0, 0x1, 0x4, 0x6}, @ipv4=@tcp={{0x5, 0x4, 0x3, 0x4, 0x28, 0x65, 0x0, 0x8, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x80, 0x7, 0x0, 0x9}}}}, 0x36) syz_emit_ethernet(0x2a, &(0x7f0000000800)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x31, 0x1c, 0x67, 0x0, 0x9, 0x2, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x15}}, {0x21, 0x5, 0x0, @remote}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002e00)={'tunl0\x00', &(0x7f0000002d80)={'gre0\x00', 0x0, 0x1, 0x7, 0x0, 0x8, {{0x12, 0x4, 0x0, 0x2b, 0x48, 0x67, 0x0, 0x3, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@noop, @timestamp={0x44, 0x20, 0xdd, 0x0, 0x7, [0xfff, 0x4, 0x3edd7517, 0x1, 0x6, 0x4, 0x401]}, @rr={0x7, 0x13, 0xb8, [@remote, @local, @multicast2, @empty]}]}}}}}) getsockname$packet(r2, &(0x7f0000002e40)={0x11, 0x0, 0x0}, &(0x7f0000002e80)=0x14) sendmmsg$inet(r4, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000002a40)=[{&(0x7f0000000080)="bf03f5eac106a2335d3a8d6ce883a47c63b4784bbc80372e6cc69cd8acf888a5f47e4788ea1418dbd189916c7cd620f34646246edcf59850f11cd5f6", 0x3c}, {&(0x7f00000000c0)="1a1deed50eec804a457d9a6e0d7bb1c3d1e63502a2b2b9d2def45525af7834aea99d9229986ec09763ed94ed200075587672ee21a3cdbfe8ea7bbad8b2abc2f3c59291872a565e3d5b6abde7c1ba0cbbde69e8f9e1041a4823b1cb087697f4d20a023d7616cda22164ca90894600b2ac546ff95e8f14f2d6879c0152de13e7de5828cab6e5cccdb89bd6726c47f0f4b85cb97c17e256a554d9346ed75717e063fba8d167fa07d359", 0xa8}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="87fe6c912063866ad9010f13b11da960d78015147b487ddcda3b93", 0x1b}, {&(0x7f0000001880)="7caf62b5266bd74c19889699b3b0850ac35d35433e909130be59566695e2cce18ef7f37a8c4651a2dfce9542e710e847892eebd4ab615e07221a059d6d0bcbce985bd43e949006417acbb23e83cdd1a474c961bf78220593ab812cdb734ac806cb62fcd6664b932fc03fb7aa7489f4ecbba05bda039ec41612c32961eb2ea24352889339816bfb6d92622f8dc54c4b299391d450e271aa83a5fc883a7a9029cc514bcf0947560bccd954dc2ecbe717b9756d79eb03525b7952d0d64043899571dbc188bb6797123402916e6b43cc7aa540cbe3e2a8a195bf7c440e7859e68d63536c8257119c393814ce525c594e8fb06efabfd0d456e8cec7ff525ebfd861dce3c2e15f7c4fc3015e44300a95b6767d21bd5b5c8da073c86473c2f7d20bcccd9c3a3f9d303d519643c8ef917b6e30c0669ffc323f52f814e3e6acf549ffe5fcaf1603723dba3b7d2fa62edee63ee58b09ad3fc1c5bb478f35fffb4af3b9dc524fb22b55713c00bcfb5b2402b5b7de3595f014bb1b2b3b2cd5811599e4172dc2b16fad65cd7f3187d3e8172b333b5f438903307a8b66dbea6dcddd2e9770e789f4bd3cb81e08bdb1cb7a6cc06099b3000d929d748d91cd3401414cf86ac244d1eee0818de7d7d297d90c46e6a8b42579f1a2ad19c4193d7dd31be12e99e573702d202a0340d91e61de1cc21a93f8cd06fdc847beb5f614e8a7460b59b22c2119f806f990b13303ebea964843307ef153429b017fd2e21b47d9da3bd36ce751807d021e60c2aecf559ce32669ee082b7a7c89dd32b5830a9fefdcdb9e0a8f4862dbed9e68c45fb67f7ebce8bc08fb1d8f5d87971986b902b95a0ae2c2427335623a6c62662d9c076118cb99aefa79c49faf85f669e5026dbf1552c2b9e482996d2d886ba1016dcd1bfb6bc4fcaacc5eb6f09c4459c72c8653a1d8858437ff09f89f5d42c50a92a756b6200c60fb69145c53557cb5db239c6833f756df0a299f7e620a6803bf20c08d74b8ebc0825faf007249bb842baceee55b026e32144bf8770185dc2e85bf87d0e002a9a77ae40e060102710d74eb5dc45d66573daabcc51e51cdd18e15c0c3ee3c8474d741cae5968772f1fce20dac55bbc1d68cccc6f0cd14ca576916e5171dd847457f9fe78c914b61e5c701586d4b9aaa5b804f7b6b7ee7fee0efceeebc1f6d423934ed993fb75c9bbe73bfac2e7d7ed11aa79469d801513fe7136849ba60fe8b157779b9f1572096c8f006a1656cd4dac26bbac64661d9ef2326a73699b08804e43d281542ff0d29bbaaf4fa81b001a7600efc8fc90ecdf40f821303aab6fad0b76cc31d8a13a5de1e08805221dc55b26aff1ad7bc640f7eaaeef2dcdf97c457f90b97e95f346e77c5842efb4d960e8951d0d7b02160701fae88035c33c2cd722da16d748e817b32ff689460aaf49ebd314117626e02c43eba8f15329d283eca27b8d65ebcd3b1ef415e1fe2f5c430897ddf9a869cd37708ffd8d4b5a4856202a77f40f13fe170c1e41b825462ea39ba76df641357b9b2766526a120b94b685cc5ee781d8168462ebd96e6e3d76465799ceb610eb338bd562b70a6c3971914c6144b2686bd1b9c53beb9f68490933b395e815fca396f5a3ff68a9ed6f6014ffb44b173e641c2eab721d8aab2d6888d63a3eecd71771eedab927f0aab79006ce964690a191f2695650d953b15bc04c1dc93fadff87fc57f08444ca488b339a7ef616479de776be905e890f05f9bf5ea8611de8d30568cbdd918c7f2fb164801d386fc9c356711fdb47876b58ab0d59b53f765a1766c2edebef70afa3cb66114aa1e2caa2cbfc15840f496b3b29ad12094a932e176dc1fdd1af2017fe06f697d1c49003e4a860e1d328d2b84c39a0087d134bccb396941674df06adb092443ede261f1c4731a59bb2384d912fee416b2bf9970aa3e3cd33518bdd256a9d114e8da51deb646a43aaaaf520e7d531953daeb52e1121653d1e6f4bcd59e0da269db81b9fe69eb5b84d13f06f7e30c2190acaa7b942cdf6428c1cba7f0c666d144cbc69890880d28d4b9ab1f522c3929f8d28791f8d3e21b71667c7876dff576ba8fd6540cb3d050a05b47f84bed0af488146a5a1b2bbf3f505b0c2c8fc7890f23facec439f4d03063b679840dc174ac17f061e1828b664434050c368b795f41aaa552bfba822b8a120cfdc6785d1c190c137eaa38046690ce40022ee67293495f2819a0411b40ab4b96a29e21fccd767ef2ceec20b05faaf62eccbb9188b8856872b572a13059bae57366b585ca86fec2001e2378543276de9776b3990baf2723e1d97770ce6711edc27777ddb44c6e029d66b9ec64521a1b43aa8826c422d97c55826b93d251f8c493ca0f3f2901f8dc2351611e12c1a50dfb3666a7179c588aed7199f4b1ae48ab577e618dd39eca37be68b2f99f3b46e62ae51cc615c4523dbfe6d3b87e90feb8c524366efb7089b1f4ee58b3d6ec40aadf51d29722e30b4483581bce016d822a087de5d7419d129d879dbd92aa6cee1d0f48f98fb83a74180154cbec9cab8cd99913a171a135640287384d9fb302f0091a51496b011055c1fb74e323167bd27ad428931f450e8834e639f82d7172cd6925af69911d1316775178ca89561771a7aba742701c398d21bb6a1b14189c8798a46b71b0c181e7136d1f4bcea413f4ce1f8c0d664ba68047b78b0b59e6aa86ee07b478f7bd24b5eb1ee666f836ea61384dd1d60cea5e22614d893e36cd3c925f118435eb494e44e5be844225912d1b61317f1078a6fcb30a4986e14432ee817ec41451b837a5b2b311104669404376f1957df499192e182d2812c7e5cfd262e4ac81f9d57b9dd96433adedc19f327111eae549b5a34474b8efffec48ae669643f5af6dac3d13e2de63202e459fd340a8c92e9b25c9e13346a0934d9ecfb71df3561289816717f0f3d9dc45017003a34b51139d3675f6996a2b56900fe356cc2e8701b85aa955328202ab73ecfea2d684e2a9bd2b05c92a06d933fb56ef9b4c77b4e133bbcf5ee432747b249e3fa3ae94966ae4ceccda8dfa9217574f3535e234d14d7280fa9506a96158cc269a92f51d91a6d675c433a2a8b90b071757e0e18f0409625ec56fc69517c02b6f8f872106c6c709ff7148104503e2fd9658070bb3d7e4191b28ce1f94e3c1f7b0ab43db43f63bf10604a5a84f19cafcabbb5b5fba9b1da4b8bbf2aa6daf93a69a36c796f6afbcc123d67379fcb594cbff83443f6d47518d6152fcce612a89f39ef6f712edc2573c414a084aa047161acd81e5b96b8ee5f4b0ea1b1ef22d734ccc2ecd6fe2178d8084f1f0c9e5e2318f1beeb0ae829d24abbf1a813a1cc34725927c6581d4ab6cd8f9f7bcf2ba20bf3d1e58ecbfe5ccdc39756679e22c5ba41f98027c75e68a5653d4f133616c6bc11ad7a030acc9e6dfd6e5df229c896f763b6ecb08afb65d646db88e82caece359853e9868fb1bcdfb37f488daabf32184945e2ec9888c3647797f97529082ff32d4440c1720c5713877ca81585b7d644eb1a2aa4cd52b3fe54b65c2a915d720ee1bde5b3232e3f86e33af2ab990c63680c233961c93ad8b712a8e17de54f8f7eec973d7c927a77ae4a70b711b593881f8b95d2c9ea570ec57ca345e060618e80ccd258c7775d601130f73e7fdbb5bb18e7f5a11f7d64fe9837f0edf02494605f5581b9e91b11c641162fc22ca55fc93cff32f4d5fc29968e7da4f038e392a1baf8fd3f812a877841919160dda9a56da4e05ddf1999589146801025699c082c0a843ee501f6fcbf814d7baece2273a48b0c28bdb447cfedd83164cdb788cc7e0ff851ec4983637b815be160dc105cc97564683e06eecdec48a263cbdb3e084261cdb84f97b403d6e690349dd7c8505fd24d013e7bbacb630550643a50f53ed95bc9ee6d78c81a678b16545fac853772fec15b5705050c389cfe4f7e2cc624ad23e971a1477ac98b6edd0effedd736bb8235d59faf8cfee6e83e4195382615c1b7e8f116438517d550573f2027d9be9d9dfbc796968bb6b12f31914188f4dd526ad393bb571b1726d8d3b3a018a6ff8daab908fe3358760d8253539709cc70a915fcf76738dcc09eaf6492c4bd1f063b30f4e86ca0a006acec05a631e577be16df41c86c3ab05236e0918ec1e758ceef50c7472bbc00187597898c8abb6c70a6bd8ccb03b89c61a22884330cd1695500f05910283466ce2a3900fb6d2007c258cd5749f709f54b9bafe008cb69fdf3c2946b5de006e61cb93c13ef47d3ee8f1c618fb714494849295063be5664199c263d02a69ef8743de0be669f4c8c5b436d1b52aae1d6c6c1ebec1c36cd18ec083cf679dc6e49d04e2e0306d68428f5f729d8c6769701abe4026e64e6571ae00c6abcd21395e3a639062a06a359c1855bbd8f5bd17ac9b4bb3da45a344cea9558355e9e1cf58491e3ce4971c5318558267e7a31e67580add01457f30a655c9d548034abcfc1518feb961b42ba73351e9d86f8034dafd40e1027ede344160dab22c70ec4f2e7d9afaeea6ed18f8ee67bc91e44d2713036ddc6599bc75bb9300b25bda5e071a10fd232f01fcd746bf0740b0ff9fd98a152bbdf1fbbca61c906d57567492b2663905286821bc0157257621a0e56c3405fd703a59df6b7c2ad7a47830a189a3d7b5c0926116ac52165ef30979c2e9efef0225befbf3c9fd77b6cd924c8c17390a1d094a30a9e5fe801fb212e7a0aaeb964124da734ce3794ae4c8945d966da04f241cd0ef962d2af475c59c958249b3f8c5dfe0dc42c7e665feef8f84a7edaa2e68fc5fd582be3c861030f328c2ed04f54704e2d52ab4871a308cc03a8b44fc196027f94c8529988429b625f0c7925c2035669553bed4a72e25cf3ac3b82cf99e42b8acf3f597f24dd0adafd9daa928059f2f0c677be22819825e60963c74dc0a488bceb48bcef6e5575a0b44baa9d57aa7dd070d254a292218b06bf3bf4e25a49516968bb15620c5730b4fc44b911875113e2997723aa81fccb26516ac5adfefc5fff894d2783327e09eafe4096e3adf617bdab5e959dd202df343197f54ec72356f08628c027fd07832f31f2101b7a9aa71c2052fa971b420ffef3c2d5589ec05a3f06e348ad8f689ccb95b7592dee4e3a9af66f6d11390360e88ff66acb3a38008beecc3abbbae2ab3256039d29bc89ad41b1e96452b0e14d0b4c28f5fb3e8924ce6c205971dcaaa90fe5dc6f3ae6d331f682032d38f0a32297cd1bde8cbbb5a99f7f8f4290a43467a8a13b87643a53a8e6c863998dbc0f6263105c2bb79804ebe6bf1ff9735416f05c647395bdc3415268c1334bc754bae2da30e8e76a6ea93a59669c250f25d730289db74f42822e576181469e698819f2637bfb19bbf960f0c2cd0848a32968789434964d46de25da16591504833c72793f9894210884bdd84aadcb2c0a09c276da443b859de019ef260031f331f0f3ecf8968b1d368f0afd3dae4c13001972b41a0d4a8615b865d40fdd0d9b1b5af9b01fd5be5196993a4760bc51349e7718440874be9559bb6c93e04b1b5c023717cbcffb27872dcb8d2e505c40394c64ac126b7546d7bf6f50c6cbf33a57ee202923eed95cb6742d38a040efe4d5cc804d0cebefe1b71e1909a3b7539bfdb8e0933d6fe320063a4aba29963ee45761fecf0e94ff4f2c6b0c084319396a687b266cd2f3f518c36743c5c0f72123dcd409e02d41d6ba0eb97db5029f9553e697e172caec641076e936bdb916a0eac5c33692e4f001269d9a05fc51c74a8", 0x1000}, {&(0x7f0000002880)="b5f5e81f7fbe40deb66e2b56f060462d8b2232d8b432188b2f28e591d027dbe3b94d93616491ddfd7417347e12593ff8921b8d93d4f9c949792ed86a4c1e6a50cd4990584c2e8851208655d4d0480dd8964d4ae506c91ff9cb0f7f2cf41ff0691565c759079fd5c7d125d1a190b434909ba370db21b42f1c872a95ea346e7549e64ab062e4aaf668fc98fddaf3be7d756bcf4c9a6328a94b267c396b04cf61edfe1258ce", 0xa4}, {&(0x7f0000002940)="156199592739e57b8ab9bc593638059c2b3e7fbeb7fa34708433bda4acde53a6ae420d6bf3992ec3515cf7cc8d06443aa3a85cc42fa4e5cdd872c77ea6db536ba6f2744721ee7e48adc591b7c17fb74a14cdf94818a3a7881c2a8f6054c2cde259ef1d310d7440e8ee13babb2f59da9b75f4dcfa3e8aacd692dcb8c641662bd9021fd5bf4e5421193856bcd66ed658ba00e2ea3049e8f8f1c098b9534d4570b96058865aa8efd75101d8568cdabc209b6baec2ebe725187cd4002a47d32817516ad64fba5bdeb5bf8d9183090a1160", 0xcf}], 0x7}}, {{&(0x7f0000002ac0)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000002d40)=[{&(0x7f0000002b00)="79ac656f", 0x4}, {&(0x7f0000002b40)="ea840b46057dc53c95cdb3a5742d106dcca77f7d923df09d87fe7e4eb7d2713e9aa3b87a4785dea0", 0x28}, {&(0x7f0000002b80)="f908ec0676bc0cafaae155fe238582ba8ffabb465974f9195a4a9bbbafcc9e991810c5e49be562586d860d2eac6ac27d00aed1a841867dc14d35fc412eea81e1ca0d52e09b90e9c2e25cf6b6665d375d19c6740d14df5447897da3de20b1c8b3fbf24fbc42fa0cbc904fd8d2034e0c7c58ec7594b0d631e152c3b45348cf148cbda031650482187544ec25dc74553ef5442c5aefe8b965b61e10192574fb035b9c7b06f6c0760c99fdff52d9d918dc486b4508f73202fc0641a28193bce18a82ba9878da25e56d9cee5df2ef9b42972e00bd67605cfe01d2573e964ea4", 0xdd}, {&(0x7f0000002c80)="16b63d56058037b2939725031b106516c07d0a7a5a53d3709e765d4d6fc97c1e6eb7cc383898a1438e4218aaaf422ebf128aa4907652ddc0dec76980930dbaf12fd8e006f6bc59a310c24634b989c05c178d7c943035488a02b9ad8a67186f92dfeeace40110ac29906297959a5623665c54c60e3ad2c8ee5e0e9a76741e576bce9ef931b2c0bda8ed38c0b049144bf6764d4f4688d000", 0x97}], 0x4, &(0x7f0000002ec0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0x97, [@loopback, @loopback, @broadcast, @rand_addr=0x64010101]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private=0xa010100, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8c15}}], 0x98}}, {{&(0x7f0000002f80)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000003100)=[{&(0x7f0000002fc0)="8ae453a6acda18f388f46f7ce8ad63073c32ea2bea286ed70462a49e59b1f4a11bd9a1c49118ffba4a39e4131c4b889f274c01530588e52cb70f207c5bea12abf26e6bc9a58406b03d5720e81f356b369447d1bbbeac5f350c45f87de094fb759492d397ee55", 0x66}, {&(0x7f0000003040)="970a266697f34ccc58f3b7c909ffb27bcab4325eda6ebc7bb13eda18606282a4dd0b17aba851a5ef0e4f0bef793b57a1d81f00cb4ba1c49a8cb038bf33bd8d439c098e924d62ca56d66e35aee0985fb355441ec7b303affab7b50dbf213610724c3788d6a4d0d69e925189282d5c37ce91a3932f9cfee2dbbff73c3449523d7a8d19148e84057516ea988421e7576989c0f07a61", 0x94}], 0x2, &(0x7f0000003140)=[@ip_ttl={{0x14, 0x0, 0x2, 0xef}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}], 0x38}}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000003180)="3d45c4f083d0631f74752b28848fc9bc0eeb90e24e00dab170baa96252dfd43b3782a7dd663686d31bf4e7f3c72d843ed3c7b9b0a423202c874e713e71eda0353315abb985dad0a1bc0ea2932d41db2b71d3de2bd4d1a52a4974a3b4a0bd3374e5f96c5eb28f74bab999c9586c9aef412a4358ce1266027a564bfadb82db348d87efeddd33b0c03fdbd6adae4bd0ab38a3546a9fe65b4a24a1e613014f9aee14c43ee955b98b8702f0743687a09175294856d3c4051b6a5f5131adeda68ff5843d008de865337531c7807c5b7db681a6c9ae2e9460118125b81f0b5c8a2794e4bcc06201be662bdc2d22a9bd1165f0757d53f89d002298216f", 0xf9}, {&(0x7f0000003280)="cdfdb9ac86d54a440b508155d8a0f87862bc863336a216088e6c323bd43b926bd1cfa13052cb354241397f7e7a962bbfa38a13796f54f1f038a301cc558ec59b0085297c17ba2d4394f8cacc069f41fa32e06a88e2971ce8ec7006bbca2be6", 0x5f}, {&(0x7f0000003300)="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", 0x1000}, {&(0x7f0000004300)="5e5542dbc31401c2b17032dc45abd875a65cc9e18228c79e88e3b10ac777055f8298abb9293aa557a9dc39954d95fe94b1ff98f277d37ef4bf58d421a6db4fe42fc70d4d0cef3b3be88d490c82aff39c032a5d15cd71", 0x56}, {&(0x7f0000004380)}, {&(0x7f00000043c0)="beb2dcce21ff5c86878da0834cac8abf1db9edbbe51095d1dd41a59da5c0df0776d99468b7d1f7accf6550369c54b16a7524a79e5f8f91c4d027f9ea63ac89ab3b3e211d8036cc1de8bd29b45c0790de273d11a6a13d71eb2519368ee4f3cf1b952b0050e37d584f55954466d8c2467880abf2f6bacc9dec267ea2027334f3394b10bff5d2c2666abbf145fb5fd00b6874f79f1f20613b4af4865bfdc8f5858cfdf946e8305fc88160d1020d918d46fff654aa8122bbc544afb0bef1f582930ebcaaf85496443f4c26d27a1e0cb59e868715ee15059fb5a95e31e75fb016", 0xde}], 0x6}}], 0x4, 0x40004) 335.587423ms ago: executing program 2 (id=10495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x42, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000500)={0x5, &(0x7f00000004c0)=[{0x1, 0xf2, 0x9, 0xfffffffb}, {0x8, 0x5d, 0xe, 0x4}, {0x8, 0x1, 0x9, 0x6}, {0x3, 0x0, 0x3, 0x27}, {0x80, 0x6, 0x0, 0x80000000}]}, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r5, &(0x7f00000001c0), 0x10) recvmmsg(r5, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/177, 0xb1}, {0x0}], 0x2}, 0x6}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x10001, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x6, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x4, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0xfffffffb, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0x7, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xb, 0x9, 0xc28, 0xd, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x7, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x6, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x400002, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x20001, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x8, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x400004, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0xa89, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40ffe, 0x180000, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9aa, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0xfffffffc, 0xd, 0xfffffffd, 0x4, 0x8, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x7, 0x0, 0x7, 0x8001, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x1000009, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x8, 0x3, 0x81, 0x3, 0x9, 0x8001, 0x20000c9, 0x5, 0x65e1, 0x10001, 0xc, 0x48001, 0x0, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0xbc4, 0x803, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x45, 0x1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9d6, 0x9, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x2, 0x5, 0x1ff, 0x4, 0x6, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8000008, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x88, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0x7, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 263.88478ms ago: executing program 0 (id=10496): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x1a, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0xffffff15}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3431f}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8001, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r5, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000540), 0x4c00}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000880)=""/4114, 0x1012}], 0x1}, 0x406) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x1a, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0xffffff15}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3431f}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_macvtap\x00'}) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8001, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r5, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) (async) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) socket$kcm(0xa, 0x922000000003, 0x11) (async) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000540), 0x4c00}], 0x1}, 0x0) (async) recvmsg$kcm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000880)=""/4114, 0x1012}], 0x1}, 0x406) (async) 131.875436ms ago: executing program 3 (id=10497): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000180)="636f6e6e656374201689", 0xa}], 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x81, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000400)=r5, 0x4) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000580)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(0xffffffffffffffff, 0x3) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000005c0)=0x1, &(0x7f0000000600)=0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001a00010029bd7000000000000220200000000000002000000a001e"], 0x2c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 88.393948ms ago: executing program 3 (id=10498): r0 = socket$kcm(0x29, 0x7, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) (async) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) unshare(0x2c020400) (async) r3 = socket(0x2d, 0x2, 0x0) connect$netlink(r3, &(0x7f0000000080)=@proc={0x2d, 0x0, 0x25dfdbfd, 0x8000000}, 0xc) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl(r4, 0x40047438, &(0x7f0000000100)) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x7439) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x8080, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000640)={'syzkaller0\x00', 0x2}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x78, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x9, '\x00', 0x1, 0x0, 0x9, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0xfffffffa, 0x10, 0xfffffffc}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x7, 0x2, 0x9ac, 0x9}}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8080}, 0x4) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000030a010800000000000000000a00000808000540000000000900010073797a31000000000900030073797a30000000001c0008800c00014001c00100000000000c000240000000000000000514ce46001100010000000000000000000700000a9a989ce6b922ed7b09f3f6dca4"], 0x78}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) (async, rerun: 32) accept4$tipc(r0, 0x0, 0x0, 0x800) 63.688029ms ago: executing program 2 (id=10499): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000", 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r3, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{0x0}], 0x1}}, {{&(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010105}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)='K', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r3, 0x1) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 0s ago: executing program 1 (id=10500): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073"], 0x48}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000480)={'wlan1\x00', @random="2690bae85300"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000300), 0x10) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x6, &(0x7f00000005c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x49}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000600)='GPL\x00', 0x5, 0x29e, &(0x7f0000000640)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async, rerun: 32) sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x5, 0xc1a, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x80}}, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r4, 0x4) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010"], 0x3c}, 0x1, 0x0, 0x0, 0x4000889}, 0x20048810) kernel console output (not intermixed with test programs): s an invalid length. [ 1209.975839][ T5631] Bluetooth: hci2: command tx timeout [ 1210.694568][ T8613] veth6: entered allmulticast mode [ 1210.912907][ T8617] syzkaller0: entered promiscuous mode [ 1210.912931][ T8617] syzkaller0: entered allmulticast mode [ 1210.947753][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9257'. [ 1210.970087][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9257'. [ 1211.071347][ T8633] tipc: Enabling of bearer rejected, already enabled [ 1211.244926][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9259'. [ 1211.399559][T30966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.399586][T30966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.434130][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9261'. [ 1211.653858][ T8281] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1211.679753][ T8281] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1211.695252][ T8281] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1211.788737][ T8672] syz.1.9268: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1211.788806][ T8672] CPU: 1 UID: 0 PID: 8672 Comm: syz.1.9268 Not tainted syzkaller #0 PREEMPT(full) [ 1211.788829][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1211.788842][ T8672] Call Trace: [ 1211.788850][ T8672] [ 1211.788858][ T8672] dump_stack_lvl+0xe8/0x150 [ 1211.788891][ T8672] warn_alloc+0x24d/0x270 [ 1211.788914][ T8672] ? kasan_save_track+0x4f/0x80 [ 1211.788935][ T8672] ? kasan_save_track+0x3e/0x80 [ 1211.788962][ T8672] ? __pfx_warn_alloc+0x10/0x10 [ 1211.788981][ T8672] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1211.789007][ T8672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.789048][ T8672] __vmalloc_node_range_noprof+0x127/0x1540 [ 1211.789093][ T8672] ? rcu_is_watching+0x16/0xb0 [ 1211.789123][ T8672] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1211.789143][ T8672] ? __kmalloc_cache_noprof+0x321/0x600 [ 1211.789165][ T8672] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1211.789186][ T8672] ? xskq_create+0x56/0x220 [ 1211.789214][ T8672] xskq_create+0x148/0x220 [ 1211.789237][ T8672] ? xsk_init_queue+0x8a/0xe0 [ 1211.789262][ T8672] xsk_init_queue+0x8a/0xe0 [ 1211.789292][ T8672] xsk_setsockopt+0x5e0/0x960 [ 1211.789317][ T8672] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1211.789339][ T8672] ? __pfx_aa_sk_perm+0x10/0x10 [ 1211.789370][ T8672] ? aa_sock_opt_perm+0x142/0x1e0 [ 1211.789404][ T8672] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1211.789430][ T8672] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1211.789453][ T8672] do_sock_setsockopt+0x17c/0x1b0 [ 1211.789483][ T8672] __x64_sys_setsockopt+0x13d/0x1b0 [ 1211.789514][ T8672] do_syscall_64+0x166/0x520 [ 1211.789539][ T8672] ? trace_irq_disable+0x3b/0x140 [ 1211.789562][ T8672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.789583][ T8672] ? clear_bhb_loop+0x70/0xc0 [ 1211.789608][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.789628][ T8672] RIP: 0033:0x7fdc1699e559 [ 1211.789647][ T8672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1211.789664][ T8672] RSP: 002b:00007fdc17937028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1211.789690][ T8672] RAX: ffffffffffffffda RBX: 00007fdc16c25fa0 RCX: 00007fdc1699e559 [ 1211.789705][ T8672] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 1211.789718][ T8672] RBP: 00007fdc16a35ab8 R08: 0000000000000004 R09: 0000000000000000 [ 1211.789731][ T8672] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 1211.789744][ T8672] R13: 00007fdc16c26038 R14: 00007fdc16c25fa0 R15: 00007ffdf7171968 [ 1211.789778][ T8672] [ 1211.789797][ T8672] Mem-Info: [ 1211.789807][ T8672] active_anon:8513 inactive_anon:0 isolated_anon:0 [ 1211.789807][ T8672] active_file:17 inactive_file:44341 isolated_file:0 [ 1211.789807][ T8672] unevictable:0 dirty:151 writeback:0 [ 1211.789807][ T8672] slab_reclaimable:13183 slab_unreclaimable:137370 [ 1211.789807][ T8672] mapped:29846 shmem:663 pagetables:1465 [ 1211.789807][ T8672] sec_pagetables:0 bounce:0 [ 1211.789807][ T8672] kernel_misc_reclaimable:0 [ 1211.789807][ T8672] free:1225940 free_pcp:8730 free_cma:0 [ 1211.789858][ T8672] Node 0 active_anon:34052kB inactive_anon:0kB active_file:68kB inactive_file:177160kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119384kB dirty:604kB writeback:0kB shmem:2652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17636kB pagetables:5704kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1211.789912][ T8672] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1211.789961][ T8672] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1211.790018][ T8672] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 1211.790055][ T8672] Node 0 DMA32 free:943796kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:34052kB inactive_anon:0kB active_file:68kB inactive_file:177160kB unevictable:0kB writepending:604kB zspages:0kB present:3129332kB managed:2527420kB mlocked:0kB bounce:0kB free_pcp:34420kB local_pcp:20180kB free_cma:0kB [ 1211.790111][ T8672] lowmem_reserve[]: 0 0 0 0 0 [ 1211.790145][ T8672] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1211.790224][ T8672] lowmem_reserve[]: 0 0 0 0 0 [ 1211.790260][ T8672] Node 1 Normal free:3944604kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:500kB free_cma:0kB [ 1211.790317][ T8672] lowmem_reserve[]: 0 0 0 0 0 [ 1211.790352][ T8672] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1211.790463][ T8672] Node 0 DMA32: 1034*4kB (UM) 2474*8kB (UM) 1386*16kB (UM) 499*32kB (UME) 69*64kB (UME) 156*128kB (UME) 47*256kB (UM) 17*512kB (UM) 5*1024kB (UME) 8*2048kB (UM) 199*4096kB (UM) = 943800kB [ 1211.790617][ T8672] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1211.790731][ T8672] Node 1 Normal: 6*4kB (UM) 5*8kB (UM) 10*16kB (UM) 4*32kB (UM) 1*64kB (M) 6*128kB (UM) 6*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3944608kB [ 1211.790886][ T8672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1211.790903][ T8672] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1211.790918][ T8672] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1211.790934][ T8672] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1211.790949][ T8672] 45017 total pagecache pages [ 1211.790957][ T8672] 0 pages in swap cache [ 1211.790964][ T8672] Free swap = 124996kB [ 1211.790972][ T8672] Total swap = 124996kB [ 1211.790980][ T8672] 2097051 pages RAM [ 1211.790988][ T8672] 0 pages HighMem/MovableOnly [ 1211.790995][ T8672] 433580 pages reserved [ 1211.791002][ T8672] 0 pages cma reserved [ 1212.503137][ T8281] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1212.596249][ T8683] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.649141][ T8683] bridge_slave_0 (unregistering): left allmulticast mode [ 1212.649176][ T8683] bridge_slave_0 (unregistering): left promiscuous mode [ 1212.649240][ T8683] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.717556][ T8281] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1212.731903][ T8281] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1212.738341][ T8281] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1212.779702][ T8281] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1212.782935][ T8699] siw: device registration error -23 [ 1212.955962][ T8693] __nla_validate_parse: 1 callbacks suppressed [ 1212.955981][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9271'. [ 1212.984642][ T8693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1213.358191][ T8281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1213.418214][ T8281] 8021q: adding VLAN 0 to HW filter on device team0 [ 1213.443903][T30941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.444028][T30941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1213.474031][T30941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.474160][T30941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1213.493080][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9279'. [ 1213.848920][ T8757] batadv_slave_1: entered promiscuous mode [ 1213.854976][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9284'. [ 1213.861283][ T8760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9284'. [ 1213.883190][ T8760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1214.167143][ T8782] netlink: 'syz.0.9288': attribute type 1 has an invalid length. [ 1214.320509][ T8782] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1214.357649][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9288'. [ 1214.386991][ T8787] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1214.434262][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9289'. [ 1214.868254][ T8281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1214.961606][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9293'. [ 1215.064263][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9293'. [ 1215.221022][ T8281] veth0_vlan: entered promiscuous mode [ 1215.282740][ T8281] veth1_vlan: entered promiscuous mode [ 1215.427916][ T8281] veth0_macvtap: entered promiscuous mode [ 1215.434681][ T8827] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9295'. [ 1215.442772][ T8281] veth1_macvtap: entered promiscuous mode [ 1215.491393][ T8281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1215.519590][ T8281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1215.577687][T30969] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.577969][T30969] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.578232][T30969] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.582529][T30969] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.797591][ T8844] netlink: NAT attribute has 8 unknown bytes [ 1215.797626][ T8844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1215.801517][ T8844] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9298'. [ 1215.804539][ T8844] netlink: Conntrack attr has 8 unknown bytes [ 1215.804571][ T8844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1215.872726][ T8844] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20004 [ 1215.884050][T30941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1215.884068][T30941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1215.979211][ T8850] IPv6: Can't replace route, no match found [ 1215.980177][ T8850] netlink: NAT attribute has 5 unknown bytes [ 1215.980209][ T8850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1216.022074][T31004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.022096][T31004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.755851][ T8882] netlink: 'syz.2.9306': attribute type 3 has an invalid length. [ 1216.810092][ T8885] netlink: 'syz.2.9306': attribute type 3 has an invalid length. [ 1216.827002][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1216.849597][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1216.853655][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1216.863144][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1216.881988][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1217.176478][T27819] syz_tun (unregistering): left allmulticast mode [ 1217.418500][T30941] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1217.470730][ T8915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1217.902066][T30941] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1218.084986][T30941] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1218.428827][T30941] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1218.654350][ T8983] __nla_validate_parse: 8 callbacks suppressed [ 1218.654379][ T8983] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9328'. [ 1218.729558][ T8976] syzkaller0: entered promiscuous mode [ 1218.729585][ T8976] syzkaller0: entered allmulticast mode [ 1218.730885][ T8886] rxe_eth0 speed is unknown, defaulting to 1000 [ 1218.740979][ T8988] tipc: Started in network mode [ 1218.740996][ T8988] tipc: Node identity , cluster identity 4711 [ 1218.741010][ T8988] tipc: Failed to obtain node identity [ 1218.741033][ T8988] tipc: Enabling of bearer rejected, failed to enable media [ 1218.995448][ T5631] Bluetooth: hci1: command tx timeout [ 1221.080926][ T5631] Bluetooth: hci1: command tx timeout [ 1221.173162][ T9008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9333'. [ 1221.353698][ T9012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9333'. [ 1223.166440][ T5631] Bluetooth: hci1: command tx timeout [ 1223.839100][ T8999] tipc: Enabling of bearer rejected, already enabled [ 1223.936205][ T9010] netlink: 'syz.2.9333': attribute type 1 has an invalid length. [ 1223.949135][ T9017] netlink: 'syz.2.9333': attribute type 1 has an invalid length. [ 1223.952011][ T8886] lo speed is unknown, defaulting to 1000 [ 1224.079343][ T9026] siw: device registration error -23 [ 1224.080233][ T9020] geneve1: entered promiscuous mode [ 1224.174386][ T9029] veth1_to_batadv: Caught tx_queue_len zero misconfig [ 1224.283634][ T9031] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9338'. [ 1224.283660][ T9031] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9338'. [ 1224.283673][ T9031] netlink: 580 bytes leftover after parsing attributes in process `syz.0.9338'. [ 1224.493898][T30941] bond6 (unregistering): (slave ip6gre2): Releasing backup interface [ 1224.493926][T30941] ip6gre2 (unregistering): left promiscuous mode [ 1224.778370][T30941] bond4 (unregistering): (slave geneve3): Releasing active interface [ 1224.851946][T30941] bond8 (unregistering): (slave bridge2): Releasing backup interface [ 1224.851975][T30941] bridge2 (unregistering): left promiscuous mode [ 1224.851993][T30941] bridge2 (unregistering): left allmulticast mode [ 1224.878233][T30941] bond9 (unregistering): (slave bridge3): Releasing backup interface [ 1224.878256][T30941] bond9 (unregistering): (slave bridge3): the permanent HWaddr of slave - 26:d7:4e:d9:ea:01 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1224.878284][T30941] bond9 (unregistering): (slave bridge4): making interface the new active one [ 1224.924463][T30941] bond9 (unregistering): (slave bridge4): Releasing backup interface [ 1224.966168][T30941] bond0 (unregistering): Released all slaves [ 1224.971056][T30941] bond1 (unregistering): Released all slaves [ 1224.991562][T30941] bond2 (unregistering): Released all slaves [ 1225.011269][T30941] bond3 (unregistering): Released all slaves [ 1225.028892][T30941] bond4 (unregistering): Released all slaves [ 1225.039115][T30941] bond5 (unregistering): Released all slaves [ 1225.053063][T30941] bond6 (unregistering): Released all slaves [ 1225.068420][T30941] bond7 (unregistering): Released all slaves [ 1225.084955][T30941] bond8 (unregistering): Released all slaves [ 1225.102147][T30941] bond9 (unregistering): Released all slaves [ 1225.121637][T30941] bond10 (unregistering): Released all slaves [ 1225.235232][ T5631] Bluetooth: hci1: command tx timeout [ 1225.818196][ T8954] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1225.922208][ T9059] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1225.942789][ T9059] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1225.956139][ T9059] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1225.960526][ T9059] geneve1: entered allmulticast mode [ 1225.999009][ T9059] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1226.048776][ T9059] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check. [ 1226.150357][T30941] : left promiscuous mode [ 1226.218053][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.224639][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.249384][T30941] tipc: Disabling bearer [ 1226.264895][T30941] tipc: Left network mode [ 1226.306175][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.315509][ T8954] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1226.475159][ T9104] sctp: [Deprecated]: syz.2.9346 (pid 9104) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1226.475159][ T9104] Use struct sctp_sack_info instead [ 1226.542922][T30969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.562607][T31004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.705378][ T8241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.772816][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9350'. [ 1226.837436][ T9119] siw: device registration error -23 [ 1226.855871][T30966] openvswitch: cpu_id mismatch with handler threads [ 1226.912441][ T9118] netlink: 'syz.4.9350': attribute type 11 has an invalid length. [ 1226.964738][ T9116] ovs-dp0: entered promiscuous mode [ 1227.119777][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1227.634118][ T9140] bond2: entered promiscuous mode [ 1227.641271][ T8886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.644340][ T8886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.644517][ T8886] bridge_slave_0: entered allmulticast mode [ 1227.653247][ T8886] bridge_slave_0: entered promiscuous mode [ 1227.667639][ T8886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.667754][ T8886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.669937][ T8886] bridge_slave_1: entered allmulticast mode [ 1227.677189][ T8886] bridge_slave_1: entered promiscuous mode [ 1227.770443][ T9153] ip_tables: iptables: counters copy to user failed while replacing table [ 1227.911785][ T8886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1227.940278][ T8886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1227.943493][T30964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.953331][T30964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.183241][ T8886] team0: Port device team_slave_0 added [ 1228.226706][ T8886] team0: Port device team_slave_1 added [ 1228.469713][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1228.470981][ T8886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1228.470995][ T8886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1228.471017][ T8886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1228.494530][ T8886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1228.494548][ T8886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1228.494579][ T8886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1228.730622][ T9185] siw: device registration error -23 [ 1228.921867][ T8886] hsr_slave_0: entered promiscuous mode [ 1228.939491][ T8886] hsr_slave_1: entered promiscuous mode [ 1228.951375][ T8886] debugfs: 'hsr0' already exists in 'hsr' [ 1228.951401][ T8886] Cannot create hsr debugfs directory [ 1228.974461][ T9192] syzkaller1: entered promiscuous mode [ 1228.974497][ T9192] syzkaller1: entered allmulticast mode [ 1229.211462][T30941] hsr_slave_0: left promiscuous mode [ 1230.333092][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1230.333599][ T9224] syzkaller0: entered promiscuous mode [ 1230.333616][ T9224] syzkaller0: entered allmulticast mode [ 1230.663448][ T9256] siw: device registration error -23 [ 1230.893986][ T9269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9375'. [ 1231.043819][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9371'. [ 1231.061815][T30941] IPVS: stop unused estimator thread 0... [ 1231.063652][T30979] IPVS: starting estimator thread 0... [ 1231.165304][ T9275] IPVS: using max 33 ests per chain, 79200 per kthread [ 1231.554542][ T9288] siw: device registration error -23 [ 1231.715454][ C0] net_ratelimit: 4 callbacks suppressed [ 1231.715477][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.806397][ T9285] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9377'. [ 1231.875465][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.059118][ T9306] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1233.118752][ T9330] siw: device registration error -23 [ 1234.444485][ T9329] geneve1: entered promiscuous mode [ 1234.776929][ T9334] rxe_eth0 speed is unknown, defaulting to 1000 [ 1235.053615][ T9352] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 1235.420421][ T9370] netlink: 'syz.4.9394': attribute type 1 has an invalid length. [ 1235.516000][ T9349] rxe_eth0 speed is unknown, defaulting to 1000 [ 1235.583680][ T9370] bond3: entered promiscuous mode [ 1235.584812][ T9370] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1235.676350][ T9375] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1235.676719][ T9375] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1235.676739][ T9375] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1235.737325][ T9375] bond3: (slave ip6gre1): making interface the new active one [ 1235.737352][ T9375] ip6gre1: entered promiscuous mode [ 1235.739005][ T9375] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 1235.899076][ T9334] lo speed is unknown, defaulting to 1000 [ 1236.307300][ T9349] lo speed is unknown, defaulting to 1000 [ 1236.454721][ T8886] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1236.483361][ T9399] netlink: 260 bytes leftover after parsing attributes in process `syz.3.9397'. [ 1236.488608][ T8886] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1236.490636][ T8886] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1236.520808][ T8886] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1236.720620][ T8886] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1236.768491][ T8886] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1236.769403][ T8886] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1236.829712][ T8886] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1237.564727][ T8886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1237.611624][ T8886] 8021q: adding VLAN 0 to HW filter on device team0 [ 1237.646384][T30966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.646515][T30966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1237.673717][T30984] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.673810][T30984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1237.814031][ T9433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9400'. [ 1238.073404][ T9446] netlink: 'syz.4.9402': attribute type 30 has an invalid length. [ 1238.234093][ T9458] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20002 [ 1238.471331][ T9467] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9407'. [ 1238.471369][ T9467] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9407'. [ 1238.482837][ T9467] erspan0: entered promiscuous mode [ 1238.484783][ T9467] gretap0: entered promiscuous mode [ 1238.510111][ T9467] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9407'. [ 1238.510146][ T9467] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9407'. [ 1238.590766][ T9473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9407'. [ 1238.590800][ T9473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9407'. [ 1238.618369][ T9467] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9407'. [ 1238.618442][ T9467] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9407'. [ 1238.910855][ T9484] Bluetooth: MGMT ver 1.23 [ 1238.910894][ T9484] Bluetooth: hci0: invalid length 0, exp 2 for type 4 [ 1238.927693][ T9484] nbd: couldn't find a device at index 0 [ 1239.051886][ T9494] ip_tables: iptables: counters copy to user failed while replacing table [ 1239.204618][ T9502] netlink: 'syz.0.9414': attribute type 30 has an invalid length. [ 1239.235641][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.421618][ T9510] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1282) ! [ 1239.513675][ T8886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.734433][ T8886] veth0_vlan: entered promiscuous mode [ 1239.790119][ T8886] veth1_vlan: entered promiscuous mode [ 1239.876000][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.934414][ T9536] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1239.963892][ T8886] veth0_macvtap: entered promiscuous mode [ 1239.991056][ T8886] veth1_macvtap: entered promiscuous mode [ 1240.050690][ T8886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1240.082584][ T8886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1240.167711][T30964] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.168305][T30941] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.168341][T30941] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.168371][T30941] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.527885][T30941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.527909][T30941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.634119][ T9572] netlink: 'syz.2.9425': attribute type 30 has an invalid length. [ 1240.678142][ T9577] tipc: Enabling of bearer rejected, failed to enable media [ 1240.692715][T30979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.692739][T30979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.927966][ T9586] hsr_slave_0: left promiscuous mode [ 1240.930444][ T9586] hsr_slave_1: left promiscuous mode [ 1241.184288][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1241.198899][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1241.199858][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1241.204430][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1241.228880][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1241.461442][ T9603] hsr0: entered promiscuous mode [ 1243.317060][ T5621] Bluetooth: hci4: command tx timeout [ 1244.454378][ T9626] netlink: 'syz.1.9438': attribute type 30 has an invalid length. [ 1244.742506][T27869] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.742543][T27869] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1244.793470][ T9640] __nla_validate_parse: 2 callbacks suppressed [ 1244.793489][ T9640] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9442'. [ 1244.814675][ T9603] hsr0: left promiscuous mode [ 1244.936764][ T9647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9445'. [ 1245.082797][ T9653] netlink: 'syz.1.9447': attribute type 83 has an invalid length. [ 1245.152058][T27869] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.152094][T27869] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1245.232795][ T9593] rxe_eth0 speed is unknown, defaulting to 1000 [ 1245.335894][ T9655] xt_hashlimit: max too large, truncated to 1048576 [ 1245.335916][ T9655] xt_hashlimit: overflow, try lower: 137438953472/8 [ 1245.341354][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9448'. [ 1245.402530][ T5621] Bluetooth: hci4: command tx timeout [ 1245.465863][T27869] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.465894][T27869] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1245.520189][ T9664] netlink: 'syz.1.9450': attribute type 30 has an invalid length. [ 1245.548710][ T9593] lo speed is unknown, defaulting to 1000 [ 1245.691228][T27869] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.691262][T27869] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1245.756045][ T9675] netlink: 'syz.4.9454': attribute type 3 has an invalid length. [ 1245.941768][ T9675] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.090012][ T9684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1246.102209][ T9680] bond18: (slave macvlan3): Error -22 calling dev_set_mtu [ 1246.215537][ T9675] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.257097][ T9685] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9456'. [ 1246.457849][ T9698] netlink: 'syz.1.9458': attribute type 16 has an invalid length. [ 1246.457870][ T9698] netlink: 'syz.1.9458': attribute type 17 has an invalid length. [ 1246.610207][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9459'. [ 1246.815782][ T9675] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.286245][T27869] bond2: left allmulticast mode [ 1247.287186][T27869] bond2: left promiscuous mode [ 1247.296244][T27869] bridge0: port 3(bond2) entered disabled state [ 1247.319205][T27869] bridge_slave_1: left allmulticast mode [ 1247.319232][T27869] bridge_slave_1: left promiscuous mode [ 1247.319432][T27869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.478548][ T5621] Bluetooth: hci4: command tx timeout [ 1248.080449][T27869] bond6 (unregistering): (slave geneve5): Releasing active interface [ 1248.080478][T27869] geneve5 (unregistering): left promiscuous mode [ 1248.265329][T27869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1248.270389][T27869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1248.272056][T27869] bond0 (unregistering): Released all slaves [ 1248.307154][T27869] bond1 (unregistering): Released all slaves [ 1248.325832][T27869] bond2 (unregistering): Released all slaves [ 1248.352095][T27869] bond3 (unregistering): Released all slaves [ 1248.373095][T27869] bond4 (unregistering): (slave lo): Releasing backup interface [ 1248.373514][T27869] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1248.374057][T27869] bond4 (unregistering): Released all slaves [ 1248.419475][T27869] bond5 (unregistering): Released all slaves [ 1248.442328][T27869] bond6 (unregistering): Released all slaves [ 1248.468093][T27869] bond7 (unregistering): Released all slaves [ 1248.500612][T27869] bond8 (unregistering): (slave wireguard0): Releasing backup interface [ 1248.500635][T27869] wireguard0: left promiscuous mode [ 1248.502710][T27869] bond8 (unregistering): Released all slaves [ 1248.683367][ T9675] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.950198][ T9747] gre1: entered promiscuous mode [ 1249.106439][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1249.110393][T27869] ovs-dp0: left promiscuous mode [ 1249.241441][T27869] tipc: Disabling bearer [ 1249.241577][T27869] tipc: Left network mode [ 1249.417086][ T9756] netlink: 'syz.0.9465': attribute type 1 has an invalid length. [ 1249.556259][ T5621] Bluetooth: hci4: command tx timeout [ 1250.076541][ T9777] netlink: 15 bytes leftover after parsing attributes in process `syz.3.9467'. [ 1250.102006][ T9787] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9469'. [ 1250.293544][ T9793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9470'. [ 1250.353705][ T9593] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.353809][ T9593] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.353978][ T9593] bridge_slave_0: entered allmulticast mode [ 1250.372895][ T9593] bridge_slave_0: entered promiscuous mode [ 1250.388477][ T9593] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.388580][ T9593] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.394200][ T9593] bridge_slave_1: entered allmulticast mode [ 1250.410003][ T9593] bridge_slave_1: entered promiscuous mode [ 1250.641127][ T9798] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9471'. [ 1250.937229][ T9802] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9471'. [ 1250.947264][T30966] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.957983][T30964] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.958035][T30964] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.028579][ T9593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1251.303419][ T9593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1251.421587][T30969] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.621354][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1251.685992][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9474'. [ 1251.689888][ T9831] netlink: 'syz.4.9474': attribute type 1 has an invalid length. [ 1251.764142][ T9593] team0: Port device team_slave_0 added [ 1251.779917][ T9593] team0: Port device team_slave_1 added [ 1251.850006][ T9831] bond4: entered promiscuous mode [ 1251.850303][ T9831] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1251.871905][ T9828] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1251.872097][ T9828] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1251.872108][ T9828] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1251.904916][ T9828] bond4: (slave ip6gre2): making interface the new active one [ 1251.904946][ T9828] ip6gre2: entered promiscuous mode [ 1251.920038][ T9828] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 1252.045398][ T9593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1252.045416][ T9593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1252.045438][ T9593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1252.060037][ T9593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1252.060056][ T9593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1252.060080][ T9593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1252.467571][ T9593] hsr_slave_0: entered promiscuous mode [ 1252.496744][ T9593] hsr_slave_1: entered promiscuous mode [ 1252.499154][ T9593] debugfs: 'hsr0' already exists in 'hsr' [ 1252.499176][ T9593] Cannot create hsr debugfs directory [ 1252.661725][T30984] nci: nci_rx_work: unknown MT 0x1 [ 1252.664822][T27869] hsr_slave_0: left promiscuous mode [ 1252.688777][T27869] hsr_slave_1: left promiscuous mode [ 1252.689743][T27869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1252.689765][T27869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1252.703982][T27869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1252.704006][T27869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1252.831601][T27869] veth0_macvtap: left promiscuous mode [ 1252.831794][T27869] veth1_vlan: left promiscuous mode [ 1253.111342][ T9898] sctp: [Deprecated]: syz.4.9484 (pid 9898) Use of int in max_burst socket option deprecated. [ 1253.111342][ T9898] Use struct sctp_assoc_value instead [ 1253.716309][T27869] team0 (unregistering): Port device team_slave_1 removed [ 1253.724889][T27869] team0 (unregistering): Port device team_slave_0 removed [ 1253.903233][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1254.243093][ T9916] FAULT_INJECTION: forcing a failure. [ 1254.243093][ T9916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1254.243126][ T9916] CPU: 0 UID: 0 PID: 9916 Comm: syz.4.9487 Not tainted syzkaller #0 PREEMPT(full) [ 1254.243147][ T9916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1254.243158][ T9916] Call Trace: [ 1254.243166][ T9916] [ 1254.243174][ T9916] dump_stack_lvl+0xe8/0x150 [ 1254.243206][ T9916] should_fail_ex+0x410/0x560 [ 1254.243236][ T9916] _copy_from_user+0x2d/0xb0 [ 1254.243265][ T9916] bpf_test_init+0xd8/0x150 [ 1254.243285][ T9916] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 1254.243314][ T9916] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1254.243332][ T9916] ? __fget_files+0x2a/0x420 [ 1254.243356][ T9916] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1254.243371][ T9916] bpf_prog_test_run+0x2c5/0x340 [ 1254.243393][ T9916] __sys_bpf+0xa22/0xd90 [ 1254.243415][ T9916] ? __pfx___sys_bpf+0x10/0x10 [ 1254.243439][ T9916] ? __fget_files+0x2a/0x420 [ 1254.243472][ T9916] ? ksys_write+0x242/0x270 [ 1254.243488][ T9916] ? __pfx_ksys_write+0x10/0x10 [ 1254.243505][ T9916] __x64_sys_bpf+0xba/0xd0 [ 1254.243523][ T9916] do_syscall_64+0x166/0x520 [ 1254.243541][ T9916] ? trace_irq_disable+0x3b/0x140 [ 1254.243555][ T9916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.243569][ T9916] ? clear_bhb_loop+0x70/0xc0 [ 1254.243597][ T9916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.243612][ T9916] RIP: 0033:0x7f26ee59e559 [ 1254.243626][ T9916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1254.243638][ T9916] RSP: 002b:00007f26ef4ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1254.243654][ T9916] RAX: ffffffffffffffda RBX: 00007f26ee825fa0 RCX: 00007f26ee59e559 [ 1254.243665][ T9916] RDX: 0000000000000050 RSI: 0000200000000800 RDI: 000000000000000a [ 1254.243674][ T9916] RBP: 00007f26ef4ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1254.243683][ T9916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1254.243691][ T9916] R13: 00007f26ee826038 R14: 00007f26ee825fa0 R15: 00007ffd6ca2fee8 [ 1254.243715][ T9916] [ 1254.392739][ T9920] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1254.413266][ T9920] netlink: 'syz.4.9488': attribute type 1 has an invalid length. [ 1254.499350][T27869] IPVS: stop unused estimator thread 0... [ 1254.539660][ T9920] bond5: entered promiscuous mode [ 1254.540127][ T9920] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1254.610290][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.654776][ T9922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9488'. [ 1254.670561][ T9922] bond5: entered allmulticast mode [ 1254.702195][ T9920] bond5: (slave bridge1): making interface the new active one [ 1254.702223][ T9920] bridge1: entered promiscuous mode [ 1254.702453][ T9920] bridge1: entered allmulticast mode [ 1254.703636][ T9920] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 1254.929681][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9489'. [ 1255.419787][ T9868] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1255.519789][ T9593] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1255.550513][ T9593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1255.553077][ T9593] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1255.634878][ T9593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1255.666966][ T9593] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1255.679621][ T9593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1255.682162][ T9593] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1255.714985][ T9593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1255.720964][ T9938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9490'. [ 1255.875716][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.071200][ T9593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1256.139742][ T9593] 8021q: adding VLAN 0 to HW filter on device team0 [ 1256.168207][T30964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.168316][T30964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1256.250487][T30964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.250594][T30964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1256.621255][ T9986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9501'. [ 1257.758081][ T9593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1257.928460][ T9593] veth0_vlan: entered promiscuous mode [ 1257.973920][ T9593] veth1_vlan: entered promiscuous mode [ 1258.032618][ T9593] veth0_macvtap: entered promiscuous mode [ 1258.044462][T10021] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1258.061342][ T9593] veth1_macvtap: entered promiscuous mode [ 1258.084651][T10047] FAULT_INJECTION: forcing a failure. [ 1258.084651][T10047] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.084681][T10047] CPU: 0 UID: 0 PID: 10047 Comm: syz.1.9513 Not tainted syzkaller #0 PREEMPT(full) [ 1258.084693][T10047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1258.084700][T10047] Call Trace: [ 1258.084705][T10047] [ 1258.084710][T10047] dump_stack_lvl+0xe8/0x150 [ 1258.084729][T10047] should_fail_ex+0x410/0x560 [ 1258.084746][T10047] should_failslab+0xa8/0x100 [ 1258.084761][T10047] __kmalloc_cache_node_noprof+0xaa/0x620 [ 1258.084775][T10047] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 1258.084787][T10047] ? page_pool_create_percpu+0x73/0xc70 [ 1258.084901][T10047] ? page_pool_create_percpu+0x73/0xc70 [ 1258.084916][T10047] page_pool_create_percpu+0x73/0xc70 [ 1258.084927][T10047] ? page_pool_create+0xd/0x20 [ 1258.084940][T10047] bpf_test_run_xdp_live+0x23a/0x1c20 [ 1258.084952][T10047] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 1258.084967][T10047] ? __mutex_unlock_slowpath+0x731/0x900 [ 1258.084984][T10047] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1258.085005][T10047] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1258.085024][T10047] ? 0xffffffffa0405580 [ 1258.085081][T10047] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1258.085110][T10047] ? _copy_from_user+0x94/0xb0 [ 1258.085138][T10047] ? bpf_test_init+0x113/0x150 [ 1258.085156][T10047] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1258.085179][T10047] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1258.085216][T10047] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1258.085241][T10047] ? __fget_files+0x2a/0x420 [ 1258.085274][T10047] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1258.085295][T10047] bpf_prog_test_run+0x2c5/0x340 [ 1258.085323][T10047] __sys_bpf+0xa22/0xd90 [ 1258.085353][T10047] ? __pfx___sys_bpf+0x10/0x10 [ 1258.085392][T10047] ? __fget_files+0x2a/0x420 [ 1258.085435][T10047] ? ksys_write+0x242/0x270 [ 1258.085456][T10047] ? __pfx_ksys_write+0x10/0x10 [ 1258.085481][T10047] __x64_sys_bpf+0xba/0xd0 [ 1258.085504][T10047] do_syscall_64+0x166/0x520 [ 1258.085527][T10047] ? trace_irq_disable+0x3b/0x140 [ 1258.085545][T10047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.085563][T10047] ? clear_bhb_loop+0x70/0xc0 [ 1258.085584][T10047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.085607][T10047] RIP: 0033:0x7f4e1699e559 [ 1258.085624][T10047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1258.085639][T10047] RSP: 002b:00007f4e177d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1258.085654][T10047] RAX: ffffffffffffffda RBX: 00007f4e16c25fa0 RCX: 00007f4e1699e559 [ 1258.085661][T10047] RDX: 0000000000000050 RSI: 0000200000000800 RDI: 000000000000000a [ 1258.085668][T10047] RBP: 00007f4e177d3090 R08: 0000000000000000 R09: 0000000000000000 [ 1258.085675][T10047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1258.085681][T10047] R13: 00007f4e16c26038 R14: 00007f4e16c25fa0 R15: 00007ffdce2c5858 [ 1258.085698][T10047] [ 1258.157793][ T9593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1258.204227][ T9593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1258.276176][T30964] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.278748][T30969] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.278794][T30969] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.278828][T30969] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.719369][T10054] syzkaller0: entered promiscuous mode [ 1258.719391][T10054] syzkaller0: entered allmulticast mode [ 1258.733117][T30941] IPVS: starting estimator thread 0... [ 1258.755570][T30941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1258.755591][T30941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1258.815633][T10064] IPVS: using max 35 ests per chain, 84000 per kthread [ 1258.967599][T30969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1258.967623][T30969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1259.478430][T10092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9522'. [ 1259.633734][T10092] hsr_slave_1 (unregistering): left promiscuous mode [ 1259.719922][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1259.734707][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1259.748274][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1259.771552][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1259.772338][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1259.821551][T10102] FAULT_INJECTION: forcing a failure. [ 1259.821551][T10102] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.821583][T10102] CPU: 0 UID: 0 PID: 10102 Comm: syz.2.9524 Not tainted syzkaller #0 PREEMPT(full) [ 1259.821605][T10102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1259.821617][T10102] Call Trace: [ 1259.821625][T10102] [ 1259.821633][T10102] dump_stack_lvl+0xe8/0x150 [ 1259.821665][T10102] should_fail_ex+0x410/0x560 [ 1259.821696][T10102] should_failslab+0xa8/0x100 [ 1259.821723][T10102] __kvmalloc_node_noprof+0x176/0x820 [ 1259.821750][T10102] ? page_pool_create_percpu+0x2ef/0xc70 [ 1259.821772][T10102] ? page_pool_create_percpu+0x2ef/0xc70 [ 1259.821807][T10102] page_pool_create_percpu+0x2ef/0xc70 [ 1259.821833][T10102] bpf_test_run_xdp_live+0x23a/0x1c20 [ 1259.821858][T10102] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 1259.821885][T10102] ? __mutex_unlock_slowpath+0x731/0x900 [ 1259.821917][T10102] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1259.821949][T10102] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1259.821971][T10102] ? 0xffffffffa0405580 [ 1259.822036][T10102] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1259.822065][T10102] ? _copy_from_user+0x94/0xb0 [ 1259.822094][T10102] ? bpf_test_init+0x113/0x150 [ 1259.822111][T10102] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1259.822134][T10102] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1259.822170][T10102] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1259.822195][T10102] ? __fget_files+0x2a/0x420 [ 1259.822227][T10102] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1259.822249][T10102] bpf_prog_test_run+0x2c5/0x340 [ 1259.822277][T10102] __sys_bpf+0xa22/0xd90 [ 1259.822307][T10102] ? __pfx___sys_bpf+0x10/0x10 [ 1259.822341][T10102] ? __fget_files+0x2a/0x420 [ 1259.822385][T10102] ? ksys_write+0x242/0x270 [ 1259.822406][T10102] ? __pfx_ksys_write+0x10/0x10 [ 1259.822431][T10102] __x64_sys_bpf+0xba/0xd0 [ 1259.822455][T10102] do_syscall_64+0x166/0x520 [ 1259.822478][T10102] ? trace_irq_disable+0x3b/0x140 [ 1259.822497][T10102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.822516][T10102] ? clear_bhb_loop+0x70/0xc0 [ 1259.822539][T10102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.822558][T10102] RIP: 0033:0x7f5504f9e559 [ 1259.822576][T10102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1259.822592][T10102] RSP: 002b:00007f5505e4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1259.822612][T10102] RAX: ffffffffffffffda RBX: 00007f5505225fa0 RCX: 00007f5504f9e559 [ 1259.822625][T10102] RDX: 0000000000000050 RSI: 0000200000000800 RDI: 000000000000000a [ 1259.822637][T10102] RBP: 00007f5505e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 1259.822649][T10102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1259.822660][T10102] R13: 00007f5505226038 R14: 00007f5505225fa0 R15: 00007ffd94bbb438 [ 1259.822692][T10102] [ 1259.825296][T10102] page_pool_create_percpu() gave up with errno -12 [ 1260.372373][T10108] geneve1: entered promiscuous mode [ 1260.392072][T10127] siw: device registration error -23 [ 1261.403829][T10164] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9535'. [ 1261.441407][T10158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9533'. [ 1261.441445][T10158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9533'. [ 1261.497944][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9534'. [ 1261.869970][T10098] rxe_eth0 speed is unknown, defaulting to 1000 [ 1261.873218][T10169] netlink: 'syz.1.9534': attribute type 3 has an invalid length. [ 1261.889935][ T5631] Bluetooth: hci5: command tx timeout [ 1262.630159][T10098] lo speed is unknown, defaulting to 1000 [ 1262.661157][T10219] siw: device registration error -23 [ 1262.875826][T10234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1262.879270][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9546'. [ 1262.879304][T10234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9546'. [ 1263.261324][T10098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.261445][T10098] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.261598][T10098] bridge_slave_0: entered allmulticast mode [ 1263.262780][T10098] bridge_slave_0: entered promiscuous mode [ 1263.292373][T10098] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.292522][T10098] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.292622][T10098] bridge_slave_1: entered allmulticast mode [ 1263.293717][T10098] bridge_slave_1: entered promiscuous mode [ 1263.356549][T10098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1263.360314][T10098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1263.403549][T10098] team0: Port device team_slave_0 added [ 1263.405768][T10098] team0: Port device team_slave_1 added [ 1263.428624][T10098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1263.428642][T10098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.428664][T10098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1263.429920][T10098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1263.429934][T10098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.429957][T10098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1263.488273][T10098] hsr_slave_0: entered promiscuous mode [ 1263.489481][T10098] hsr_slave_1: entered promiscuous mode [ 1263.490322][T10098] debugfs: 'hsr0' already exists in 'hsr' [ 1263.490341][T10098] Cannot create hsr debugfs directory [ 1263.687922][T10098] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1263.687946][T10098] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.687960][T10098] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 54618 - 0 [ 1263.810834][T10098] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1263.810864][T10098] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.810878][T10098] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 54618 - 0 [ 1263.892378][T10098] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1263.892402][T10098] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.892415][T10098] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 54618 - 0 [ 1263.969419][ T5631] Bluetooth: hci5: command tx timeout [ 1263.991375][T10098] netdevsim netdevsim0 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1263.991399][T10098] netdevsim netdevsim0 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.991412][T10098] netdevsim netdevsim0 €Â (unregistering): unset [1, 1] type 2 family 0 port 54618 - 0 [ 1264.160462][T10098] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1264.163209][T10098] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1264.164180][T10098] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1264.198184][T10098] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1264.198982][T10098] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1264.210298][T10098] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1264.239374][T10098] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1264.241680][T10098] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1264.331423][T10098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1264.352349][T10098] 8021q: adding VLAN 0 to HW filter on device team0 [ 1264.368933][T30941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.369061][T30941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1264.379879][T27869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.379991][T27869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1264.449380][T10098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1264.763868][T10098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.803078][T10098] veth0_vlan: entered promiscuous mode [ 1264.814247][T10098] veth1_vlan: entered promiscuous mode [ 1264.842499][T10098] veth0_macvtap: entered promiscuous mode [ 1264.864736][T10098] veth1_macvtap: entered promiscuous mode [ 1264.881462][T10098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1264.898821][T10098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1265.028891][T30969] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.046553][T30969] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.046909][T30941] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.053810][T30969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.053829][T30969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.055689][T30966] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.103462][T30969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.103500][T30969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.887765][T10299] netlink: 'syz.4.9555': attribute type 49 has an invalid length. [ 1266.035994][ T5631] Bluetooth: hci5: command tx timeout [ 1266.067551][T10306] geneve1: entered promiscuous mode [ 1266.074905][T10306] siw: device registration error -23 [ 1266.233437][T10311] netlink: 'syz.4.9558': attribute type 10 has an invalid length. [ 1267.348374][T27869] IPVS: starting estimator thread 0... [ 1267.434394][T10361] FAULT_INJECTION: forcing a failure. [ 1267.434394][T10361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1267.434428][T10361] CPU: 0 UID: 0 PID: 10361 Comm: syz.3.9572 Not tainted syzkaller #0 PREEMPT(full) [ 1267.434461][T10361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1267.434473][T10361] Call Trace: [ 1267.434480][T10361] [ 1267.434490][T10361] dump_stack_lvl+0xe8/0x150 [ 1267.434521][T10361] should_fail_ex+0x410/0x560 [ 1267.434551][T10361] _copy_to_user+0x31/0xb0 [ 1267.434580][T10361] simple_read_from_buffer+0xe1/0x170 [ 1267.434615][T10361] proc_fail_nth_read+0x1bb/0x230 [ 1267.434636][T10361] ? common_file_perm+0x20e/0x2b0 [ 1267.434662][T10361] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1267.434688][T10361] ? rw_verify_area+0x24a/0x4c0 [ 1267.434711][T10361] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1267.434733][T10361] vfs_read+0x213/0xa80 [ 1267.434767][T10361] ? __pfx___mutex_lock+0x10/0x10 [ 1267.434794][T10361] ? __pfx_vfs_read+0x10/0x10 [ 1267.434925][T10361] ? __fget_files+0x2a/0x420 [ 1267.434966][T10361] ? __fget_files+0x3a2/0x420 [ 1267.434990][T10361] ? __fget_files+0x2a/0x420 [ 1267.435028][T10361] ksys_read+0x150/0x270 [ 1267.435049][T10361] ? __pfx_ksys_read+0x10/0x10 [ 1267.435078][T10361] do_syscall_64+0x166/0x520 [ 1267.435120][T10361] ? trace_irq_disable+0x3b/0x140 [ 1267.435141][T10361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.435160][T10361] ? clear_bhb_loop+0x70/0xc0 [ 1267.435184][T10361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.435202][T10361] RIP: 0033:0x7f08d415ed8e [ 1267.435221][T10361] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1267.435238][T10361] RSP: 002b:00007f08d50f8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1267.435258][T10361] RAX: ffffffffffffffda RBX: 00007f08d50f96c0 RCX: 00007f08d415ed8e [ 1267.435272][T10361] RDX: 000000000000000f RSI: 00007f08d50f90a0 RDI: 0000000000000004 [ 1267.435348][T10361] RBP: 00007f08d50f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1267.435361][T10361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1267.435372][T10361] R13: 00007f08d4426038 R14: 00007f08d4425fa0 R15: 00007fffda7021f8 [ 1267.435405][T10361] [ 1267.437137][T10359] IPVS: using max 37 ests per chain, 88800 per kthread [ 1267.604604][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9573'. [ 1267.611539][T10363] openvswitch: ovs-dp0: Dropping previously announced user features [ 1267.623995][T10363] netlink: 'syz.4.9573': attribute type 11 has an invalid length. [ 1267.953178][ T8843] bridge0: entered promiscuous mode [ 1268.031317][T10345] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1268.120571][ T5631] Bluetooth: hci5: command tx timeout [ 1268.250318][T10394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9582'. [ 1268.537737][T10406] ipt_ECN: cannot use operation on non-tcp rule [ 1268.544797][T10406] Bluetooth: hci0: unsupported parameter 5135 [ 1268.544821][T10406] Bluetooth: hci0: unsupported parameter 8192 [ 1268.544833][T10406] Bluetooth: hci0: unsupported parameter 5135 [ 1268.544845][T10406] Bluetooth: hci0: unsupported parameter 8192 [ 1268.557037][T10406] sctp: [Deprecated]: syz.3.9586 (pid 10406) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1268.557037][T10406] Use struct sctp_sack_info instead [ 1268.609833][T10406] ipvlan2: entered promiscuous mode [ 1268.631422][T10410] netlink: 'syz.0.9588': attribute type 3 has an invalid length. [ 1268.899454][T10423] netlink: 'syz.3.9590': attribute type 1 has an invalid length. [ 1268.977320][T10423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1269.122910][T10432] bond1: (slave ip6erspan0): making interface the new active one [ 1269.151440][T10432] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1269.306686][T10444] xt_l2tp: v2 doesn't support IP mode [ 1269.379843][T10450] Cannot find add_set index 34 as target [ 1269.507069][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9600'. [ 1269.619066][T10461] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9601'. [ 1269.619498][T10461] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9601'. [ 1269.723071][T10463] veth0: entered promiscuous mode [ 1269.857610][T10462] veth0: left promiscuous mode [ 1269.924771][T10476] syzkaller1: entered promiscuous mode [ 1269.924796][T10476] syzkaller1: entered allmulticast mode [ 1270.285424][T10495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9609'. [ 1270.313218][T10497] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1270.332177][T10492] ip6tnl1: entered allmulticast mode [ 1270.333491][T10497] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 1270.391939][T10497] netlink: Unknown nat attribute (0) [ 1270.391980][T10497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1270.636745][T10516] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9615'. [ 1270.909313][T10525] netlink: 'syz.1.9618': attribute type 2 has an invalid length. [ 1270.909335][T10525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9618'. [ 1271.067807][T10543] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1271.193615][T10547] geneve1: left promiscuous mode [ 1271.718766][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9631'. [ 1271.974204][T10573] rxe_eth0 speed is unknown, defaulting to 1000 [ 1271.992373][T10581] netlink: 'syz.3.9634': attribute type 1 has an invalid length. [ 1272.067294][T10580] bond2: entered promiscuous mode [ 1272.070045][T10580] bond2: entered allmulticast mode [ 1272.070962][T10580] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1272.167862][T10583] bridge2: entered promiscuous mode [ 1272.168035][T10583] bridge2: entered allmulticast mode [ 1272.179604][T30967] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1272.184272][T10583] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1272.310863][T10585] bridge3: entered promiscuous mode [ 1272.313805][T10585] bridge3: entered allmulticast mode [ 1272.316564][T10585] bond2: (slave bridge3): Enslaving as a backup interface with a down link [ 1272.347419][T30967] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1272.419207][T10585] bridge4: entered promiscuous mode [ 1272.419400][T10585] bridge4: entered allmulticast mode [ 1272.424377][T10585] bond2: (slave bridge4): Enslaving as a backup interface with a down link [ 1272.461888][T10590] tc_dump_action: action bad kind [ 1273.144250][T10573] lo speed is unknown, defaulting to 1000 [ 1273.340322][T10615] openvswitch: netlink: IP tunnel dst address not specified [ 1273.539738][T10636] netlink: 'syz.4.9642': attribute type 4 has an invalid length. [ 1273.763609][T10630] rxe_eth0 speed is unknown, defaulting to 1000 [ 1274.052266][T10646] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9646'. [ 1274.420851][T10652] syzkaller1: entered promiscuous mode [ 1274.420877][T10652] syzkaller1: entered allmulticast mode [ 1274.560022][T10662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9650'. [ 1274.562912][T10630] lo speed is unknown, defaulting to 1000 [ 1274.698494][T10677] netlink: 'syz.1.9653': attribute type 30 has an invalid length. [ 1274.805361][T10684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9654'. [ 1275.100649][T10693] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9658'. [ 1275.456308][T10712] netlink: 112 bytes leftover after parsing attributes in process `syz.0.9662'. [ 1275.622948][T10716] sctp: [Deprecated]: syz.3.9664 (pid 10716) Use of int in maxseg socket option. [ 1275.622948][T10716] Use struct sctp_assoc_value instead [ 1275.675540][T10719] netlink: 'syz.4.9665': attribute type 30 has an invalid length. [ 1276.090280][T10742] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1276.091059][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9671'. [ 1276.157322][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9671'. [ 1276.407714][T10757] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20002 [ 1276.528134][T10763] x_tables: unsorted entry at hook 3 [ 1276.565716][T10761] netlink: 'syz.2.9678': attribute type 30 has an invalid length. [ 1276.581008][T10766] netlink: 'syz.4.9679': attribute type 3 has an invalid length. [ 1276.773921][T10785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9684'. [ 1276.811090][T10785] netlink: 'syz.2.9684': attribute type 1 has an invalid length. [ 1276.873595][T10779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9683'. [ 1276.890898][T10778] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9683'. [ 1277.118334][ T30] audit: type=1800 audit(1792220791.869:90): pid=10800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9690" name="blkio.bfq.time" dev="tmpfs" ino=205 res=0 errno=0 [ 1277.497724][T10825] syzkaller0: entered promiscuous mode [ 1277.497747][T10825] syzkaller0: entered allmulticast mode [ 1279.095672][T10881] siw: device registration error -23 [ 1279.160723][T10887] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1279.523590][T10909] __nla_validate_parse: 61 callbacks suppressed [ 1279.523613][T10909] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9719'. [ 1279.836543][T10929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9725'. [ 1279.842917][T10926] syzkaller0: entered promiscuous mode [ 1279.842941][T10926] syzkaller0: entered allmulticast mode [ 1279.855877][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9726'. [ 1279.986344][T10935] syzkaller0: entered promiscuous mode [ 1279.986368][T10935] syzkaller0: entered allmulticast mode [ 1279.993685][T10935] tipc: Started in network mode [ 1279.993714][T10935] tipc: Node identity fe76948b4804, cluster identity 4711 [ 1279.993972][T10935] tipc: Enabled bearer , priority 0 [ 1280.008766][T30967] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1280.008814][T30967] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1280.008845][T30967] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1280.008875][T30967] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1280.095867][T10939] geneve1: entered promiscuous mode [ 1280.099708][T10939] siw: device registration error -23 [ 1280.220833][T10941] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9731'. [ 1280.307619][T10955] netlink: 'syz.0.9734': attribute type 1 has an invalid length. [ 1280.400088][T10955] bond1: entered promiscuous mode [ 1280.418748][T10955] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1280.484361][T10963] netlink: 'syz.2.9735': attribute type 3 has an invalid length. [ 1280.484388][T10963] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9735'. [ 1280.511313][T10966] netlink: 'syz.1.9737': attribute type 1 has an invalid length. [ 1280.511334][T10966] netlink: 'syz.1.9737': attribute type 3 has an invalid length. [ 1280.511348][T10966] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9737'. [ 1280.513928][T10955] bond1: (slave bridge1): making interface the new active one [ 1280.513950][T10955] bridge1: entered promiscuous mode [ 1280.514846][T10955] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1280.954279][T10999] ip_tables: iptables: counters copy to user failed while replacing table [ 1281.010171][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9746'. [ 1281.082869][T11006] siw: device registration error -23 [ 1281.116009][ T5798] tipc: Node number set to 3060962443 [ 1283.497014][T10966] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1283.497985][T10978] netlink: 'syz.1.9737': attribute type 1 has an invalid length. [ 1283.498013][T10978] netlink: 'syz.1.9737': attribute type 3 has an invalid length. [ 1283.498026][T10978] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9737'. [ 1283.743177][T11011] netlink: 'syz.4.9753': attribute type 1 has an invalid length. [ 1283.782855][T11011] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1283.803569][T11011] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1283.827920][T11011] bridge2: entered promiscuous mode [ 1283.842051][T11011] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 1283.860463][T11016] netlink: 'syz.3.9749': attribute type 1 has an invalid length. [ 1283.867886][T11020] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9752'. [ 1283.917289][T11020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9752'. [ 1284.061632][T11024] bond3: (slave geneve2): making interface the new active one [ 1284.062334][T11024] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1284.108007][T30966] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1284.111281][T27869] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1284.112739][T30984] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1284.112785][T30984] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1284.321011][T11039] IPv6: NLM_F_CREATE should be specified when creating new route [ 1284.323573][T11040] netlink: 'syz.3.9757': attribute type 1 has an invalid length. [ 1284.384583][T11037] tipc: Started in network mode [ 1284.384612][T11037] tipc: Node identity 1000001, cluster identity 4369 [ 1284.384625][T11037] tipc: Node number set to 16777217 [ 1284.391759][T11037] tipc: New replicast peer: 127.0.0.1 [ 1284.401755][T11037] tipc: Enabled bearer , priority 10 [ 1284.423236][T11046] siw: device registration error -23 [ 1284.676099][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.774755][T11052] tipc: Started in network mode [ 1284.774785][T11052] tipc: Node identity 72150261049f, cluster identity 4711 [ 1284.777500][T11052] tipc: Enabled bearer , priority 0 [ 1284.797349][T11053] +: renamed from syzkaller0 [ 1284.802717][T11053] tipc: Disabling bearer [ 1285.010295][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9763'. [ 1285.120092][T11067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9765'. [ 1285.123409][T11066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9765'. [ 1285.140068][T11067] bridge0: port 3(batadv1) entered blocking state [ 1285.141846][T11067] bridge0: port 3(batadv1) entered disabled state [ 1285.142002][T11067] batadv1: entered allmulticast mode [ 1285.152722][T11067] batadv1: entered promiscuous mode [ 1285.180176][T11066] bridge0: port 4(batadv2) entered blocking state [ 1285.182759][T11066] bridge0: port 4(batadv2) entered disabled state [ 1285.182935][T11066] batadv2: entered allmulticast mode [ 1285.190072][T11066] batadv2: entered promiscuous mode [ 1285.367207][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9768'. [ 1285.374665][T11080] ip6gretap1: entered allmulticast mode [ 1285.409908][T11080] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1285.409926][T11080] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1285.409952][T11080] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1285.454769][T11081] batadv0: entered promiscuous mode [ 1285.456457][T11081] macsec2: entered promiscuous mode [ 1285.456689][T11081] macsec2: entered allmulticast mode [ 1285.456702][T11081] batadv0: entered allmulticast mode [ 1285.467040][T11081] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1285.496638][T11081] batadv0: left allmulticast mode [ 1285.496845][T11081] batadv0: left promiscuous mode [ 1285.538443][T11083] siw: device registration error -23 [ 1285.628574][T30966] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1285.628601][T30966] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1285.666141][T30966] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 1285.666163][T30966] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 1285.761201][T11095] netlink: 'syz.4.9774': attribute type 4 has an invalid length. [ 1285.767378][T11095] netlink: 'syz.4.9774': attribute type 4 has an invalid length. [ 1285.923362][T11102] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9777'. [ 1286.002535][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9778'. [ 1286.002694][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9778'. [ 1286.051822][T11107] vxcan5: entered allmulticast mode [ 1286.223440][T11118] netlink: 'syz.3.9782': attribute type 1 has an invalid length. [ 1286.223461][T11118] netlink: 'syz.3.9782': attribute type 4 has an invalid length. [ 1286.223474][T11118] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.9782'. [ 1286.380226][T11123] netlink: 'syz.3.9783': attribute type 13 has an invalid length. [ 1286.380249][T11123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9783'. [ 1286.444117][T11125] netlink: NAT attribute has 1 unknown bytes [ 1286.444154][T11125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1286.461185][T11125] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9783'. [ 1286.718380][T11134] siw: device registration error -23 [ 1286.795982][T11139] syzkaller0: left promiscuous mode [ 1286.796004][T11139] syzkaller0: left allmulticast mode [ 1286.836150][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.999360][T11136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1287.003163][T11137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1287.103567][T11150] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003 [ 1287.160761][T11148] netlink: 'syz.4.9791': attribute type 10 has an invalid length. [ 1287.229436][T11148] team0 (unregistering): Port device team_slave_0 removed [ 1287.237523][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.259491][T11148] team0 (unregistering): Port device team_slave_1 removed [ 1287.283724][T11148] team0 (unregistering): Port device bond1 removed [ 1287.395959][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.466321][T11162] netlink: 'syz.3.9792': attribute type 1 has an invalid length. [ 1287.468678][T11167] netlink: 'syz.3.9792': attribute type 2 has an invalid length. [ 1287.511125][T11169] veth3: entered promiscuous mode [ 1287.651232][T11174] macvtap0: entered promiscuous mode [ 1287.802482][T11187] siw: device registration error -23 [ 1287.833700][T11190] xt_nfacct: accounting object `syz' does not exist [ 1287.881751][ T191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.987860][T11183] atomic_op ffff88807982c1e0 conn xmit_atomic 0000000000000000 [ 1288.310876][T11206] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1288.435449][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.914955][T11230] siw: device registration error -23 [ 1289.580364][T11247] nbd: must specify a device to reconfigure [ 1289.957966][ T8243] net_ratelimit: 12 callbacks suppressed [ 1289.960367][ T8243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.120159][T11273] netlink: 'syz.1.9825': attribute type 3 has an invalid length. [ 1290.195117][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.195862][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.196032][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.196082][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.207580][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.207954][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.292336][T11278] siw: device registration error -23 [ 1290.344508][T11280] __nla_validate_parse: 46 callbacks suppressed [ 1290.344532][T11280] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9828'. [ 1290.507368][T11284] x_tables: duplicate entry at hook 4 [ 1290.515619][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.612547][T11292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1290.995741][ T8243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.236389][T11284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1291.711717][T11332] siw: device registration error -23 [ 1291.930672][T11347] 8021q: VLANs not supported on ip6_vti0 [ 1292.491143][T11361] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 4032 [ 1292.640797][T11384] siw: device registration error -23 [ 1293.072513][T11403] netlink: 'syz.4.9864': attribute type 21 has an invalid length. [ 1293.429564][T11417] bond2: option ad_user_port_key: invalid value (65535) [ 1293.429590][T11417] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 1293.432011][T11417] bond2 (unregistering): Released all slaves [ 1293.501024][T11430] siw: device registration error -23 [ 1293.530718][T11432] syzkaller0: entered promiscuous mode [ 1293.530741][T11432] syzkaller0: entered allmulticast mode [ 1293.657690][T11423] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9872'. [ 1293.890345][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9877'. [ 1294.410638][T11465] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9883'. [ 1294.492285][T11473] geneve1: entered promiscuous mode [ 1294.515664][T11473] siw: device registration error -23 [ 1294.778158][T11490] erspan0: entered promiscuous mode [ 1294.782755][T11489] erspan0: left promiscuous mode [ 1294.886715][T11493] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9894'. [ 1295.114034][T11498] netlink: 'syz.0.9896': attribute type 9 has an invalid length. [ 1295.123821][T11479] syzkaller1: entered promiscuous mode [ 1295.123841][T11479] syzkaller1: entered allmulticast mode [ 1295.132689][T11479] netlink: 'syz.3.9889': attribute type 1 has an invalid length. [ 1295.156185][ T8243] net_ratelimit: 13 callbacks suppressed [ 1295.156206][ T8243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1295.566188][T31632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1295.634039][T11519] siw: device registration error -23 [ 1295.715339][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1295.771007][T11527] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9905'. [ 1295.856476][T11527] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1295.970544][T11527] bond7 (unregistering): Released all slaves [ 1296.241073][T11543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.244328][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.261468][T11544] Bluetooth: hci0: unsupported parameter 5134 [ 1296.261491][T11544] Bluetooth: hci0: invalid length 0, exp 2 for type 29 [ 1296.283070][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.438224][T11557] syzkaller0: entered promiscuous mode [ 1296.438247][T11557] syzkaller0: entered allmulticast mode [ 1296.607146][T11564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9912'. [ 1296.646444][T11566] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9913'. [ 1296.652676][T11545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9908'. [ 1296.652920][T11547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9908'. [ 1296.740086][T11571] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9915'. [ 1296.757208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.823234][T11572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.823869][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.841019][T11572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.902256][T11571] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9915'. [ 1296.943465][T11581] siw: device registration error -23 [ 1297.360734][T11590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9920'. [ 1297.425777][T11591] bridge1: entered allmulticast mode [ 1297.651891][T11596] netlink: 'syz.1.9922': attribute type 30 has an invalid length. [ 1297.731841][T11599] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 1297.878915][T11603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9923'. [ 1298.074005][T11609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9926'. [ 1298.314695][T11622] siw: device registration error -23 [ 1298.611029][T11631] netlink: 'syz.1.9934': attribute type 30 has an invalid length. [ 1299.183584][T11657] FAULT_INJECTION: forcing a failure. [ 1299.183584][T11657] name failslab, interval 1, probability 0, space 0, times 0 [ 1299.183617][T11657] CPU: 0 UID: 0 PID: 11657 Comm: syz.2.9942 Not tainted syzkaller #0 PREEMPT(full) [ 1299.183638][T11657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1299.183653][T11657] Call Trace: [ 1299.183661][T11657] [ 1299.183669][T11657] dump_stack_lvl+0xe8/0x150 [ 1299.183701][T11657] should_fail_ex+0x410/0x560 [ 1299.183738][T11657] should_failslab+0xa8/0x100 [ 1299.183769][T11657] ? sctp_chunkify+0x5a/0x260 [ 1299.183956][T11657] kmem_cache_alloc_noprof+0xa1/0x600 [ 1299.183978][T11657] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1299.184005][T11657] ? __alloc_skb+0x27a/0x7a0 [ 1299.184033][T11657] ? sctp_chunkify+0x5a/0x260 [ 1299.184064][T11657] sctp_chunkify+0x5a/0x260 [ 1299.184100][T11657] _sctp_make_chunk+0x122/0x290 [ 1299.184139][T11657] sctp_make_datafrag_empty+0x12a/0x240 [ 1299.184163][T11657] ? __kasan_kmalloc+0x93/0xb0 [ 1299.184202][T11657] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 1299.184228][T11657] ? sctp_datamsg_from_user+0x88/0xef0 [ 1299.184277][T11657] ? sctp_datamsg_from_user+0x88/0xef0 [ 1299.184307][T11657] ? sctp_auth_send_cid+0x69/0x250 [ 1299.184413][T11657] sctp_datamsg_from_user+0x735/0xef0 [ 1299.184466][T11657] sctp_sendmsg_to_asoc+0x1048/0x19c0 [ 1299.184548][T11657] ? __kernel_text_address+0xd/0x30 [ 1299.184597][T11657] ? lock_acquire+0x115/0x350 [ 1299.184621][T11657] ? do_raw_spin_lock+0x12b/0x2f0 [ 1299.184654][T11657] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1299.184698][T11657] ? sctp_sendmsg+0xbb8/0x2d00 [ 1299.184729][T11657] ? sctp_sendmsg_check_sflags+0x18a/0x330 [ 1299.184760][T11657] sctp_sendmsg+0x1bb5/0x2d00 [ 1299.184816][T11657] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1299.184841][T11657] ? process_measurement+0x7b2/0x1c10 [ 1299.184909][T11657] ? up_write+0x19d/0x4a0 [ 1299.184941][T11657] ? __mutex_trylock_common+0x15f/0x270 [ 1299.184966][T11657] ? aa_sock_msg_perm+0xf5/0x210 [ 1299.185010][T11657] ? sock_rps_record_flow+0x19/0x350 [ 1299.185071][T11657] ? inet_sendmsg+0x298/0x320 [ 1299.185092][T11657] ? apparmor_socket_sendmsg+0x98/0x360 [ 1299.185117][T11657] ? __pfx_inet_sendmsg+0x10/0x10 [ 1299.185138][T11657] sock_sendmsg_nosec+0x10f/0x190 [ 1299.185162][T11657] sock_sendmsg+0x1ca/0x2d0 [ 1299.185187][T11657] ? __pfx_sock_sendmsg+0x10/0x10 [ 1299.185219][T11657] ? __asan_memset+0x22/0x50 [ 1299.185239][T11657] ? iov_iter_bvec+0xb8/0x180 [ 1299.185267][T11657] splice_to_socket+0xb5e/0x12a0 [ 1299.185307][T11657] ? __pfx_splice_to_socket+0x10/0x10 [ 1299.185379][T11657] ? bpf_lsm_file_permission+0x9/0x20 [ 1299.185405][T11657] ? security_file_permission+0x75/0x260 [ 1299.185463][T11657] ? rw_verify_area+0x203/0x4c0 [ 1299.185482][T11657] ? __pfx_splice_to_socket+0x10/0x10 [ 1299.185499][T11657] do_splice+0xf14/0x1970 [ 1299.185522][T11657] ? lock_acquire+0x115/0x350 [ 1299.185562][T11657] ? __pfx_do_splice+0x10/0x10 [ 1299.185591][T11657] __se_sys_splice+0x353/0x490 [ 1299.185616][T11657] ? __pfx___se_sys_splice+0x10/0x10 [ 1299.185642][T11657] ? __x64_sys_splice+0x21/0xf0 [ 1299.185670][T11657] do_syscall_64+0x166/0x520 [ 1299.185693][T11657] ? trace_irq_disable+0x3b/0x140 [ 1299.185712][T11657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.185730][T11657] ? clear_bhb_loop+0x70/0xc0 [ 1299.185754][T11657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.185772][T11657] RIP: 0033:0x7f5504f9e559 [ 1299.185791][T11657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1299.185804][T11657] RSP: 002b:00007f5505e4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1299.185823][T11657] RAX: ffffffffffffffda RBX: 00007f5505225fa0 RCX: 00007f5504f9e559 [ 1299.185837][T11657] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1299.185847][T11657] RBP: 00007f5505e4f090 R08: 001100000000f336 R09: 0000000000000000 [ 1299.185859][T11657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1299.185869][T11657] R13: 00007f5505226038 R14: 00007f5505225fa0 R15: 00007ffd94bbb438 [ 1299.185900][T11657] [ 1299.492587][T11662] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 1299.724239][T11671] netlink: 'syz.2.9946': attribute type 30 has an invalid length. [ 1299.991373][T11687] pimreg: entered allmulticast mode [ 1300.083822][T11691] xt_time: unknown flags 0x4 [ 1300.440330][T11707] FAULT_INJECTION: forcing a failure. [ 1300.440330][T11707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1300.440362][T11707] CPU: 0 UID: 0 PID: 11707 Comm: syz.0.9956 Not tainted syzkaller #0 PREEMPT(full) [ 1300.440383][T11707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1300.440394][T11707] Call Trace: [ 1300.440401][T11707] [ 1300.440410][T11707] dump_stack_lvl+0xe8/0x150 [ 1300.440441][T11707] should_fail_ex+0x410/0x560 [ 1300.440472][T11707] _copy_to_user+0x31/0xb0 [ 1300.440502][T11707] simple_read_from_buffer+0xe1/0x170 [ 1300.440533][T11707] proc_fail_nth_read+0x1bb/0x230 [ 1300.440552][T11707] ? common_file_perm+0x20e/0x2b0 [ 1300.440581][T11707] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1300.440606][T11707] ? rw_verify_area+0x24a/0x4c0 [ 1300.440627][T11707] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1300.440646][T11707] vfs_read+0x213/0xa80 [ 1300.440667][T11707] ? __pfx___mutex_lock+0x10/0x10 [ 1300.440692][T11707] ? __pfx_vfs_read+0x10/0x10 [ 1300.440719][T11707] ? __fget_files+0x2a/0x420 [ 1300.440752][T11707] ? __fget_files+0x3a2/0x420 [ 1300.440777][T11707] ? __fget_files+0x2a/0x420 [ 1300.440811][T11707] ksys_read+0x150/0x270 [ 1300.440830][T11707] ? __pfx_ksys_read+0x10/0x10 [ 1300.440859][T11707] do_syscall_64+0x166/0x520 [ 1300.440882][T11707] ? trace_irq_disable+0x3b/0x140 [ 1300.440899][T11707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.440918][T11707] ? clear_bhb_loop+0x70/0xc0 [ 1300.440942][T11707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.440962][T11707] RIP: 0033:0x7f057295ed8e [ 1300.440979][T11707] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1300.440994][T11707] RSP: 002b:00007f05737d0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1300.441012][T11707] RAX: ffffffffffffffda RBX: 00007f05737d16c0 RCX: 00007f057295ed8e [ 1300.441025][T11707] RDX: 000000000000000f RSI: 00007f05737d10a0 RDI: 0000000000000006 [ 1300.441037][T11707] RBP: 00007f05737d1090 R08: 0000000000000000 R09: 0000000000000000 [ 1300.441049][T11707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1300.441060][T11707] R13: 00007f0572c26038 R14: 00007f0572c25fa0 R15: 00007fff57d42828 [ 1300.441091][T11707] [ 1300.512470][T11710] syzkaller1: entered promiscuous mode [ 1300.512493][T11710] syzkaller1: entered allmulticast mode [ 1300.781873][T11718] netlink: 'syz.3.9959': attribute type 30 has an invalid length. [ 1300.807264][T11720] sctp: [Deprecated]: syz.2.9961 (pid 11720) Use of int in max_burst socket option. [ 1300.807264][T11720] Use struct sctp_assoc_value instead [ 1301.046709][T11726] __nla_validate_parse: 3 callbacks suppressed [ 1301.046732][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9963'. [ 1301.149531][T11729] netlink: 964 bytes leftover after parsing attributes in process `syz.0.9965'. [ 1301.149561][T11729] net_ratelimit: 10 callbacks suppressed [ 1301.149572][T11729] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1301.846914][T11754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9969'. [ 1301.847245][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9969'. [ 1302.109676][T11757] openvswitch: netlink: EtherType 500 is less than min 600 [ 1302.136452][T11740] geneve3: entered promiscuous mode [ 1302.142120][T30964] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 54469 - 0 [ 1302.142222][T30964] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 54469 - 0 [ 1302.142297][T30964] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 54469 - 0 [ 1302.142330][T30964] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 54469 - 0 [ 1302.298547][T11747] syzkaller1: entered promiscuous mode [ 1302.298571][T11747] syzkaller1: entered allmulticast mode [ 1302.710732][T11774] netlink: 'syz.2.9974': attribute type 30 has an invalid length. [ 1302.854664][T11789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9978'. [ 1302.903153][T11788] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9978'. [ 1303.019365][T11788] xt_hashlimit: size too large, truncated to 1048576 [ 1303.051162][T11789] xt_hashlimit: size too large, truncated to 1048576 [ 1303.152821][T11795] bond4: option fail_over_mac: invalid value (127) [ 1303.168281][T11795] bond4 (unregistering): Released all slaves [ 1303.522292][T11824] syzkaller1: entered promiscuous mode [ 1303.522315][T11824] syzkaller1: entered allmulticast mode [ 1303.537263][T11788] xt_hashlimit: size too large, truncated to 1048576 [ 1303.588756][T11827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9987'. [ 1303.829787][T11834] SET target dimension over the limit! [ 1303.839614][T11835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9991'. [ 1304.150406][T11860] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9999'. [ 1304.153942][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9999'. [ 1304.183351][T11860] vlan2: entered allmulticast mode [ 1304.334296][T11869] bond7: option packets_per_slave: invalid value (134217728) [ 1304.334322][T11869] bond7: option packets_per_slave: allowed values 0 - 65535 [ 1304.352960][T11869] bond7 (unregistering): Released all slaves [ 1304.860836][T11885] netlink: 'syz.3.10006': attribute type 41 has an invalid length. [ 1305.142769][T11885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.143454][T11885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.387716][T11885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1305.427094][T11885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1305.711907][T11885] tipc: Resetting bearer [ 1305.826504][T30964] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1305.826538][T30964] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.826559][T30964] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1305.826580][T30964] netdevsim netdevsim3 netdevsim0: unset [1, 2] type 2 family 0 port 54469 - 0 [ 1305.897532][T11932] bridge0: entered promiscuous mode [ 1305.915546][T30966] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1305.915579][T30966] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.915601][T30966] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1305.915623][T30966] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 54469 - 0 [ 1305.915657][T30966] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1305.915679][T30966] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.915702][T30966] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1305.915724][T30966] netdevsim netdevsim3 netdevsim2: unset [1, 2] type 2 family 0 port 54469 - 0 [ 1305.915756][T30966] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1305.915779][T30966] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.915799][T30966] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1305.915819][T30966] netdevsim netdevsim3 netdevsim3: unset [1, 2] type 2 family 0 port 54469 - 0 [ 1306.204625][T11946] Cannot find map_set index 2 as target [ 1306.484248][T11964] syzkaller1: entered promiscuous mode [ 1306.484268][T11964] syzkaller1: entered allmulticast mode [ 1307.037527][T11957] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1308.492016][T11930] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1308.514136][T11974] __nla_validate_parse: 1 callbacks suppressed [ 1308.514156][T11974] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.10022'. [ 1308.703907][T11981] netlink: 'syz.3.10023': attribute type 39 has an invalid length. [ 1308.804157][T11988] netlink: 'syz.0.10024': attribute type 12 has an invalid length. [ 1308.872423][T11992] xt_hashlimit: size too large, truncated to 1048576 [ 1308.884650][T11994] tipc: Started in network mode [ 1308.884686][T11994] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 1308.884872][T11994] tipc: Enabled bearer , priority 7 [ 1308.954051][T11999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10023'. [ 1309.558296][T12031] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10039'. [ 1309.590895][T12033] siw: device registration error -23 [ 1310.023859][ T5800] tipc: Node number set to 9480874 [ 1310.042191][T12047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10044'. [ 1310.117488][T12059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10044'. [ 1310.161756][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10047'. [ 1310.226468][T12063] macvlan2: entered promiscuous mode [ 1310.226560][T12063] macvlan2: entered allmulticast mode [ 1310.226843][T12063] geneve1: entered allmulticast mode [ 1310.233935][T12063] team0: Port device macvlan2 added [ 1310.403359][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 10 > 9 [ 1310.424503][T12076] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1310.431883][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10051'. [ 1310.822394][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10053'. [ 1310.847263][T12096] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10053'. [ 1311.231821][T12106] bridge_slave_0: left allmulticast mode [ 1311.231848][T12106] bridge_slave_0: left promiscuous mode [ 1311.233268][T12106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.331085][T12106] bridge_slave_1: left allmulticast mode [ 1311.331111][T12106] bridge_slave_1: left promiscuous mode [ 1311.331321][T12106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.377721][T12111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10058'. [ 1311.431465][T12106] bond0: (slave bond_slave_0): Releasing backup interface [ 1311.501237][T12106] bond0: (slave bond_slave_1): Releasing backup interface [ 1311.545805][T12106] team0: Port device team_slave_0 removed [ 1311.568410][T12106] team0: Port device team_slave_1 removed [ 1311.570878][T12106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1311.570901][T12106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1311.572462][T12106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1311.572481][T12106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.621638][T12106] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1311.646305][T12110] team0: Mode changed to "broadcast" [ 1311.690975][T12116] vlan0: entered promiscuous mode [ 1311.781583][T12116] team0: Port device vlan0 added [ 1311.826646][T12120] tipc: Enabled bearer , priority 0 [ 1312.061412][T12099] netlink: 'syz.3.10056': attribute type 2 has an invalid length. [ 1312.976073][T12184] gre2: entered promiscuous mode [ 1313.070701][T12194] netlink: 'syz.0.10079': attribute type 4 has an invalid length. [ 1313.275570][T12199] pimreg0: tun_chr_ioctl cmd 1074025677 [ 1313.276045][T12199] pimreg0: linktype set to 778 [ 1313.548583][T12219] xt_limit: Overflow, try lower: 6/2147483648 [ 1313.634259][T12217] netlink: 'syz.2.10087': attribute type 26 has an invalid length. [ 1313.852117][T12234] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1314.037442][T12244] __nla_validate_parse: 5 callbacks suppressed [ 1314.037458][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10097'. [ 1314.043561][T12244] ovs-dp0: entered promiscuous mode [ 1314.111362][T12248] netlink: 'syz.1.10097': attribute type 11 has an invalid length. [ 1314.333905][T12253] ip6t_REJECT: ECHOREPLY is not supported [ 1314.361739][T12252] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.491649][T12252] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.517319][ T5631] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1314.866543][T12252] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.063244][T12252] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.141617][T12272] geneve4: entered promiscuous mode [ 1315.153283][T12277] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10105'. [ 1315.179278][T30982] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.179323][T30982] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.179355][T30982] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.179386][T30982] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.193248][T12282] syzkaller0: entered promiscuous mode [ 1315.193269][T12282] syzkaller0: entered allmulticast mode [ 1315.207250][T12284] netlink: 220 bytes leftover after parsing attributes in process `syz.2.10107'. [ 1315.412539][T12286] pim6reg1: entered promiscuous mode [ 1315.412560][T12286] pim6reg1: entered allmulticast mode [ 1315.414776][T30990] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.417192][T30941] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.505042][T30990] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.505109][T30990] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.548411][T12296] ip6gre1: entered allmulticast mode [ 1315.553871][T30941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1315.862465][T12316] netlink: 'syz.3.10119': attribute type 30 has an invalid length. [ 1315.914498][T12318] x_tables: duplicate underflow at hook 3 [ 1316.435914][T12343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10130'. [ 1316.440031][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10130'. [ 1316.594613][T12348] netlink: 'syz.1.10131': attribute type 30 has an invalid length. [ 1316.845431][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10135'. [ 1316.867465][T12365] rxe_eth0 speed is unknown, defaulting to 1000 [ 1316.867673][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10134'. [ 1316.890325][T12371] ip6gre1: entered promiscuous mode [ 1316.890346][T12371] ip6gre1: entered allmulticast mode [ 1316.951875][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10134'. [ 1317.052980][T12387] FAULT_INJECTION: forcing a failure. [ 1317.052980][T12387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1317.053013][T12387] CPU: 0 UID: 0 PID: 12387 Comm: syz.3.10139 Not tainted syzkaller #0 PREEMPT(full) [ 1317.053034][T12387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1317.053045][T12387] Call Trace: [ 1317.053052][T12387] [ 1317.053061][T12387] dump_stack_lvl+0xe8/0x150 [ 1317.053092][T12387] should_fail_ex+0x410/0x560 [ 1317.053123][T12387] _copy_from_user+0x2d/0xb0 [ 1317.053152][T12387] kstrtouint_from_user+0xd6/0x180 [ 1317.053180][T12387] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1317.053214][T12387] ? lock_acquire+0x115/0x350 [ 1317.053240][T12387] proc_fail_nth_write+0x8e/0x210 [ 1317.053262][T12387] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1317.053293][T12387] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1317.053314][T12387] vfs_write+0x296/0xba0 [ 1317.053343][T12387] ? __pfx_vfs_write+0x10/0x10 [ 1317.053365][T12387] ? __fget_files+0x2a/0x420 [ 1317.053397][T12387] ? __fget_files+0x3a2/0x420 [ 1317.053423][T12387] ? __fget_files+0x2a/0x420 [ 1317.053460][T12387] ksys_write+0x150/0x270 [ 1317.053482][T12387] ? __pfx_ksys_write+0x10/0x10 [ 1317.053521][T12387] do_syscall_64+0x166/0x520 [ 1317.053545][T12387] ? trace_irq_disable+0x3b/0x140 [ 1317.053565][T12387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.053584][T12387] ? clear_bhb_loop+0x70/0xc0 [ 1317.053608][T12387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.053628][T12387] RIP: 0033:0x7f08d415ed8e [ 1317.053645][T12387] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1317.053661][T12387] RSP: 002b:00007f08d50f8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1317.053681][T12387] RAX: ffffffffffffffda RBX: 00007f08d50f96c0 RCX: 00007f08d415ed8e [ 1317.053695][T12387] RDX: 0000000000000001 RSI: 00007f08d50f90a0 RDI: 0000000000000004 [ 1317.053707][T12387] RBP: 00007f08d50f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1317.053719][T12387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1317.053731][T12387] R13: 00007f08d4426038 R14: 00007f08d4425fa0 R15: 00007fffda7021f8 [ 1317.053765][T12387] [ 1317.226000][T12383] syzkaller0: MTU not usable for tipc bearer [ 1317.226036][T12383] tipc: Enabling of bearer rejected, failed to enable media [ 1317.388351][T12377] rxe_eth0 speed is unknown, defaulting to 1000 [ 1317.391918][T12365] lo speed is unknown, defaulting to 1000 [ 1317.824291][T12402] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1317.942434][T12408] netlink: 'syz.2.10144': attribute type 30 has an invalid length. [ 1318.050505][T12377] lo speed is unknown, defaulting to 1000 [ 1318.142692][T12422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10149'. [ 1318.142793][T12422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10149'. [ 1318.506426][T12440] netlink: 'syz.2.10155': attribute type 30 has an invalid length. [ 1318.559031][T12442] netlink: 'syz.2.10155': attribute type 30 has an invalid length. [ 1318.605874][T30982] IPVS: starting estimator thread 0... [ 1318.623130][T12440] vxlan0: entered promiscuous mode [ 1318.623153][T12440] vxlan0: entered allmulticast mode [ 1318.664056][T12442] vxlan1: entered promiscuous mode [ 1318.664081][T12442] vxlan1: entered allmulticast mode [ 1318.695233][T12445] IPVS: using max 32 ests per chain, 76800 per kthread [ 1318.716458][T30969] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1318.716702][T30969] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1318.716736][T30969] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1318.716767][T30969] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1318.761341][T12449] netlink: 'syz.0.10157': attribute type 30 has an invalid length. [ 1318.841472][T12451] siw: device registration error -23 [ 1319.030569][T12458] macvtap1: entered allmulticast mode [ 1319.030593][T12458] veth0_to_bridge: entered allmulticast mode [ 1319.034008][T12458] veth0_to_bridge: left allmulticast mode [ 1319.466458][T12485] netlink: 'syz.2.10171': attribute type 30 has an invalid length. [ 1319.599387][T12490] netlink: 'syz.3.10170': attribute type 5 has an invalid length. [ 1319.614397][T12489] siw: device registration error -23 [ 1319.635213][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1319.776936][T12498] netlink: 'syz.1.10174': attribute type 11 has an invalid length. [ 1320.146072][T12517] netlink: 'syz.4.10182': attribute type 30 has an invalid length. [ 1320.238551][ T5631] block nbd4: Receive control failed (result -32) [ 1320.278114][T12521] siw: device registration error -23 [ 1320.730847][T12550] netdevsim netdevsim0: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 1320.873994][T12544] rxe_eth0 speed is unknown, defaulting to 1000 [ 1320.920896][T12560] netlink: 'syz.0.10195': attribute type 30 has an invalid length. [ 1321.162947][T12573] __nla_validate_parse: 6 callbacks suppressed [ 1321.162970][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10198'. [ 1321.196644][T12573] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1321.223939][T12573] erspan0: entered promiscuous mode [ 1321.729309][T12544] lo speed is unknown, defaulting to 1000 [ 1321.738948][T12586] siw: device registration error -23 [ 1322.596757][T12632] nbd: couldn't find a device at index 0 [ 1322.604462][T12633] nbd: couldn't find a device at index 0 [ 1322.620995][T12632] netlink: 'syz.0.10209': attribute type 9 has an invalid length. [ 1322.849588][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10212'. [ 1323.230413][T12657] siw: device registration error -23 [ 1323.390627][T12668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10217'. [ 1323.390672][T12668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10217'. [ 1323.478633][T12668] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1323.482159][T12668] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10217'. [ 1323.602343][T12679] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10222'. [ 1323.628501][T12680] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10222'. [ 1323.909642][T12698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10227'. [ 1323.933640][T12700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10228'. [ 1324.092408][T12708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10233'. [ 1324.194058][T12711] siw: device registration error -23 [ 1324.288598][T12721] netlink: 'syz.3.10234': attribute type 1 has an invalid length. [ 1324.646868][T12740] bond3: entered allmulticast mode [ 1324.720640][T12747] batman_adv: batadv0: Adding interface: syzkaller0 [ 1324.720664][T12747] batman_adv: batadv0: Interface activated: syzkaller0 [ 1325.578730][T12784] siw: device registration error -23 [ 1325.831338][T12796] netlink: 'syz.1.10255': attribute type 1 has an invalid length. [ 1325.882066][T12799] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1326.169316][T12819] __nla_validate_parse: 11 callbacks suppressed [ 1326.170065][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10264'. [ 1326.170089][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10264'. [ 1326.208605][T30941] IPVS: starting estimator thread 0... [ 1326.212209][T12800] syzkaller0: entered promiscuous mode [ 1326.212233][T12800] syzkaller0: entered allmulticast mode [ 1326.214023][T12819] netlink: 108 bytes leftover after parsing attributes in process `syz.4.10264'. [ 1326.240123][T12823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10263'. [ 1326.302250][T12826] IPVS: using max 33 ests per chain, 79200 per kthread [ 1328.203783][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1330.452944][T12830] net wpan0: Using DEBUGing ioctl SIOCSIFADDR isn't recommended! [ 1330.572163][T12838] siw: device registration error -23 [ 1331.028659][T12867] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1331.240080][T12878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10279'. [ 1331.262169][T12875] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1331.553597][T12887] siw: device registration error -23 [ 1332.192965][T12917] ip6t_srh: unknown srh invflags 4000 [ 1332.426241][T12914] netlink: Failed to add helper -22 [ 1332.426292][T12914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1332.458314][T12914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10291'. [ 1332.655895][T12941] netlink: 112 bytes leftover after parsing attributes in process `syz.1.10297'. [ 1332.759017][T12944] veth0: entered promiscuous mode [ 1332.773498][T12946] siw: device registration error -23 [ 1332.786386][T12944] bond0: entered promiscuous mode [ 1332.787868][T12944] bond0: left promiscuous mode [ 1332.788233][T12944] veth0: left promiscuous mode [ 1332.894068][T12950] vlan2: entered promiscuous mode [ 1332.894082][T12950] hsr0: entered promiscuous mode [ 1332.894211][T12950] vlan2: entered allmulticast mode [ 1332.894219][T12950] hsr0: entered allmulticast mode [ 1332.894225][T12950] hsr_slave_0: entered allmulticast mode [ 1333.153160][T12967] netlink: 'syz.0.10306': attribute type 1 has an invalid length. [ 1333.154555][T12968] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10305'. [ 1333.193987][T12967] bond4: entered promiscuous mode [ 1333.195900][T12967] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1333.243382][T12967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10306'. [ 1333.289334][T12967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10306'. [ 1333.361798][T12967] bond4 (unregistering): Released all slaves [ 1333.401579][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10310'. [ 1333.510758][T12983] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10311'. [ 1333.839516][T13010] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10318'. [ 1334.156865][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10326'. [ 1334.223222][T13037] veth0_to_bridge: entered allmulticast mode [ 1334.227255][T13037] veth0: mtu less than device minimum [ 1334.974813][T13076] syzkaller0: entered promiscuous mode [ 1334.974839][T13076] syzkaller0: entered allmulticast mode [ 1335.163226][T13090] tc_dump_action: action bad kind [ 1335.391466][T13094] netlink: 'syz.4.10342': attribute type 4 has an invalid length. [ 1335.504790][T13105] vlan3: entered promiscuous mode [ 1335.504814][T13105] hsr0: entered promiscuous mode [ 1335.506594][T13105] vlan3: entered allmulticast mode [ 1335.506613][T13105] hsr0: entered allmulticast mode [ 1335.506624][T13105] hsr_slave_0: entered allmulticast mode [ 1335.506639][T13105] hsr_slave_1: entered allmulticast mode [ 1335.541833][T13105] hsr_slave_0: left promiscuous mode [ 1335.542872][T13105] hsr_slave_1: left promiscuous mode [ 1335.841230][T13116] syzkaller1: entered promiscuous mode [ 1335.841253][T13116] syzkaller1: entered allmulticast mode [ 1336.074529][T13133] netlink: 'syz.2.10353': attribute type 30 has an invalid length. [ 1336.194514][T13138] bond3: entered promiscuous mode [ 1336.194538][T13138] bond3: entered allmulticast mode [ 1336.468650][T13157] __nla_validate_parse: 14 callbacks suppressed [ 1336.468672][T13157] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10361'. [ 1336.468692][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10361'. [ 1336.468707][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10361'. [ 1336.684251][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10363'. [ 1336.702837][T13166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1336.787439][T13172] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10367'. [ 1336.847649][T13174] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10365'. [ 1336.847680][T13174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10365'. [ 1336.847695][T13174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10365'. [ 1338.039733][T13202] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1338.055326][T13202] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10379'. [ 1338.155686][T13207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10380'. [ 1338.311067][T13207] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1339.500581][T12164] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1339.558863][T13267] netlink: 'syz.0.10395': attribute type 30 has an invalid length. [ 1339.597252][T13260] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1339.760366][ T30] audit: type=1804 audit(1792220854.509:91): pid=13272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.10397" name="/newroot/262/cgroup.controllers" dev="tmpfs" ino=1357 res=1 errno=0 [ 1339.761331][ T30] audit: type=1800 audit(1792220854.509:92): pid=13272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10397" name="cgroup.controllers" dev="tmpfs" ino=1357 res=0 errno=0 [ 1340.218987][T30941] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1340.219038][T30941] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1340.219071][T30941] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1340.219101][T30941] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1340.433419][T13301] netlink: 'syz.3.10406': attribute type 30 has an invalid length. [ 1340.682746][T13276] netlink: 'syz.1.10399': attribute type 1 has an invalid length. [ 1340.859948][T13276] geneve2: entered promiscuous mode [ 1341.189583][T13331] netlink: 'syz.4.10416': attribute type 64 has an invalid length. [ 1341.388981][T13343] netlink: 'syz.0.10418': attribute type 30 has an invalid length. [ 1341.632780][T13355] syzkaller0: entered promiscuous mode [ 1341.632804][T13355] syzkaller0: entered allmulticast mode [ 1341.747710][T13364] IPv6: NLM_F_CREATE should be specified when creating new route [ 1341.747802][T13364] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1341.747811][T13364] IPv6: NLM_F_CREATE should be set when creating new route [ 1341.747847][T13364] IPv6: NLM_F_CREATE should be set when creating new route [ 1341.747869][T13364] IPv6: NLM_F_CREATE should be set when creating new route [ 1341.748232][T13364] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1342.237822][T13383] netlink: 'syz.1.10433': attribute type 30 has an invalid length. [ 1342.303857][T13388] ip_tables: iptables: counters copy to user failed while replacing table [ 1342.370522][T13393] __nla_validate_parse: 7 callbacks suppressed [ 1342.370541][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10436'. [ 1342.370555][T13393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10436'. [ 1342.535834][T13399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10437'. [ 1342.563296][T13399] veth5: entered allmulticast mode [ 1342.614856][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10439'. [ 1342.690707][T13408] ip_tables: iptables: counters copy to user failed while replacing table [ 1342.885167][T13408] tipc: Resetting bearer [ 1343.225290][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10443'. [ 1343.390529][T13426] netlink: 'syz.0.10445': attribute type 30 has an invalid length. [ 1343.451201][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10443'. [ 1343.533552][T13416] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1343.548713][T13416] bond7 (unregistering): Released all slaves [ 1343.705759][T12164] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.705901][T12164] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.723927][ T5621] Bluetooth: hci1: command 0x0406 tx timeout [ 1343.734948][T12164] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.735232][T12164] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.961602][T13458] veth1_to_team: entered promiscuous mode [ 1343.984445][T13461] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 1343.988399][T13460] netlink: 'syz.3.10457': attribute type 30 has an invalid length. [ 1344.845897][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1344.988928][T13473] ip_tables: iptables: counters copy to user failed while replacing table [ 1345.080890][T13482] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10464'. [ 1345.255204][T13488] netlink: 'syz.1.10466': attribute type 1 has an invalid length. [ 1345.281072][T13491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10466'. [ 1345.490132][T13497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10465'. [ 1345.567191][T13498] netlink: 'syz.3.10468': attribute type 30 has an invalid length. [ 1345.650565][T13489] gretap1: entered allmulticast mode [ 1345.729840][T13489] bond4: (slave gretap1): making interface the new active one [ 1345.730611][T13489] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1346.007527][T13512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10471'. [ 1346.164656][T13521] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1346.295548][T13531] batman_adv: batadv0: Adding interface: syzkaller0 [ 1346.295575][T13531] batman_adv: batadv0: Interface activated: syzkaller0 [ 1346.374167][T13536] syzkaller0: MTU not usable for tipc bearer [ 1346.374206][T13536] tipc: Enabling of bearer rejected, failed to enable media [ 1346.505459][T13540] netlink: 'syz.3.10480': attribute type 30 has an invalid length. [ 1346.558402][T13542] netlink: 'syz.2.10483': attribute type 10 has an invalid length. [ 1346.755766][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.124864][T13575] FAULT_INJECTION: forcing a failure. [ 1347.124864][T13575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1347.124898][T13575] CPU: 0 UID: 0 PID: 13575 Comm: syz.2.10490 Not tainted syzkaller #0 PREEMPT(full) [ 1347.124921][T13575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1347.124933][T13575] Call Trace: [ 1347.124941][T13575] [ 1347.124950][T13575] dump_stack_lvl+0xe8/0x150 [ 1347.124980][T13575] should_fail_ex+0x410/0x560 [ 1347.125007][T13575] _copy_from_iter+0x1d3/0x1660 [ 1347.125031][T13575] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1347.125057][T13575] ? __pfx_policy_nodemask+0x10/0x10 [ 1347.125080][T13575] ? lock_acquire+0x115/0x350 [ 1347.125098][T13575] ? __pfx__copy_from_iter+0x10/0x10 [ 1347.125124][T13575] ? alloc_pages_mpol+0x256/0x390 [ 1347.125156][T13575] copy_page_from_iter+0x219/0x2d0 [ 1347.125183][T13575] tun_get_user+0x20b7/0x4450 [ 1347.125210][T13575] ? tun_get_user+0x6de/0x4450 [ 1347.125246][T13575] ? aa_file_perm+0x4ed/0x15f0 [ 1347.125263][T13575] ? __pfx_tun_get_user+0x10/0x10 [ 1347.125288][T13575] ? __lock_acquire+0x747/0x2de0 [ 1347.125321][T13575] ? ref_tracker_alloc+0x172/0x530 [ 1347.125344][T13575] ? lock_acquire+0x115/0x350 [ 1347.125364][T13575] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1347.125390][T13575] ? lock_acquire+0x115/0x350 [ 1347.125405][T13575] ? tun_get+0x1c/0x2f0 [ 1347.125432][T13575] ? tun_get+0x1c/0x2f0 [ 1347.125452][T13575] ? tun_get+0x1c/0x2f0 [ 1347.125479][T13575] tun_chr_write_iter+0x113/0x200 [ 1347.125501][T13575] vfs_write+0x612/0xba0 [ 1347.125529][T13575] ? __pfx_vfs_write+0x10/0x10 [ 1347.125556][T13575] ? __fget_files+0x2a/0x420 [ 1347.125593][T13575] ksys_write+0x150/0x270 [ 1347.125612][T13575] ? __pfx_ksys_write+0x10/0x10 [ 1347.125642][T13575] do_syscall_64+0x166/0x520 [ 1347.125666][T13575] ? trace_irq_disable+0x3b/0x140 [ 1347.125686][T13575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.125704][T13575] ? clear_bhb_loop+0x70/0xc0 [ 1347.125726][T13575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.125745][T13575] RIP: 0033:0x7f5504f5ed8e [ 1347.125763][T13575] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1347.125777][T13575] RSP: 002b:00007f5505e4efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1347.125805][T13575] RAX: ffffffffffffffda RBX: 00007f5505e4f6c0 RCX: 00007f5504f5ed8e [ 1347.125819][T13575] RDX: 000000000000002a RSI: 0000200000000800 RDI: 00000000000000c8 [ 1347.125832][T13575] RBP: 00007f5505e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 1347.125844][T13575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1347.125856][T13575] R13: 00007f5505226038 R14: 00007f5505225fa0 R15: 00007ffd94bbb438 [ 1347.125888][T13575] [ 1347.510311][T13592] __nla_validate_parse: 4 callbacks suppressed [ 1347.510332][T13592] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10493'. [ 1347.545925][T13596] syzkaller0: entered promiscuous mode [ 1347.545948][T13596] syzkaller0: entered allmulticast mode [ 1347.548967][T13596] tipc: Enabled bearer , priority 0 [ 1347.576685][T13587] tipc: Resetting bearer [ 1347.623828][T13587] tipc: Disabling bearer [ 1347.651524][T13600] netlink: 'syz.3.10497': attribute type 30 has an invalid length. [ 1347.808343][T13614] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1347.862866][T13598] nbd0: detected capacity change from 0 to 63 [ 1347.866305][T13601] block nbd0: NBD_DISCONNECT [ 1347.888852][ T1957] [ 1347.891268][ T1957] ====================================================== [ 1347.898296][ T1957] WARNING: possible circular locking dependency detected [ 1347.903025][T13601] block nbd0: Disconnected due to user request. [ 1347.903057][T13601] block nbd0: shutting down sockets [ 1347.917414][ T1957] syzkaller #0 Not tainted [ 1347.921835][ T1957] ------------------------------------------------------ [ 1347.928857][ T1957] kworker/0:1H/1957 is trying to acquire lock: [ 1347.935022][ T1957] ffff88804693e268 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0xff0 [ 1347.944121][ T1957] [ 1347.944121][ T1957] but task is already holding lock: [ 1347.951525][ T1957] ffff888073c77178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 1347.959986][ T1957] [ 1347.959986][ T1957] which lock already depends on the new lock. [ 1347.959986][ T1957] [ 1347.970745][ T1957] [ 1347.970745][ T1957] the existing dependency chain (in reverse order) is: [ 1347.979771][ T1957] [ 1347.979771][ T1957] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 1347.987730][ T1957] __mutex_lock+0x19d/0x1550 [ 1347.992883][ T1957] nbd_queue_rq+0xc1/0xff0 [ 1347.997845][ T1957] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1348.004843][ T1957] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1348.012406][ T1957] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1348.018980][ T1957] blk_mq_run_work_fn+0x16c/0x300 [ 1348.024540][ T1957] process_scheduled_works+0xc3d/0x1630 [ 1348.031227][ T1957] worker_thread+0xa47/0xfb0 [ 1348.036444][ T1957] kthread+0x38b/0x480 [ 1348.041041][ T1957] ret_from_fork+0x514/0xb70 [ 1348.046200][ T1957] ret_from_fork_asm+0x1a/0x30 [ 1348.051610][ T1957] [ 1348.051610][ T1957] -> #5 (set->srcu){.+.+}-{0:0}: [ 1348.058757][ T1957] __synchronize_srcu+0xc9/0x2f0 [ 1348.064246][ T1957] elevator_switch+0x1e8/0x7b0 [ 1348.070025][ T1957] elevator_change+0x2fa/0x480 [ 1348.075325][ T1957] elevator_set_default+0x375/0x440 [ 1348.081059][ T1957] blk_register_queue+0x3f3/0x4e0 [ 1348.086682][ T1957] __add_disk+0x6b8/0xdb0 [ 1348.092398][ T1957] add_disk_fwnode+0x100/0x3a0 [ 1348.098136][ T1957] nbd_dev_add+0x733/0xb60 [ 1348.103352][ T1957] nbd_init+0x168/0x1f0 [ 1348.108156][ T1957] do_one_initcall+0x250/0x870 [ 1348.113626][ T1957] do_initcall_level+0x10a/0x1a0 [ 1348.119224][ T1957] do_initcalls+0x59/0xa0 [ 1348.124425][ T1957] kernel_init_freeable+0x29d/0x3e0 [ 1348.130507][ T1957] kernel_init+0x22/0x1d0 [ 1348.135362][ T1957] ret_from_fork+0x514/0xb70 [ 1348.140505][ T1957] ret_from_fork_asm+0x1a/0x30 [ 1348.145802][ T1957] [ 1348.145802][ T1957] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 1348.153713][ T1957] __mutex_lock+0x19d/0x1550 [ 1348.158829][ T1957] elevator_change+0x1af/0x480 [ 1348.164113][ T1957] elevator_set_none+0xb5/0x140 [ 1348.169478][ T1957] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1348.175800][ T1957] nbd_start_device+0x189/0xb30 [ 1348.181165][ T1957] nbd_genl_connect+0x167d/0x1cd0 [ 1348.186710][ T1957] genl_family_rcv_msg_doit+0x233/0x340 [ 1348.192771][ T1957] genl_rcv_msg+0x614/0x7a0 [ 1348.197789][ T1957] netlink_rcv_skb+0x226/0x4a0 [ 1348.203066][ T1957] genl_rcv+0x28/0x40 [ 1348.207556][ T1957] netlink_unicast+0x8ef/0xa80 [ 1348.212924][ T1957] netlink_sendmsg+0x813/0xb40 [ 1348.218207][ T1957] sock_sendmsg_nosec+0x14e/0x190 [ 1348.223761][ T1957] ____sys_sendmsg+0x54e/0x850 [ 1348.229054][ T1957] ___sys_sendmsg+0x2a5/0x360 [ 1348.234256][ T1957] __x64_sys_sendmsg+0x1b1/0x290 [ 1348.239722][ T1957] do_syscall_64+0x166/0x520 [ 1348.244839][ T1957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.251257][ T1957] [ 1348.251257][ T1957] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1348.259857][ T1957] blk_alloc_queue+0x544/0x690 [ 1348.265148][ T1957] __blk_mq_alloc_disk+0x194/0x390 [ 1348.270771][ T1957] nbd_dev_add+0x494/0xb60 [ 1348.275698][ T1957] nbd_init+0x168/0x1f0 [ 1348.280362][ T1957] do_one_initcall+0x250/0x870 [ 1348.285640][ T1957] do_initcall_level+0x10a/0x1a0 [ 1348.291094][ T1957] do_initcalls+0x59/0xa0 [ 1348.295956][ T1957] kernel_init_freeable+0x29d/0x3e0 [ 1348.302308][ T1957] kernel_init+0x22/0x1d0 [ 1348.307162][ T1957] ret_from_fork+0x514/0xb70 [ 1348.312279][ T1957] ret_from_fork_asm+0x1a/0x30 [ 1348.317570][ T1957] [ 1348.317570][ T1957] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 1348.324775][ T1957] fs_reclaim_acquire+0x71/0x100 [ 1348.330252][ T1957] __kmalloc_cache_noprof+0x61/0x600 [ 1348.336141][ T1957] tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1348.341957][ T1957] tcp_sendmsg_locked+0x4a3b/0x5320 [ 1348.347676][ T1957] tcp_sendmsg+0x2f/0x50 [ 1348.352533][ T1957] sock_sendmsg_nosec+0x10f/0x190 [ 1348.358154][ T1957] ____sys_sendmsg+0x54e/0x850 [ 1348.363440][ T1957] ___sys_sendmsg+0x2a5/0x360 [ 1348.368649][ T1957] __x64_sys_sendmsg+0x1b1/0x290 [ 1348.374130][ T1957] do_syscall_64+0x166/0x520 [ 1348.379271][ T1957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.385703][ T1957] [ 1348.385703][ T1957] -> #1 (sk_lock-AF_INET-NBD){+.+.}-{0:0}: [ 1348.393690][ T1957] lock_sock_nested+0x41/0x100 [ 1348.398978][ T1957] inet_shutdown+0x6a/0x390 [ 1348.404022][ T1957] nbd_mark_nsock_dead+0x2cb/0x550 [ 1348.409662][ T1957] recv_work+0x1cee/0x1e10 [ 1348.414601][ T1957] process_scheduled_works+0xc3d/0x1630 [ 1348.420669][ T1957] worker_thread+0xa47/0xfb0 [ 1348.425792][ T1957] kthread+0x38b/0x480 [ 1348.430374][ T1957] ret_from_fork+0x514/0xb70 [ 1348.435483][ T1957] ret_from_fork_asm+0x1a/0x30 [ 1348.440766][ T1957] [ 1348.440766][ T1957] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 1348.448400][ T1957] __lock_acquire+0x164c/0x2de0 [ 1348.453772][ T1957] lock_acquire+0x115/0x350 [ 1348.458806][ T1957] __mutex_lock+0x19d/0x1550 [ 1348.463909][ T1957] nbd_queue_rq+0x373/0xff0 [ 1348.468955][ T1957] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1348.475112][ T1957] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1348.481977][ T1957] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1348.488845][ T1957] blk_mq_run_work_fn+0x16c/0x300 [ 1348.494399][ T1957] process_scheduled_works+0xc3d/0x1630 [ 1348.500477][ T1957] worker_thread+0xa47/0xfb0 [ 1348.505596][ T1957] kthread+0x38b/0x480 [ 1348.510185][ T1957] ret_from_fork+0x514/0xb70 [ 1348.515297][ T1957] ret_from_fork_asm+0x1a/0x30 [ 1348.520590][ T1957] [ 1348.520590][ T1957] other info that might help us debug this: [ 1348.520590][ T1957] [ 1348.530897][ T1957] Chain exists of: [ 1348.530897][ T1957] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 1348.530897][ T1957] [ 1348.542986][ T1957] Possible unsafe locking scenario: [ 1348.542986][ T1957] [ 1348.550534][ T1957] CPU0 CPU1 [ 1348.556254][ T1957] ---- ---- [ 1348.561974][ T1957] lock(&cmd->lock); [ 1348.566067][ T1957] lock(set->srcu); [ 1348.572502][ T1957] lock(&cmd->lock); [ 1348.579470][ T1957] lock(&nsock->tx_lock); [ 1348.583888][ T1957] [ 1348.583888][ T1957] *** DEADLOCK *** [ 1348.583888][ T1957] [ 1348.592039][ T1957] locks held by kworker/0:1H/1957: 4, last CPU#0: [ 1348.598447][ T1957] #0: ffff888020aebd40 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1348.609499][ T1957] #1: ffffc900065d7c40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1348.622414][ T1957] #2: ffff88802d84f118 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 1348.632239][ T1957] #3: ffff888073c77178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 1348.641133][ T1957] [ 1348.641133][ T1957] stack backtrace: [ 1348.650496][ T1957] CPU: 0 UID: 0 PID: 1957 Comm: kworker/0:1H Not tainted syzkaller #0 PREEMPT(full) [ 1348.660124][ T1957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1348.670187][ T1957] Workqueue: kblockd blk_mq_run_work_fn [ 1348.675824][ T1957] Call Trace: [ 1348.679097][ T1957] [ 1348.682021][ T1957] dump_stack_lvl+0xe8/0x150 [ 1348.686614][ T1957] print_circular_bug+0x2e2/0x300 [ 1348.692074][ T1957] check_noncircular+0x12f/0x150 [ 1348.697020][ T1957] __lock_acquire+0x164c/0x2de0 [ 1348.702227][ T1957] lock_acquire+0x115/0x350 [ 1348.707176][ T1957] ? nbd_queue_rq+0x373/0xff0 [ 1348.712203][ T1957] __mutex_lock+0x19d/0x1550 [ 1348.716801][ T1957] ? nbd_queue_rq+0x373/0xff0 [ 1348.721472][ T1957] ? ret_from_fork_asm+0x1a/0x30 [ 1348.726409][ T1957] ? unwind_next_frame+0x8f/0x2550 [ 1348.731513][ T1957] ? nbd_queue_rq+0x373/0xff0 [ 1348.736187][ T1957] ? __pfx___mutex_lock+0x10/0x10 [ 1348.741598][ T1957] ? ret_from_fork_asm+0x1a/0x30 [ 1348.746636][ T1957] ? stack_trace_save+0xa9/0x100 [ 1348.751593][ T1957] ? __pfx_stack_trace_save+0x10/0x10 [ 1348.757012][ T1957] nbd_queue_rq+0x373/0xff0 [ 1348.761546][ T1957] ? __lock_acquire+0x1511/0x2de0 [ 1348.767368][ T1957] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1348.777890][ T1957] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1348.783459][ T1957] ? sbitmap_get+0x229/0x390 [ 1348.788212][ T1957] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1348.795334][ T1957] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1348.801179][ T1957] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1348.807672][ T1957] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1348.814958][ T1957] ? lock_acquire+0x115/0x350 [ 1348.819833][ T1957] ? process_scheduled_works+0x97a/0x1630 [ 1348.825733][ T1957] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1348.831996][ T1957] ? blk_mq_run_work_fn+0x144/0x300 [ 1348.838338][ T1957] blk_mq_run_work_fn+0x16c/0x300 [ 1348.844041][ T1957] ? process_scheduled_works+0x97a/0x1630 [ 1348.849868][ T1957] process_scheduled_works+0xc3d/0x1630 [ 1348.855929][ T1957] ? __pfx_process_scheduled_works+0x10/0x10 [ 1348.861930][ T1957] ? assign_work+0x3cf/0x5d0 [ 1348.866558][ T1957] worker_thread+0xa47/0xfb0 [ 1348.871315][ T1957] ? __kthread_parkme+0x71/0x1f0 [ 1348.876544][ T1957] kthread+0x38b/0x480 [ 1348.881072][ T1957] ? __pfx_worker_thread+0x10/0x10 [ 1348.886291][ T1957] ? __pfx_kthread+0x10/0x10 [ 1348.891060][ T1957] ret_from_fork+0x514/0xb70 [ 1348.895675][ T1957] ? __pfx_ret_from_fork+0x10/0x10 [ 1348.900806][ T1957] ? __switch_to+0xc89/0x1420 [ 1348.905509][ T1957] ? __pfx_kthread+0x10/0x10 [ 1348.910361][ T1957] ret_from_fork_asm+0x1a/0x30 [ 1348.915132][ T1957] [ 1348.922430][ T1957] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1348.922462][ T1957] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1348.945895][ T2426] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 1348.945931][ T2426] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1348.945946][ T2426] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1348.945958][ T2426] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1348.949937][T13601] nbd: nbd0 already in use [ 1348.950083][T13621] block nbd0: NBD_DISCONNECT [ 1348.950103][T13621] block nbd0: Send disconnect failed -32 [ 1348.994313][ T2426] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1348.994343][ T2426] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1348.994357][ T2426] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1348.994367][ T2426] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1348.994378][ T2426] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1348.996317][ T2426] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1348.996345][ T2426] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1348.996359][ T2426] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1348.996460][ T2426] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1348.996579][ T2426] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1348.996699][ T2426] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1348.996814][ T2426] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1348.996927][ T2426] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1348.996998][T13619] ldm_validate_partition_table(): Disk read failed. [ 1348.997075][ T2426] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1348.997362][T13619] Dev nbd0: unable to read RDB block 0 [ 1348.997812][T13619] nbd0: unable to read partition table [ 1349.008605][T13619] ldm_validate_partition_table(): Disk read failed. [ 1349.009005][T13619] Dev nbd0: unable to read RDB block 0 [ 1349.010482][T13619] nbd0: unable to read partition table [ 1356.996083][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog