last executing test programs: 3.730234999s ago: executing program 3 (id=3718): r0 = socket(0x840000000002, 0x3, 0x9) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x258, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x1c0, 0x206, 0x240, 0x1c0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0xffffffff, 0x0, 'tunl0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x1}, 0x1ea, 0xc0, 0x128, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket3={{0x28}, 0x1}, @common=@icmp={{0x28}, {0x12, "e07c", 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0xf0f, 0x75, 0x300, '\x00', 'syz0\x00', {0x6}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xe2002454fb7b9fcc, 0xff, 'veth0_virt_wifi\x00', 'gre0\x00', {}, {0xff}, 0x8, 0x2, 0x5}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0xf9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1}}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xa, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40400c4}, 0x10008000) 3.476807151s ago: executing program 3 (id=3724): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x4b, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000003f80)=""/106, 0x6a}, {&(0x7f0000004000)=""/124, 0x7c}], 0x2}, 0x2}], 0x1, 0x40010080, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r6, 0xc7, 0x1}, 0xc) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r7, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x6, 0x0, 0x2, 0x1, 0x0, 0x80}, 0x20) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), r0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_getnetconf={0x1c, 0x52, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c5}, 0x4000000) ioctl$FIOCLEX(r8, 0x5451) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000fcdbdf0900000000050026655c3f7770616e3000"/42], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r8, 0x4048587b, &(0x7f0000002e80)={{r8, &(0x7f0000000000)='+)^,{\x00', 0x100100, &(0x7f0000000040)={@_ha_fsid={[0x1, 0x80000001]}, {0xf, 0x4e, 0xb9, 0x80000000}}, 0x9, &(0x7f0000000080), &(0x7f0000000100)=0x401}, 0x6, &(0x7f0000002dc0)=[{0x2, 0xdf92, &(0x7f0000000140)='^\x00', &(0x7f00000001c0)="93f8198b871e62b0b92b1c17bb3df2f439e96a0838bef307230438e860972d96ddbf7f091b27", 0x26, 0x8}, {0x3, 0x0, &(0x7f0000000200)='\x00', &(0x7f0000000b00)="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", 0x1000}, {0x3, 0x4, &(0x7f0000001b00)='/+[\x00', &(0x7f0000001b40)="626120fa388a4dc9f1c7780eccb4a6bd61e17f5f4ee10a4a0febf739fe21b81c720136b79fa206521fec6e269594a814585a43a42a3024c4de4ec801345a5288efb8f33f20c51c753b4220f9517d5185751e712a493ec82c03d68e800ef8643562", 0x61, 0x10}, {0x3, 0x8, &(0x7f0000001bc0)='!\x00', &(0x7f0000001c00)="ddea54d38c5f45fea6dedcdfb93014b0730206116099a1f0575c5e4921fc80fe7771c2f9f57f542d25b54818bcb02f46562ddfc0b234d613063d82ecdfb9162f", 0x40}, {0x1, 0x8, &(0x7f0000001c40)='!#\x00', &(0x7f0000001c80)="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", 0x1000, 0xa}, {0x3, 0x5, &(0x7f0000002c80)='802.15.4 MAC\x00', &(0x7f0000002cc0)="2d11d493ad12af7e5bd97621bddd23912419af4e00bc9f404a7c48695355328076276fde52ea2328c5297e07636466faacea0d2e83df1893fef30395b1cc8eb2062f619daa419039ad8cd2a2bf43a1e68bedcc9d0d5d6950aa3e1efde033f015fd5f2a5f802450b629d4372238254f747f17fdad3658554f4de4532eeed8bb2979583e8ed6957a0a4cd6bfdba1b8f429a4af2567ff0561e45c4e822f4878f6ffa048c2733214b3d73bfe5e5568c96b764708037a7581d3941858ed8e79efb47298f78d5ec1f37f60deb5d4e2223c6f11cf8c759521dc9b1674f90a22e4decc775011c526124b2ad1fc6186d970542a", 0xef, 0x10}]}) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 2.771188901s ago: executing program 3 (id=3729): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xffff, r0}, 0x38) (async) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="300000002c00010000000000ffdbdf2508000000", @ANYRES32=r2, @ANYBLOB="0b000280976b6408686030000c00018008000000", @ANYRES32=0x0, @ANYBLOB="360ad4d044cdb9916a33e7577688fbc551e600c2caf17800fc2bfa04c6985bd6a656c4dd"], 0x30}], 0x1}, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0002100c00d2"], &(0x7f0000000f80)=""/4096, 0x26, 0x1000, 0x1, 0x80}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000002c0), 0x1006, r0, 0x0, 0xd88d02a0}, 0x38) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000000)='\x00', 0x141040, &(0x7f00000000c0)={@align=0x8, {0x3ff, 0x0, 0x1}}, 0x4, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x3}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x50}}, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500000002e0e5ee8700000006000000000000000ac6ecadd174fd9c633a9405fa84aabf2d345342bca7ea134e59b9565320f6b5ba15ae00cc6523254e4616a463cf5be6586b527daa8d1163543828c78c77b3f4ef736ae34f681945fa3ce45f082f429cb6a134e696261f86bc00ce19", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000480)='tasks\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r10}, 0xc) (async) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000400)) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000023c0)={&(0x7f00000002c0)="e414fbb646e794085d147bcdbb3e51ee60e807fd7d6f231042e3d1490f529a6fc288e13c712b94e47fd0", &(0x7f0000000300)=""/223, &(0x7f0000001300)="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", &(0x7f0000002300)="55c549306a6186e2f17628c4a4e4089eb953abe5174757478beb9de6ce23a8ba5523ae7660753b341faa63666588c1f35981b4125bfa6810962663758fcd0a57b99e6f9a6c477fc06f5caac23963badc032a596631e07071f9257c904399409451f031d401c6222af78cfad115a5327ad4ed5d20b3e137c3dc759b11f557df6fc405ec9ba688f9584353edd55c3bea95794d6f15e65634a339d13aabf8b78af63e4cf36e2e83e6f8dbfd", 0x3b0d, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9bf8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005d93000000000000b503020000000000850000008b000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.411817728s ago: executing program 0 (id=3733): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000015002927000000000000008b050021"], 0x38}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="080000000000000000281508b229a058a1c50000", @ANYRES32=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYRES32, @ANYRESHEX=r0], 0x48) pipe(0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) 2.355095201s ago: executing program 4 (id=3734): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$inet(0x2, 0xa, 0x400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 24) 2.323610956s ago: executing program 2 (id=3735): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000500)={0x14}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x8001, {0x0, 0x0, 0x0, 0x0, 0x8002, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b595000000000000f2000a000000", @ANYRES32=r6, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c000014"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h'], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000c000000000000000000008018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300003f6400008500000083000000bf092000000000005509010000000000950000000000000018100000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0xa, 0x1011, &(0x7f0000000840)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) getsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000340), &(0x7f0000000480)=0x4) r8 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) 2.261340508s ago: executing program 4 (id=3736): socket$inet(0x2b, 0x801, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socketpair(0xf, 0x800, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000200)={@phonet={0x23, 0x7f, 0x5d, 0x2}, {&(0x7f00000000c0)=""/230, 0xe6}, &(0x7f00000001c0), 0x21}, 0xa0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.194911327s ago: executing program 0 (id=3737): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x30, 0x26, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@nested={0xc, 0x3d, 0x0, 0x1, [@typed={0x8, 0xae, 0x0, 0x0, @u32=0x6}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @typed={0x8, 0x40, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x134}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a0101f2bb000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034800000002100002800c000280080001800000000014000000020a01431ac916f39d54321b9414e74a3f02e577646e124379cb"], 0xf4}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) 2.056624798s ago: executing program 4 (id=3738): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffa9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000400)=@ethtool_rxfh={0x3e, 0x7}}) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'hsr0\x00', 0x0}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, r3}, 0x14) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r3], 0x5e4}}, 0x4804) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000280)=0xc4, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$inet(0x2, 0xa, 0x400) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xfffffffffffffde8, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x8, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x14}}, 0x4040044) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.043562707s ago: executing program 0 (id=3739): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', 0x0}) epoll_create(0x7) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@gettaction={0x34, 0x32, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x80000001}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9d}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$xdp(0x2c, 0x3, 0x0) unshare(0x26020480) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0xfffff800, 0x1, 0x4, 0x9, 0xa4, 0xff9, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0xffc, 0x1, 0x702, 0x3, 0x1, 0xfffffffa, 0xe, 0xa, 0x9, 0xf, 0x7, 0x10001, 0x100000, 0x762, 0x1, 0xd, 0xe, 0x2b12, 0x80100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x10fdf, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd3, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x4002, 0x180000, 0xd, 0x8b, 0x5, 0x2b3, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x9, 0x27f, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x1, 0x6, 0x6, 0x9, 0x80000000, 0xfdfffffe, 0x2, 0x2, 0x800084, 0x100, 0x5, 0x1, 0x6, 0xb, 0x5, 0x20006, 0x8, 0x15, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0xffffffff, 0xfffffffe, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x1, 0x9fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e9ecdcb0a336629600000000000000002001040000004b00000000000000000064010102000000000000000000000000000000050000000302002000000000f2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000000004400050000000000000000000000000000000000000004d23c"], 0xfc}}, 0x0) 1.933626778s ago: executing program 3 (id=3740): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x2, @private0, 0xa}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000b80)='D', 0x1}], 0x1}}], 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20000800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000002140)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)}], 0x1}}], 0x1, 0x4044014) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={r8, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r6, 0xc7, 0x200001}, 0xc) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r10, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040042000000a8001600a400034020000400ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e425e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000", 0xa2}], 0x1}, 0x0) shutdown(r1, 0x1) sendmsg$inet_sctp(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0xffffff7f}}], 0x20, 0x4048800}, 0x0) 1.933245027s ago: executing program 2 (id=3741): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 1.600751562s ago: executing program 0 (id=3744): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010000304000020000000000000000000", @ANYRES8=r3, @ANYBLOB="000000004200000020001280080001006793145eb990f14b52ff4c0b5a6baed6bb7470001400", @ANYRESHEX=r3, @ANYBLOB, @ANYRES32=r3, @ANYBLOB], 0x40}, 0x1, 0xba01}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2000c804) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000240)={0x6, &(0x7f0000000180)=[{0x20, 0x0, 0x81, 0xfffff038}, {0x20, 0x0, 0x8, 0x7ffff00c}, {0x756b, 0xbd, 0x2, 0xfffc}, {0xffff, 0xf9, 0x0, 0x200}, {0x0, 0xba, 0x8, 0x6}, {0xb, 0x9, 0x8, 0x5}]}, 0x10) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, 0x0, 0x4004080) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x9, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r11, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3400000010002104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000012002400ed79871c15a4ce4b4460106f633d000037f05039fcdc7637ea4d8a8468baa69c754b5e7fe6c11c96fa14f20344f7db681fbed8d9d7984fcb4c7e551f899f6f0200e33e6e01e3b87aace459e3a67dad1a6a4aaf9bfd07f60e750700bd7bfbabcdfb4483975989e1ba6f78"], 0x34}}, 0x0) 1.471845373s ago: executing program 4 (id=3746): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$inet(0x2, 0xa, 0x400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 25) 1.431830251s ago: executing program 2 (id=3747): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="660a0000000000006111bb0000000000850000006300000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x0, @hyper}, 0x10) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}, {0xd}, {0xfff1, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_police={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1.430526188s ago: executing program 3 (id=3748): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) r2 = socket$inet6(0xa, 0x1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000100)=ANY=[], 0x342) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r4) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xec, 0x8, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r6, &(0x7f0000000380), 0x0}, 0x20) (async) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r7) (async) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000010002a04000080000000000000000000", @ANYRES32=r8, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x24, r5, 0x400, 0x70bd29, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 1.334895599s ago: executing program 4 (id=3749): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x40002002) ioctl$SIOCSIFHWADDR(r4, 0xff02, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r6, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)='e', 0x1}], 0x1}}], 0x1, 0x4000) shutdown(r6, 0x1) r7 = openat$cgroup_ro(r5, &(0x7f00000009c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000011c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x1, 0x7}, 0x90) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000340), 0x11000) writev(r2, &(0x7f0000000100), 0x1000000000000023) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="8300"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="01000000030000f26894642fbb09ae000100001a0000000000000000"], 0x50) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0x3}, 0xc) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000040)={0x10000000}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000500)={r0, 0xee, 0x0, 0xfe}) writev(r9, &(0x7f0000001280)=[{&(0x7f00000008c0)="dfa47f155938ba042385a616513927a8a971d29f90e25d709ae171d6090de2840d1d00c5a1bd8810725a8b5dda5a3b22848c3210838eca011c4d73db392e94685ae29f0a687c4597a9c0c039de109416e7dd7c96d7fe60afb94873c31f7d9a5fd1f00834135e3aad4c39a06f889b75ffa17db08ebfd37253516151dcf64bea3f956a37949a90bc7c42bd99a188d16254bc41272b2eab3b1b4b9c3c423a7302a44d5cdd60d53efe8bf0587cd23183054a9cf8aaa16ae2965147314bf69bf3692ea225280ce2cb91adc4d64c822b2c0eeb729d2655d1f1c74317b0ebf0e948242d3776b6556d34f715", 0xe8}, {&(0x7f0000001080)="8b647afb2fd4035c1725c7d6470278f1da9d387bd3b34d857ccdc91aab5d05cb981859c5f6fffffffffffffffba2cdac629139645d6fb3cb2fa38bab229ec7bff7f28d07523bab4ad6f69e299f8901df239c91b7937d6731dc65cc52489124277c3e30678edc8b40168653f20910fc35ea13b4ce4c0f7035efb95885726f72e9cb9d29864b1d381c05a610a9e1101e76bea4155d514ea303c4cba0c6fb5f8bde6a71f1c93a639889855e316adbd7c3b20d5a51f5b39700bbff87a31b49d7542bca87f59dadee4f98aeb674895d3f901bba1143e598880d5b37b8e01be1e8054e", 0xe0}, {&(0x7f0000000b80)="8b5f24cd66b06b0bc7e425eb6573bf1fb906cbec991d8943a98fcb667731f7f37b1e0dd27c0df67602941b6dfa885ca569f50c0ecb4690005e0cce38b65bdfac8697e0d4ef0f4d6e66d399b762e3711a6b96be02c2eb813be4791d6077fc4934bba81a322212e0f3c52c271e34bcaa85f99827b8923912d5bb005ed5843cc98555856032da9039", 0x87}, {&(0x7f0000000f80)="5699c1c9ce3db987e15becc04140738f33a6ce82680aab8ab4f7e6426c528abe35065a076f883465df0c4597d38b3e2cbf1c911f54d193979e4dec0d95d6724125569417b7ea089f6e64431ce2feb34a0d52d8f3559375017ca6d4d533e2e03fff734302000000000000009ccca098a874365ce7f497b1aa9199b126dbcc86aa59a1a3f8ab28105eafd09ba9f46219b8933c0a2056c889d7d2ac030043dd384b1ad928963162ec7696807fc370afae1d3008ce8c4ac5cdfc696f0045140dc9540b7f7e54ee6fa214311e75a785860f65f1eb908a15d237f4c0d882484f214545b70bb9", 0xe3}, {&(0x7f0000000d40)="9d58d6716911524ab4b4e80638cf69f9d8fb4990b673226ce380f92cfe92654284fba1835477389ad77a366a1dc19875f12f875f4c21e414a4f7c42eb5a6a265d6ded7aaf768da128f0bdaf10634345a2bbf52710ea1396fc27e3cbdb100b41d07868c92373002c419fd5fc63d05681ea9ed383457fea451afc1e890afa0e57a83b96d4266f642555fd35e2b7943948c9c0b935ae47e65ed4231750765827cc7c09680782a42b3d299c399c23a915057e865", 0xb2}], 0x5) setsockopt$inet_group_source_req(r7, 0x0, 0x2c, &(0x7f0000000e40)={0x2, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xa, &(0x7f0000001400)=ANY=[@ANYBLOB="182907004f3c17661ce9fd33fee61e2df4131fc666b252746412138b34ecbb8e832966b386646b404630a8ee1cc86378d05a75b5c62be9f41d5c9ff5eb6101c032578a21bb871b65c28ad19eaf38d1b58f99bf6f800b05853071f98e5e8e873fabbf65a8eb28a8578608fbb2901067dc09f9c260c6d7", @ANYRESHEX=r10, @ANYBLOB="0000000006000000185900001000000000000000000000001840000004000000000000000000000018280000", @ANYRES32=r5, @ANYBLOB="0000000004000000105400000400"/24], &(0x7f0000000200)='syzkaller\x00', 0x800, 0x96, &(0x7f0000000240)=""/150, 0x41100, 0x2, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000003c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x8, 0x7ff00000, 0xffff3283}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000700)=[r9, r10, r13, r14, 0xffffffffffffffff, r15, r16], &(0x7f0000000740)=[{0x1, 0x4, 0x4, 0x5}, {0x3, 0x3, 0xe, 0x9}, {0x1, 0x1, 0x4, 0x6}, {0x3, 0x3, 0xe}, {0x0, 0x5, 0xd, 0x5}, {0x3, 0x5, 0xe, 0xb}, {0x1, 0x2, 0x9, 0x2}, {0x2, 0x3, 0x7, 0x2}, {0x3, 0x1, 0x2}], 0x10, 0x81}, 0x94) 1.239817814s ago: executing program 1 (id=3750): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x1}], 0x1}}], 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg$inet_sctp(r0, &(0x7f0000004c00)=[{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000180)="c0d73c0504d7", 0x6}], 0x1, 0x0, 0x0, 0x4040400}], 0x1, 0x4000000) 1.182501936s ago: executing program 1 (id=3751): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000340)=""/242, &(0x7f0000000500)=0xf2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000ff7f000000000000060000008500000018000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000009000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 936.013317ms ago: executing program 2 (id=3752): setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000200)=0x5, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4b8a81, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x87, 0x8, 0x1}, {0x6, 0x0, 0x0, 0x3}]}) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f00000005c0)={{'\x00', 0x2}, {0x1}, 0x1c8, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)="c49d9aa81729f982ce05dc8b1102dacfb81c50f7cdc99e42bfae13fec6828524129d56", 0x23, 0x0, &(0x7f00000003c0)={0x2, 0x10a, {0x1, 0xc, 0xcb, "adea5e7d79bc8848063ee1804d54337dbc600d7770bb1ba31f8899c9fcec886d5fcc0385b92941e8c474b1ec600c50154bd5aa483fbf3ce9f69d0300e765fb048d34c1698bdb4b7b10aea1106ca0f853a56919c6ffc180c9539cebc162191989038fca07c0104168a40763e5b857d3cb456992a0f6f06120ea35ed10ebb585ce6a4aee748b2c65924526e132dc03b61119c11dc6cdbc6cd7e7a70207244fe03e9cd05e02e7227576d8419d42cb08f97cad226fe8aad28ce22c6180fd2654c63b7bab6cfd21cb4b382a5a4e", 0x32, "9ec5a328dfe35eb3d479ff5c73804b7f2a8657427d40322845e3db2230bb0a9e6829ebc6bbf51816cd8223fe790883dff480"}, 0xc7, "e453e54808fe7c47ffc0fcc0b218ba13e8522ef8175146f4884195db61a001abfc307590270f3936bdaf3dd9afdee85f240aa249386da79340d9187fa895698bb5bb9473128efc46caa8f183f6ff8dfaab19b09919fdf40a1bea8051be5de3eb09a3248c39d3502d38be0d7c35eea32e5ad90a60b1577c2140751af2f781cad6ed738b6e6be7ad9c6fa5f5fd18305dc1bcbac8e1ef2ede11c3ee8623231e9531336a01abc60c34a4d19119de89f9cf41acfb31a3f031588a620cf2773fa1d9c4b3a800260b6fa5"}, 0x1dd}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200007f0000000000000000000000850000002e000000850000002a00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 886.155729ms ago: executing program 0 (id=3753): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40010, 0xffffffffffffffff, 0x40000000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ce}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_extract_tcp_res(&(0x7f0000000080), 0x9, 0x0) syz_emit_ethernet(0x11a4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000014c0)={0x0, 0x3, [0x27, 0x4a3, 0xd8c, 0x24b]}) 864.751964ms ago: executing program 3 (id=3754): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000055000500000000000000000007000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="00000000ef"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf}, {0x0, 0xf}, {0xb, 0x8fc5d1e01cc17acf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x80) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4008010}, 0x840) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x4, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 806.985623ms ago: executing program 1 (id=3755): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000002000000020000001000000000000000000000010500000010000000010000000000000e01000000000000000061"], 0x0, 0x53}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$pptp(0x18, 0x1, 0x2) sendfile(r3, r5, 0x0, 0x68b1f6fc) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x2d, 0x0, 0x1, 0xfffff038}, {0x28, 0x0, 0xfd, 0x1}, {0x6}]}, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 670.540704ms ago: executing program 0 (id=3756): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000003280)=""/76, &(0x7f00000002c0)=0x4c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000040)={0x8, 0x0, '\x00', [@pad1]}, 0x10) socket$inet(0x2, 0xa, 0x400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 433.960856ms ago: executing program 1 (id=3757): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x24, r0, 0x1, 0x72bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 433.554711ms ago: executing program 2 (id=3758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d022abd7000fddbdf250100000005000600000008000300060000000800040026000000"], 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f00000012c0)=ANY=[@ANYBLOB="180000000040000000000000feffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r5}, 0xc) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xe, 0x6, 0x6, 0x5, 0x28100, 0x1, 0x200, '\x00', 0x0, r4, 0x4, 0x5, 0x0, 0x0, @value=r6}, 0x50) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="180200000700000000000000008000008500000000950057c2d97e6aef3c255b9af0c49b3d74000000000000bff1f46811a0523bfd57127a632664c31b13fa2dc4f060eb6719202e823a53e7476f5e94f1ba3a2f2fb3adbbff201695160c556a3afd5253823e8ede7b6d3ddd65d1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) sendmsg$NFT_BATCH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010"], 0x7c}, 0x1, 0x0, 0x0, 0x24044801}, 0x20008004) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5c00000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b4fad1f60a64c9f408000300060100000400000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) r10 = socket(0x10, 0x803, 0x0) getsockname$inet(r10, 0x0, &(0x7f0000000240)) 433.200231ms ago: executing program 4 (id=3759): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$inet(0x2, 0xa, 0x400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 26) 258.300304ms ago: executing program 1 (id=3760): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x40000000015, 0x5, 0x0) sendto$l2tp6(r1, 0x0, 0x0, 0x4000000, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) 101.82479ms ago: executing program 1 (id=3761): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES8, @ANYRES16=r0, @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendfile(r6, r7, 0x0, 0xffffffff000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3f713da207af717f0c5093ff374fab062388a190874c355b0eafe13bf7a448a6201a662ed21e005abcb3c5631ca5988d2b1300b0ce34e71b26da95cf1c197aa39b8ba4d92d44738fa0a1d763966ff31f8cfc10bf7ab052f41834", @ANYRES16=r8, @ANYBLOB="7961fdffffff0004000000000000000099006c910000e02425a0af74e42b92d4c3b9adf5bfc424a4484b7b9ce94379d9edc4229361d1c68a489b6c9b349923dd4979a8cd2d50803d4a17fd197be907317cc24664b3fa328d7c5359c8037e1e9dc55703cd4c0e83cd20bc50285d697570b3828de9c44e6886c73ff36721fc1db017c42ac6b892ac1d"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x29, 0x5, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) write$cgroup_pressure(r9, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) 0s ago: executing program 2 (id=3762): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1000000004000000040000000600000000000000", @ANYRES32, @ANYBLOB="fdfffdff00000000000014000000005600000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000006}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="31032cbd7000fbdbdf250b00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0xc0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r5) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r6, 0x8af234ad5f3fd7b5, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4044811}, 0x4000800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) kernel console output (not intermixed with test programs): 80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.902380][T18043] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2805'. [ 511.902659][T18043] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2805'. [ 512.252863][T18024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2802'. [ 512.712182][T18074] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2811'. [ 512.712208][T18074] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2811'. [ 513.278005][T18084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2814'. [ 513.651157][T18106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2817'. [ 513.651183][T18106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2817'. [ 513.854662][T18117] tipc: Enabling of bearer rejected, already enabled [ 514.123237][T18119] IPVS: persistence engine module ip_vs_pe_ not found [ 514.129064][T18130] x_tables: duplicate underflow at hook 2 [ 514.174589][T18133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2827'. [ 514.174705][T18133] openvswitch: netlink: Message has 4 unknown bytes. [ 514.294347][T18121] IPVS: persistence engine module ip_vs_pe_ not found [ 514.521239][T18142] xt_NETMAP: bad MAP_IPS. [ 514.862202][T18152] dvmrp0: entered allmulticast mode [ 515.009384][T18157] dvmrp1: entered allmulticast mode [ 515.022983][T18151] syzkaller0: left promiscuous mode [ 515.023023][T18151] syzkaller0: left allmulticast mode [ 515.023540][T18151] tipc: Resetting bearer [ 515.035184][T18152] dvmrp0: left allmulticast mode [ 515.035292][T18152] dvmrp1: left allmulticast mode [ 516.422805][T18208] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 516.670405][T18219] netlink: 'syz.3.2850': attribute type 4 has an invalid length. [ 517.177568][T18235] __nla_validate_parse: 3 callbacks suppressed [ 517.177586][T18235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2854'. [ 517.213215][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2855'. [ 517.213317][T18232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2855'. [ 517.654222][T18258] ip_tables: iptables: counters copy to user failed while replacing table [ 517.900555][T18264] bond_slave_0: entered promiscuous mode [ 517.900596][T18264] bond_slave_0: entered allmulticast mode [ 517.900984][T18264] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 518.215445][T18276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2864'. [ 518.266226][T18278] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2864'. [ 518.463994][T18267] syzkaller1: entered promiscuous mode [ 518.464017][T18267] syzkaller1: entered allmulticast mode [ 518.537050][T18291] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 518.538462][T18291] netlink: 'syz.0.2868': attribute type 1 has an invalid length. [ 518.546259][T18276] 8021q: adding VLAN 0 to HW filter on device bond17 [ 518.613484][T18278] bond17: entered allmulticast mode [ 518.988991][T18291] 8021q: adding VLAN 0 to HW filter on device bond9 [ 519.004772][T18295] bond9: entered allmulticast mode [ 519.006024][T18295] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2868'. [ 519.181855][T18303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.261090][T18306] netlink: 'syz.0.2872': attribute type 44 has an invalid length. [ 519.261127][T18306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2872'. [ 519.925540][T18317] bond11: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 519.943410][T18317] bond11 (unregistering): Released all slaves [ 519.955826][T18328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2878'. [ 520.013250][T18328] hsr_slave_0: left promiscuous mode [ 520.015308][T18328] hsr_slave_1: left promiscuous mode [ 521.384647][T18380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2890'. [ 521.384674][T18380] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2890'. [ 521.459004][T18379] bridge0: port 1(veth0) entered blocking state [ 521.463403][T18379] bridge0: port 1(veth0) entered disabled state [ 521.463581][T18379] veth0: entered allmulticast mode [ 521.499971][T18379] veth0: entered promiscuous mode [ 521.638508][T18383] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.664288][T18383] veth0_to_bridge: left promiscuous mode [ 521.698701][T18383] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 521.790869][ T50] bridge0: port 1(veth0) entered blocking state [ 521.791008][ T50] bridge0: port 1(veth0) entered forwarding state [ 521.794558][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.794710][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.978319][T18401] FAULT_INJECTION: forcing a failure. [ 521.978319][T18401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.978418][T18401] CPU: 0 UID: 0 PID: 18401 Comm: syz.0.2894 Not tainted syzkaller #0 PREEMPT(full) [ 521.978444][T18401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 521.978456][T18401] Call Trace: [ 521.978465][T18401] [ 521.978474][T18401] dump_stack_lvl+0xe8/0x150 [ 521.978508][T18401] should_fail_ex+0x410/0x560 [ 521.978537][T18401] _copy_to_user+0x31/0xb0 [ 521.978565][T18401] simple_read_from_buffer+0xe1/0x170 [ 521.978599][T18401] proc_fail_nth_read+0x1bb/0x230 [ 521.978670][T18401] ? common_file_perm+0x20e/0x2b0 [ 521.978761][T18401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 521.978792][T18401] ? rw_verify_area+0x24a/0x4c0 [ 521.978832][T18401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 521.978850][T18401] vfs_read+0x213/0xa80 [ 521.978880][T18401] ? __pfx___mutex_lock+0x10/0x10 [ 521.978909][T18401] ? __pfx_vfs_read+0x10/0x10 [ 521.978949][T18401] ? __fget_files+0x2a/0x420 [ 521.978976][T18401] ? __fget_files+0x3a2/0x420 [ 521.978999][T18401] ? __fget_files+0x2a/0x420 [ 521.979032][T18401] ksys_read+0x150/0x270 [ 521.979062][T18401] ? __pfx_ksys_read+0x10/0x10 [ 521.979120][T18401] do_syscall_64+0x166/0x520 [ 521.979146][T18401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.979167][T18401] ? clear_bhb_loop+0x70/0xc0 [ 521.979191][T18401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.979210][T18401] RIP: 0033:0x7ff77135e98e [ 521.979229][T18401] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 521.979246][T18401] RSP: 002b:00007ff7721bdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 521.979272][T18401] RAX: ffffffffffffffda RBX: 00007ff7721be6c0 RCX: 00007ff77135e98e [ 521.979286][T18401] RDX: 000000000000000f RSI: 00007ff7721be0a0 RDI: 0000000000000005 [ 521.979298][T18401] RBP: 00007ff7721be090 R08: 0000000000000000 R09: 0000000000000000 [ 521.979310][T18401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.979319][T18401] R13: 00007ff771626038 R14: 00007ff771625fa0 R15: 00007ffea9004318 [ 521.979350][T18401] [ 522.258798][T18390] tipc: Resetting bearer [ 522.442049][T18390] tipc: Disabling bearer [ 522.489171][ T50] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.489264][ T50] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.489333][ T50] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.489401][ T50] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.740209][T18419] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 522.740248][T18419] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 522.740285][T18419] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 522.884664][T18426] __nla_validate_parse: 3 callbacks suppressed [ 522.884720][T18426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2898'. [ 522.903699][T18419] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 523.037691][T18437] netlink: 'syz.4.2901': attribute type 23 has an invalid length. [ 523.223623][T18435] syzkaller0: entered promiscuous mode [ 523.223681][T18435] syzkaller0: entered allmulticast mode [ 523.452349][T18443] netlink: 'syz.2.2904': attribute type 12 has an invalid length. [ 524.346723][T18468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2912'. [ 524.346744][T18468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2912'. [ 524.348676][T18468] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2912'. [ 524.402344][T18470] netlink: 'syz.0.2913': attribute type 1 has an invalid length. [ 524.402367][T18470] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2913'. [ 524.753185][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 524.765677][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 524.775501][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 524.788692][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 524.791928][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 524.797409][T18480] netlink: 'syz.1.2915': attribute type 9 has an invalid length. [ 524.797443][T18480] netlink: 'syz.1.2915': attribute type 6 has an invalid length. [ 524.797454][T18480] netlink: 'syz.1.2915': attribute type 7 has an invalid length. [ 524.797478][T18480] netlink: 'syz.1.2915': attribute type 8 has an invalid length. [ 524.971887][T18478] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 525.253629][T18476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.573520][T18476] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 525.609375][T18476] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 526.850476][T18561] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2929'. [ 526.866649][ T52] Bluetooth: hci5: command tx timeout [ 526.946891][T16255] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 526.946917][T16255] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 527.181699][T18566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.210445][T18474] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.212999][T18474] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.214591][T18474] bridge_slave_0: entered allmulticast mode [ 528.240157][T18474] bridge_slave_0: entered promiscuous mode [ 528.269403][T18474] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.269657][T18474] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.269824][T18474] bridge_slave_1: entered allmulticast mode [ 528.276130][T18474] bridge_slave_1: entered promiscuous mode [ 528.381816][T18474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.403736][T18474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.512453][T18474] team0: Port device team_slave_0 added [ 528.515951][T18474] team0: Port device team_slave_1 added [ 528.552495][T18601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2938'. [ 528.588346][T18474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.588364][T18474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.588386][T18474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.731237][T18474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.731256][T18474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.731280][T18474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.009870][T18618] netlink: 'syz.2.2942': attribute type 1 has an invalid length. [ 529.103364][T18474] hsr_slave_0: entered promiscuous mode [ 529.104380][T18474] hsr_slave_1: entered promiscuous mode [ 529.114650][T18606] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 529.114694][T18606] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 529.114719][T18606] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 529.181071][T18606] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 529.226730][T18625] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2942'. [ 529.312138][T18621] bond18: (slave veth19): Enslaving as an active interface with a down link [ 529.749226][T18634] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2946'. [ 530.008708][T18637] netlink: 'syz.2.2947': attribute type 1 has an invalid length. [ 530.175282][T18640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2947'. [ 530.330771][ T6758] vlan6: left allmulticast mode [ 530.330794][ T6758] geneve0: left allmulticast mode [ 530.330853][ T6758] vlan6: left promiscuous mode [ 530.333369][ T6758] bridge0: port 1(vlan6) entered disabled state [ 530.389097][T18653] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2948'. [ 530.444974][ T6758] bridge0: left allmulticast mode [ 530.445143][ T6758] pim6reg: left allmulticast mode [ 531.064255][ T6758] bond5 (unregistering): (slave geneve4): Releasing active interface [ 531.179642][ T6758] bond0 (unregistering): Released all slaves [ 531.183621][ T6758] bond1 (unregistering): Released all slaves [ 531.206106][ T6758] bond2 (unregistering): Released all slaves [ 531.219190][ T6758] bond4 (unregistering): Released all slaves [ 531.227272][ T6758] bond5 (unregistering): Released all slaves [ 531.241127][ T6758] bond6 (unregistering): Released all slaves [ 531.254141][ T6758] bond7 (unregistering): Released all slaves [ 531.276138][ T6758] bond8 (unregistering): Released all slaves [ 531.291739][ T6758] bond3 (unregistering): Released all slaves [ 531.320318][T18638] bond19: (slave geneve3): making interface the new active one [ 531.321024][T18638] bond19: (slave geneve3): Enslaving as an active interface with an up link [ 531.344783][T18640] 8021q: adding VLAN 0 to HW filter on device bond19 [ 531.355438][ T1160] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 531.355723][ T6760] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 531.355759][ T6760] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 531.355794][ T6760] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 531.440455][T18637] tipc: Resetting bearer [ 531.440604][T18637] tipc: Resetting bearer [ 531.502414][T18643] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 531.621900][T18655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2948'. [ 531.902420][ T6758] : left promiscuous mode [ 532.175653][ T6745] syzkaller0: tun_net_xmit 76 [ 532.175854][ T6745] syzkaller0: tun_net_xmit 48 [ 532.193810][T18668] syzkaller0: create flow: hash 1111230603 index 2 [ 532.196743][ T5742] syzkaller0: tun_net_xmit 76 [ 532.216979][ T5734] syzkaller0: tun_net_xmit 76 [ 532.250585][ T6758] tipc: Disabling bearer [ 532.250989][ T6758] tipc: Disabling bearer [ 532.251364][ T6758] tipc: Left network mode [ 532.828001][ T5734] syzkaller0: tun_net_xmit 76 [ 532.860461][T18668] syzkaller0: delete flow: hash 1111230603 index 2 [ 533.137148][T18714] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2957'. [ 535.809625][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 536.223414][T18728] tipc: New replicast peer: 255.255.255.255 [ 536.223871][T18728] tipc: Enabled bearer , priority 10 [ 536.405279][T18745] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2964'. [ 537.078493][T18771] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2968'. [ 537.258244][T18771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2968'. [ 537.258269][T18771] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2968'. [ 537.258326][T18771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2968'. [ 537.258503][T18771] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2968'. [ 537.556891][T18778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2971'. [ 537.557864][T18787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2971'. [ 537.591259][T18788] tc_dump_action: action bad kind [ 537.860076][T18474] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 537.881104][T18474] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 537.881847][T18474] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 537.892966][T18474] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 537.894177][T18474] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 537.934089][T18474] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 537.936254][T18474] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 538.039864][T18474] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 538.042616][T18796] syzkaller0: entered promiscuous mode [ 538.042635][T18796] syzkaller0: entered allmulticast mode [ 538.501004][T18830] syzkaller0: entered promiscuous mode [ 538.501026][T18830] syzkaller0: entered allmulticast mode [ 538.583552][T18839] xt_socket: unknown flags 0x4 [ 538.909053][T18853] pimreg: entered allmulticast mode [ 538.925610][T18853] pimreg: left allmulticast mode [ 539.190425][T18474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.218180][T18474] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.265464][ T6742] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.265556][ T6742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.314363][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.314464][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.352765][T18871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2988'. [ 539.377726][ T6758] hsr_slave_0: left promiscuous mode [ 540.803182][ T6758] IPVS: stop unused estimator thread 0... [ 541.206957][T18938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3005'. [ 541.627925][T18474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.662117][T18956] __nla_validate_parse: 1 callbacks suppressed [ 541.662138][T18956] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3009'. [ 542.100670][T18980] Cannot find set identified by id 2 to match [ 542.274608][T18988] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.274800][T18988] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.274955][T18988] bridge_slave_0: entered allmulticast mode [ 542.300508][T18988] bridge_slave_0: entered promiscuous mode [ 542.304306][T18988] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.304405][T18988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.333155][T18992] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3017'. [ 542.435174][T18474] veth0_vlan: entered promiscuous mode [ 542.483502][T18474] veth1_vlan: entered promiscuous mode [ 542.501794][T19000] pimreg: entered allmulticast mode [ 542.507532][T19000] pimreg: left allmulticast mode [ 542.565335][T18474] veth0_macvtap: entered promiscuous mode [ 542.594486][T18474] veth1_macvtap: entered promiscuous mode [ 542.658584][T18474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.689722][T18474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.752696][T19014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3021'. [ 542.889224][ T6758] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.889585][ T6758] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.889649][ T6758] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.889679][ T6758] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.235974][ T757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.235997][ T757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.334283][T19023] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 543.398650][ T757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.398672][ T757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.435853][T19032] netlink: 'syz.0.3028': attribute type 6 has an invalid length. [ 544.065963][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 544.074831][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 544.077899][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 544.095800][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 544.113652][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 544.261408][T19057] netlink: 'syz.4.3036': attribute type 1 has an invalid length. [ 544.554064][T19077] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3041'. [ 544.621232][T19082] netlink: 'syz.4.3040': attribute type 2 has an invalid length. [ 544.740111][T19085] netlink: 'syz.1.3042': attribute type 1 has an invalid length. [ 544.802420][T19085] 8021q: adding VLAN 0 to HW filter on device bond11 [ 544.891137][T19085] bond11 (unregistering): Released all slaves [ 545.184654][T19109] netlink: 'syz.2.3045': attribute type 10 has an invalid length. [ 545.261957][T19113] netlink: 'syz.2.3045': attribute type 10 has an invalid length. [ 545.297643][T19110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3046'. [ 545.301152][T19110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3046'. [ 545.302144][T19109] bond9: (slave dummy0): Releasing active interface [ 545.313737][T19110] netlink: 'syz.1.3046': attribute type 2 has an invalid length. [ 545.349478][T19109] team0: Port device dummy0 added [ 545.375805][T19113] team0: Port device dummy0 removed [ 545.633832][T19130] tipc: Failed to remove unknown binding: 66,0,0/9480874:2690376847/2690376848 [ 545.634192][T19130] tipc: Failed to remove unknown binding: 66,0,0/9480874:2690376847/2690376848 [ 545.689856][T19129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3051'. [ 545.871630][T19144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3054'. [ 545.905221][T19129] ip6erspan1: entered allmulticast mode [ 545.941259][T19135] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3054'. [ 545.941671][T19136] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3054'. [ 546.125094][T19157] lo: left promiscuous mode [ 546.125622][T19157] tunl0: left promiscuous mode [ 546.126040][T19157] gre0: left promiscuous mode [ 546.126562][T19157] gretap0: left promiscuous mode [ 546.126927][T19157] erspan0: left promiscuous mode [ 546.127243][T19157] ip_vti0: left promiscuous mode [ 546.129103][T19157] ip6_vti0: left promiscuous mode [ 546.129536][T19157] sit0: left promiscuous mode [ 546.129861][T19157] ip6tnl0: left promiscuous mode [ 546.130167][T19157] ip6gre0: left promiscuous mode [ 546.130476][T19157] ip6gretap0: left promiscuous mode [ 546.131713][T19157] nlmon0: left promiscuous mode [ 546.132083][T19157] batadv0: left promiscuous mode [ 546.132598][T19157] vxcan0: left promiscuous mode [ 546.132993][T19157] vxcan1: left promiscuous mode [ 546.134202][T19157] veth0: left promiscuous mode [ 546.134604][T19157] veth1: left promiscuous mode [ 546.134986][T19157] wg0: left promiscuous mode [ 546.135342][T19157] wg1: left promiscuous mode [ 546.135734][T19157] wg2: left promiscuous mode [ 546.136095][T19157] veth0_to_bridge: left promiscuous mode [ 546.136979][T19157] veth1_to_bridge: left promiscuous mode [ 546.137358][T19157] bridge_slave_1: left promiscuous mode [ 546.137730][T19157] veth0_to_bond: left promiscuous mode [ 546.138385][T19157] veth1_to_bond: left promiscuous mode [ 546.138779][T19157] bond_slave_1: left promiscuous mode [ 546.139206][T19157] veth0_to_team: left promiscuous mode [ 546.139573][T19157] team_slave_0: left promiscuous mode [ 546.139945][T19157] veth1_to_team: left promiscuous mode [ 546.140305][T19157] team_slave_1: left promiscuous mode [ 546.140669][T19157] veth0_to_batadv: left promiscuous mode [ 546.141058][T19157] batadv_slave_0: left promiscuous mode [ 546.141479][T19157] veth1_to_batadv: left promiscuous mode [ 546.141870][T19157] batadv_slave_1: left promiscuous mode [ 546.142238][T19157] xfrm0: left promiscuous mode [ 546.142608][T19157] veth0_to_hsr: left promiscuous mode [ 546.143340][T19157] veth1_to_hsr: left promiscuous mode [ 546.144412][T19157] hsr0: left promiscuous mode [ 546.144952][T19157] veth1_virt_wifi: left promiscuous mode [ 546.145347][T19157] veth0_virt_wifi: left promiscuous mode [ 546.145883][T19157] virt_wifi0: left promiscuous mode [ 546.148400][T19157] veth0_macvtap: left promiscuous mode [ 546.149510][T19157] veth0_macvtap: entered promiscuous mode [ 546.149714][T19157] macvtap0: left promiscuous mode [ 546.150691][T19157] tipc: Resetting bearer [ 546.150930][T19157] geneve0: left promiscuous mode [ 546.152907][T19157] geneve1: left promiscuous mode [ 546.155593][T19157] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 546.155957][T19157] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 546.157847][T19157] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 546.158739][T19157] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 546.159658][T19157] netdevsim netdevsim1 netdevsim2: left promiscuous mode [ 546.160021][T19157] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 546.161112][T19157] netdevsim netdevsim1 netdevsim3: left promiscuous mode [ 546.161425][T19157] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 546.162305][T19157] bond1: left promiscuous mode [ 546.162719][T19157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 546.163494][T19157] veth2: left promiscuous mode [ 546.165142][T19157] veth3: left promiscuous mode [ 546.165843][T19157] sit1: left promiscuous mode [ 546.230246][ T52] Bluetooth: hci2: command tx timeout [ 546.271283][T19157] vxlan0: left promiscuous mode [ 546.274959][T19157] vti60: left promiscuous mode [ 546.282332][T19157] mac80211_hwsim hwsim19 wlan2: left promiscuous mode [ 546.294689][T19157] bridge1: left promiscuous mode [ 546.308170][T19157] mac80211_hwsim hwsim21 wlan3: left promiscuous mode [ 546.309358][T19157] bond2: left promiscuous mode [ 546.313647][T19157] 8021q: adding VLAN 0 to HW filter on device bond2 [ 546.314573][T19157] veth4: left promiscuous mode [ 546.318875][T19157] veth5: left promiscuous mode [ 546.334653][T19157] bond3: left promiscuous mode [ 546.335211][T19157] 8021q: adding VLAN 0 to HW filter on device bond3 [ 546.339652][T19157] veth6: left promiscuous mode [ 546.344697][T19157] veth7: left promiscuous mode [ 546.355295][T19157] mac80211_hwsim hwsim26 wlan4: left promiscuous mode [ 546.358071][T19157] mac80211_hwsim hwsim6 veth1_to_bod: left promiscuous mode [ 546.358094][T19157] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 546.807879][ T6760] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.807955][ T6760] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.807986][ T6760] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.808016][ T6760] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.849250][ T1160] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 546.849323][ T1160] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 546.866976][ T1160] bond2: active interface up! [ 547.237682][T19181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3061'. [ 547.279728][T19052] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.279888][T19052] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.280019][T19052] bridge_slave_0: entered allmulticast mode [ 547.281823][T19052] bridge_slave_0: entered promiscuous mode [ 547.290683][T19052] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.290845][T19052] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.291007][T19052] bridge_slave_1: entered allmulticast mode [ 547.292811][T19052] bridge_slave_1: entered promiscuous mode [ 547.329855][T19052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.352532][T19052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.405342][T19191] syzkaller0: entered promiscuous mode [ 547.405364][T19191] syzkaller0: entered allmulticast mode [ 547.405622][T19191] tipc: Resetting bearer [ 547.633132][T19052] team0: Port device team_slave_0 added [ 547.699176][T19052] team0: Port device team_slave_1 added [ 547.837753][T19052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.837770][T19052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.837792][T19052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.884803][T19052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.884820][T19052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.884844][T19052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.119127][T19216] tc_dump_action: action bad kind [ 548.161809][T19052] hsr_slave_0: entered promiscuous mode [ 548.164488][T19052] hsr_slave_1: entered promiscuous mode [ 548.177972][T19052] debugfs: 'hsr0' already exists in 'hsr' [ 548.177992][T19052] Cannot create hsr debugfs directory [ 548.307367][ T52] Bluetooth: hci2: command tx timeout [ 548.707644][T19241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3076'. [ 548.707688][T19241] netlink: 'syz.4.3076': attribute type 5 has an invalid length. [ 548.707700][T19241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3076'. [ 548.918743][ T6745] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.918788][ T6745] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.918821][ T6745] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.918853][ T6745] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.060851][T19257] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3080'. [ 549.135167][T19052] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.256729][T19266] tipc: Enabling of bearer rejected, failed to enable media [ 549.519092][T19052] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.663143][T19285] tipc: Enabling of bearer rejected, failed to enable media [ 549.726636][T19052] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.839874][T19297] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3090'. [ 550.062564][T19308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3091'. [ 550.387212][ T52] Bluetooth: hci2: command tx timeout [ 550.743860][T19052] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 550.765621][T19052] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 550.781197][T19336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.782051][T19052] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 550.785802][T19336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3096'. [ 550.821696][T19052] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 550.822552][T19052] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 550.847317][T19052] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 550.852151][T19052] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 550.895140][T19052] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 550.976229][T19336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3096'. [ 551.074254][T19354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3098'. [ 551.111809][T19052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.154519][T19052] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.253159][ T6758] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.253284][ T6758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.281927][ T6727] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.282025][ T6727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.521920][T19370] bridge0: port 2(vlan0) entered blocking state [ 551.523684][T19370] bridge0: port 2(vlan0) entered disabled state [ 551.525494][T19370] vlan0: entered allmulticast mode [ 551.525514][T19370] geneve0: entered allmulticast mode [ 551.534168][T19370] vlan0: entered promiscuous mode [ 551.534187][T19370] geneve0: entered promiscuous mode [ 551.682245][T19375] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3103'. [ 552.155773][T19402] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 552.383078][T19415] __nla_validate_parse: 2 callbacks suppressed [ 552.383099][T19415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3112'. [ 552.383113][T19415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3112'. [ 552.383136][T19415] netlink: 'syz.1.3112': attribute type 13 has an invalid length. [ 552.428910][T19052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.467133][ T52] Bluetooth: hci2: command tx timeout [ 552.502392][T19416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.594899][T19421] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3115'. [ 552.647725][T19416] batadv_slave_1: entered promiscuous mode [ 552.662154][T19416] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 552.707047][T19416] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 552.712717][T19416] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 552.716180][T19416] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 552.720315][T19416] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 552.758061][T19416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 552.761107][T19416] 8021q: adding VLAN 0 to HW filter on device bond2 [ 552.763202][T19416] 8021q: adding VLAN 0 to HW filter on device bond3 [ 552.779978][T19433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3116'. [ 552.826894][T19416] 8021q: adding VLAN 0 to HW filter on device bond4 [ 552.832021][T19416] 8021q: adding VLAN 0 to HW filter on device bond5 [ 552.868781][T19416] 8021q: adding VLAN 0 to HW filter on device bond6 [ 552.882603][T19416] virt_wifi0: entered promiscuous mode [ 552.883554][ T6727] bond6: (slave bridge6): link status up again after 0 ms [ 552.892849][T19416] 8021q: adding VLAN 0 to HW filter on device bond7 [ 552.897049][ T6742] bond6: (slave bridge6): link status up again after 0 ms [ 552.912586][T19416] 8021q: adding VLAN 0 to HW filter on device bond8 [ 552.925299][T19416] 8021q: adding VLAN 0 to HW filter on device bond9 [ 552.930756][ T6727] bond6: (slave bridge6): link status up again after 0 ms [ 552.950167][ T6742] bond6: (slave bridge6): link status up again after 0 ms [ 552.969009][ T6727] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 552.989925][T19416] 8021q: adding VLAN 0 to HW filter on device bond10 [ 552.994470][T19416] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 553.005839][ T6727] bond6: (slave bridge6): link status up again after 0 ms [ 553.039020][T16255] s`z1: Port: 1 Link ACTIVE [ 553.047387][ T6727] bond6: (slave bridge6): link status up again after 0 ms [ 553.067210][ T6727] bond6: (slave bridge6): link status up again after 0 ms [ 553.086628][ T6758] bond6: (slave bridge6): link status up again after 0 ms [ 553.303581][T19052] veth0_vlan: entered promiscuous mode [ 553.402402][T19052] veth1_vlan: entered promiscuous mode [ 553.510497][T19052] veth0_macvtap: entered promiscuous mode [ 553.537138][T19460] netlink: 'syz.1.3123': attribute type 4 has an invalid length. [ 553.538274][T19461] netlink: 'syz.1.3123': attribute type 4 has an invalid length. [ 554.836154][T19486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3128'. [ 554.836176][T19486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3128'. [ 554.836199][T19486] netlink: 'syz.4.3128': attribute type 11 has an invalid length. [ 555.164512][T19052] veth1_macvtap: entered promiscuous mode [ 555.201878][ T5742] s`z1: Port: 1 Link DOWN [ 555.235006][T19490] netlink: 'syz.3.3130': attribute type 1 has an invalid length. [ 555.345671][T19495] netlink: 'syz.3.3130': attribute type 10 has an invalid length. [ 555.345686][T19495] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3130'. [ 555.393891][T19490] 8021q: adding VLAN 0 to HW filter on device bond13 [ 555.407943][T19492] bond13: (slave dummy0): Enslaving as a backup interface with an up link [ 555.408308][T19495] dummy0: entered promiscuous mode [ 555.411488][T19495] bond13: (slave dummy0): Releasing backup interface [ 555.470243][T19052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.489671][T19052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.494251][T19499] xt_hashlimit: size too large, truncated to 1048576 [ 555.641042][T19508] xt_hashlimit: size too large, truncated to 1048576 [ 555.694022][ T6758] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.699962][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.708367][ T6745] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.708837][ T1160] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.822442][ T6758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.822459][ T6758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.914081][ T6758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.914104][ T6758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.184824][T19520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3137'. [ 556.273689][T19531] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 556.730402][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 556.747163][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 556.748910][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 556.752319][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 556.754374][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 556.923639][T19558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3142'. [ 556.935322][T19556] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3141'. [ 556.980777][T19556] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.981067][T19556] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.492817][ T5616] bond8: (slave syz_tun): Removing an active aggregator [ 557.494557][ T5616] bond8: (slave syz_tun): Releasing backup interface [ 557.838656][T19586] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 557.838683][T19586] bridge2: entered allmulticast mode [ 557.922021][T19591] netlink: 'syz.3.3149': attribute type 1 has an invalid length. [ 557.922056][T19591] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3149'. [ 557.922072][T19591] netlink: 'syz.3.3149': attribute type 1 has an invalid length. [ 557.954810][T19591] IPVS: set_ctl: invalid protocol: 108 172.30.97.4:20004 [ 557.973811][T19593] netlink: 'syz.1.3151': attribute type 10 has an invalid length. [ 558.017566][T19593] bond6: (slave dummy0): Releasing active interface [ 558.017614][T19593] dummy0: left promiscuous mode [ 558.071861][T19598] net_ratelimit: 91 callbacks suppressed [ 558.071881][T19598] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 558.394072][T19605] macvlan2: entered promiscuous mode [ 558.394094][T19605] macvlan2: entered allmulticast mode [ 558.394338][ T5349] dummy0: entered promiscuous mode [ 558.411799][T19605] dummy0: entered allmulticast mode [ 558.421310][T19605] team0: Port device macvlan2 added [ 558.462044][T19609] netlink: 'syz.3.3158': attribute type 1 has an invalid length. [ 558.623932][T19609] bond14: entered promiscuous mode [ 558.633160][T19609] 8021q: adding VLAN 0 to HW filter on device bond14 [ 558.786504][ T52] Bluetooth: hci3: command tx timeout [ 558.895343][T19631] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3164'. [ 559.296925][T19645] netlink: 'syz.4.3167': attribute type 5 has an invalid length. [ 559.297102][T19645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.337620][T19545] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.337773][T19545] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.337937][T19545] bridge_slave_0: entered allmulticast mode [ 559.339746][T19545] bridge_slave_0: entered promiscuous mode [ 559.369687][T19545] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.369856][T19545] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.370025][T19545] bridge_slave_1: entered allmulticast mode [ 559.371599][T19545] bridge_slave_1: entered promiscuous mode [ 559.599816][T19545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.614991][T19545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.734743][T19545] team0: Port device team_slave_0 added [ 559.750586][T19545] team0: Port device team_slave_1 added [ 559.844013][T19684] IPVS: Unknown mcast interface: macsec0 [ 559.852123][T19545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.852140][T19545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.852162][T19545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.867284][T19545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.867300][T19545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.867323][T19545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.019288][T19545] hsr_slave_0: entered promiscuous mode [ 560.021164][T19545] hsr_slave_1: entered promiscuous mode [ 560.021898][T19545] debugfs: 'hsr0' already exists in 'hsr' [ 560.021916][T19545] Cannot create hsr debugfs directory [ 560.165651][T19693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3178'. [ 560.165679][T19693] netlink: 'syz.4.3178': attribute type 1 has an invalid length. [ 560.471446][T19698] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3178'. [ 560.665846][T19545] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.665868][T19545] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 560.752529][T19712] IPVS: Error connecting to the multicast addr [ 560.802207][T19545] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.802241][T19545] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 560.866531][ T52] Bluetooth: hci3: command tx timeout [ 561.044704][T19726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3185'. [ 561.045724][T19727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3183'. [ 561.075374][T19729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3186'. [ 561.169447][T19545] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.169480][T19545] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 561.330545][T19545] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.330579][T19545] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 561.394328][T19739] netlink: 'syz.0.3190': attribute type 3 has an invalid length. [ 561.409482][T19739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3190'. [ 561.810982][T19755] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3191'. [ 561.864433][T19751] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 562.054909][T19545] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 562.272419][T19770] sctp: [Deprecated]: syz.0.3196 (pid 19770) Use of struct sctp_assoc_value in delayed_ack socket option. [ 562.272419][T19770] Use struct sctp_sack_info instead [ 562.354936][T19545] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 562.363073][T19768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3196'. [ 562.385808][T19545] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 562.423473][T19545] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 562.434719][T19545] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 562.502357][T19545] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 562.504944][T19545] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 562.536240][T19545] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 562.872725][T19545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.910724][T19545] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.951579][ T52] Bluetooth: hci3: command tx timeout [ 563.028264][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.045775][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.045861][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.072114][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.072230][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.253031][T19809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3206'. [ 563.623216][T19828] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3210'. [ 563.623464][T19828] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3210'. [ 563.623690][T19828] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3210'. [ 563.627392][T19828] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3210'. [ 563.627651][T19828] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3210'. [ 563.630933][T19828] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3210'. [ 563.631193][T19828] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3210'. [ 563.631415][T19828] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3210'. [ 563.631621][T19828] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3210'. [ 564.300309][T19856] 8021q: VLANs not supported on ip6gre0 [ 564.529927][T19545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.737112][T19545] veth0_vlan: entered promiscuous mode [ 564.754496][T19545] veth1_vlan: entered promiscuous mode [ 564.866038][T19545] veth0_macvtap: entered promiscuous mode [ 564.889715][T19545] veth1_macvtap: entered promiscuous mode [ 564.983246][T19545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.007851][T19868] vlan3: left allmulticast mode [ 565.007879][T19868] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 565.007932][T19868] vlan3: left promiscuous mode [ 565.007947][T19868] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 565.009945][T19868] bridge0: port 2(vlan3) entered disabled state [ 565.028823][ T52] Bluetooth: hci3: command tx timeout [ 565.211326][T19545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.391025][ T6757] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.391801][ T6757] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.391840][ T6757] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.391880][ T6757] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.437879][T19891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.501118][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.504342][ T6760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.504368][ T6760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.577804][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.582415][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.582434][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.594040][T19890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.602999][T19890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.611249][T19890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.647847][T19890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.649468][T19890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.650927][T19890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.650974][T19899] ip_tables: iptables: counters copy to user failed while replacing table [ 565.652460][T19890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.653884][T19890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.655144][T19890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.678986][T19890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.685021][T19890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.695723][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.708110][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.721105][T19890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.729970][T19890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.741654][T19890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.751854][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.758166][T19890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.761995][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.781259][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.790537][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.810231][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.824494][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.846562][T19905] ip_tables: iptables: counters copy to user failed while replacing table [ 565.849096][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.864181][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.883753][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.900204][T19890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.932781][T19890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.939766][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.952636][T19890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.972416][T19890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.980784][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.000206][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.003310][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.004745][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.006167][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.017278][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.055067][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.066042][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.101184][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.128044][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.143630][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.154362][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.175875][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.189261][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.190724][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.193019][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.195958][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.241642][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.243244][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.244527][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.246005][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.293797][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.312002][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.322746][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.330130][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.334214][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.340121][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.352227][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.361703][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.367843][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.378146][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.387173][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.794971][T19925] netlink: Failed to add k\ helper -22 [ 566.795023][T19925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.932471][T19931] netlink: Failed to add k\ helper -22 [ 566.932525][T19931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.957280][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 566.966261][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 566.974090][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 566.997505][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 566.999994][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 567.500473][T19960] netlink: 'syz.4.3234': attribute type 1 has an invalid length. [ 567.608936][T19968] netlink: 'syz.4.3234': attribute type 1 has an invalid length. [ 567.888011][T19976] syzkaller0: entered promiscuous mode [ 567.888033][T19976] syzkaller0: entered allmulticast mode [ 567.893967][T19974] tipc: Started in network mode [ 567.893997][T19974] tipc: Node identity 5a49e4ed77db, cluster identity 4711 [ 567.894506][T19974] tipc: Enabled bearer , priority 0 [ 567.955012][T19982] IPVS: set_ctl: invalid protocol: 183 0.0.0.0:20004 [ 568.030729][T19972] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 568.044283][T19972] bond1 (unregistering): Released all slaves [ 568.265736][T19971] tipc: Resetting bearer [ 568.302901][T19971] tipc: Disabling bearer [ 568.381759][T20006] ip_tables: iptables: counters copy to user failed while replacing table [ 568.552851][T20010] __nla_validate_parse: 35 callbacks suppressed [ 568.552871][T20010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3245'. [ 569.107686][ T52] Bluetooth: hci0: command tx timeout [ 569.270450][T19936] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.270557][T19936] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.270728][T19936] bridge_slave_0: entered allmulticast mode [ 569.300812][T19936] bridge_slave_0: entered promiscuous mode [ 569.310593][T19936] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.315690][T19936] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.315841][T19936] bridge_slave_1: entered allmulticast mode [ 569.328526][T19936] bridge_slave_1: entered promiscuous mode [ 569.374642][T20043] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3255'. [ 569.556137][T19936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.571652][T19936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.606810][T20061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3258'. [ 569.739528][T19936] team0: Port device team_slave_0 added [ 569.753533][T19936] team0: Port device team_slave_1 added [ 569.901303][T20068] vlan2: entered promiscuous mode [ 569.901326][T20068] bridge0: entered promiscuous mode [ 569.954459][T20074] bond0: option packets_per_slave: invalid value (868050663) [ 569.954486][T20074] bond0: option packets_per_slave: allowed values 0 - 65535 [ 569.974966][T19936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.974982][T19936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.975005][T19936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.023120][T19936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.023136][T19936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.023158][T19936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.173845][T19936] hsr_slave_0: entered promiscuous mode [ 570.174476][T19936] hsr_slave_1: entered promiscuous mode [ 570.174955][T19936] debugfs: 'hsr0' already exists in 'hsr' [ 570.174973][T19936] Cannot create hsr debugfs directory [ 570.491453][T20088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3265'. [ 570.545179][T20091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3265'. [ 571.186992][ T52] Bluetooth: hci0: command tx timeout [ 572.697613][T20096] FAULT_INJECTION: forcing a failure. [ 572.697613][T20096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.697645][T20096] CPU: 1 UID: 0 PID: 20096 Comm: syz.4.3266 Not tainted syzkaller #0 PREEMPT(full) [ 572.697666][T20096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 572.697677][T20096] Call Trace: [ 572.697685][T20096] [ 572.697693][T20096] dump_stack_lvl+0xe8/0x150 [ 572.697724][T20096] should_fail_ex+0x410/0x560 [ 572.697752][T20096] _copy_from_user+0x2d/0xb0 [ 572.697775][T20096] bpf_test_init+0xd8/0x150 [ 572.697880][T20096] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 572.697911][T20096] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 572.697934][T20096] ? __fget_files+0x2a/0x420 [ 572.697964][T20096] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 572.697984][T20096] bpf_prog_test_run+0x2c5/0x340 [ 572.698025][T20096] __sys_bpf+0xa22/0xd90 [ 572.698050][T20096] ? __pfx___sys_bpf+0x10/0x10 [ 572.698078][T20096] ? __fget_files+0x2a/0x420 [ 572.698115][T20096] ? ksys_write+0x242/0x270 [ 572.698144][T20096] ? __pfx_ksys_write+0x10/0x10 [ 572.698178][T20096] __x64_sys_bpf+0xba/0xd0 [ 572.698198][T20096] do_syscall_64+0x166/0x520 [ 572.698221][T20096] ? trace_irq_disable+0x3b/0x140 [ 572.698240][T20096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.698258][T20096] ? clear_bhb_loop+0x70/0xc0 [ 572.698280][T20096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.698298][T20096] RIP: 0033:0x7f872d39e159 [ 572.698316][T20096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.698330][T20096] RSP: 002b:00007f872b5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 572.698358][T20096] RAX: ffffffffffffffda RBX: 00007f872d625fa0 RCX: 00007f872d39e159 [ 572.698382][T20096] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 572.698394][T20096] RBP: 00007f872b5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 572.698404][T20096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.698414][T20096] R13: 00007f872d626038 R14: 00007f872d625fa0 R15: 00007ffc7e62afb8 [ 572.698443][T20096] [ 573.080845][T19936] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.080879][T19936] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 573.080915][T19936] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.238028][T20116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3272'. [ 573.268914][ T52] Bluetooth: hci0: command tx timeout [ 573.293126][T20107] veth6: entered allmulticast mode [ 573.514613][T19936] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.514645][T19936] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 573.514667][T19936] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.562624][T20134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.568732][T20134] dummy0: left promiscuous mode [ 573.587131][T20127] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 573.658030][T20127] hsr_slave_0: left promiscuous mode [ 573.806909][T20139] FAULT_INJECTION: forcing a failure. [ 573.806909][T20139] name failslab, interval 1, probability 0, space 0, times 0 [ 573.806942][T20139] CPU: 0 UID: 0 PID: 20139 Comm: syz.2.3278 Not tainted syzkaller #0 PREEMPT(full) [ 573.806963][T20139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 573.806973][T20139] Call Trace: [ 573.806981][T20139] [ 573.806989][T20139] dump_stack_lvl+0xe8/0x150 [ 573.807022][T20139] should_fail_ex+0x410/0x560 [ 573.807047][T20139] should_failslab+0xa8/0x100 [ 573.807109][T20139] __kvmalloc_node_noprof+0x176/0x820 [ 573.807132][T20139] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 573.807149][T20139] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 573.807171][T20139] bpf_test_run_xdp_live+0x1ef/0x1c20 [ 573.807190][T20139] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 573.807220][T20139] ? __mutex_unlock_slowpath+0x731/0x900 [ 573.807252][T20139] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 573.807288][T20139] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 573.807306][T20139] ? 0xffffffffa0404540 [ 573.807367][T20139] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 573.807395][T20139] ? _copy_from_user+0x94/0xb0 [ 573.807417][T20139] ? bpf_test_init+0x113/0x150 [ 573.807442][T20139] ? xdp_convert_md_to_buff+0x5b/0x330 [ 573.807462][T20139] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 573.807495][T20139] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 573.807518][T20139] ? __fget_files+0x2a/0x420 [ 573.807547][T20139] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 573.807566][T20139] bpf_prog_test_run+0x2c5/0x340 [ 573.807592][T20139] __sys_bpf+0xa22/0xd90 [ 573.807620][T20139] ? __pfx___sys_bpf+0x10/0x10 [ 573.807650][T20139] ? __fget_files+0x2a/0x420 [ 573.807689][T20139] ? ksys_write+0x242/0x270 [ 573.807718][T20139] ? __pfx_ksys_write+0x10/0x10 [ 573.807750][T20139] __x64_sys_bpf+0xba/0xd0 [ 573.807771][T20139] do_syscall_64+0x166/0x520 [ 573.807793][T20139] ? trace_irq_disable+0x3b/0x140 [ 573.807810][T20139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.807829][T20139] ? clear_bhb_loop+0x70/0xc0 [ 573.807850][T20139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.807868][T20139] RIP: 0033:0x7fc547f9e159 [ 573.807885][T20139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.807898][T20139] RSP: 002b:00007fc548ed9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 573.807916][T20139] RAX: ffffffffffffffda RBX: 00007fc548225fa0 RCX: 00007fc547f9e159 [ 573.807927][T20139] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 573.807938][T20139] RBP: 00007fc548ed9090 R08: 0000000000000000 R09: 0000000000000000 [ 573.807948][T20139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.807958][T20139] R13: 00007fc548226038 R14: 00007fc548225fa0 R15: 00007ffe38d89e08 [ 573.807982][T20139] [ 574.236285][T19936] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.270167][T19936] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 574.270199][T19936] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.471638][T20143] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3280'. [ 574.531435][T19936] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.531471][T19936] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 574.531495][T19936] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.686064][T20166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3285'. [ 574.688261][T20166] xt_cgroup: path and classid specified [ 574.823013][T20169] netlink: 'syz.2.3285': attribute type 11 has an invalid length. [ 574.823036][T20169] netlink: 4312 bytes leftover after parsing attributes in process `syz.2.3285'. [ 574.824562][ T30] audit: type=1800 audit(1790352895.014:14): pid=20169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3285" name="memory.events" dev="tmpfs" ino=112 res=0 errno=0 [ 574.962152][T20174] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3286'. [ 574.962188][T20174] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 575.028886][T20174] xt_hashlimit: size too large, truncated to 1048576 [ 575.330158][T19936] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 575.346874][ T52] Bluetooth: hci0: command tx timeout [ 575.349033][T19936] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 575.352172][T19936] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 575.429843][T19936] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 575.454391][T19936] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 575.480499][T19936] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 575.483153][T19936] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 575.495936][T19936] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 575.532878][T20181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3288'. [ 575.557952][T20188] FAULT_INJECTION: forcing a failure. [ 575.557952][T20188] name failslab, interval 1, probability 0, space 0, times 0 [ 575.557984][T20188] CPU: 0 UID: 0 PID: 20188 Comm: syz.3.3290 Not tainted syzkaller #0 PREEMPT(full) [ 575.558004][T20188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 575.558015][T20188] Call Trace: [ 575.558022][T20188] [ 575.558030][T20188] dump_stack_lvl+0xe8/0x150 [ 575.558061][T20188] should_fail_ex+0x410/0x560 [ 575.558087][T20188] should_failslab+0xa8/0x100 [ 575.558112][T20188] __kvmalloc_node_noprof+0x176/0x820 [ 575.558136][T20188] ? __kvmalloc_node_noprof+0x345/0x820 [ 575.558155][T20188] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 575.558173][T20188] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 575.558199][T20188] bpf_test_run_xdp_live+0x220/0x1c20 [ 575.558222][T20188] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 575.558247][T20188] ? __mutex_unlock_slowpath+0x731/0x900 [ 575.558279][T20188] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 575.558308][T20188] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 575.558327][T20188] ? 0xffffffffa0404540 [ 575.558385][T20188] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 575.558410][T20188] ? _copy_from_user+0x94/0xb0 [ 575.558431][T20188] ? bpf_test_init+0x113/0x150 [ 575.558459][T20188] ? xdp_convert_md_to_buff+0x5b/0x330 [ 575.558477][T20188] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 575.558508][T20188] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 575.558530][T20188] ? __fget_files+0x2a/0x420 [ 575.558556][T20188] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 575.558574][T20188] bpf_prog_test_run+0x2c5/0x340 [ 575.558597][T20188] __sys_bpf+0xa22/0xd90 [ 575.558620][T20188] ? __pfx___sys_bpf+0x10/0x10 [ 575.558637][T20188] ? __fget_files+0x2a/0x420 [ 575.558666][T20188] ? ksys_write+0x242/0x270 [ 575.558683][T20188] ? __pfx_ksys_write+0x10/0x10 [ 575.558700][T20188] __x64_sys_bpf+0xba/0xd0 [ 575.558712][T20188] do_syscall_64+0x166/0x520 [ 575.558725][T20188] ? trace_irq_disable+0x3b/0x140 [ 575.558736][T20188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.558746][T20188] ? clear_bhb_loop+0x70/0xc0 [ 575.558759][T20188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.558768][T20188] RIP: 0033:0x7ff36239e159 [ 575.558779][T20188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.558788][T20188] RSP: 002b:00007ff363195028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 575.558801][T20188] RAX: ffffffffffffffda RBX: 00007ff362625fa0 RCX: 00007ff36239e159 [ 575.558807][T20188] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 575.558814][T20188] RBP: 00007ff363195090 R08: 0000000000000000 R09: 0000000000000000 [ 575.558820][T20188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.558826][T20188] R13: 00007ff362626038 R14: 00007ff362625fa0 R15: 00007ffc9738c128 [ 575.558842][T20188] [ 575.573094][T20181] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 575.919819][T20196] netlink: 'syz.4.3293': attribute type 10 has an invalid length. [ 575.965941][T20196] team0 (unregistering): Port device team_slave_0 removed [ 575.984357][T20196] team0 (unregistering): Port device team_slave_1 removed [ 576.052542][T20196] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3293'. [ 576.095510][T19936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.153314][T19936] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.189589][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.189691][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.219244][ T6756] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.219349][ T6756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.532838][T20217] netlink: 'syz.2.3298': attribute type 1 has an invalid length. [ 576.704093][T20206] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3295'. [ 576.901501][T20233] FAULT_INJECTION: forcing a failure. [ 576.901501][T20233] name failslab, interval 1, probability 0, space 0, times 0 [ 576.901534][T20233] CPU: 0 UID: 0 PID: 20233 Comm: syz.2.3301 Not tainted syzkaller #0 PREEMPT(full) [ 576.901553][T20233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 576.901563][T20233] Call Trace: [ 576.901569][T20233] [ 576.901577][T20233] dump_stack_lvl+0xe8/0x150 [ 576.901605][T20233] should_fail_ex+0x410/0x560 [ 576.901627][T20233] should_failslab+0xa8/0x100 [ 576.901649][T20233] __kmalloc_cache_node_noprof+0xaa/0x620 [ 576.901671][T20233] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 576.901688][T20233] ? page_pool_create_percpu+0x73/0xc70 [ 576.901800][T20233] ? page_pool_create_percpu+0x73/0xc70 [ 576.901827][T20233] page_pool_create_percpu+0x73/0xc70 [ 576.901847][T20233] ? page_pool_create+0xd/0x20 [ 576.901867][T20233] bpf_test_run_xdp_live+0x23a/0x1c20 [ 576.901888][T20233] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 576.901911][T20233] ? __mutex_unlock_slowpath+0x731/0x900 [ 576.901939][T20233] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 576.901964][T20233] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 576.902024][T20233] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 576.902063][T20233] ? _copy_from_user+0x94/0xb0 [ 576.902087][T20233] ? bpf_test_init+0x113/0x150 [ 576.902111][T20233] ? xdp_convert_md_to_buff+0x5b/0x330 [ 576.902133][T20233] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 576.902169][T20233] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 576.902195][T20233] ? __fget_files+0x2a/0x420 [ 576.902232][T20233] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 576.902251][T20233] bpf_prog_test_run+0x2c5/0x340 [ 576.902277][T20233] __sys_bpf+0xa22/0xd90 [ 576.902306][T20233] ? __pfx___sys_bpf+0x10/0x10 [ 576.902340][T20233] ? __fget_files+0x2a/0x420 [ 576.902382][T20233] ? ksys_write+0x242/0x270 [ 576.902412][T20233] ? __pfx_ksys_write+0x10/0x10 [ 576.902446][T20233] __x64_sys_bpf+0xba/0xd0 [ 576.902465][T20233] do_syscall_64+0x166/0x520 [ 576.902488][T20233] ? trace_irq_disable+0x3b/0x140 [ 576.902505][T20233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.902525][T20233] ? clear_bhb_loop+0x70/0xc0 [ 576.902547][T20233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.902562][T20233] RIP: 0033:0x7fc547f9e159 [ 576.902586][T20233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.902600][T20233] RSP: 002b:00007fc548ed9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 576.902621][T20233] RAX: ffffffffffffffda RBX: 00007fc548225fa0 RCX: 00007fc547f9e159 [ 576.902634][T20233] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 576.902646][T20233] RBP: 00007fc548ed9090 R08: 0000000000000000 R09: 0000000000000000 [ 576.902657][T20233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.902667][T20233] R13: 00007fc548226038 R14: 00007fc548225fa0 R15: 00007ffe38d89e08 [ 576.902696][T20233] [ 577.409008][T20243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3303'. [ 577.618352][T19936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.765280][T20261] erspan0: entered promiscuous mode [ 577.851251][T20263] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3311'. [ 577.949672][T20267] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3311'. [ 577.950074][T19936] veth0_vlan: entered promiscuous mode [ 577.995242][T19936] veth1_vlan: entered promiscuous mode [ 578.167958][T19936] veth0_macvtap: entered promiscuous mode [ 578.190148][T19936] veth1_macvtap: entered promiscuous mode [ 578.227925][T20277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.227949][T20277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.230221][T20277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.230241][T20277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.319538][T19936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.350741][T19936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.439426][ T6760] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.439671][ T6760] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.439915][ T6760] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.440167][ T6760] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.755091][ T6760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.755115][ T6760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.874525][T20285] ovs-s!: entered promiscuous mode [ 578.900885][ T6745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.900908][ T6745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.587968][T20308] macvlan2: entered promiscuous mode [ 579.587991][T20308] macvlan2: entered allmulticast mode [ 579.999645][T20322] netlink: 'syz.1.3326': attribute type 1 has an invalid length. [ 580.025315][T20322] bond1: entered promiscuous mode [ 580.025794][T20322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 580.105489][T20319] syzkaller0: entered promiscuous mode [ 580.105511][T20319] syzkaller0: entered allmulticast mode [ 580.488965][T20332] __nla_validate_parse: 3 callbacks suppressed [ 580.488987][T20332] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3329'. [ 580.641119][T20337] ipvlan2: entered promiscuous mode [ 580.641144][T20337] ipvlan2: entered allmulticast mode [ 580.641161][T20337] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 580.668993][T20337] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 580.742993][T20337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.745609][T20337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3329'. [ 580.745630][T20337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3329'. [ 581.221561][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 581.232186][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 581.236109][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 581.243079][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 581.243682][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 581.381042][T20357] bond1: entered allmulticast mode [ 581.734175][ T6745] smbdirect: ib_dev[s`z1] removed [ 581.857044][T20371] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.096578][T20391] netlink: 'syz.2.3346': attribute type 61 has an invalid length. [ 582.096601][T20391] netlink: 'syz.2.3346': attribute type 62 has an invalid length. [ 582.132985][T20389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 582.198831][T20389] batadv_slave_1: entered promiscuous mode [ 582.216223][T20388] batadv_slave_1: left promiscuous mode [ 582.412762][T20397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3348'. [ 582.412784][T20397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3348'. [ 582.413055][T20397] netlink: 'syz.1.3348': attribute type 11 has an invalid length. [ 582.609304][ T30] audit: type=1804 audit(1790352902.804:15): pid=20401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3349" name="/newroot/9/cgroup.controllers" dev="tmpfs" ino=65 res=1 errno=0 [ 582.609429][ T30] audit: type=1800 audit(1790352902.804:16): pid=20401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3349" name="cgroup.controllers" dev="tmpfs" ino=65 res=0 errno=0 [ 582.942995][T20358] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.943025][T20417] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3352'. [ 582.948216][T20358] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.948387][T20358] bridge_slave_0: entered allmulticast mode [ 582.954194][T20358] bridge_slave_0: entered promiscuous mode [ 582.964753][T20358] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.969529][T20358] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.969724][T20358] bridge_slave_1: entered allmulticast mode [ 582.977545][T20358] bridge_slave_1: entered promiscuous mode [ 583.021717][T20421] siw: device registration error -23 [ 583.028542][T20417] gretap0: entered promiscuous mode [ 583.091797][T20358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.099973][T20358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.197002][T20358] team0: Port device team_slave_0 added [ 583.202066][T20358] team0: Port device team_slave_1 added [ 583.275679][T20358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.275695][T20358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.275717][T20358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.279941][T20358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.279956][T20358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.279978][T20358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.358669][ T52] Bluetooth: hci1: command tx timeout [ 583.413518][T20434] netlink: 'syz.2.3359': attribute type 3 has an invalid length. [ 583.418510][T20358] hsr_slave_0: entered promiscuous mode [ 583.419495][T20358] hsr_slave_1: entered promiscuous mode [ 583.420158][T20358] debugfs: 'hsr0' already exists in 'hsr' [ 583.420175][T20358] Cannot create hsr debugfs directory [ 583.666206][T20436] vlan2: left promiscuous mode [ 583.666226][T20436] bridge0: left promiscuous mode [ 583.724116][ T6757] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.724212][ T6757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.814639][T20445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3362'. [ 584.029090][T20462] syz.2.3366: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 584.029583][T20462] CPU: 1 UID: 0 PID: 20462 Comm: syz.2.3366 Not tainted syzkaller #0 PREEMPT(full) [ 584.029606][T20462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 584.029618][T20462] Call Trace: [ 584.029626][T20462] [ 584.029635][T20462] dump_stack_lvl+0xe8/0x150 [ 584.029670][T20462] warn_alloc+0x24d/0x270 [ 584.029700][T20462] ? kasan_save_track+0x4f/0x80 [ 584.029721][T20462] ? kasan_save_track+0x3e/0x80 [ 584.029745][T20462] ? __pfx_warn_alloc+0x10/0x10 [ 584.029766][T20462] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 584.029794][T20462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.029833][T20462] __vmalloc_node_range_noprof+0x127/0x1540 [ 584.029888][T20462] ? rcu_is_watching+0x16/0xb0 [ 584.029917][T20462] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 584.029945][T20462] ? __kmalloc_cache_noprof+0x321/0x600 [ 584.029966][T20462] ? __kmalloc_cache_noprof+0x14d/0x600 [ 584.029984][T20462] ? xskq_create+0x56/0x220 [ 584.030112][T20462] xskq_create+0x148/0x220 [ 584.030134][T20462] ? xsk_init_queue+0x8a/0xe0 [ 584.030156][T20462] xsk_init_queue+0x8a/0xe0 [ 584.030181][T20462] xsk_setsockopt+0x52a/0x960 [ 584.030215][T20462] ? __pfx_xsk_setsockopt+0x10/0x10 [ 584.030235][T20462] ? __pfx_aa_sk_perm+0x10/0x10 [ 584.030270][T20462] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 584.030303][T20462] ? __pfx_xsk_setsockopt+0x10/0x10 [ 584.030326][T20462] do_sock_setsockopt+0x17c/0x1b0 [ 584.030356][T20462] __x64_sys_setsockopt+0x13d/0x1b0 [ 584.030385][T20462] do_syscall_64+0x166/0x520 [ 584.030409][T20462] ? trace_irq_disable+0x3b/0x140 [ 584.030425][T20462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.030444][T20462] ? clear_bhb_loop+0x70/0xc0 [ 584.030465][T20462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.030481][T20462] RIP: 0033:0x7fc547f9e159 [ 584.030498][T20462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.030512][T20462] RSP: 002b:00007fc548ed9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 584.030530][T20462] RAX: ffffffffffffffda RBX: 00007fc548225fa0 RCX: 00007fc547f9e159 [ 584.030545][T20462] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 584.030559][T20462] RBP: 00007fc54803506b R08: 0000000000000004 R09: 0000000000000000 [ 584.030571][T20462] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.030583][T20462] R13: 00007fc548226038 R14: 00007fc548225fa0 R15: 00007ffe38d89e08 [ 584.030613][T20462] [ 584.030641][T20462] Mem-Info: [ 584.030651][T20462] active_anon:9079 inactive_anon:0 isolated_anon:0 [ 584.030651][T20462] active_file:0 inactive_file:43578 isolated_file:0 [ 584.030651][T20462] unevictable:0 dirty:121 writeback:0 [ 584.030651][T20462] slab_reclaimable:12241 slab_unreclaimable:121439 [ 584.030651][T20462] mapped:29647 shmem:552 pagetables:1433 [ 584.030651][T20462] sec_pagetables:0 bounce:0 [ 584.030651][T20462] kernel_misc_reclaimable:0 [ 584.030651][T20462] free:1255027 free_pcp:13932 free_cma:0 [ 584.034709][T20358] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 584.036664][T20462] Node 0 active_anon:36316kB inactive_anon:0kB active_file:0kB inactive_file:174108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118588kB dirty:484kB writeback:0kB shmem:2208kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16444kB pagetables:5604kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 584.036720][T20462] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 584.036776][T20462] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 584.036827][T20462] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 584.036862][T20462] Node 0 DMA32 free:1063796kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:36316kB inactive_anon:0kB active_file:0kB inactive_file:174108kB unevictable:0kB writepending:484kB zspages:0kB present:3129332kB managed:2546852kB mlocked:0kB bounce:0kB free_pcp:53708kB local_pcp:27100kB free_cma:0kB [ 584.036917][T20462] lowmem_reserve[]: 0 0 0 0 0 [ 584.036948][T20462] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 584.036998][T20462] lowmem_reserve[]: 0 0 0 0 0 [ 584.037028][T20462] Node 1 Normal free:3940952kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2012kB local_pcp:0kB free_cma:0kB [ 584.037081][T20462] lowmem_reserve[]: 0 0 0 0 0 [ 584.037111][T20462] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 584.037225][T20462] Node 0 DMA32: 1165*4kB (UME) 1080*8kB (UME) 208*16kB (UME) 155*32kB (UM) 84*64kB (UM) 217*128kB (UM) 122*256kB (UME) 42*512kB (UM) 14*1024kB (U) 2*2048kB (ME) 229*4096kB (UM) = 1063892kB [ 584.037372][T20462] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 584.037463][T20462] Node 1 Normal: 2*4kB (M) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3940952kB [ 584.037603][T20462] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 584.037619][T20462] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 584.037637][T20462] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 584.037650][T20462] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 584.037666][T20462] 44126 total pagecache pages [ 584.037678][T20462] 0 pages in swap cache [ 584.037684][T20462] Free swap = 124996kB [ 584.037691][T20462] Total swap = 124996kB [ 584.037699][T20462] 2097051 pages RAM [ 584.037705][T20462] 0 pages HighMem/MovableOnly [ 584.037711][T20462] 428722 pages reserved [ 584.037718][T20462] 0 pages cma reserved [ 584.503703][T20468] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 584.540122][T20471] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3366'. [ 584.585661][T20469] Bluetooth: MGMT ver 1.23 [ 584.585702][T20469] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 584.838125][T20488] netlink: 316 bytes leftover after parsing attributes in process `syz.0.3370'. [ 584.887806][T20493] netlink: 316 bytes leftover after parsing attributes in process `syz.0.3370'. [ 585.427595][ T5624] Bluetooth: hci1: command tx timeout [ 585.480384][T20529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.513421][T20358] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 585.527966][T20358] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 585.529707][T20358] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 585.564242][T20358] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 585.565257][T20358] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 585.597846][T20358] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 585.598774][T20358] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 585.604728][T20532] __nla_validate_parse: 3 callbacks suppressed [ 585.604746][T20532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3382'. [ 585.641539][T20358] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 585.733794][T20538] veth3: entered promiscuous mode [ 585.733817][T20538] veth3: entered allmulticast mode [ 585.735388][T20538] bridge4: port 1(veth3) entered blocking state [ 585.735584][T20538] bridge4: port 1(veth3) entered disabled state [ 585.747588][T20538] bridge4: port 1(veth3) entered blocking state [ 585.747712][T20538] bridge4: port 1(veth3) entered forwarding state [ 585.783302][T20535] netlink: 'syz.0.3383': attribute type 4 has an invalid length. [ 585.811431][T20532] veth5: entered promiscuous mode [ 585.811454][T20532] veth5: entered allmulticast mode [ 585.812402][T20532] bridge4: port 2(veth5) entered blocking state [ 585.812516][T20532] bridge4: port 2(veth5) entered disabled state [ 585.840452][T20532] bridge4: port 2(veth5) entered blocking state [ 585.840571][T20532] bridge4: port 2(veth5) entered forwarding state [ 585.962724][T20358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.995886][T20358] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.013633][ T6757] bridge4: port 1(veth3) entered disabled state [ 586.025554][ T6757] bridge4: port 2(veth5) entered disabled state [ 586.044247][ T6758] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.044368][ T6758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.071995][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.072094][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.490328][T20561] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 586.492679][T20561] bond1 (unregistering): Released all slaves [ 586.620435][T20579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3392'. [ 586.646976][T20579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3392'. [ 586.733015][T20582] netlink: 'syz.0.3392': attribute type 8 has an invalid length. [ 586.733285][T20582] sch_fq: defrate 0 ignored. [ 586.770459][T20582] openvswitch: netlink: IPv4 tunnel dst address is zero [ 587.045620][T20596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3395'. [ 587.273884][T20358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.374233][T20358] veth0_vlan: entered promiscuous mode [ 587.390783][T20358] veth1_vlan: entered promiscuous mode [ 587.441742][T20358] veth0_macvtap: entered promiscuous mode [ 587.453008][T20358] veth1_macvtap: entered promiscuous mode [ 587.479376][T20358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.483398][T20358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.506915][ T52] Bluetooth: hci1: command tx timeout [ 587.606922][ T6761] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.727166][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.727796][ T6761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.727810][ T6761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.749234][ T6757] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.750098][ T6757] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.842817][T20617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3402'. [ 587.874559][ T6761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.874581][ T6761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.924695][T20617] IPv6: Can't replace route, no match found [ 588.146232][T20621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3404'. [ 588.264106][T20626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3334'. [ 588.313396][ T30] audit: type=1800 audit(1790352908.504:17): pid=20625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3405" name=B702 dev="tmpfs" ino=313 res=0 errno=0 [ 588.324750][T20626] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3334'. [ 588.328277][T20626] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3334'. [ 588.328307][T20626] gre0: entered promiscuous mode [ 588.328322][T20626] gre0: entered allmulticast mode [ 588.561823][T20635] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3408'. [ 588.562934][T20635] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 588.834647][T20651] netlink: 'syz.3.3413': attribute type 23 has an invalid length. [ 589.586643][ T52] Bluetooth: hci1: command tx timeout [ 590.872581][T20684] netlink: 'syz.2.3419': attribute type 1 has an invalid length. [ 590.872606][T20684] __nla_validate_parse: 101 callbacks suppressed [ 590.872618][T20684] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3419'. [ 591.034597][T20690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3421'. [ 591.034630][T20690] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 591.250982][T20700] 8021q: adding VLAN 0 to HW filter on device bond2 [ 591.251654][T20700] bridge0: port 3(bond2) entered blocking state [ 591.251761][T20700] bridge0: port 3(bond2) entered disabled state [ 591.251878][T20700] bond2: entered allmulticast mode [ 591.254740][T20700] bond2: entered promiscuous mode [ 591.255829][T20700] bridge0: port 3(bond2) entered blocking state [ 591.255943][T20700] bridge0: port 3(bond2) entered forwarding state [ 591.833618][ T6760] bridge0: port 3(bond2) entered disabled state [ 592.168796][T20717] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3427'. [ 592.199659][T20709] netlink: 'syz.3.3425': attribute type 1 has an invalid length. [ 592.199680][T20709] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3425'. [ 592.270780][T20717] ip6tnl1: entered allmulticast mode [ 592.394318][T20726] netlink: 64587 bytes leftover after parsing attributes in process `syz.3.3431'. [ 592.488841][T20732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3432'. [ 592.494552][T20735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3432'. [ 592.539029][ T6757] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 592.543025][ T6757] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 592.567973][T12262] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 592.602640][T20743] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3433'. [ 592.615107][T20739] macvlan2: entered promiscuous mode [ 592.615128][T20739] macvlan2: entered allmulticast mode [ 592.694603][T20748] bridge_slave_0: left allmulticast mode [ 592.694630][T20748] bridge_slave_0: left promiscuous mode [ 592.704953][T20748] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.738175][T20748] bridge_slave_1: left allmulticast mode [ 592.738198][T20748] bridge_slave_1: left promiscuous mode [ 592.738404][T20748] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.768710][T12262] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 592.773980][T20748] bond0: (slave bond_slave_0): Releasing backup interface [ 592.794104][T20748] bond0: (slave bond_slave_1): Releasing backup interface [ 592.867008][T20760] set match dimension is over the limit! [ 592.875903][T20748] team0: Port device team_slave_0 removed [ 592.909401][T20748] team0: Port device team_slave_1 removed [ 592.910268][T20748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.910288][T20748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.913986][T20748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.914001][T20748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.962963][T20748] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 593.000038][T20746] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 593.025403][T20757] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3437'. [ 593.193610][T12288] bridge0: entered promiscuous mode [ 593.205218][T20771] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3440'. [ 593.279187][ T5742] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 593.359161][T20778] Bluetooth: MGMT ver 1.23 [ 593.359843][T20778] xt_ecn: cannot match TCP bits for non-tcp packets [ 593.555867][T20786] debugfs: '.P'G!DES' already exists in 'ieee80211' [ 593.597585][ T1160] IPVS: starting estimator thread 0... [ 593.696759][T20789] IPVS: using max 30 ests per chain, 72000 per kthread [ 593.968406][T20799] macvlan5: entered promiscuous mode [ 593.968430][T20799] macvlan5: entered allmulticast mode [ 594.130358][T20804] x_tables: ip_tables: REJECT.0 target: invalid size 8 (kernel) != (user) 0 [ 594.598170][T20828] syzkaller0: entered promiscuous mode [ 594.598193][T20828] syzkaller0: entered allmulticast mode [ 595.003840][T20856] netlink: Invalid conntrack helper [ 595.003873][T20856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.057510][T20857] macvlan5: entered promiscuous mode [ 595.057531][T20857] macvlan5: entered allmulticast mode [ 595.265005][T20866] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20001 [ 595.905240][T20892] syzkaller0: entered promiscuous mode [ 595.905262][T20892] syzkaller0: entered allmulticast mode [ 596.025310][T20904] macvlan2: entered promiscuous mode [ 596.025346][T20904] macvlan2: entered allmulticast mode [ 596.466988][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 598.290409][T20917] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 598.308879][T20917] bond1 (unregistering): Released all slaves [ 598.490017][T20919] raw_sendmsg: syz.2.3480 forgot to set AF_INET. Fix it! [ 598.701118][ T1160] IPVS: starting estimator thread 0... [ 598.702465][T20926] __nla_validate_parse: 28 callbacks suppressed [ 598.702481][T20926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3483'. [ 598.770374][T20925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3482'. [ 598.786925][T20927] IPVS: using max 32 ests per chain, 76800 per kthread [ 598.990730][T20938] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3485'. [ 599.041247][T20940] sctp: [Deprecated]: syz.3.3486 (pid 20940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 599.041247][T20940] Use struct sctp_sack_info instead [ 599.506040][T20955] netlink: 'syz.2.3491': attribute type 1 has an invalid length. [ 599.506061][T20955] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3491'. [ 599.711927][T20957] macvlan2: entered promiscuous mode [ 599.711949][T20957] macvlan2: entered allmulticast mode [ 599.870367][T20970] netlink: 'syz.4.3494': attribute type 1 has an invalid length. [ 600.020151][T20970] 8021q: adding VLAN 0 to HW filter on device bond2 [ 600.084006][T20975] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3495'. [ 600.084399][T20984] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 600.127410][T20984] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 600.159106][T20979] vxcan2: entered allmulticast mode [ 600.246499][T21000] netlink: 'syz.1.3499': attribute type 3 has an invalid length. [ 600.292974][T21000] IPVS: persistence engine module ip_vs_pe_ not found [ 600.359824][T21003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3500'. [ 600.359911][T21003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3500'. [ 600.533135][T21010] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3504'. [ 600.611398][T21015] netlink: 280 bytes leftover after parsing attributes in process `syz.0.3505'. [ 600.633069][T21015] netlink: 'syz.0.3505': attribute type 5 has an invalid length. [ 601.315320][T21017] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.316163][T21017] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.529379][T21045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3512'. [ 601.788992][T21017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.823895][T21017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.400254][T21024] macvlan2: entered promiscuous mode [ 602.400279][T21024] macvlan2: entered allmulticast mode [ 602.419933][ T6761] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.419980][ T6761] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.420018][ T6761] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.420051][ T6761] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.565065][T21058] openvswitch: netlink: Missing valid actions attribute. [ 602.824817][T21065] netlink: 'syz.4.3517': attribute type 13 has an invalid length. [ 603.045588][T21081] ip_tables: iptables: counters copy to user failed while replacing table [ 603.326383][T21091] macvlan0: entered promiscuous mode [ 603.435809][T21106] netlink: 'syz.0.3529': attribute type 1 has an invalid length. [ 603.564756][T21106] 8021q: adding VLAN 0 to HW filter on device bond2 [ 603.727366][T21114] __nla_validate_parse: 2 callbacks suppressed [ 603.727387][T21114] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3531'. [ 603.727402][T21114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 604.374616][T21135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3536'. [ 604.626648][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 605.034228][T21149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3542'. [ 605.034250][T21149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3542'. [ 605.177242][T21148] tipc: Enabling of bearer rejected, failed to enable media [ 605.484257][T21158] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3543'. [ 605.525980][T21167] ip_tables: iptables: counters copy to user failed while replacing table [ 605.540419][T21156] vcan0: tx drop: invalid sa for name 0x0000001000000003 [ 605.687816][T21172] pim6reg: entered allmulticast mode [ 605.720800][T21179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3550'. [ 605.725805][T21179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3550'. [ 605.727014][T21179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3550'. [ 605.731936][T21179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3550'. [ 605.732099][T21179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3550'. [ 605.941642][T21182] nbd2: detected capacity change from 0 to 63 [ 605.944499][ T52] block nbd2: Receive control failed (result -32) [ 605.975459][ T1969] block nbd2: Dead connection, failed to find a fallback [ 605.975484][ T1969] block nbd2: shutting down sockets [ 605.975587][ T1969] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 605.975691][ T1969] Buffer I/O error on dev nbd2, logical block 0, async page read [ 605.984503][ T1969] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 605.984533][ T1969] Buffer I/O error on dev nbd2, logical block 1, async page read [ 605.985173][ T1969] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 605.985198][ T1969] Buffer I/O error on dev nbd2, logical block 2, async page read [ 605.985322][ T1969] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 605.985343][ T1969] Buffer I/O error on dev nbd2, logical block 3, async page read [ 605.985976][ T1969] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 605.986001][ T1969] Buffer I/O error on dev nbd2, logical block 0, async page read [ 605.986145][ T1969] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 605.986166][ T1969] Buffer I/O error on dev nbd2, logical block 1, async page read [ 605.994392][ T1969] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 605.994423][ T1969] Buffer I/O error on dev nbd2, logical block 2, async page read [ 605.994536][ T1969] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 605.994563][ T1969] Buffer I/O error on dev nbd2, logical block 3, async page read [ 605.994668][ T1969] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 605.994689][ T1969] Buffer I/O error on dev nbd2, logical block 0, async page read [ 606.000051][ T1969] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 606.000084][ T1969] Buffer I/O error on dev nbd2, logical block 1, async page read [ 606.004662][T15708] ldm_validate_partition_table(): Disk read failed. [ 606.008236][T15708] Dev nbd2: unable to read RDB block 0 [ 606.022158][T15708] nbd2: unable to read partition table [ 606.106117][T15708] ldm_validate_partition_table(): Disk read failed. [ 606.110577][T15708] Dev nbd2: unable to read RDB block 0 [ 606.113948][T15708] nbd2: unable to read partition table [ 606.471847][T21193] tc_dump_action: action bad kind [ 606.766909][T21208] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 606.856255][T21206] syzkaller0: entered promiscuous mode [ 606.856279][T21206] syzkaller0: entered allmulticast mode [ 610.613794][T21216] syzkaller0: entered promiscuous mode [ 610.613863][T21216] syzkaller0: entered allmulticast mode [ 610.654550][T21234] __nla_validate_parse: 17 callbacks suppressed [ 610.654571][T21234] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3564'. [ 610.753143][T21230] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3563'. [ 610.753169][T21230] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3563'. [ 610.811935][T21241] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3565'. [ 610.813388][T21237] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 610.881584][T21248] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3567'. [ 611.044482][T21258] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3568'. [ 614.652560][T21275] ip6gretap1: entered promiscuous mode [ 614.703223][ T50] IPVS: starting estimator thread 0... [ 614.773908][T21276] debugfs: '.P'G!DES' already exists in 'ieee80211' [ 614.797677][T21280] IPVS: using max 31 ests per chain, 74400 per kthread [ 615.231498][T21293] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 615.339590][T21311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 616.062218][T21341] syzkaller0: entered promiscuous mode [ 616.062240][T21341] syzkaller0: entered allmulticast mode [ 616.340790][T21354] xt_l2tp: v2 doesn't support IP mode [ 616.507493][T21361] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3593'. [ 616.520222][T21361] : renamed from lo [ 616.980145][T21376] netlink: 'syz.0.3596': attribute type 1 has an invalid length. [ 616.981741][T21377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3597'. [ 617.039401][T21376] 8021q: adding VLAN 0 to HW filter on device bond3 [ 617.073484][T21379] bond3: (slave veth5): Enslaving as an active interface with a down link [ 617.090193][T21376] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3596'. [ 617.121033][T21372] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3595'. [ 617.121051][T21372] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3595'. [ 617.121059][T21372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3595'. [ 617.333851][T21392] macvlan2: entered promiscuous mode [ 617.333874][T21392] macvlan2: entered allmulticast mode [ 617.371985][T21390] netlink: 'syz.3.3600': attribute type 1 has an invalid length. [ 617.462796][T21390] bond1: entered promiscuous mode [ 617.463246][T21390] 8021q: adding VLAN 0 to HW filter on device bond1 [ 617.525143][T21390] syzkaller0: entered promiscuous mode [ 617.525165][T21390] syzkaller0: entered allmulticast mode [ 617.535510][T21390] tipc: Started in network mode [ 617.535538][T21390] tipc: Node identity 9e0b856b2c47, cluster identity 4711 [ 617.535822][T21390] tipc: Enabled bearer , priority 0 [ 617.545629][T21390] tipc: Resetting bearer [ 617.597796][T21389] tipc: Resetting bearer [ 617.707528][T21389] tipc: Disabling bearer [ 617.769767][T21413] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3608'. [ 617.804187][T21416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3607'. [ 617.849335][T21412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.891569][T21419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3611'. [ 617.891592][T21419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3611'. [ 617.891616][T21419] netlink: 'syz.0.3611': attribute type 19 has an invalid length. [ 617.891629][T21419] netlink: 'syz.0.3611': attribute type 20 has an invalid length. [ 617.951393][T21422] netlink: 'syz.0.3611': attribute type 19 has an invalid length. [ 617.951415][T21422] netlink: 'syz.0.3611': attribute type 20 has an invalid length. [ 617.972474][ T6758] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.972518][ T6758] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.972549][ T6758] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.972586][ T6758] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.007814][T21419] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.007933][T21419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.008231][T21419] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.008328][T21419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.090100][T21422] netlink: 'syz.0.3611': attribute type 1 has an invalid length. [ 618.140707][T21427] ip_tables: iptables: counters copy to user failed while replacing table [ 618.240770][T21427] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 618.242636][T21427] bond3 (unregistering): Released all slaves [ 618.363376][T21439] macvlan2: entered promiscuous mode [ 618.363400][T21439] macvlan2: entered allmulticast mode [ 618.518104][T21444] netlink: 'syz.2.3617': attribute type 1 has an invalid length. [ 618.688042][T21444] bond1: entered promiscuous mode [ 618.694121][T21444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 618.953604][T21446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 618.954007][T21446] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 618.954026][T21446] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 619.307255][T21446] bond1: (slave wireguard0): making interface the new active one [ 619.307283][T21446] wireguard0: entered promiscuous mode [ 619.310658][T21446] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 619.482731][T21468] netlink: 'syz.0.3622': attribute type 1 has an invalid length. [ 619.535221][T21468] 8021q: adding VLAN 0 to HW filter on device bond4 [ 619.595642][T21475] Bluetooth: MGMT ver 1.23 [ 619.949300][T21492] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20001 [ 620.153755][T21471] bond4: (slave veth7): Enslaving as an active interface with a down link [ 620.181717][T21468] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 620.184304][T21468] bond4: (slave batadv1): making interface the new active one [ 620.185584][T21468] batadv1: entered promiscuous mode [ 620.186076][T21468] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 620.238830][T21489] macvlan2: entered promiscuous mode [ 620.238852][T21489] macvlan2: entered allmulticast mode [ 620.242608][ T10] dummy0: entered promiscuous mode [ 620.266662][T21489] dummy0: entered allmulticast mode [ 620.272977][T21489] team0: Port device macvlan2 added [ 620.626737][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 621.464957][T21554] netlink: 'syz.0.3645': attribute type 28 has an invalid length. [ 621.464983][T21554] IPv6: NLM_F_CREATE should be specified when creating new route [ 621.465095][T21554] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 621.465106][T21554] IPv6: NLM_F_CREATE should be set when creating new route [ 621.495470][T21554] syzkaller1: entered promiscuous mode [ 621.495492][T21554] syzkaller1: entered allmulticast mode [ 621.565179][T21557] __nla_validate_parse: 13 callbacks suppressed [ 621.565198][T21557] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3646'. [ 621.570431][T21554] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3645'. [ 621.589053][T21554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3645'. [ 621.589694][T21554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3645'. [ 621.629271][T21554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3645'. [ 621.842412][T21564] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3649'. [ 621.922082][T21574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3650'. [ 622.001977][T21579] ipvlan3: entered promiscuous mode [ 622.074601][T21584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3652'. [ 622.217131][T21590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3654'. [ 622.701816][T21599] FAULT_INJECTION: forcing a failure. [ 622.701816][T21599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.701844][T21599] CPU: 1 UID: 0 PID: 21599 Comm: syz.2.3659 Not tainted syzkaller #0 PREEMPT(full) [ 622.701864][T21599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 622.701875][T21599] Call Trace: [ 622.701882][T21599] [ 622.701889][T21599] dump_stack_lvl+0xe8/0x150 [ 622.701919][T21599] should_fail_ex+0x410/0x560 [ 622.701943][T21599] _copy_from_user+0x2d/0xb0 [ 622.701965][T21599] ___sys_sendmsg+0x1c6/0x360 [ 622.701988][T21599] ? __lock_acquire+0x747/0x2de0 [ 622.702011][T21599] ? __pfx____sys_sendmsg+0x10/0x10 [ 622.702039][T21599] ? kstrtouint+0x6e/0xe0 [ 622.702082][T21599] ? __fget_files+0x2a/0x420 [ 622.702107][T21599] ? __fget_files+0x3a2/0x420 [ 622.702141][T21599] __sys_sendmmsg+0x273/0x4d0 [ 622.702173][T21599] ? __pfx___sys_sendmmsg+0x10/0x10 [ 622.702208][T21599] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 622.702247][T21599] ? ksys_write+0x242/0x270 [ 622.702275][T21599] ? __pfx_ksys_write+0x10/0x10 [ 622.702309][T21599] __x64_sys_sendmmsg+0xa0/0xc0 [ 622.702340][T21599] do_syscall_64+0x166/0x520 [ 622.702363][T21599] ? trace_irq_disable+0x3b/0x140 [ 622.702382][T21599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.702401][T21599] ? clear_bhb_loop+0x70/0xc0 [ 622.702431][T21599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.702450][T21599] RIP: 0033:0x7fc547f9e159 [ 622.702468][T21599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.702483][T21599] RSP: 002b:00007fc548ed9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 622.702503][T21599] RAX: ffffffffffffffda RBX: 00007fc548225fa0 RCX: 00007fc547f9e159 [ 622.702517][T21599] RDX: 0000000000000002 RSI: 0000200000000440 RDI: 0000000000000005 [ 622.702529][T21599] RBP: 00007fc548ed9090 R08: 0000000000000000 R09: 0000000000000000 [ 622.702541][T21599] R10: 00000000200cc080 R11: 0000000000000246 R12: 0000000000000001 [ 622.702552][T21599] R13: 00007fc548226038 R14: 00007fc548225fa0 R15: 00007ffe38d89e08 [ 622.702584][T21599] [ 623.424897][T21627] x_tables: duplicate underflow at hook 1 [ 623.437456][T21630] x_tables: duplicate underflow at hook 1 [ 623.445402][T21629] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3666'. [ 623.450218][ T52] Bluetooth: hci0: connection err: -111 [ 623.865813][T21655] validate_nla: 1 callbacks suppressed [ 623.865833][T21655] netlink: 'syz.3.3676': attribute type 8 has an invalid length. [ 623.884456][T21656] netlink: 'syz.3.3676': attribute type 8 has an invalid length. [ 623.891959][T21655] netlink: 'syz.3.3676': attribute type 30 has an invalid length. [ 623.914971][T21646] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 624.008516][T21655] bond2: option arp_missed_max: invalid value (0) [ 624.008541][T21655] bond2: option arp_missed_max: allowed values 1 - 255 [ 624.035749][T21655] bond2 (unregistering): Released all slaves [ 625.002567][T21722] netlink: Invalid conntrack helper [ 625.002601][T21722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.017846][T21723] netlink: 'syz.3.3688': attribute type 2 has an invalid length. [ 625.551105][T21746] syzkaller0: entered promiscuous mode [ 625.551125][T21746] syzkaller0: entered allmulticast mode [ 625.614937][T21742] netlink: 'syz.1.3694': attribute type 2 has an invalid length. [ 625.614956][T21742] netlink: 'syz.1.3694': attribute type 5 has an invalid length. [ 625.644914][T21742] : entered promiscuous mode [ 626.707395][ T52] Bluetooth: hci3: command tx timeout [ 627.052434][T21819] macvlan5: entered promiscuous mode [ 627.052465][T21819] macvlan5: entered allmulticast mode [ 627.064071][T21819] team0: Port device macvlan5 added [ 627.189782][T21823] No such timeout policy "syz0" [ 627.238507][T21827] syzkaller0: entered promiscuous mode [ 627.238529][T21827] syzkaller0: entered allmulticast mode [ 627.358579][T21834] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 627.969837][T21851] __nla_validate_parse: 15 callbacks suppressed [ 627.969857][T21851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3728'. [ 628.238460][T21857] netlink: 'syz.3.3729': attribute type 8 has an invalid length. [ 628.654131][T21880] netlink: 'syz.0.3737': attribute type 61 has an invalid length. [ 628.918070][T21890] netlink: 'syz.2.3741': attribute type 1 has an invalid length. [ 628.959770][ T5816] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 629.058034][T21890] 8021q: adding VLAN 0 to HW filter on device bond2 [ 629.192833][T21896] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 629.193045][T21895] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3740'. [ 629.240617][T21900] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 629.277814][ T6756] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 629.333350][T21906] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3744'. [ 629.477872][T21913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3747'. [ 629.485054][ T5816] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 629.497231][ T1160] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 629.718875][T21924] netlink: 'syz.1.3751': attribute type 1 has an invalid length. [ 629.762065][T21924] gretap0: entered promiscuous mode [ 629.780746][T21929] netlink: 'syz.1.3751': attribute type 1 has an invalid length. [ 630.508480][T21947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3758'. [ 630.626807][T21935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3754'. [ 630.821241][T21935] [ 630.823813][T21935] ====================================================== [ 630.831289][T21935] WARNING: possible circular locking dependency detected [ 630.838361][T21935] syzkaller #0 Not tainted [ 630.842801][T21935] ------------------------------------------------------ [ 630.849838][T21935] syz.3.3754/21935 is trying to acquire lock: [ 630.855916][T21935] ffff8880226fa818 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 630.865448][T21935] [ 630.865448][T21935] but task is already holding lock: [ 630.873265][T21935] ffff88802c76aac8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 630.883246][T21935] [ 630.883246][T21935] which lock already depends on the new lock. [ 630.883246][T21935] [ 630.893674][T21935] [ 630.893674][T21935] the existing dependency chain (in reverse order) is: [ 630.903137][T21935] [ 630.903137][T21935] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 630.910981][T21935] __mutex_lock+0x19d/0x1550 [ 630.916195][T21935] elevator_change+0x1af/0x480 [ 630.921857][T21935] elevator_set_none+0xb5/0x140 [ 630.927599][T21935] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 630.934654][T21935] nbd_start_device+0x189/0xb30 [ 630.940253][T21935] nbd_genl_connect+0x167d/0x1cd0 [ 630.946609][T21935] genl_family_rcv_msg_doit+0x233/0x340 [ 630.953237][T21935] genl_rcv_msg+0x614/0x7a0 [ 630.959268][T21935] netlink_rcv_skb+0x226/0x4a0 [ 630.965238][T21935] genl_rcv+0x28/0x40 [ 630.969873][T21935] netlink_unicast+0x7bd/0x940 [ 630.975633][T21935] netlink_sendmsg+0x813/0xb40 [ 630.981141][T21935] sock_sendmsg_nosec+0x13a/0x180 [ 630.987143][T21935] ____sys_sendmsg+0x54e/0x850 [ 630.992541][T21935] ___sys_sendmsg+0x2a5/0x360 [ 630.997894][T21935] __x64_sys_sendmsg+0x1b1/0x290 [ 631.004003][T21935] do_syscall_64+0x166/0x520 [ 631.009848][T21935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.016986][T21935] [ 631.016986][T21935] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 631.025962][T21935] blk_alloc_queue+0x544/0x690 [ 631.031492][T21935] __blk_mq_alloc_disk+0x194/0x390 [ 631.037677][T21935] nbd_dev_add+0x494/0xb60 [ 631.042644][T21935] nbd_init+0x168/0x1f0 [ 631.047593][T21935] do_one_initcall+0x250/0x870 [ 631.052904][T21935] do_initcall_level+0x10a/0x1a0 [ 631.058596][T21935] do_initcalls+0x59/0xa0 [ 631.063726][T21935] kernel_init_freeable+0x29d/0x3e0 [ 631.069630][T21935] kernel_init+0x22/0x1d0 [ 631.074785][T21935] ret_from_fork+0x514/0xb70 [ 631.080139][T21935] ret_from_fork_asm+0x1a/0x30 [ 631.085896][T21935] [ 631.085896][T21935] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 631.093394][T21935] fs_reclaim_acquire+0x71/0x100 [ 631.099004][T21935] __kmalloc_cache_node_noprof+0x66/0x620 [ 631.105274][T21935] create_worker+0x112/0x7c0 [ 631.110702][T21935] workqueue_prepare_cpu+0xe4/0x170 [ 631.116645][T21935] cpuhp_invoke_callback+0x434/0x810 [ 631.122519][T21935] _cpu_up+0x2ce/0x5b0 [ 631.127133][T21935] cpu_up+0x1d2/0x220 [ 631.131687][T21935] cpuhp_bringup_mask+0xb2/0x1a0 [ 631.137278][T21935] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 631.143625][T21935] bringup_nonboot_cpus+0x17/0x30 [ 631.149193][T21935] smp_init+0x32/0x110 [ 631.153882][T21935] kernel_init_freeable+0x27f/0x3e0 [ 631.159610][T21935] kernel_init+0x22/0x1d0 [ 631.164465][T21935] ret_from_fork+0x514/0xb70 [ 631.169767][T21935] ret_from_fork_asm+0x1a/0x30 [ 631.175164][T21935] [ 631.175164][T21935] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 631.183086][T21935] cpus_read_lock+0x42/0x160 [ 631.188215][T21935] static_key_slow_inc+0x12/0x30 [ 631.193740][T21935] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 631.200449][T21935] nbd_genl_foreach_sock+0x265/0x450 [ 631.206309][T21935] nbd_genl_reconfigure+0xbbb/0x1040 [ 631.212136][T21935] genl_family_rcv_msg_doit+0x233/0x340 [ 631.218402][T21935] genl_rcv_msg+0x614/0x7a0 [ 631.223434][T21935] netlink_rcv_skb+0x226/0x4a0 [ 631.229024][T21935] genl_rcv+0x28/0x40 [ 631.233537][T21935] netlink_unicast+0x7bd/0x940 [ 631.238923][T21935] netlink_sendmsg+0x813/0xb40 [ 631.244222][T21935] sock_sendmsg_nosec+0x13a/0x180 [ 631.249785][T21935] ____sys_sendmsg+0x54e/0x850 [ 631.255169][T21935] ___sys_sendmsg+0x2a5/0x360 [ 631.260371][T21935] __x64_sys_sendmsg+0x1b1/0x290 [ 631.265925][T21935] do_syscall_64+0x166/0x520 [ 631.271057][T21935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.277485][T21935] [ 631.277485][T21935] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 631.285222][T21935] __mutex_lock+0x19d/0x1550 [ 631.290356][T21935] nbd_queue_rq+0x373/0xff0 [ 631.295414][T21935] blk_mq_dispatch_rq_list+0x499/0x1990 [ 631.301525][T21935] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 631.308491][T21935] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 631.315092][T21935] blk_mq_run_work_fn+0x16c/0x300 [ 631.320651][T21935] process_scheduled_works+0xc3d/0x1630 [ 631.327162][T21935] worker_thread+0xa47/0xfb0 [ 631.333343][T21935] kthread+0x38b/0x480 [ 631.337955][T21935] ret_from_fork+0x514/0xb70 [ 631.343072][T21935] ret_from_fork_asm+0x1a/0x30 [ 631.348468][T21935] [ 631.348468][T21935] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 631.355784][T21935] __mutex_lock+0x19d/0x1550 [ 631.361006][T21935] nbd_queue_rq+0xc1/0xff0 [ 631.365940][T21935] blk_mq_dispatch_rq_list+0x499/0x1990 [ 631.372296][T21935] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 631.379195][T21935] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 631.385874][T21935] blk_mq_run_work_fn+0x16c/0x300 [ 631.391606][T21935] process_scheduled_works+0xc3d/0x1630 [ 631.397770][T21935] worker_thread+0xa47/0xfb0 [ 631.402892][T21935] kthread+0x38b/0x480 [ 631.407499][T21935] ret_from_fork+0x514/0xb70 [ 631.412607][T21935] ret_from_fork_asm+0x1a/0x30 [ 631.417897][T21935] [ 631.417897][T21935] -> #0 (set->srcu){.+.+}-{0:0}: [ 631.425057][T21935] __lock_acquire+0x164c/0x2de0 [ 631.430453][T21935] lock_sync+0xb3/0x130 [ 631.435256][T21935] __synchronize_srcu+0xc9/0x2f0 [ 631.440729][T21935] elevator_switch+0x1e8/0x7b0 [ 631.446027][T21935] elevator_change+0x2fa/0x480 [ 631.451339][T21935] elevator_set_default+0x375/0x440 [ 631.457337][T21935] blk_register_queue+0x3f3/0x4e0 [ 631.462982][T21935] __add_disk+0x6b8/0xdb0 [ 631.468028][T21935] add_disk_fwnode+0x100/0x3a0 [ 631.473334][T21935] nbd_dev_add+0x733/0xb60 [ 631.478288][T21935] nbd_genl_connect+0x96c/0x1cd0 [ 631.483745][T21935] genl_family_rcv_msg_doit+0x233/0x340 [ 631.489816][T21935] genl_rcv_msg+0x614/0x7a0 [ 631.494940][T21935] netlink_rcv_skb+0x226/0x4a0 [ 631.500241][T21935] genl_rcv+0x28/0x40 [ 631.504738][T21935] netlink_unicast+0x7bd/0x940 [ 631.510200][T21935] netlink_sendmsg+0x813/0xb40 [ 631.515495][T21935] sock_sendmsg_nosec+0x13a/0x180 [ 631.521045][T21935] ____sys_sendmsg+0x54e/0x850 [ 631.526323][T21935] ___sys_sendmsg+0x2a5/0x360 [ 631.531611][T21935] __x64_sys_sendmsg+0x1b1/0x290 [ 631.537077][T21935] do_syscall_64+0x166/0x520 [ 631.542194][T21935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.548621][T21935] [ 631.548621][T21935] other info that might help us debug this: [ 631.548621][T21935] [ 631.559935][T21935] Chain exists of: [ 631.559935][T21935] set->srcu --> &q->q_usage_counter(io)#49 --> &q->elevator_lock [ 631.559935][T21935] [ 631.574401][T21935] Possible unsafe locking scenario: [ 631.574401][T21935] [ 631.582055][T21935] CPU0 CPU1 [ 631.587421][T21935] ---- ---- [ 631.593139][T21935] lock(&q->elevator_lock); [ 631.597770][T21935] lock(&q->q_usage_counter(io)#49); [ 631.605667][T21935] lock(&q->elevator_lock); [ 631.612793][T21935] sync(set->srcu); [ 631.616731][T21935] [ 631.616731][T21935] *** DEADLOCK *** [ 631.616731][T21935] [ 631.624862][T21935] locks held by syz.3.3754/21935: 6, last CPU#1: [ 631.631615][T21935] #0: ffffffff902c6188 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 631.639825][T21935] #1: ffffffff902c5fc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 631.648997][T21935] #2: ffff8880566569c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 631.659551][T21935] #3: ffff88802c76ab50 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 631.669415][T21935] #4: ffff88802c76a5d8 (&q->q_usage_counter(queue)#54){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 631.680337][T21935] #5: ffff88802c76aac8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 631.690180][T21935] [ 631.690180][T21935] stack backtrace: [ 631.696260][T21935] CPU: 1 UID: 0 PID: 21935 Comm: syz.3.3754 Not tainted syzkaller #0 PREEMPT(full) [ 631.706172][T21935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 631.716430][T21935] Call Trace: [ 631.719919][T21935] [ 631.722860][T21935] dump_stack_lvl+0xe8/0x150 [ 631.727637][T21935] print_circular_bug+0x2e2/0x300 [ 631.733129][T21935] check_noncircular+0x12f/0x150 [ 631.738451][T21935] __lock_acquire+0x164c/0x2de0 [ 631.743405][T21935] lock_sync+0xb3/0x130 [ 631.747779][T21935] ? __synchronize_srcu+0xb5/0x2f0 [ 631.753438][T21935] ? __synchronize_srcu+0xb5/0x2f0 [ 631.758569][T21935] __synchronize_srcu+0xc9/0x2f0 [ 631.764694][T21935] ? __pfx___synchronize_srcu+0x10/0x10 [ 631.770816][T21935] ? preempt_schedule_thunk+0x16/0x40 [ 631.776194][T21935] ? preempt_schedule_common+0x7f/0xd0 [ 631.781842][T21935] ? preempt_schedule_thunk+0x16/0x40 [ 631.787332][T21935] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 631.793198][T21935] ? synchronize_srcu+0x20a/0x260 [ 631.798777][T21935] elevator_switch+0x1e8/0x7b0 [ 631.803739][T21935] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 631.809221][T21935] elevator_change+0x2fa/0x480 [ 631.814019][T21935] ? do_raw_spin_unlock+0xf5/0x200 [ 631.819202][T21935] elevator_set_default+0x375/0x440 [ 631.824425][T21935] ? __pfx_elevator_set_default+0x10/0x10 [ 631.830162][T21935] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 631.837301][T21935] ? blk_crypto_sysfs_register+0x11c/0x170 [ 631.843465][T21935] blk_register_queue+0x3f3/0x4e0 [ 631.848626][T21935] __add_disk+0x6b8/0xdb0 [ 631.853093][T21935] add_disk_fwnode+0x100/0x3a0 [ 631.857875][T21935] nbd_dev_add+0x733/0xb60 [ 631.862294][T21935] ? __pfx_nbd_dev_add+0x10/0x10 [ 631.867346][T21935] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 631.873338][T21935] ? bpf_lsm_capable+0x9/0x20 [ 631.878124][T21935] ? security_capable+0x7e/0x2c0 [ 631.883181][T21935] ? radix_tree_lookup+0x25c/0x290 [ 631.888367][T21935] nbd_genl_connect+0x96c/0x1cd0 [ 631.893477][T21935] ? __pfx_nbd_genl_connect+0x10/0x10 [ 631.898949][T21935] ? rcu_is_watching+0x16/0xb0 [ 631.903815][T21935] ? trace_kmalloc+0x2a/0xf0 [ 631.908864][T21935] ? __kmalloc_noprof+0x38c/0x720 [ 631.914109][T21935] ? __nla_parse+0x40/0x60 [ 631.918798][T21935] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 631.925144][T21935] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 631.931890][T21935] genl_family_rcv_msg_doit+0x233/0x340 [ 631.937816][T21935] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 631.944696][T21935] ? __lock_acquire+0x747/0x2de0 [ 631.949780][T21935] genl_rcv_msg+0x614/0x7a0 [ 631.954955][T21935] ? __pfx_genl_rcv_msg+0x10/0x10 [ 631.960175][T21935] ? __pfx_nbd_genl_connect+0x10/0x10 [ 631.965700][T21935] netlink_rcv_skb+0x226/0x4a0 [ 631.970490][T21935] ? __pfx_genl_rcv_msg+0x10/0x10 [ 631.976414][T21935] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 631.982600][T21935] ? down_read+0x2be/0x330 [ 631.987117][T21935] genl_rcv+0x28/0x40 [ 631.991109][T21935] netlink_unicast+0x7bd/0x940 [ 631.995912][T21935] netlink_sendmsg+0x813/0xb40 [ 632.000959][T21935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.006461][T21935] ? apparmor_socket_sendmsg+0x98/0x360 [ 632.012130][T21935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.017683][T21935] sock_sendmsg_nosec+0x13a/0x180 [ 632.023047][T21935] ____sys_sendmsg+0x54e/0x850 [ 632.027824][T21935] ? __pfx_____sys_sendmsg+0x10/0x10 [ 632.033119][T21935] ? import_iovec+0x73/0xa0 [ 632.037633][T21935] ___sys_sendmsg+0x2a5/0x360 [ 632.042317][T21935] ? __lock_acquire+0x747/0x2de0 [ 632.047259][T21935] ? __pfx____sys_sendmsg+0x10/0x10 [ 632.052543][T21935] ? futex_wait+0x2a2/0x390 [ 632.057083][T21935] ? __fget_files+0x2a/0x420 [ 632.061690][T21935] ? __fget_files+0x3a2/0x420 [ 632.066554][T21935] __x64_sys_sendmsg+0x1b1/0x290 [ 632.071516][T21935] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 632.077018][T21935] do_syscall_64+0x166/0x520 [ 632.081699][T21935] ? trace_irq_disable+0x3b/0x140 [ 632.086726][T21935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.092867][T21935] ? clear_bhb_loop+0x70/0xc0 [ 632.097562][T21935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.103530][T21935] RIP: 0033:0x7f79a179e159 [ 632.107940][T21935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.128247][T21935] RSP: 002b:00007f79a269e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.136947][T21935] RAX: ffffffffffffffda RBX: 00007f79a1a25fa0 RCX: 00007f79a179e159 [ 632.144930][T21935] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000c [ 632.153623][T21935] RBP: 00007f79a183506b R08: 0000000000000000 R09: 0000000000000000 [ 632.161641][T21935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.169816][T21935] R13: 00007f79a1a26038 R14: 00007f79a1a25fa0 R15: 00007ffdccd37fb8 [ 632.177902][T21935] [ 632.671860][ T50] batadv1: left promiscuous mode [ 632.721759][T21264] udevd[21264]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 634.729905][ T6742] bridge0: left allmulticast mode [ 635.164677][ T6742] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 635.278028][ T6742] bond6 (unregistering): (slave gretap1): Releasing active interface [ 635.538675][ T6742] bond0 (unregistering): Released all slaves [ 635.541845][ T6742] bond1 (unregistering): Released all slaves [ 635.560114][ T6742] bond2 (unregistering): Released all slaves [ 635.565535][ T6742] bond3 (unregistering): Released all slaves [ 635.594224][ T6742] bond4 (unregistering): (slave veth7): Releasing active interface [ 635.595356][ T6742] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 635.614576][ T6742] bond4 (unregistering): Released all slaves [ 635.627122][ T6742] bond5 (unregistering): Released all slaves [ 635.632433][ T6742] bond6 (unregistering): Released all slaves [ 635.660212][ T6742] bond7 (unregistering): Released all slaves [ 635.666158][ T6742] bond8 (unregistering): Released all slaves [ 635.684038][ T6742] bond9 (unregistering): Released all slaves [ 635.765855][ T6742] ovs-s!!: left promiscuous mode [ 635.861110][ T6742] tipc: Disabling bearer [ 635.861521][ T6742] tipc: Left network mode [ 636.397554][ T6742] hsr_slave_0: left promiscuous mode [ 638.075072][ T6742] IPVS: stop unused estimator thread 0...