last executing test programs: 8.00676013s ago: executing program 0 (id=1904): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @dev={0xfe, 0x80, '\x00', 0x26}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.707396365s ago: executing program 0 (id=1909): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000040)=0xd) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x8000, 0x80, 0x2b9, 0x9174, {{0x5, 0x4, 0x2, 0x7, 0x14, 0x65, 0x0, 0xd4, 0x0, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x14}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000100040000000000091931007b115b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x16) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x5c}, 0x1, 0x6c, 0x0, 0x4000000}, 0x4000095) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000101"], 0x38}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x2d, 0x0, 0x2, 0xfffffffe}, {0x6, 0x2, 0x9, 0xfffffff7}, {0x4, 0x9, 0x1, 0x3}, {0x6, 0x2, 0x4, 0x25e}]}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r7, &(0x7f0000000300)="8baa44353383d0d7f0ea0be24a86d4a97e3613b067da3774e1b5919dd50aab26e739910b6ed4cdb5bed9ecdab70d7efc4300cb747d921f6fd44ddb", &(0x7f00000000c0)=""/119}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) 7.392920273s ago: executing program 0 (id=1913): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000020000b0000000000ffdbdf25021800feff00000b0000000206001c004e220000ee3560cde8bd85b0d86fb061c27a55e60e8aa7b419843434549eec9da00fc7a61b0362d3bf607ae951820c5523682d5289a487c09c4310aec3da65c03c5c7c399a9f22ea2c7de234090000002707282f54d958c8a29f3b23526272ba2a5a07b42bdb71bfacf9b5b1e7bbdb75a4ecd88a47c187ae9376ecbcd4adfe17536dee3982f4f1d76edecf9e2d8038814c2af6f3d979935e31da264d12a5be44553e7ac050233e1c4f6ae43640e960e9453fd749a29a2c78ab40e7b75e1bba06a9d08a688895253e4842d4cdeb24deadd81c0a3dd9b3b28492ebb8d320fbf6bd7d651169dc67b34adf04485a5a88002ea6810000000000"], 0x24}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4402}, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000080)={'team_slave_1\x00'}) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)) 7.150456003s ago: executing program 0 (id=1917): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_int(r0, 0x84, 0x8, &(0x7f0000000040)=0x1000, 0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 6.334437711s ago: executing program 0 (id=1924): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000180001002dbd700000fff40002100000fe00ff"], 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x2, 0x229, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x8, 0xf010, 0x10001, 0x58}}) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r1, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044010}, 0x54040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa, 0x9}, {0xe}, {0xc, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.768105112s ago: executing program 0 (id=1927): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x3, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x85, &(0x7f00000061c0)={0x0, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f0000000500)=0x90) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r4, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000000)={0x16, 0x6, 0x0, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @dev={0xfe, 0x80, '\x00', 0x10}, @local]}, 0x38) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r3, 0x204) listen(r1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000031401002abd7000ffdbdf250900020075797a30000000000800410072786500140033006272696467655f736c6176655f310000"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x40040) 4.247531435s ago: executing program 3 (id=1941): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000020000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffffeb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xe, 0xd8, &(0x7f0000000240)=""/216, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x34}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000010027bd7004ffdbdf2500000000", @ANYRES32, @ANYBLOB="104e"], 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000240)="a905000000007464000100000001000000e5c0", 0x13}, {&(0x7f0000000000)="82d903bfcb8484b98931c6c599ed9cf57c", 0x11}], 0x2}}], 0x1, 0x24000800) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r5, r4, 0x25, 0xe, @val=@perf_event={0x2}}, 0x18) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x4, 0x0, 0xfffffffc, 0x11, 0x0, 0xb, 0x0, 0x0, {0x0, 0x1000000, 0x0, 0x5}}}}]}, 0x78}}, 0xc000) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {}, {}, {0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x1}, {0x0, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x7, 0xf2ff, 0xdc7a}}}]}]}]}}]}, 0x60}}, 0x0) 2.863139428s ago: executing program 4 (id=1948): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB='c 75:', @ANYRESDEC=r2], 0xc) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000008000a0000000000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb0500210001000000"], 0x64}}, 0x0) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1d}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xdd2}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4d595fdb}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x2000c048}, 0x0) 2.644968171s ago: executing program 4 (id=1951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x7, 0xfffffffffffffffe, 0x7fffffffffffffff}) ioctl$NILFS_IOCTL_GET_CPINFO(r1, 0x80186e82, &(0x7f0000000300)={&(0x7f0000000140)=[{0x0, 0x0, 0x1ff, 0x1, 0x8000000000000001, 0x9, 0x7fffffff, 0xfffffffffffff276}, {0x3, 0x0, 0xffffffffffffffff, 0x7, 0x5, 0x7, 0x7, 0x8}, {0x3, 0x0, 0x4, 0x1, 0x200000000, 0x6e6, 0xc1d, 0x80}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x9, 0x45, 0x100000000}, {0x1, 0x0, 0x8001, 0x3, 0x3, 0x3, 0x6, 0x1}, {0x3, 0x0, 0x1, 0x1, 0x19, 0x666d, 0xfffffffffffffffa, 0x6}, {0x2, 0x0, 0xff, 0x9, 0xffffffffffffffff, 0x3, 0x1, 0x9}], 0x7, 0x38, 0x1, 0x7f}) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x14000040) (async, rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000014c0)={{0x0, 0xdb8, 0xfffffffffffffffa, 0x1, 0x4, 0x7, 0x401, 0x1, 0x9, 0x9, 0xcdc, 0x93d, 0x80000000, 0x10001, 0x7}}) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a0104000000000000003b15bcc0040900020073797a310000000008000a40fffffffc0900010073797a31000000000800054000006fefdf2a12801400018009007922c29d99ed059d00000400028014000180090001006c617374000000000400028008000340000001309afcffff1100010000000000000000000100000a"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000070000000000000013d38000911171000000000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async, rerun: 32) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) (async, rerun: 32) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) (async, rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (rerun: 64) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) (async) mmap$xdp(&(0x7f0000eae000/0x3000)=nil, 0x3000, 0x5000004, 0x13, r3, 0x180000000) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000380)) 2.627615911s ago: executing program 3 (id=1952): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f00000018c0)=""/4122, 0x101a}, {&(0x7f0000000080)=""/118, 0x76}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f0000000000)=""/71, 0x47}, {&(0x7f0000002900)=""/4096, 0x1000}], 0x5}, 0x7}], 0x2, 0x2042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=ANY=[@ANYBLOB="2400000040000701feffffff00000000017c000010001b160c000a800800cb00", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071182d000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNSETIFF(r3, 0x5452, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x400}) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r2, 0x0, 0xff40) pread64(r2, 0x0, 0x0, 0x8) write$ppp(r2, &(0x7f0000000200)="bc72", 0x2) 2.240968613s ago: executing program 4 (id=1954): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x34004081) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0xbfffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf8}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r3, r2, 0x25, 0x4, @void}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.001353976s ago: executing program 2 (id=1955): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a00000009412a3d7462c40c36dec1fdd7a32daf5e009bfcdb8b8e4fc4854cda2f7db19a4660daa6611c7073b8c89ab42e0085978c8ae290908029030f5dd9264ebf1c81d9a1bd885279fc1be4fb9640be09176b7535ba95d8bfaa050f235729c1fe5617e5c85162d785e239ce9945e408128700991426481f141e54dd56bf4ec6658999953b6c95f34b7cd667b9e7dfc5b6d33006262d54e2732aca309d4637f22519e2a547bfe79df6410df21fe2fd", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100627269646765000020000280"], 0x50}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x1404, 0x8, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x3ff}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a216798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271fefc583eec8912c37562d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de7368ca69f6f8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a113c38159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b2059ba4b923a1188dd61dc7de058a4dfa7e85a8bdf1d41a2d8bd044d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4ae52066bb5d4045c958549b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9530243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e1dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd040000000000000034137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c5d904408996ec5db6a4d15b71ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd000000000072716bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff42961f8f3b555d9e8aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e8173d3d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f000000000000000000000000000000005519fe545110a9c01d6f0da7b0731b19ae17b64d6eb1a47675aea60371f629ed3446beb20bf2bab80e451b4139dc6c87e6b395edc142e24b596f636f8c248beeb268dbbf120b26693f73a6362e7c6bff6b08514763f6fbe6c914baf7e25ac7e8d36babeb6c58d012cf7b1ffbe996204af87412b9b21da1dfb01aa5a4ff142deb3bd70d11cf71752bdb33f1dfb6ef107ef3cb0016b2b6dcffb0be5a95d56172098ebf6075cc048f94350e2adb108eabccfae942bbca66ea83139ab4062963be6d549907b17d95b248601322cd8cc6540b6e369c7ebd9b98ec00000000"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0x31, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0xfffffffffffffe9a, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={r4}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r5}, &(0x7f00000004c0), &(0x7f0000000500)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r6, r8, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0xfffffffffffffc8e, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @empty}}}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe54a}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x80) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r10, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4) 1.783899127s ago: executing program 4 (id=1958): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x9) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="090000000400000004000000020000d03dc76e4c1814c5efe9e18b7cae0000000000796a6d", @ANYRES32=0x1, @ANYBLOB='\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000024484d2e18000000", @ANYRES32, @ANYBLOB="00000000000000002c000000008000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) socket$packet(0x11, 0x3, 0x300) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c001, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000000)={0x783a0ef, [0x9d82, 0x800]}, 0x10) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000001c0)={r6, &(0x7f00000000c0)='syzkaller\x00', 0x82, &(0x7f0000000100)={@align=0x40, {0x4, 0x1, 0x52b82d55, 0xd15b}}, 0xff, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x7}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r7}, 0x8) sendto$inet(r5, &(0x7f0000000c80)="e8", 0x6200, 0x88050000, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newsa={0xf8, 0x10, 0x7, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x21}, @in=@multicast2, 0x4e20, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xd, 0xae8}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x34}, [@tfcpad={0x8, 0x16, 0x494}]}, 0xf8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) 1.667836116s ago: executing program 1 (id=1959): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x3}, 0x15, 0x3, 'nq\x00', 0x23, 0x4, 0x72}, 0x2c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001800dd8d000000000000000002001000fe0400010000002008001e0002"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 1.522837595s ago: executing program 2 (id=1960): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x2, 0x5, 0x508, 0x368, 0x220, 0xffffffff, 0xf0, 0x0, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0xff0000ff]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @port=0x4e21, @gre_key=0xa2}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x9, 0xe], 0x3166, 0x1e, 0x1}}, @common=@unspec=@cgroup0={{0x28}, {0xff}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @port=0x4e22}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x1, 0x10, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "001bd300058edb7c"}}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) write(r1, &(0x7f0000000400)="480051c5", 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@routing={0x29, 0x6, 0x1, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @empty, @private1]}, 0x38) 1.513789166s ago: executing program 3 (id=1961): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000001010102000000000000000002000000100002800c0006"], 0x24}}, 0x4048000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) sendmsg$rds(0xffffffffffffffff, 0x0, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000001780)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000001780)='ns/ipc\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, 0x0, 0x2000800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x2, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r4], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000500000096390000000000000600000000000000e10000000000000001000000000000000000000000000000000000000000000000000000000000000a00000006000000020000000000000005000000000000000008000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfffffff00"/384]) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r7, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000000000006000000181100003cf6a75c1e47f5d7dcc262c0d5a2da86467aeb79ff275438d00c2edb24c3d3d45c5877270d7edc686f1700e49f37b1a48ee831cad4f8b47fd68e7caa361b635da8bc7fd97cd9cc8060504f34d9e9e87887f884b33158c20b1fff2773ce3279178a1a66ea562b19c94f6a4171ad4920cec93e6ba7e2e7d3ac371edbcfab9f8ed58507cdce86995dcd6a0ebc6cf7b18f05edcc407308817af9c95dd11475fbcfda0689d66a1bba65ace401f1b825b9c7e5ce0d", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) 1.498864282s ago: executing program 1 (id=1962): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0x21, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xffffedf8}, [@tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @ldst={0x0, 0x3, 0x2, 0x7, 0x1, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0x9, 0x2, 0x4, 0x20, 0x10}, @map_fd={0x18, 0x4}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x68, &(0x7f0000000200)=""/104, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xd, 0x9, 0x7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0x1, 0x1], 0x0, 0x10, 0x1925}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0x6f, 0x3f, &(0x7f0000000400)="981f54d7c7b0257eef5754d46eebd25b7cf779ad33b4d50576ae6b80268cc6d0e4534c3e5053f840c8c09348b648b2eb4494fb1c59511a832fdd07396249b8aaf7d44149ff132a2ba530afb3f24084dfdfbe238230ab51b06555a83d75adf7b0fd66329eae5dba2059ad732fbbf086", &(0x7f0000000480)=""/63, 0x0, 0x0, 0x36, 0xa4, &(0x7f00000004c0)="8323c8ee41030f13a67f3f6070116031ebe300641962d4e0ab478908b0d683904a2adb5d69eaa4f77824124e45300d9fc52582e00c8f", &(0x7f0000000500)="95cef54044c571d1f20533f182b0209865a9791dceeeb6cab4da05326de656a73ba035c0ed78a6ef2a80bb4f80be99f854f1c6e46841f444acca4d1a648b27f9bd2a8c6f26e1cfa20cdbee28a6f7da3d03db843913f7a2e81b818e03a79e87c5f77b6f44541eff39d46bb03482da95d92a0361b729738c9f3c7a070213c45417f4e9bb0bd5c8b87936557b2efdc252f9582b9bb6feae68057ab5c157b1eed53323b8ecbe", 0x4, 0x0, 0xc6}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r3, 0x1f4d2000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x4) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x6c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2d29c1e6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44090}, 0x891) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x3, 0xfffefffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cc40}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x21}}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000003080)={{0xffffffffffffffff, &(0x7f0000000740)='\x00', 0x0, &(0x7f0000000780)={@align=0x2, {0x3, 0x8, 0x1, 0x4}}, 0x5, &(0x7f00000007c0), &(0x7f0000000800)=0xbfe}, 0x3, &(0x7f0000003000)=[{0x2, 0x9, &(0x7f0000000840)='-]&]#\x00', &(0x7f0000000880)="3372ff4d690ba529e3935eb1a6f9cc9fa2676ce834024a0987a2461fd3da60f3cfd465d93b9d4a664e2db6c2c9e4569b380d01b074d94c11f1fbfd438d81c5725f19b7295708093f31c1160f1ffd563d7c50072d7952d021985abee15aeedc679d3c3a668e71b3dd2e475868f3b8fdf7f51804ce600320dc249c1440449cefb09c842406221842235f7213ba71705c6a27cb25db7820ceca2faed69013ee82d041385550c5c98f0f3b5a365ed8e5d6367ed2c3c68102a552703c2a0ac8bc", 0xbe}, {0x1, 0x7, &(0x7f0000000940)='GPL\x00', &(0x7f0000001f00)="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", 0x1000, 0x12}, {0x2, 0x4, &(0x7f0000002f00)='\\\xbc\x00', &(0x7f0000002f40)="c44143813ea3caed19038a287630985d9e62883605eb27611a48764e816d4380a8f7eb911fa4470621fab49c7586839d3323bd7e2592a75f19286ca9ba6910f68d980f6884768aa426e3a1270e6822de0f6a260ca07d45d07d1e391630d54aa1897b94f34b2cbe4054a695d9d7c417c4ba1587eb6285369ad08215f3201fc194aaa05e5cd247acd64ded2a104e88d7f6d4a27b9bcccbf74fc5e757bd", 0x9c, 0xa}]}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x1f, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0xfffffe96}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000003100), &(0x7f0000003140)='%pB \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003240)=@bpf_ext={0x1c, 0x8, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@generic={0x7, 0xa, 0x4, 0x8, 0x8000}, @map_fd={0x18, 0x9, 0x1, 0x0, r3}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x5}]}, &(0x7f0000000680)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x20, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x0, 0x2, 0x4}, 0x10, 0x6ce2, r9, 0x1, &(0x7f00000031c0)=[r2, r13, r2, r2, r2], &(0x7f0000003200)=[{0x1, 0x2, 0x2, 0x9}]}, 0x94) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x84}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000040100080400fc800c0001"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) socket$inet_tcp(0x2, 0x1, 0x0) 1.406294103s ago: executing program 4 (id=1963): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000100180100082020782500000000cb0000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000100b7030000001d0040850000000c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8feffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x6, 0x4, 0x0, 0xfffffffe}]}, 0x10) 1.203905251s ago: executing program 3 (id=1964): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0xfffffffffffffd6f}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x400c041}, 0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x1, 0x1}) 816.390807ms ago: executing program 4 (id=1965): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002500)={&(0x7f0000000f40)=@newtaction={0x158c, 0x30, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [{0x1410, 0x1, [@m_tunnel_key={0x108c, 0x15, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x2, 0x1, 0x1, 0xfff}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2286711984313158, 0x2}}}}, @m_gact={0xd4, 0x6, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xa7e, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x7, 0x0, 0x9, 0xfc}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x183, 0x7, 0xc5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x855, 0xffffffffffffffff}}]}, {0x5f, 0x6, "9f44a467e776bcc6013d11d2be0ee20430baed4d662b1e3e9abea26e4382c3e756b6bd04844b28e96b5f6bb73f3f5c7b37a3a5bc4f96cbd357f5c13a145bdb0497d05639fc917f3ff986760aeee78247e336368f1c53d595915ec3"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x12c, 0xb, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xfe735}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}]}, {0xe7, 0x6, "c7878e2676ed36432050d180c5d374ba5305ab683370c41207c7ea7eb07e49ab51271a23cd323815939600e6c3e0790fc3dc61a77b7f659d9554060557031503052b152f35d7a277f9c74f5ce55d6f64b368b4e4c77fe4ab681decb3c7d8ad8b0d7a0ee6ce623096b726ac50845e2cbe8359c70aa3dde3ba2252f71cc7e703317c9632985064aa81839443acd796efd2613cea7a84eb9d8380418f81fb621f56a79dc7b3fedfd70832c4fb1ec019c51c33759f3897494580882d34643dd022ea094df167d9767215f094bc5424de535e8c05c27a1be77a93a7297c70de901bd834d5ad"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0x180, 0x3, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffff4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x200}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x2, 0x0, 0x0, 0x3df}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x7, 0xffffffffffffffff, 0x7, 0x1ff}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x100, 0x2, 0x4, 0xf, 0x10000}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x480}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0xd1, 0x6, "9158b247e26b1be55594ce33020df17f28a82064308d85fd7564bf22ebd6d38053e6d25f03ae6c5ec29aff5bf3270c641eb0d9c4a867366b7d4666ff1f3eabf3ecf6dccba6034cd06bb70dc0f28276938bdf1e46155446a7e01e36eb1bfe20c95bb4e2a30201f8bdab1585fa38faaf2011e95b1ae1029e3f1f656770c4e5ee3a5c85e1791290e414cbf9cec684374a9626cba5538f6b7ba620dc4722eb1d4d366c18379ada82ef1c385ad0eed270153b655ed456af94688faa6c7097b971699cce2867e641653de912baf538c9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x168, 0x1, [@m_csum={0x164, 0x5, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fffffff, 0x7, 0x0, 0x0, 0x2}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4000000, 0xe8, 0x5, 0x0, 0x5}, 0x9}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x23, 0x2, 0xffffffffffffffff, 0x93, 0x3}, 0x15}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1ff, 0x5, 0x10000000, 0x5, 0x9ef0}, 0x17}}]}, {0xc7, 0x6, "0b1af8c5487a9982c14b84d9dfb955822e6ea1aefc4890a1091e9f3c2d07572844d5a8601d3a16e0670f23133a2fe31f21b02ca83ad36cdffc3da5d7ee299b6fd76db8809792706d9f40554a623b42f849a0dafff21ad6b92e88844446b694578564d0c527eaebab6ef7e0387d0601ab06950cbb55ac0a2c19a252533ea4dcd67fe221a5b69a8a616a330be10b8ad7344c66729e3b807a6260249ec4e5a6abb0a75e01cc4e68b81649b431320cbd0c314e80e0aa9c0dddafed55e73223fcdb7610998a"}, {0xc, 0x7, {0x1, 0x20c2a6331c380471}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x158c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000001c0)={0x1f, 0x3, 0x6}, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="e0000000100001002dbd7000fddbdf257874732874776f6669732829"], 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) unshare(0xe040400) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r11, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b20, &(0x7f0000000080)={'wlan1\x00', @random='\x00\x00]\x00N\v'}) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 805.116009ms ago: executing program 3 (id=1966): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) socket$inet6(0xa, 0x3, 0x3) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, 0x0, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001720c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r1, 0x4) 751.714879ms ago: executing program 1 (id=1967): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001040)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x100000a, @local, 0x4}, 0x1c, &(0x7f0000002280)=[{&(0x7f0000001680)="1a", 0x1}], 0x1}}], 0x1, 0x931766f6159e6d55) (async) shutdown(r0, 0x1) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x4, 0x3}, &(0x7f00000002c0)=0x90) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x14, &(0x7f0000000700)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) 747.923059ms ago: executing program 2 (id=1968): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000240)={@empty, @broadcast}) 496.4454ms ago: executing program 2 (id=1969): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x10, &(0x7f0000000880)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x300, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 404.272514ms ago: executing program 2 (id=1970): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xc0, r1, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x103}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '{'}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0xc0}}, 0x4008040) ioctl$NILFS_IOCTL_RESIZE(r2, 0x40086e8b, &(0x7f0000000380)=0x94) r15 = gettid() r16 = getuid() r17 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r11, 0x8903, &(0x7f0000000700)=0x0) ioctl$NS_GET_OWNER_UID(r14, 0xb704, &(0x7f0000000740)=0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) r21 = getgid() r22 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000002e40), 0x2, 0x0) r23 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r12, 0x29, 0x22, &(0x7f0000002e80)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000002f80)=0xe8) r25 = getgid() r26 = accept4$unix(0xffffffffffffffff, &(0x7f0000002fc0)=@abs, &(0x7f0000003040)=0x6e, 0x80000) r27 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003080)={0x3, 0x4, 0x4, 0xa, 0x0, r14, 0x9, '\x00', 0x0, r14, 0x2, 0x1, 0x2}, 0x50) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000003100)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private2}}, &(0x7f0000003200)=0xe8) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000003240)={0x0, 0x0, 0x0}, &(0x7f0000003280)=0xc) r30 = socket$inet(0x2, 0x9, 0x362) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000032c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003300)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000003400)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003580)=[{{&(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000440)="5b3195666c7af85351c567d176b384f540fe2098a9312427bf17b64b8da85a64bf1a", 0x22}, {&(0x7f0000000480)="be66ccee9e3b7b1c3966a66e28e8a95b5cfa283f30a62722c6061720a74afb8d54feb6c6c87788e03f1fbe7997d1f8d64953943c0fa15d4cda791756e00f65b5972e88", 0x43}, {&(0x7f0000000500)="29de9022451455c7e4e38c0ca46cd194f56a4d5754c2276c8dfbe63456bda71ab632b95cd4e8b29e9eabf75becf1bf7b32b093ec034bb4cd682a635398003fda3051c888af5c88c5785ee76da608921699fd077b0103a586923292149046e34c8278809b693aa1bcef3775e1c2c5277bc659ee5806a23fdb5b14d0723dac8716f68f400423b96f24d1ee09f023a268", 0x8f}, {&(0x7f00000005c0)="41e87cc89e9e37dec32a5d8799d273e39384aa9c4fab5c16cf2eb596757546bf9ce388e9ba0642d5cb0f7b53b4f7cd59118b64fe6e61710066cca087cfba60fe923b0899952dd3a0485dbce99ae9e572b6030b5c21d85baf1791c862c34d921fe466e8dcf643460b69e5c52585e79be557e408ce1c2e2fdbc1b187d64ed4e63228fb0247257a959fa5d2b403609db8a03f9b3c3d40c9c9b854f80c5840252d49001481faa098ece1077532e7c91949f146fcb5809ac234076430536d470614744aaee73be5cdb9218ddb379e774fab818542814fb20dddaeb2c2395e6b25dcfa4bf4aba9c1fd118110374b5364ebd3", 0xef}], 0x4, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {r15, r16}}}, @rights={{0x14, 0x1, 0x1, [r17]}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r21}}}, @rights={{0x20, 0x1, 0x1, [r14, r4, r10, r9]}}], 0x98, 0xc000}}, {{&(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000000940)="19cb986f36349cb141892766236a5e529690ff78cc36ed54e6fc70e4a5968fc23d03c9b0452e314808326db9f9d9d905a9bb4008c3e2097fe1792257955720dc5e485fa908ddfc290bcf969b666baf340e0bfb43cc902dbd2570cfbe825d1814823a77b945e8c72811e6b5fc3c2afe7d7e2ad8f3d2b458ccaa76af54a183ffed7a10aeaa41d556f719e9c365de", 0x8d}, {&(0x7f0000000a00)="3ecd23759e88cdd8893a726fe0c967834fa40b8ae1df6b0e6ea81d984ffda29df08ae260ac443af1a50404332c9e8575aee84f9e15035c0258031154602a2bc362ed3f65b888aae359d4a82b86d0a5b9138514b2d8bae2156fe072c8835ba167ff59026f1e5056b6acce8ffa7682b3b3ddbbe2eb6daf7e6e822161e8ead3519b845d12a3d81bfac13729240dbd08732c6fc4bfdb397ebec3a2bbe3a30ca098d6e8b899685618e335a8a5ea0ef99515164572", 0xb2}, {&(0x7f0000000ac0)="bcef61bf06a66b57a9d81a7df63441b07e0fe3f2241888e2622130cfd04003a7fce49b052b854308304554f94ff39946212065a0619237827eab4d308b0787a694eeb638d052a9a0952fa8af772230ba7820a95b04bc4211c7db234656", 0x5d}, {&(0x7f0000000b40)="5a6f6476f7f347d997c3dc", 0xb}, {&(0x7f0000000b80)="86ab", 0x2}, {&(0x7f0000000bc0)="2a6ddccc95c9d647e4b2c98228320b651d8026ecc9e077d93421b4423147f5cbff64f23a3370291e8bc3ba55f5e48ace5f39736d6f50b025f4af5e03", 0x3c}, {&(0x7f0000000c00)}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000001c40)="e9221a29515bde090bf3524869b295e9f2d7c9f65a900daf6a8f3c4ee75c9c665b15a3ffd285e144", 0x28}], 0x9, &(0x7f0000001d40), 0x0, 0x20000004}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000001d80)="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", 0x1000}, {&(0x7f0000002d80)="0dcd926e7eb0800ecda716118fcd3ff3c327eac244900ff0c9f5c8e9b1546f155251df8b086c1861cb969c2c1a38c15f5cf0ba5c5a65ccca944b8a238e9133417fedd51f049168a727585a9129601dec2adf7427f4d0d0d6fccab0ca711728c64584c6998cb711ece5218564aef1f397ee471e03bc0b6b494428f843", 0x7c}], 0x2, &(0x7f0000003440)=[@rights={{0x18, 0x1, 0x1, [r10, r11]}}, @rights={{0x28, 0x1, 0x1, [r11, r14, r9, r10, r22, r5]}}, @cred={{0x1c, 0x1, 0x2, {r23, r24, r25}}}, @rights={{0x30, 0x1, 0x1, [r26, r14, r4, r10, r6, r3, r6, r27]}}, @rights={{0x20, 0x1, 0x1, [r14, 0xffffffffffffffff, r7, r8]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r28, r29}}}, @rights={{0x18, 0x1, 0x1, [r8, r5]}}, @rights={{0x24, 0x1, 0x1, [r30, r12, r7, r5, r9]}}, @cred={{0x1c, 0x1, 0x2, {r31, r32}}}], 0x130, 0x44804}}], 0x3, 0x10) 353.999478ms ago: executing program 1 (id=1971): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0xffff, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xd0ffffff}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xa000}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 236.024098ms ago: executing program 3 (id=1972): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x3}, 0x15, 0x3, 'nq\x00', 0x23, 0x4, 0x72}, 0x2c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001800dd8d000000000000000002001000fe0400010000002008001e0002"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 103.487331ms ago: executing program 1 (id=1973): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000070b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 65.614492ms ago: executing program 2 (id=1974): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000040)=0xd) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x8000, 0x80, 0x2b9, 0x9174, {{0x5, 0x4, 0x2, 0x7, 0x14, 0x65, 0x0, 0xd4, 0x0, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x14}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000100040000000000091931007b115b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x16) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x5c}, 0x1, 0x6c, 0x0, 0x4000000}, 0x4000095) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x2d, 0x0, 0x2, 0xfffffffe}, {0x6, 0x2, 0x9, 0xfffffff7}, {0x4, 0x9, 0x1, 0x3}, {0x6, 0x2, 0x4, 0x25e}]}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r7, &(0x7f0000000300)="8baa44353383d0d7f0ea0be24a86d4a97e3613b067da3774e1b5919dd50aab26e739910b6ed4cdb5bed9ecdab70d7efc4300cb747d921f6fd44ddb", &(0x7f00000000c0)=""/119}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) 0s ago: executing program 1 (id=1975): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="020300001b000000000000000000000002001000000004d5000004d20000000002000100000004d2000000060000002002000100000004d201bae30401000040070019000000000002004e240000000000000000000000000a004e2100000008fe800000000000000000000000000012ff01000000c034d3a9504329c04c33a86bb4a4fe6b270a9bc4e56a04be2b488d87363ecc51af71c65cda46c2b35c8e1cdb2e5dafcf836a240a340770456bf24255e398cd6a5c4c9d6a3bf83c04b04b9fe0e8fcaa0000000000000000000000000000000000000000825b30e2238d8ed01179d253f7df2b150cc07245586a478b4d5e4ea1f25a1dfdc707be910c14ff582e38ba496dbc806390111d91a134347548953817aaba75d0e1e717e19b6aa7dc6e058748cb952c8558070e372c988751cee318ed178dfe2dd761366522fac4170354408261c362d99203b47877eb44aa9ec70e0756087ecbf743aa1eef9249073d5aea70af6d7be11bf65f7a1564c17e3b7d369706632350f76fe2f6e727e1a1b4840e46b32086e4536e7fbb0dc3389aab5516d99be01a9483f6283ecb88be3022eb4031882457ff6b4da65b83d7c612bdf4a9c9677339ee52b5fcf32422d204bb01f00530f2e04bc54c8235e06839443f5b1ee3f410342ad5589ac3ca49825b690bb71c0e125e359c613013e4193f48f57fa128d285d30afd1e0763946801e88fea5536fbc2c1912ff095cfcc55fb3b3517a20c01cd72a51c6f233c4469d8d3e4"], 0xd8}}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x56}, 0x94) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000000a00010000000000000000040a000000"], 0x14}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x8, 0x3000000000002, 0x0, 0x4004831}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x20, 0x42}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x7}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x840) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, 0x0, &(0x7f00000004c0)=@tcp6=r7}, 0x20) unshare(0x2c020400) kernel console output (not intermixed with test programs): [ 120.835069][ T6744] Mem-Info: [ 121.106011][ T6744] active_anon:6233 inactive_anon:0 isolated_anon:0 [ 121.106011][ T6744] active_file:3152 inactive_file:39966 isolated_file:0 [ 121.106011][ T6744] unevictable:768 dirty:169 writeback:0 [ 121.106011][ T6744] slab_reclaimable:9952 slab_unreclaimable:95741 [ 121.106011][ T6744] mapped:29455 shmem:1325 pagetables:1346 [ 121.106011][ T6744] sec_pagetables:0 bounce:0 [ 121.106011][ T6744] kernel_misc_reclaimable:0 [ 121.106011][ T6744] free:1334156 free_pcp:10001 free_cma:0 [ 121.234946][ T6744] Node 0 active_anon:24732kB inactive_anon:0kB active_file:12608kB inactive_file:159672kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117820kB dirty:672kB writeback:0kB shmem:3764kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12368kB pagetables:5228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 121.320117][ T6744] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 121.426355][ T6744] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 121.513242][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.227'. [ 121.539899][ T6744] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 121.551293][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.227'. [ 121.564597][ T6744] Node 0 DMA32 free:1368740kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24532kB inactive_anon:0kB active_file:12608kB inactive_file:159672kB unevictable:1536kB writepending:672kB zspages:0kB present:3129332kB managed:2552904kB mlocked:0kB bounce:0kB free_pcp:41052kB local_pcp:24304kB free_cma:0kB [ 121.606904][ T6744] lowmem_reserve[]: 0 0 0 0 0 [ 121.612410][ T6744] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 121.711391][ T6744] lowmem_reserve[]: 0 0 0 0 0 [ 121.727482][ T6744] Node 1 Normal free:3952012kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 121.824812][ T6744] lowmem_reserve[]: 0 0 0 0 0 [ 121.844166][ T6744] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 121.874045][ T6744] Node 0 DMA32: 1971*4kB (UM) 1297*8kB (UME) 229*16kB (UME) 423*32kB (UM) 167*64kB (UME) 88*128kB (UME) 72*256kB (UME) 29*512kB (U) 16*1024kB (UE) 8*2048kB (UME) 304*4096kB (UM) = 1368644kB [ 121.875367][ T6790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.926702][ T6744] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 121.986713][ T6744] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 6*16kB (UM) 10*32kB (UM) 3*64kB (UM) 2*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 964*4096kB (UM) = 3952012kB [ 122.045124][ T6744] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.072603][ T6744] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.089267][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 122.125546][ T6744] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.160641][ T6744] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.194828][ T6744] 44406 total pagecache pages [ 122.217135][ T6744] 0 pages in swap cache [ 122.248989][ T6744] Free swap = 124996kB [ 122.272300][ T6744] Total swap = 124996kB [ 122.288900][ T6744] 2097051 pages RAM [ 122.305121][ T6744] 0 pages HighMem/MovableOnly [ 122.321461][ T6744] 427040 pages reserved [ 122.329686][ T6744] 0 pages cma reserved [ 122.409935][ T5292] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 122.501739][ T6812] FAULT_INJECTION: forcing a failure. [ 122.501739][ T6812] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 122.602416][ T6812] CPU: 0 UID: 0 PID: 6812 Comm: syz.1.236 Not tainted syzkaller #0 PREEMPT(full) [ 122.602443][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 122.602453][ T6812] Call Trace: [ 122.602460][ T6812] [ 122.602467][ T6812] dump_stack_lvl+0xe8/0x150 [ 122.602494][ T6812] should_fail_ex+0x40c/0x560 [ 122.602531][ T6812] _copy_from_user+0x2d/0xb0 [ 122.602551][ T6812] __sys_bpf+0x229/0x950 [ 122.602579][ T6812] ? __pfx___sys_bpf+0x10/0x10 [ 122.602618][ T6812] ? ksys_write+0x242/0x270 [ 122.602646][ T6812] ? __pfx_ksys_write+0x10/0x10 [ 122.602682][ T6812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.602700][ T6812] __x64_sys_bpf+0x7c/0x90 [ 122.602723][ T6812] do_syscall_64+0x174/0x580 [ 122.602741][ T6812] ? trace_irq_disable+0x3b/0x140 [ 122.602766][ T6812] ? clear_bhb_loop+0x40/0x90 [ 122.602787][ T6812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.602804][ T6812] RIP: 0033:0x7fb823d9ce59 [ 122.602822][ T6812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.602836][ T6812] RSP: 002b:00007fb824cf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 122.602855][ T6812] RAX: ffffffffffffffda RBX: 00007fb824016090 RCX: 00007fb823d9ce59 [ 122.602867][ T6812] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 122.602877][ T6812] RBP: 00007fb824cf3090 R08: 0000000000000000 R09: 0000000000000000 [ 122.602888][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.602897][ T6812] R13: 00007fb824016128 R14: 00007fb824016090 R15: 00007ffd88ee6c08 [ 122.602927][ T6812] [ 122.612445][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 122.869618][ T6826] netlink: 'syz.0.237': attribute type 9 has an invalid length. [ 122.893507][ T6826] netlink: 'syz.0.237': attribute type 6 has an invalid length. [ 123.114439][ T6837] netlink: 'syz.4.243': attribute type 1 has an invalid length. [ 123.126346][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.242'. [ 123.144964][ T6837] netlink: 168 bytes leftover after parsing attributes in process `syz.4.243'. [ 123.203382][ T6837] netlink: 24 bytes leftover after parsing attributes in process `syz.4.243'. [ 123.426661][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.247'. [ 123.658424][ T6858] netlink: 24 bytes leftover after parsing attributes in process `syz.0.249'. [ 123.693767][ T6854] raw_sendmsg: syz.4.252 forgot to set AF_INET. Fix it! [ 123.754692][ T6859] sctp: [Deprecated]: syz.4.252 (pid 6859) Use of int in maxseg socket option. [ 123.754692][ T6859] Use struct sctp_assoc_value instead [ 123.910553][ T6869] netlink: 'syz.2.256': attribute type 14 has an invalid length. [ 123.969819][ T6869] netlink: 'syz.2.256': attribute type 11 has an invalid length. [ 124.468972][ T6887] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 124.522945][ T6887] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 124.662770][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.694943][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.742702][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.946862][ T6899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.141462][ T6922] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.160861][ T6922] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.221592][ T6930] __nla_validate_parse: 6 callbacks suppressed [ 125.221612][ T6930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.274'. [ 125.239955][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.273'. [ 125.284663][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'. [ 125.294892][ T6930] bond1: entered promiscuous mode [ 125.300664][ T6930] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.500227][ T6939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'. [ 125.759243][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.277'. [ 125.868524][ T6952] ipvlan2: entered allmulticast mode [ 125.891823][ T6952] gretap0: entered allmulticast mode [ 125.977102][ T6957] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 125.985030][ T6957] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 125.985404][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 126.019621][ T6967] netlink: 'syz.4.279': attribute type 89 has an invalid length. [ 126.050797][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 126.051998][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.117153][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.158659][ T145] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.177004][ T145] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.194164][ T6961] netlink: 'syz.4.279': attribute type 1 has an invalid length. [ 126.289273][ T6967] netlink: 'syz.4.279': attribute type 10 has an invalid length. [ 126.332489][ T6967] netlink: 40 bytes leftover after parsing attributes in process `syz.4.279'. [ 126.414371][ T6967] dummy0: entered promiscuous mode [ 126.469484][ T6983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.281'. [ 126.501894][ T6983] netlink: 228 bytes leftover after parsing attributes in process `syz.1.281'. [ 126.651450][ T6991] IPVS: length: 54 != 24 [ 127.854328][ T7012] syzkaller1: entered promiscuous mode [ 127.869197][ T7012] syzkaller1: entered allmulticast mode [ 128.432462][ T7050] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 128.910466][ T7082] tap0: tun_chr_ioctl cmd 1074025672 [ 128.917960][ T7082] tap0: ignored: set checksum disabled [ 129.845719][ T7113] sock: sock_timestamping_bind_phc: sock not bind to device [ 130.130504][ T7132] netlink: 'syz.1.311': attribute type 1 has an invalid length. [ 130.338251][ T7132] bond2: entered promiscuous mode [ 130.363425][ T7132] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.566831][ T7134] bond2: (slave bridge1): making interface the new active one [ 130.616357][ T7134] bridge1: entered promiscuous mode [ 130.656277][ T7134] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 130.711522][ T7142] __nla_validate_parse: 13 callbacks suppressed [ 130.711543][ T7142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.314'. [ 131.085593][ T7171] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.317'. [ 131.302197][ T7172] hmac(sha2: entered promiscuous mode [ 131.554535][ T7189] tipc: Started in network mode [ 131.573043][ T7189] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 131.611754][ T7189] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 131.649207][ T7189] tipc: Enabled bearer , priority 10 [ 131.757832][ T7201] xt_hashlimit: size too large, truncated to 1048576 [ 132.304512][ T7221] netlink: 40 bytes leftover after parsing attributes in process `syz.2.334'. [ 132.497399][ T7226] netlink: 72 bytes leftover after parsing attributes in process `syz.0.337'. [ 132.699754][ T7235] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 132.730272][ T7226] netlink: 'syz.0.337': attribute type 1 has an invalid length. [ 132.771342][ T24] tipc: Node number set to 1 [ 132.883088][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.890884][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.178270][ T7256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.343'. [ 133.409511][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 133.426618][ T7260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.479746][ T7260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.799933][ T7279] xt_TCPMSS: Only works on TCP SYN packets [ 133.849341][ T7279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.350'. [ 133.894185][ T7280] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 133.975529][ T7285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.140041][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 134.235649][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'. [ 134.360887][ T7281] syzkaller0: entered promiscuous mode [ 134.418091][ T7281] syzkaller0: entered allmulticast mode [ 136.700985][ T7325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.359'. [ 136.710251][ T7325] netlink: 7 bytes leftover after parsing attributes in process `syz.3.359'. [ 136.885158][ T7336] netlink: 132 bytes leftover after parsing attributes in process `syz.0.361'. [ 136.960478][ T7344] openvswitch: netlink: IP tunnel TTL not specified. [ 137.053887][ T7350] netlink: 48 bytes leftover after parsing attributes in process `syz.4.365'. [ 137.107250][ T7351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.366'. [ 137.123501][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.364'. [ 137.169224][ T7344] ipvlan2: entered allmulticast mode [ 137.194352][ T7344] batman_adv: batadv0: Adding interface: ipvlan2 [ 137.206482][ T7344] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.257708][ T7344] batman_adv: batadv0: Interface activated: ipvlan2 [ 137.854961][ T7374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.374'. [ 138.308477][ T7390] netlink: 48 bytes leftover after parsing attributes in process `syz.2.379'. [ 138.898571][ T7398] lo: entered allmulticast mode [ 138.922993][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'. [ 138.940366][ T7398] netlink: 24 bytes leftover after parsing attributes in process `syz.4.380'. [ 139.153939][ T7408] netlink: 'syz.2.385': attribute type 9 has an invalid length. [ 139.803697][ T7439] netlink: 'syz.4.393': attribute type 1 has an invalid length. [ 139.968951][ T7439] bond1: entered promiscuous mode [ 139.975921][ T7439] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.032442][ T7445] vlan2: entered promiscuous mode [ 140.055347][ T7445] erspan0: entered promiscuous mode [ 140.182211][ T7439] macvtap1: entered allmulticast mode [ 140.264158][ T7449] bond1: (slave bridge1): making interface the new active one [ 140.275719][ T7449] bridge1: entered promiscuous mode [ 140.297921][ T7449] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 140.449652][ T7455] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 140.480591][ T7455] dvmrp1: linktype set to 0 [ 140.696543][ T7443] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 140.714107][ T7443] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 140.919824][ T7471] geneve2: entered promiscuous mode [ 140.998919][ T7476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 141.290292][ T1133] tipc: Subscription rejected, illegal request [ 141.623113][ T7496] netlink: 'syz.0.411': attribute type 7 has an invalid length. [ 141.642299][ T7496] netlink: 'syz.0.411': attribute type 8 has an invalid length. [ 141.867422][ T7507] netlink: 'syz.0.415': attribute type 11 has an invalid length. [ 141.939467][ T7509] __nla_validate_parse: 14 callbacks suppressed [ 141.939489][ T7509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.416'. [ 142.444312][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.420'. [ 142.468573][ T7524] netlink: 36 bytes leftover after parsing attributes in process `syz.3.420'. [ 142.473333][ T7532] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.492354][ T7532] bond2: (slave bond3): Enslaving as an active interface with an up link [ 142.542940][ T7533] tipc: Started in network mode [ 142.551835][ T7533] tipc: Node identity ac14140f, cluster identity 4711 [ 142.579237][ T7533] tipc: Enabling of bearer rejected, failed to enable media [ 143.009007][ T7561] netlink: 'syz.2.430': attribute type 1 has an invalid length. [ 143.097247][ T7567] netlink: 'syz.4.431': attribute type 1 has an invalid length. [ 143.132544][ T7561] bond1: entered promiscuous mode [ 143.145814][ T7561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.378781][ T7567] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.563027][ T7577] bond4 (unregistering): Released all slaves [ 143.889446][ T7597] syzkaller1: entered promiscuous mode [ 143.917666][ T7597] syzkaller1: entered allmulticast mode [ 144.073647][ T7618] netlink: 68 bytes leftover after parsing attributes in process `syz.0.443'. [ 144.140281][ T7618] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 144.159178][ T7618] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 144.581679][ T5774] bridge0: entered promiscuous mode [ 144.774115][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'. [ 144.818556][ T7644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.980658][ T7649] netlink: 'syz.4.451': attribute type 8 has an invalid length. [ 145.263894][ T7662] netlink: 'syz.3.456': attribute type 2 has an invalid length. [ 145.338460][ T7662] vlan2: entered promiscuous mode [ 145.344950][ T7662] bridge0: entered promiscuous mode [ 145.384501][ T7674] netlink: 840 bytes leftover after parsing attributes in process `syz.0.458'. [ 145.662514][ T7690] netlink: 92 bytes leftover after parsing attributes in process `syz.2.461'. [ 146.010761][ T7709] tipc: Trying to set illegal importance in message [ 146.033829][ T7709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.465'. [ 146.281064][ T7709] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.288470][ T7709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.548447][ T7740] openvswitch: netlink: Missing valid actions attribute. [ 146.573455][ T7740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.680013][ T7743] netlink: 52 bytes leftover after parsing attributes in process `syz.3.469'. [ 146.750732][ T7740] lo speed is unknown, defaulting to 1000 [ 146.787958][ T7740] lo speed is unknown, defaulting to 1000 [ 146.833072][ T7740] lo speed is unknown, defaulting to 1000 [ 146.975047][ T7748] syzkaller0: entered promiscuous mode [ 146.996952][ T7748] syzkaller0: entered allmulticast mode [ 147.361809][ T7764] gretap0: entered promiscuous mode [ 147.563926][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.479'. [ 147.640679][ T5772] lo speed is unknown, defaulting to 1000 [ 147.651332][ T7740] infiniband syz0: set active [ 147.686213][ T7740] infiniband syz0: added lo [ 147.914058][ T7740] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 148.002715][ T7740] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 148.066579][ T7740] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 148.218100][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.484'. [ 148.251266][ T7792] Bluetooth: MGMT ver 1.23 [ 148.271145][ T7740] RDS/IB: syz0: added [ 148.289008][ T7740] smc: adding ib device syz0 with port count 1 [ 148.302602][ T7740] smc: ib device syz0 port 1 has no pnetid [ 148.358480][ T5774] lo speed is unknown, defaulting to 1000 [ 148.390442][ T7791] vlan3: entered allmulticast mode [ 148.397046][ T7791] bridge1: entered allmulticast mode [ 148.440008][ T7794] bridge1: port 1(erspan0) entered blocking state [ 148.450267][ T7740] lo speed is unknown, defaulting to 1000 [ 148.488766][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.484'. [ 148.491388][ T7794] bridge1: port 1(erspan0) entered disabled state [ 148.573063][ T7794] erspan0: entered allmulticast mode [ 148.614635][ T7794] erspan0: entered promiscuous mode [ 148.628937][ T7794] bridge1: port 1(erspan0) entered blocking state [ 148.635594][ T7794] bridge1: port 1(erspan0) entered forwarding state [ 148.688928][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.488'. [ 148.703456][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.488'. [ 148.713467][ T7805] netlink: 'syz.4.488': attribute type 12 has an invalid length. [ 148.730813][ T7805] netlink: 'syz.4.488': attribute type 11 has an invalid length. [ 148.835931][ T7807] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20003 [ 148.991919][ T7813] syzkaller0: entered promiscuous mode [ 149.023988][ T7813] syzkaller0: entered allmulticast mode [ 149.355711][ T7824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.494'. [ 149.385594][ T7824] netlink: 11 bytes leftover after parsing attributes in process `syz.0.494'. [ 149.631945][ T7740] lo speed is unknown, defaulting to 1000 [ 149.673989][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'. [ 149.930309][ T7843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.072727][ T7852] netlink: 40 bytes leftover after parsing attributes in process `syz.0.505'. [ 150.213826][ T7740] lo speed is unknown, defaulting to 1000 [ 150.246298][ T7862] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 3, id = 0 [ 150.432406][ T7740] lo speed is unknown, defaulting to 1000 [ 150.582036][ T7740] lo speed is unknown, defaulting to 1000 [ 151.253842][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.513'. [ 151.366713][ T5644] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 151.870367][ T1126] nci: nci_ntf_packet: unknown ntf opcode 0x227 [ 151.921532][ T6686] wlan0: Trigger new scan to find an IBSS to join [ 152.127074][ T7919] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20004 [ 152.444328][ T7895] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.768672][ T7938] netlink: 'syz.3.530': attribute type 1 has an invalid length. [ 153.063579][ T7954] bond4: (slave gretap1): making interface the new active one [ 153.141515][ T7954] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 153.239541][ T7938] macvlan2: entered promiscuous mode [ 153.260604][ T7938] macvlan2: entered allmulticast mode [ 153.279058][ T7964] __nla_validate_parse: 4 callbacks suppressed [ 153.279078][ T7964] netlink: 36 bytes leftover after parsing attributes in process `syz.1.535'. [ 153.307379][ T7971] netlink: 24 bytes leftover after parsing attributes in process `syz.0.539'. [ 153.388310][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.539'. [ 153.604569][ T7977] netlink: 'syz.4.540': attribute type 6 has an invalid length. [ 153.826959][ T7977] GUP no longer grows the stack in syz.4.540 (7977): 200000003000-20000000a000 (200000001000) [ 153.898776][ T7977] CPU: 0 UID: 0 PID: 7977 Comm: syz.4.540 Not tainted syzkaller #0 PREEMPT(full) [ 153.898807][ T7977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.898818][ T7977] Call Trace: [ 153.898826][ T7977] [ 153.898835][ T7977] dump_stack_lvl+0xe8/0x150 [ 153.898866][ T7977] __get_user_pages+0x238c/0x2720 [ 153.898890][ T7977] ? lock_acquire+0x106/0x350 [ 153.898938][ T7977] ? down_read_killable+0x1bb/0x340 [ 153.898965][ T7977] ? lapic_next_event+0x11/0x20 [ 153.898994][ T7977] __gup_longterm_locked+0xd52/0x15c0 [ 153.899024][ T7977] ? lock_acquire+0x106/0x350 [ 153.899062][ T7977] gup_fast_fallback+0x1d82/0x20d0 [ 153.899085][ T7977] ? lockdep_hardirqs_on+0x7a/0x110 [ 153.899138][ T7977] ? __pfx_gup_fast_fallback+0x10/0x10 [ 153.899166][ T7977] ? is_valid_gup_args+0x11f/0x200 [ 153.899191][ T7977] ? get_user_pages_fast+0x4d/0xb0 [ 153.899217][ T7977] __iov_iter_get_pages_alloc+0x378/0xa40 [ 153.899248][ T7977] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 153.899279][ T7977] iov_iter_get_pages2+0x5e/0xa0 [ 153.899306][ T7977] __se_sys_vmsplice+0x7b5/0x1660 [ 153.899354][ T7977] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 153.899384][ T7977] ? __pfx_futex_wake+0x10/0x10 [ 153.899488][ T7977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.899511][ T7977] do_syscall_64+0x174/0x580 [ 153.899534][ T7977] ? trace_irq_disable+0x3b/0x140 [ 153.899565][ T7977] ? clear_bhb_loop+0x40/0x90 [ 153.899592][ T7977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.899613][ T7977] RIP: 0033:0x7f5215d9ce59 [ 153.899645][ T7977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.899668][ T7977] RSP: 002b:00007f5216b81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 153.899691][ T7977] RAX: ffffffffffffffda RBX: 00007f5216015fa0 RCX: 00007f5215d9ce59 [ 153.899706][ T7977] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000e [ 153.899719][ T7977] RBP: 00007f5215e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 153.899732][ T7977] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 153.899744][ T7977] R13: 00007f5216016038 R14: 00007f5216015fa0 R15: 00007ffe0f037218 [ 153.899781][ T7977] [ 154.272967][ T7995] netlink: 28 bytes leftover after parsing attributes in process `syz.3.546'. [ 155.353381][ T8046] netlink: 312 bytes leftover after parsing attributes in process `syz.4.555'. [ 155.369526][ T8046] netlink: 'syz.4.555': attribute type 1 has an invalid length. [ 155.583769][ T8055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.409450][ T8085] netlink: 'syz.1.566': attribute type 3 has an invalid length. [ 156.462213][ T8085] sctp: [Deprecated]: syz.1.566 (pid 8085) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.462213][ T8085] Use struct sctp_sack_info instead [ 156.529352][ T8090] netlink: 'syz.4.569': attribute type 1 has an invalid length. [ 156.685526][ T8101] xt_hashlimit: overflow, rate too high: 0 [ 156.758805][ T8092] bond3: (slave veth5): Enslaving as an active interface with a down link [ 157.184521][ T8112] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 157.233975][ T8112] bond2 (unregistering): Released all slaves [ 157.762177][ T8148] netlink: 28 bytes leftover after parsing attributes in process `syz.4.579'. [ 157.870665][ T8155] netlink: 24 bytes leftover after parsing attributes in process `syz.3.580'. [ 158.017016][ T8155] geneve2: entered promiscuous mode [ 158.065297][ T8155] geneve2: entered allmulticast mode [ 158.414992][ T135] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.448081][ T135] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.693503][ T135] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.737334][ T8178] netpci0: tun_chr_ioctl cmd 1074025678 [ 158.754213][ T8178] netpci0: group set to 0 [ 159.144406][ T135] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.168096][ T8201] erspan0: left allmulticast mode [ 159.195510][ T8201] erspan0: left promiscuous mode [ 159.203882][ T8201] bridge1: port 1(erspan0) entered disabled state [ 159.280107][ T8201] bridge_slave_0: left allmulticast mode [ 159.306030][ T8201] bridge_slave_0: left promiscuous mode [ 159.318937][ T8201] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.343550][ T8201] bridge_slave_1: left allmulticast mode [ 159.353534][ T8201] bridge_slave_1: left promiscuous mode [ 159.371459][ T8201] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.393975][ T8201] bond0: (slave bond_slave_0): Releasing backup interface [ 159.414260][ T8201] bond0: (slave bond_slave_1): Releasing backup interface [ 159.470785][ T8201] team0: Port device team_slave_0 removed [ 159.499622][ T8225] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.589'. [ 159.505878][ T8201] team0: Port device team_slave_1 removed [ 159.521931][ T8201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.529869][ T8201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.540795][ T8201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.549959][ T8201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.560868][ T8201] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 159.752799][ T8230] lo speed is unknown, defaulting to 1000 [ 160.891617][ T5828] IPVS: starting estimator thread 0... [ 160.986335][ T8267] IPVS: using max 26 ests per chain, 62400 per kthread [ 161.091028][ T8277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.592'. [ 161.576409][ T8202] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.585930][ T8207] team0: Mode changed to "activebackup" [ 161.853782][ T8306] netlink: 28 bytes leftover after parsing attributes in process `syz.1.595'. [ 194.317720][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.324184][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.758424][ T5644] Bluetooth: hci3: command 0x0406 tx timeout [ 211.758806][ T5641] Bluetooth: hci1: command 0x0406 tx timeout [ 211.769121][ T5644] Bluetooth: hci2: command 0x0406 tx timeout [ 226.257647][ T8368] bond5: entered promiscuous mode [ 226.279044][ T8368] bond5 (unregistering): Released all slaves [ 226.389450][ T8373] tipc: Enabling of bearer rejected, failed to enable media [ 226.455098][ T8382] netlink: 'syz.1.608': attribute type 1 has an invalid length. [ 226.703136][ T8389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.610'. [ 226.848313][ T8389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.920265][ T8389] bond1 (unregistering): Released all slaves [ 227.187362][ T8402] netlink: 60 bytes leftover after parsing attributes in process `syz.3.612'. [ 227.419548][ T8406] syzkaller1: entered promiscuous mode [ 227.485029][ T8406] syzkaller1: entered allmulticast mode [ 227.528502][ T8415] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 227.545282][ T8415] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 227.563057][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.614'. [ 227.594014][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.616'. [ 227.621180][ T8416] netlink: 'syz.3.616': attribute type 7 has an invalid length. [ 227.653441][ T135] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.653578][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.614'. [ 227.672537][ T135] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.723199][ T135] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.743473][ T135] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.805510][ T8419] netlink: 'syz.0.617': attribute type 13 has an invalid length. [ 228.085995][ T4946] Bluetooth: hci4: command 0x0405 tx timeout [ 228.122494][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 228.333110][ T8450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'. [ 228.750804][ T8457] netlink: 100 bytes leftover after parsing attributes in process `syz.4.625'. [ 228.773636][ T8457] netlink: 100 bytes leftover after parsing attributes in process `syz.4.625'. [ 228.858870][ T8428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.617'. [ 228.882780][ T8441] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 228.911477][ T8441] syzkaller0: entered promiscuous mode [ 228.919017][ T8441] syzkaller0: entered allmulticast mode [ 228.928158][ T8459] netlink: 'syz.4.626': attribute type 1 has an invalid length. [ 228.934716][ T8450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.962054][ T8450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.024880][ T8461] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 229.631956][ T8482] lo speed is unknown, defaulting to 1000 [ 230.061954][ T8496] bond4: option tlb_dynamic_lb: invalid value (5) [ 230.077278][ T8496] bond4 (unregistering): Released all slaves [ 230.839272][ T8530] syzkaller0: entered promiscuous mode [ 230.855156][ T8530] syzkaller0: entered allmulticast mode [ 231.388819][ T1117] rds_connect_path_complete: Cannot transition to state UP, current state is 5 [ 231.546250][ T8560] syzkaller0: entered promiscuous mode [ 231.560441][ T8560] syzkaller0: entered allmulticast mode [ 231.850066][ T8578] __nla_validate_parse: 10 callbacks suppressed [ 231.850089][ T8578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.660'. [ 231.991116][ T8581] lo speed is unknown, defaulting to 1000 [ 232.092707][ T8589] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.664'. [ 232.310139][ T8595] netlink: 'syz.2.666': attribute type 10 has an invalid length. [ 232.363844][ T8595] team0: Port device dummy0 added [ 232.376060][ T8597] netlink: 'syz.2.666': attribute type 10 has an invalid length. [ 232.468320][ T8597] team0: Port device dummy0 removed [ 232.520968][ T8597] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 232.556743][ T8597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.666'. [ 232.598562][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 232.616789][ T8595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.666'. [ 232.837960][ T8609] netlink: 'syz.0.670': attribute type 1 has an invalid length. [ 232.854932][ T8609] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 233.142942][ T8623] netlink: 40 bytes leftover after parsing attributes in process `syz.4.671'. [ 233.349668][ T8618] netlink: 'syz.4.671': attribute type 2 has an invalid length. [ 233.680733][ T8632] syzkaller0: entered promiscuous mode [ 233.706138][ T8632] syzkaller0: entered allmulticast mode [ 233.734551][ T8632] netlink: 52 bytes leftover after parsing attributes in process `syz.0.675'. [ 233.743901][ T8632] netlink: 52 bytes leftover after parsing attributes in process `syz.0.675'. [ 234.231168][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.683'. [ 234.490930][ T8667] syzkaller0: entered promiscuous mode [ 234.514043][ T8667] syzkaller0: entered allmulticast mode [ 234.607475][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 235.170598][ T8720] syzkaller0: entered promiscuous mode [ 235.202957][ T8720] syzkaller0: entered allmulticast mode [ 235.755670][ T8745] m1Ie5nè‹Ò: entered promiscuous mode [ 236.744219][ T8781] syzkaller0: entered promiscuous mode [ 236.750380][ T8781] syzkaller0: entered allmulticast mode [ 236.792439][ T8781] tipc: Enabled bearer , priority 0 [ 237.031192][ T8801] __nla_validate_parse: 9 callbacks suppressed [ 237.031214][ T8801] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.723'. [ 237.064925][ T8802] bridge_slave_0: left allmulticast mode [ 237.074821][ T8802] bridge_slave_0: left promiscuous mode [ 237.092038][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.146285][ T8802] bridge_slave_1: left allmulticast mode [ 237.166990][ T8802] bridge_slave_1: left promiscuous mode [ 237.182257][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.228191][ T8802] bond0: (slave bond_slave_0): Releasing backup interface [ 237.263040][ T8802] bond0: (slave bond_slave_1): Releasing backup interface [ 237.284399][ T8802] team0: Port device team_slave_0 removed [ 237.308696][ T8802] team0: Port device team_slave_1 removed [ 237.330062][ T8802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.339274][ T8802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.350323][ T8802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.359645][ T8802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.371112][ T8802] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 237.390689][ T24] lo speed is unknown, defaulting to 1000 [ 237.398727][ T8817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.727'. [ 237.399814][ T8806] team0: Mode changed to "activebackup" [ 237.426610][ T8780] tipc: Resetting bearer [ 237.488337][ T8780] tipc: Disabling bearer [ 237.628183][ T8825] sctp: [Deprecated]: syz.0.729 (pid 8825) Use of int in maxseg socket option. [ 237.628183][ T8825] Use struct sctp_assoc_value instead [ 237.649197][ T8822] netlink: 9 bytes leftover after parsing attributes in process `syz.4.728'. [ 237.683273][ T8822] gretap0: entered promiscuous mode [ 237.728277][ T8822] netlink: 5 bytes leftover after parsing attributes in process `syz.4.728'. [ 237.738569][ T8822] 0ªî{X¹¦: renamed from gretap0 [ 237.748807][ T8822] 0ªî{X¹¦: left promiscuous mode [ 237.760298][ T8822] 0ªî{X¹¦: entered allmulticast mode [ 237.781717][ T8822] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 238.642055][ T8872] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.744'. [ 238.715133][ T8870] syzkaller0: entered promiscuous mode [ 238.745474][ T8870] syzkaller0: entered allmulticast mode [ 238.953489][ T8888] xt_hashlimit: size too large, truncated to 1048576 [ 239.413797][ T8900] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.751'. [ 239.500807][ T8908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.596131][ T8911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.755'. [ 239.625662][ T8913] netlink: 'syz.3.756': attribute type 2 has an invalid length. [ 239.709598][ T8915] netlink: 'syz.2.757': attribute type 39 has an invalid length. [ 239.867007][ T8925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.618057][ T8930] bridge2: entered promiscuous mode [ 240.634638][ T8930] bridge2: entered allmulticast mode [ 240.667031][ T8930] team0: Port device bridge2 added [ 240.688589][ T8935] netlink: 'syz.3.764': attribute type 12 has an invalid length. [ 240.859539][ T8945] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.765'. [ 240.884748][ T8937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.892166][ T8937] IPv6: NLM_F_CREATE should be set when creating new route [ 240.899565][ T8937] IPv6: NLM_F_CREATE should be set when creating new route [ 241.292067][ T8961] openvswitch: netlink: Unknown key attributes 2 [ 241.343371][ T8964] netlink: 36 bytes leftover after parsing attributes in process `syz.2.773'. [ 241.426471][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.776'. [ 241.723436][ T8986] netlink: 'syz.4.778': attribute type 1 has an invalid length. [ 241.734043][ T8986] netlink: 'syz.4.778': attribute type 2 has an invalid length. [ 241.747121][ T8986] netlink: 'syz.4.778': attribute type 1 has an invalid length. [ 241.756244][ T8986] netlink: 'syz.4.778': attribute type 3 has an invalid length. [ 242.043562][ T8964] __nla_validate_parse: 5 callbacks suppressed [ 242.043583][ T8964] netlink: 36 bytes leftover after parsing attributes in process `syz.2.773'. [ 242.386321][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.784'. [ 242.390918][ T9007] sctp: [Deprecated]: syz.1.785 (pid 9007) Use of int in maxseg socket option. [ 242.390918][ T9007] Use struct sctp_assoc_value instead [ 242.456470][ T9006] netlink: 32 bytes leftover after parsing attributes in process `syz.2.784'. [ 242.479300][ T9006] netlink: 32 bytes leftover after parsing attributes in process `syz.2.784'. [ 242.512396][ T9019] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.787'. [ 242.542664][ T9014] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 242.574992][ T9019] netlink: 'syz.4.787': attribute type 8 has an invalid length. [ 242.749267][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.789'. [ 243.076685][ T9042] netlink: 96 bytes leftover after parsing attributes in process `syz.3.794'. [ 243.389100][ T9056] netlink: 192 bytes leftover after parsing attributes in process `syz.2.799'. [ 243.427768][ T9056] macsec1: entered promiscuous mode [ 243.582048][ T9063] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 243.615612][ T9062] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 243.651217][ T9063] team0: Device xfrm0 is of different type [ 243.661929][ T9066] team0: Device xfrm0 is of different type [ 243.670632][ T9065] pim6reg1: entered promiscuous mode [ 243.686247][ T9065] pim6reg1: entered allmulticast mode [ 243.859305][ T9070] netlink: 28 bytes leftover after parsing attributes in process `syz.1.803'. [ 245.480184][ T9141] unsupported nlmsg_type 40 [ 246.262076][ T9159] tipc: Enabled bearer , priority 2 [ 247.335054][ T9200] gretap0: entered promiscuous mode [ 247.350587][ T9200] vlan2: entered promiscuous mode [ 247.460585][ T9209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.540669][ T9211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.841'. [ 247.546597][ T9201] vlan2: entered promiscuous mode [ 247.571565][ T9214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.841'. [ 247.598741][ T5772] tipc: Node number set to 1016749737 [ 247.645120][ T9211] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 247.659613][ T9214] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 248.245310][ T29] audit: type=1804 audit(1781572133.190:2): pid=9255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.850" name="/newroot/175/cgroup.controllers" dev="tmpfs" ino=907 res=1 errno=0 [ 248.385305][ T29] audit: type=1800 audit(1781572133.240:3): pid=9255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.850" name="cgroup.controllers" dev="tmpfs" ino=907 res=0 errno=0 [ 248.482459][ T29] audit: type=1804 audit(1781572133.270:4): pid=9255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.850" name="/newroot/175/cgroup.controllers" dev="tmpfs" ino=907 res=1 errno=0 [ 248.881735][ T9279] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 248.962056][ T9279] syzkaller0: entered promiscuous mode [ 248.985947][ T9279] syzkaller0: entered allmulticast mode [ 249.869522][ T9319] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 249.895780][ T9324] netlink: 5 bytes leftover after parsing attributes in process `syz.0.872'. [ 250.103393][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.875'. [ 250.444093][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.880'. [ 250.490864][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.880'. [ 250.611024][ T9360] netlink: 24 bytes leftover after parsing attributes in process `syz.3.878'. [ 250.852172][ T9373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.529794][ T9413] netlink: 'syz.3.897': attribute type 29 has an invalid length. [ 251.550237][ T9413] netlink: 'syz.3.897': attribute type 29 has an invalid length. [ 252.973094][ T9453] lo: entered promiscuous mode [ 253.082546][ T9453] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.157967][ T9455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.228898][ T9461] netlink: 'syz.3.907': attribute type 3 has an invalid length. [ 253.332239][ T9468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.447653][ T9468] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 253.480484][ T9478] sctp: [Deprecated]: syz.2.911 (pid 9478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.480484][ T9478] Use struct sctp_sack_info instead [ 253.508235][ T9478] sctp: [Deprecated]: syz.2.911 (pid 9478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.508235][ T9478] Use struct sctp_sack_info instead [ 253.764984][ T9486] netlink: 32 bytes leftover after parsing attributes in process `syz.2.916'. [ 253.787867][ T9490] netlink: 28 bytes leftover after parsing attributes in process `syz.1.919'. [ 253.820758][ T9490] netlink: 7 bytes leftover after parsing attributes in process `syz.1.919'. [ 253.978170][ T9489] xt_CT: No such helper "syz1" [ 254.967861][ T9544] x_tables: duplicate underflow at hook 1 [ 255.067780][ T9546] netlink: 'syz.4.932': attribute type 12 has an invalid length. [ 255.198496][ T9554] sctp: [Deprecated]: syz.1.935 (pid 9554) Use of int in max_burst socket option. [ 255.198496][ T9554] Use struct sctp_assoc_value instead [ 255.559797][ T9557] netlink: 'syz.0.936': attribute type 89 has an invalid length. [ 255.760704][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.903941][ T9577] netlink: 'syz.3.939': attribute type 2 has an invalid length. [ 255.941245][ T9577] netlink: 'syz.3.939': attribute type 2 has an invalid length. [ 256.463846][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.944'. [ 256.632440][ T9601] netlink: 48 bytes leftover after parsing attributes in process `syz.3.944'. [ 256.807111][ T9599] bond5 (unregistering): Released all slaves [ 256.924914][ T9616] netlink: 'syz.2.949': attribute type 1 has an invalid length. [ 256.950961][ T9617] netlink: 'syz.2.949': attribute type 1 has an invalid length. [ 256.991348][ T9616] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 257.161875][ T9634] netlink: 27 bytes leftover after parsing attributes in process `syz.1.952'. [ 257.185638][ T9617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 257.517070][ T9645] netlink: 'syz.3.954': attribute type 10 has an invalid length. [ 257.564611][ T9645] bridge0: port 1(netdevsim1) entered blocking state [ 257.590429][ T9645] bridge0: port 1(netdevsim1) entered disabled state [ 257.614658][ T9645] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 257.703989][ T9645] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 258.111659][ T9674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 258.119117][ T9674] IPv6: NLM_F_CREATE should be set when creating new route [ 258.126442][ T9674] IPv6: NLM_F_CREATE should be set when creating new route [ 258.136000][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.961'. [ 258.767889][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.970'. [ 258.779796][ T9705] pim6reg: entered allmulticast mode [ 317.196750][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.666301][ T9744] netlink: 'syz.3.983': attribute type 1 has an invalid length. [ 326.695828][ T9745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.981'. [ 326.873006][ T9760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.985'. [ 327.071647][ T9762] netlink: 36 bytes leftover after parsing attributes in process `syz.4.986'. [ 327.093923][ T9762] netlink: 36 bytes leftover after parsing attributes in process `syz.4.986'. [ 327.122911][ T9762] netlink: 36 bytes leftover after parsing attributes in process `syz.4.986'. [ 327.150315][ T9762] netlink: 36 bytes leftover after parsing attributes in process `syz.4.986'. [ 327.172916][ T9762] netlink: 36 bytes leftover after parsing attributes in process `syz.4.986'. [ 327.207553][ T9762] netlink: 36 bytes leftover after parsing attributes in process `syz.4.986'. [ 327.228433][ T9762] netlink: 36 bytes leftover after parsing attributes in process `syz.4.986'. [ 327.342647][ T9762] netlink: 36 bytes leftover after parsing attributes in process `syz.4.986'. [ 327.991938][ T9762] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.999701][ T9762] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.681046][ T9762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.696970][ T9762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.853884][ T9808] C: renamed from veth1_to_team (while UP) [ 328.886759][ T9808] netlink: 'syz.1.990': attribute type 1 has an invalid length. [ 328.915324][ T9808] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 328.988352][ T9817] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 329.006129][ T35] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.016780][ T35] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.036389][ T9824] IPv6: Can't replace route, no match found [ 329.044534][ T9825] netlink: 'syz.2.993': attribute type 10 has an invalid length. [ 329.057135][ T35] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.068081][ T9824] IPv6: Can't replace route, no match found [ 329.074312][ T35] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.097559][ T9823] bond0: (slave dummy0): Releasing backup interface [ 329.112143][ T9823] bridge_slave_0: left allmulticast mode [ 329.121552][ T9823] bridge_slave_0: left promiscuous mode [ 329.127836][ T9823] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.151063][ T9823] bond0: (slave bond_slave_0): Releasing backup interface [ 329.164762][ T9823] bond0: (slave bond_slave_1): Releasing backup interface [ 329.182788][ T9823] team0: Port device team_slave_0 removed [ 329.201434][ T9823] team0: Port device team_slave_1 removed [ 329.209681][ T9823] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 329.303583][ T9825] team0: Port device xfrm0 added [ 329.316986][ T35] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.329314][ T35] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.344150][ T35] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.361222][ T35] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.482334][ T9833] veth1_to_bond: entered promiscuous mode [ 329.524584][ T9833] veth1_to_bond: entered allmulticast mode [ 329.657436][ T9832] veth1_to_bond: left allmulticast mode [ 329.685565][ T9832] veth1_to_bond: left promiscuous mode [ 329.913141][ T9851] 8021q: adding VLAN 0 to HW filter on device bond5 [ 329.944478][ T9850] vlan4: entered promiscuous mode [ 329.955246][ T9850] bridge0: entered promiscuous mode [ 330.003859][ T9853] netlink: 'syz.4.999': attribute type 4 has an invalid length. [ 330.335655][ T9874] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 330.339652][ T9876] netlink: 'syz.4.1006': attribute type 1 has an invalid length. [ 330.346304][ T9873] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.414197][ T9877] netlink: 'syz.4.1006': attribute type 21 has an invalid length. [ 330.566220][ T9876] bond5: entered allmulticast mode [ 330.576089][ T9877] netlink: 'syz.4.1006': attribute type 5 has an invalid length. [ 330.856668][ T9899] openvswitch: netlink: Flow actions attr not present in new flow. [ 331.593122][ T9924] veth0_to_bridge: entered promiscuous mode [ 331.608360][ T9924] macvtap1: entered allmulticast mode [ 331.618293][ T9924] veth0_to_bridge: entered allmulticast mode [ 331.638608][ T9924] veth0_to_bridge: left allmulticast mode [ 331.648748][ T9924] veth0_to_bridge: left promiscuous mode [ 331.706755][ T9925] __nla_validate_parse: 186 callbacks suppressed [ 331.706776][ T9925] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1022'. [ 331.728386][ T9925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.782408][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 331.809035][ T9931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1025'. [ 331.884459][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 331.918339][ T9931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1025'. [ 331.953048][ T9939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1028'. [ 331.988585][ T9939] ip6tnl0: Caught tx_queue_len zero misconfig [ 332.014173][ T9939] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1028'. [ 332.817481][ T9958] veth0_to_hsr: entered promiscuous mode [ 332.852917][ T9958] veth0_to_hsr: left promiscuous mode [ 333.689485][ T9997] netlink: 'syz.3.1048': attribute type 1 has an invalid length. [ 333.697567][ T9994] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1046'. [ 333.729823][T10003] openvswitch: netlink: Flow actions attr not present in new flow. [ 333.774100][ T9997] bond6: entered promiscuous mode [ 333.793774][ T9997] 8021q: adding VLAN 0 to HW filter on device bond6 [ 333.850368][T10009] netlink: 'syz.4.1051': attribute type 13 has an invalid length. [ 333.958479][ T9997] macvtap0: entered allmulticast mode [ 333.994981][ T135] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.026929][ T135] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.038558][ T135] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.049636][ T135] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.087926][T10020] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 334.101084][T10021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1048'. [ 334.154848][ T9997] macvtap1: entered allmulticast mode [ 334.369737][T10029] lo speed is unknown, defaulting to 1000 [ 334.741216][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1063'. [ 334.935683][T10055] xt_hashlimit: size too large, truncated to 1048576 [ 335.196422][T10060] syzkaller1: entered promiscuous mode [ 335.224376][T10060] syzkaller1: entered allmulticast mode [ 336.110517][T10089] netlink: 'syz.0.1074': attribute type 33 has an invalid length. [ 336.717370][T10116] __nla_validate_parse: 1 callbacks suppressed [ 336.717391][T10116] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1083'. [ 336.807494][T10116] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1083'. [ 336.846342][T10116] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 337.087420][T10129] geneve2: entered promiscuous mode [ 338.139840][T10135] syzkaller0: entered promiscuous mode [ 338.156465][T10135] syzkaller0: entered allmulticast mode [ 338.158661][T10169] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1103'. [ 339.528098][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1111'. [ 341.242770][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1119'. [ 341.402010][T10231] 8021q: adding VLAN 0 to HW filter on device bond4 [ 341.407818][T10238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1117'. [ 341.528302][T10244] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1117'. [ 341.564308][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1121'. [ 341.781730][T10250] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1123'. [ 341.881659][T10252] netlink: 'syz.2.1124': attribute type 1 has an invalid length. [ 342.125076][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1124'. [ 342.305692][T10252] bond3: (slave gretap1): making interface the new active one [ 342.328187][T10252] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 342.382525][T10271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1130'. [ 342.531398][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1134'. [ 342.812229][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1138'. [ 342.829106][T10292] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.877118][T10290] syzkaller0: entered promiscuous mode [ 342.887367][T10290] syzkaller0: entered allmulticast mode [ 342.906059][T10290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1138'. [ 343.612198][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1148'. [ 343.695891][T10334] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1149'. [ 344.652971][T10355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1160'. [ 344.730091][T10358] sctp: [Deprecated]: syz.2.1160 (pid 10358) Use of int in maxseg socket option. [ 344.730091][T10358] Use struct sctp_assoc_value instead [ 344.750385][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1161'. [ 345.467349][T10361] syzkaller1: entered promiscuous mode [ 345.489823][T10361] syzkaller1: entered allmulticast mode [ 346.515985][T10405] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 347.023163][T10425] __nla_validate_parse: 6 callbacks suppressed [ 347.023231][T10425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1181'. [ 347.039679][T10425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1181'. [ 347.085949][T10426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1184'. [ 349.663800][T10430] bond5: option lacp_rate: invalid value (128) [ 349.709791][T10430] bond5 (unregistering): Released all slaves [ 349.798730][T10441] netlink: 'syz.3.1190': attribute type 10 has an invalid length. [ 349.820984][T10441] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1190'. [ 349.859280][T10441] team0: entered promiscuous mode [ 349.895657][T10441] team0: entered allmulticast mode [ 349.938816][T10441] bridge0: port 2(team0) entered blocking state [ 349.978174][T10448] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1191'. [ 349.993887][T10441] bridge0: port 2(team0) entered disabled state [ 350.004117][ T5653] Bluetooth: hci4: command 0x0405 tx timeout [ 350.068216][T10454] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1194'. [ 350.113080][T10454] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1194'. [ 350.207673][T10454] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1194'. [ 350.466581][T10468] lo speed is unknown, defaulting to 1000 [ 350.476068][T10462] tipc: Started in network mode [ 350.482232][T10462] tipc: Node identity ea8d13b29304, cluster identity 4711 [ 350.522584][T10462] tipc: Enabled bearer , priority 0 [ 350.592603][T10469] syzkaller0: entered promiscuous mode [ 350.634582][T10469] syzkaller0: entered allmulticast mode [ 350.674298][T10462] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 350.813310][T10480] tipc: Resetting bearer [ 350.868480][T10485] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1202'. [ 351.089342][T10491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1204'. [ 351.232221][T10491] 8021q: adding VLAN 0 to HW filter on device bond5 [ 351.326352][T10461] tipc: Resetting bearer [ 351.462164][T10461] tipc: Disabling bearer [ 351.702520][T10518] netlink: 'syz.4.1210': attribute type 5 has an invalid length. [ 351.761978][T10518] geneve3: entered promiscuous mode [ 351.780602][T10518] geneve3: entered allmulticast mode [ 351.834887][ T6700] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 59085 - 0 [ 352.002922][ T6700] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 59085 - 0 [ 352.041587][ T6700] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 59085 - 0 [ 352.074661][T10526] __nla_validate_parse: 2 callbacks suppressed [ 352.074692][T10526] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1212'. [ 352.102912][ T6700] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 59085 - 0 [ 352.175536][T10528] netlink: 'syz.3.1211': attribute type 11 has an invalid length. [ 352.734421][T10543] vlan4: entered promiscuous mode [ 352.746689][T10543] team0: entered promiscuous mode [ 352.764160][T10543] team_slave_0: entered promiscuous mode [ 352.813776][T10542] vlan4: entered promiscuous mode [ 352.854653][T10550] pim6reg: entered allmulticast mode [ 353.395526][T10575] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1231'. [ 353.878861][T10603] netlink: 'syz.2.1240': attribute type 10 has an invalid length. [ 353.894340][T10590] syzkaller0: entered promiscuous mode [ 353.911787][T10590] syzkaller0: entered allmulticast mode [ 354.200030][T10616] FAULT_INJECTION: forcing a failure. [ 354.200030][T10616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.219315][T10616] CPU: 1 UID: 0 PID: 10616 Comm: syz.2.1245 Not tainted syzkaller #0 PREEMPT(full) [ 354.219344][T10616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 354.219356][T10616] Call Trace: [ 354.219420][T10616] [ 354.219471][T10616] dump_stack_lvl+0xe8/0x150 [ 354.219616][T10616] should_fail_ex+0x40c/0x560 [ 354.219712][T10616] _copy_from_user+0x2d/0xb0 [ 354.219761][T10616] ___sys_sendmsg+0x1c6/0x360 [ 354.219846][T10616] ? __lock_acquire+0x683/0x2cd0 [ 354.219920][T10616] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.219977][T10616] ? __fget_files+0x2a/0x420 [ 354.220032][T10616] ? __fget_files+0x3a2/0x420 [ 354.220066][T10616] __x64_sys_sendmsg+0x1bd/0x2a0 [ 354.220090][T10616] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.220121][T10616] ? __pfx_ksys_write+0x10/0x10 [ 354.220171][T10616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.220235][T10616] do_syscall_64+0x174/0x580 [ 354.220344][T10616] ? trace_irq_disable+0x3b/0x140 [ 354.220397][T10616] ? clear_bhb_loop+0x40/0x90 [ 354.220422][T10616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.220439][T10616] RIP: 0033:0x7fd0f679ce59 [ 354.220483][T10616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.220521][T10616] RSP: 002b:00007fd0f75dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.220569][T10616] RAX: ffffffffffffffda RBX: 00007fd0f6a15fa0 RCX: 00007fd0f679ce59 [ 354.220584][T10616] RDX: 00000000000080c5 RSI: 00002000000001c0 RDI: 0000000000000003 [ 354.220596][T10616] RBP: 00007fd0f75dc090 R08: 0000000000000000 R09: 0000000000000000 [ 354.220609][T10616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.220620][T10616] R13: 00007fd0f6a16038 R14: 00007fd0f6a15fa0 R15: 00007ffeab0652b8 [ 354.220651][T10616] [ 354.477902][T10618] can: request_module (can-proto-3) failed. [ 356.825759][T10623] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1247'. [ 356.923152][T10637] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1252'. [ 357.159052][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1254'. [ 357.186852][T10649] FAULT_INJECTION: forcing a failure. [ 357.186852][T10649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.216989][T10649] CPU: 1 UID: 0 PID: 10649 Comm: syz.1.1257 Not tainted syzkaller #0 PREEMPT(full) [ 357.217027][T10649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 357.217039][T10649] Call Trace: [ 357.217047][T10649] [ 357.217056][T10649] dump_stack_lvl+0xe8/0x150 [ 357.217087][T10649] should_fail_ex+0x40c/0x560 [ 357.217125][T10649] _copy_from_iter+0x1d3/0x1660 [ 357.217218][T10649] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 357.217305][T10649] ? __pfx__copy_from_iter+0x10/0x10 [ 357.217324][T10649] ? __lock_acquire+0x683/0x2cd0 [ 357.217357][T10649] memcpy_from_msg+0x3c/0xa0 [ 357.217436][T10649] isotp_sendmsg+0x726/0x1540 [ 357.217470][T10649] ? __pfx_isotp_sendmsg+0x10/0x10 [ 357.217495][T10649] ? __pfx_aa_sk_perm+0x10/0x10 [ 357.217519][T10649] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 357.217598][T10649] ? aa_sock_msg_perm+0xf1/0x1b0 [ 357.217647][T10649] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 357.217686][T10649] ? __pfx_isotp_sendmsg+0x10/0x10 [ 357.217709][T10649] ____sys_sendmsg+0x9b9/0xa20 [ 357.217732][T10649] ? __might_fault+0xaf/0x130 [ 357.217784][T10649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.217815][T10649] ? import_iovec+0x73/0xa0 [ 357.217842][T10649] ___sys_sendmsg+0x2a5/0x360 [ 357.217862][T10649] ? __lock_acquire+0x683/0x2cd0 [ 357.217888][T10649] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.217947][T10649] ? __fget_files+0x2a/0x420 [ 357.217972][T10649] ? __fget_files+0x3a2/0x420 [ 357.218015][T10649] __x64_sys_sendmsg+0x1bd/0x2a0 [ 357.218041][T10649] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.218073][T10649] ? __pfx_ksys_write+0x10/0x10 [ 357.218111][T10649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.218134][T10649] do_syscall_64+0x174/0x580 [ 357.218157][T10649] ? trace_irq_disable+0x3b/0x140 [ 357.218186][T10649] ? clear_bhb_loop+0x40/0x90 [ 357.218211][T10649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.218231][T10649] RIP: 0033:0x7fb823d9ce59 [ 357.218251][T10649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.218268][T10649] RSP: 002b:00007fb824d14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.218291][T10649] RAX: ffffffffffffffda RBX: 00007fb824015fa0 RCX: 00007fb823d9ce59 [ 357.218306][T10649] RDX: 00000000000080c5 RSI: 00002000000001c0 RDI: 0000000000000003 [ 357.218319][T10649] RBP: 00007fb824d14090 R08: 0000000000000000 R09: 0000000000000000 [ 357.218331][T10649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.218342][T10649] R13: 00007fb824016038 R14: 00007fb824015fa0 R15: 00007ffd88ee6c08 [ 357.218375][T10649] [ 357.868194][T10668] bond6: option arp_interval: invalid value (18446744073709551615) [ 357.877510][T10668] bond6: option arp_interval: allowed values 0 - 2147483647 [ 357.886845][T10668] bond6 (unregistering): Released all slaves [ 358.200266][T10675] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 358.429749][T10704] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1276'. [ 358.459853][T10704] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1276'. [ 358.514382][T10708] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1275'. [ 358.541461][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'. [ 358.552881][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'. [ 358.560857][T10710] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1277'. [ 358.607070][T10711] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1277'. [ 358.878351][T10726] netlink: 'syz.1.1280': attribute type 1 has an invalid length. [ 358.996136][T10730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1284'. [ 359.527559][T10755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1292'. [ 359.582271][T10758] netlink: 'syz.1.1292': attribute type 2 has an invalid length. [ 359.848542][T10746] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 359.856475][T10746] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 360.483331][T10783] veth0_to_team: entered promiscuous mode [ 360.619609][T10795] netlink: 'syz.0.1303': attribute type 13 has an invalid length. [ 360.689255][T10795] netlink: 'syz.0.1303': attribute type 13 has an invalid length. [ 361.670998][T10838] lo speed is unknown, defaulting to 1000 [ 361.673272][T10841] openvswitch: netlink: Invalid VLAN frame [ 361.831959][T10845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.072621][T10855] netlink: 'syz.1.1319': attribute type 89 has an invalid length. [ 362.137110][T10859] netlink: 'syz.2.1320': attribute type 1 has an invalid length. [ 362.168975][T10859] __nla_validate_parse: 7 callbacks suppressed [ 362.168994][T10859] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1320'. [ 362.205038][T10862] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1322'. [ 362.288777][T10868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1323'. [ 362.365286][T10868] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1323'. [ 362.668511][T10878] pim6reg: entered allmulticast mode [ 363.087007][T10902] netlink: 4300 bytes leftover after parsing attributes in process `syz.2.1336'. [ 363.127388][T10905] netlink: 'syz.3.1331': attribute type 8 has an invalid length. [ 364.043891][T10932] netlink: 'syz.4.1343': attribute type 1 has an invalid length. [ 364.067014][T10932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.479127][T10947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1351'. [ 365.253245][T10972] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 365.428750][T10976] bridge5: entered promiscuous mode [ 365.450304][T10976] bridge5: entered allmulticast mode [ 365.484313][T10976] team0: Port device bridge5 added [ 365.510430][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1364'. [ 365.698260][T10994] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 365.799236][T10999] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 365.827352][T11002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1367'. [ 366.545098][ T6688] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.579434][ T6688] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.601198][ T6688] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.618810][ T6688] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.642795][ T6688] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.693790][ T6688] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.763989][ T6688] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.768628][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1378'. [ 366.777663][ T6688] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.817018][T11024] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 367.104125][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1382'. [ 367.136809][T11039] lo: Caught tx_queue_len zero misconfig [ 367.181016][T11041] __nla_validate_parse: 1 callbacks suppressed [ 367.181043][T11041] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1378'. [ 367.527856][T11047] bond6: option tlb_dynamic_lb: invalid value (5) [ 367.591618][T11047] bond6 (unregistering): Released all slaves [ 368.039864][T11063] tipc: Enabled bearer , priority 10 [ 368.152658][T11064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1388'. [ 368.168821][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1391'. [ 368.550854][T11073] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 368.852766][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1396'. [ 368.887570][T11101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1395'. [ 369.068336][T11106] netlink: 'syz.3.1395': attribute type 12 has an invalid length. [ 369.164935][T11110] xt_l2tp: invalid flags combination: 0 [ 369.191187][ T5774] tipc: Node number set to 2886997007 [ 369.762112][T11121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1401'. [ 370.087244][T11140] netlink: 'syz.3.1407': attribute type 2 has an invalid length. [ 370.572969][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1409'. [ 370.597799][T11153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1410'. [ 370.607359][T11151] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1409'. [ 370.640316][T11146] tunl0: Caught tx_queue_len zero misconfig [ 370.833114][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1411'. [ 371.531272][T11181] bond5 (unregistering): Released all slaves [ 371.905559][T11198] lo speed is unknown, defaulting to 1000 [ 372.213135][T11187] netlink: 'syz.2.1418': attribute type 1 has an invalid length. [ 372.441520][T11212] __nla_validate_parse: 2 callbacks suppressed [ 372.441543][T11212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1424'. [ 372.484915][T11212] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1424'. [ 373.034870][T11230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1427'. [ 373.851732][T11236] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 373.891579][T11236] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 373.908643][T11236] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 373.927898][T11236] gretap0: left allmulticast mode [ 373.939043][T11236] macvlan2: left promiscuous mode [ 373.948755][T11236] macvlan2: left allmulticast mode [ 373.986020][T11236] vlan3: left allmulticast mode [ 373.991080][T11236] bridge1: left allmulticast mode [ 374.006218][T11236] geneve2: left promiscuous mode [ 374.091157][ T6694] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.123205][ T6694] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.154402][ T6694] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.195572][ T6694] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.240320][ T6694] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.254795][ T6694] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.361201][T11261] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1431'. [ 374.552170][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'. [ 375.029345][T11282] lo speed is unknown, defaulting to 1000 [ 375.250040][T11290] syzkaller0: entered promiscuous mode [ 375.261515][T11290] syzkaller0: entered allmulticast mode [ 378.224058][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1455'. [ 378.310769][T11335] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 378.426984][T11336] ipip0: entered promiscuous mode [ 378.444301][T11336] ipip0: entered allmulticast mode [ 378.640791][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.297542][T11376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1466'. [ 380.185990][T11421] nbd3: detected capacity change from 0 to 63 [ 380.245253][T11417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1481'. [ 380.291925][T11417] nbd: must specify an index to disconnect [ 380.444392][T11423] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 380.506484][ T4946] block nbd3: Receive control failed (result -104) [ 380.524519][T11425] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1482'. [ 380.540882][T11433] tipc: Resetting bearer [ 380.547067][T11433] tipc: Resetting bearer [ 380.953835][T11462] netlink: 'syz.3.1489': attribute type 1 has an invalid length. [ 380.956775][T11459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1488'. [ 381.047220][T11461] lo speed is unknown, defaulting to 1000 [ 381.251219][T11469] tipc: Enabled bearer , priority 0 [ 381.259531][T11469] syzkaller0: entered promiscuous mode [ 381.265592][T11469] syzkaller0: entered allmulticast mode [ 381.346378][T11469] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1491'. [ 381.382608][T11469] netlink: 47 bytes leftover after parsing attributes in process `syz.3.1491'. [ 381.409438][T11469] netlink: 'syz.3.1491': attribute type 6 has an invalid length. [ 381.446195][T11476] tipc: Resetting bearer [ 381.467193][T11469] netlink: 47 bytes leftover after parsing attributes in process `syz.3.1491'. [ 381.489839][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1491'. [ 381.507637][T11480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1491'. [ 381.574230][T11468] tipc: Resetting bearer [ 381.660991][T11468] tipc: Disabling bearer [ 381.714653][T11475] openvswitch: netlink: IP tunnel dst address not specified [ 381.732036][T11475] pim6reg0: tun_chr_ioctl cmd 2147767507 [ 382.662822][T11508] team0: left promiscuous mode [ 382.689327][T11508] bridge0: port 2(team0) entered disabled state [ 382.756322][T11508] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 382.793578][T11508] tipc: Enabled bearer , priority 0 [ 382.863331][T11511] bond6: option ad_select: invalid value (7) [ 382.871364][T11511] bond6 (unregistering): Released all slaves [ 382.906573][T11513] xfrm0: entered allmulticast mode [ 382.921898][T11513] team0: Port device xfrm0 added [ 383.236310][T11537] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1512'. [ 383.340567][T11543] sctp: [Deprecated]: syz.4.1512 (pid 11543) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.340567][T11543] Use struct sctp_sack_info instead [ 383.537726][T11561] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 383.989431][T11577] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1521'. [ 384.000728][T11578] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1521'. [ 384.013164][T11577] syzkaller0: renamed from batadv_slave_1 (while UP) [ 384.353013][T11583] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1522'. [ 384.472193][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1524'. [ 385.664257][T11648] IPVS: length: 24 != 3445464 [ 385.735409][T11656] xt_cluster: node mask cannot exceed total number of nodes [ 386.108917][T11676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1552'. [ 386.146141][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1550'. [ 386.386999][T11691] netlink: 'syz.1.1557': attribute type 21 has an invalid length. [ 386.821630][T11718] netlink: 75 bytes leftover after parsing attributes in process `syz.2.1563'. [ 387.209525][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1568'. [ 387.546151][T11738] tipc: Resetting bearer [ 388.199692][T11743] veth1_macvtap: renamed from veth1_vlan [ 388.246835][ T6686] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.287000][ T6686] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.386389][ T6686] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.419485][ T6686] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.431994][T11749] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 388.454648][ T6686] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.473585][T11772] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1577'. [ 388.503211][ T6686] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.604584][T11772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1577'. [ 388.613783][ T6686] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.646503][ T6686] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.938325][ T29] audit: type=1107 audit(1781572273.890:5): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 388.950793][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1583'. [ 388.969223][T11786] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1581'. [ 389.002401][T11786] block nbd0: not configured, cannot reconfigure [ 389.760422][T11829] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1594'. [ 389.890878][T11835] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1596'. [ 389.956438][T11835] bond0 (unregistering): Released all slaves [ 390.637732][ T5292] veth1_macvtap: left promiscuous mode [ 391.397260][T11900] FAULT_INJECTION: forcing a failure. [ 391.397260][T11900] name failslab, interval 1, probability 0, space 0, times 0 [ 391.410313][T11900] CPU: 1 UID: 0 PID: 11900 Comm: syz.4.1616 Not tainted syzkaller #0 PREEMPT(full) [ 391.410341][T11900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 391.410353][T11900] Call Trace: [ 391.410361][T11900] [ 391.410370][T11900] dump_stack_lvl+0xe8/0x150 [ 391.410401][T11900] should_fail_ex+0x40c/0x560 [ 391.410439][T11900] should_failslab+0xa8/0x100 [ 391.410508][T11900] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 391.410536][T11900] ? __alloc_skb+0x189/0x7a0 [ 391.410612][T11900] ? __alloc_skb+0x1d7/0x7a0 [ 391.410638][T11900] ? __local_bh_enable_ip+0xd0/0x130 [ 391.410679][T11900] __alloc_skb+0x1d7/0x7a0 [ 391.410713][T11900] netlink_sendmsg+0x5d4/0xb40 [ 391.410807][T11900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.410833][T11900] ? aa_sock_msg_perm+0xf1/0x1b0 [ 391.410865][T11900] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 391.410889][T11900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.410913][T11900] ____sys_sendmsg+0x9b9/0xa20 [ 391.410942][T11900] ? __might_fault+0xaf/0x130 [ 391.410975][T11900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.411004][T11900] ? import_iovec+0x73/0xa0 [ 391.411032][T11900] ___sys_sendmsg+0x2a5/0x360 [ 391.411052][T11900] ? __lock_acquire+0x683/0x2cd0 [ 391.411077][T11900] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.411134][T11900] ? __fget_files+0x2a/0x420 [ 391.411156][T11900] ? __fget_files+0x3a2/0x420 [ 391.411188][T11900] __x64_sys_sendmsg+0x1bd/0x2a0 [ 391.411212][T11900] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.411244][T11900] ? __pfx_ksys_write+0x10/0x10 [ 391.411285][T11900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.411308][T11900] do_syscall_64+0x174/0x580 [ 391.411330][T11900] ? trace_irq_disable+0x3b/0x140 [ 391.411356][T11900] ? clear_bhb_loop+0x40/0x90 [ 391.411401][T11900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.411422][T11900] RIP: 0033:0x7f5215d9ce59 [ 391.411442][T11900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.411460][T11900] RSP: 002b:00007f5216b81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.411482][T11900] RAX: ffffffffffffffda RBX: 00007f5216015fa0 RCX: 00007f5215d9ce59 [ 391.411496][T11900] RDX: 0000000000000800 RSI: 0000200000000ec0 RDI: 0000000000000003 [ 391.411509][T11900] RBP: 00007f5216b81090 R08: 0000000000000000 R09: 0000000000000000 [ 391.411521][T11900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.411534][T11900] R13: 00007f5216016038 R14: 00007f5216015fa0 R15: 00007ffe0f037218 [ 391.411564][T11900] [ 391.807137][T11904] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1619'. [ 391.938768][T11911] netlink: 1940 bytes leftover after parsing attributes in process `syz.1.1620'. [ 392.804226][T11940] xt_TCPMSS: Only works on TCP SYN packets [ 392.986803][T11945] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 393.026131][T11945] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 393.072355][T11945] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 393.234754][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1631'. [ 393.481045][T11967] netlink: 'syz.2.1634': attribute type 2 has an invalid length. [ 393.496554][T11967] netlink: 'syz.2.1634': attribute type 9 has an invalid length. [ 393.525303][T11967] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1634'. [ 393.586130][T11972] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 393.878822][T11967] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 393.922831][T11967] bond6 (unregistering): Released all slaves [ 394.295558][T11999] FAULT_INJECTION: forcing a failure. [ 394.295558][T11999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.321382][T11998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1642'. [ 394.348767][T11999] CPU: 1 UID: 0 PID: 11999 Comm: syz.3.1643 Not tainted syzkaller #0 PREEMPT(full) [ 394.348797][T11999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 394.348809][T11999] Call Trace: [ 394.348817][T11999] [ 394.348826][T11999] dump_stack_lvl+0xe8/0x150 [ 394.348858][T11999] should_fail_ex+0x40c/0x560 [ 394.348900][T11999] _copy_from_iter+0x1d3/0x1660 [ 394.348927][T11999] ? rcu_is_watching+0x15/0xb0 [ 394.348977][T11999] ? __pfx__copy_from_iter+0x10/0x10 [ 394.348995][T11999] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 394.349032][T11999] ? netlink_sendmsg+0x650/0xb40 [ 394.349057][T11999] ? skb_put+0x112/0x210 [ 394.349080][T11999] netlink_sendmsg+0x6c0/0xb40 [ 394.349112][T11999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.349138][T11999] ? aa_sock_msg_perm+0xf1/0x1b0 [ 394.349169][T11999] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 394.349194][T11999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.349219][T11999] ____sys_sendmsg+0x9b9/0xa20 [ 394.349241][T11999] ? __might_fault+0xaf/0x130 [ 394.349274][T11999] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.349306][T11999] ? import_iovec+0x73/0xa0 [ 394.349333][T11999] ___sys_sendmsg+0x2a5/0x360 [ 394.349354][T11999] ? __lock_acquire+0x683/0x2cd0 [ 394.349389][T11999] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.349451][T11999] ? __fget_files+0x2a/0x420 [ 394.349475][T11999] ? __fget_files+0x3a2/0x420 [ 394.349511][T11999] __x64_sys_sendmsg+0x1bd/0x2a0 [ 394.349537][T11999] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 394.349569][T11999] ? __pfx_ksys_write+0x10/0x10 [ 394.349609][T11999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.349632][T11999] do_syscall_64+0x174/0x580 [ 394.349655][T11999] ? trace_irq_disable+0x3b/0x140 [ 394.349685][T11999] ? clear_bhb_loop+0x40/0x90 [ 394.349711][T11999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.349731][T11999] RIP: 0033:0x7f139a99ce59 [ 394.349752][T11999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.349769][T11999] RSP: 002b:00007f1398bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.349793][T11999] RAX: ffffffffffffffda RBX: 00007f139ac15fa0 RCX: 00007f139a99ce59 [ 394.349808][T11999] RDX: 0000000000000800 RSI: 0000200000000ec0 RDI: 0000000000000003 [ 394.349821][T11999] RBP: 00007f1398bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 394.349834][T11999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.349845][T11999] R13: 00007f139ac16038 R14: 00007f139ac15fa0 R15: 00007ffec4956628 [ 394.349879][T11999] [ 394.620163][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1644'. [ 395.317664][ T1227] IPVS: starting estimator thread 0... [ 395.425297][T12038] IPVS: using max 24 ests per chain, 57600 per kthread [ 397.831305][T12017] ip6tnl1: entered allmulticast mode [ 398.024836][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1657'. [ 398.110751][T12049] FAULT_INJECTION: forcing a failure. [ 398.110751][T12049] name failslab, interval 1, probability 0, space 0, times 0 [ 398.186891][T12049] CPU: 1 UID: 0 PID: 12049 Comm: syz.2.1658 Not tainted syzkaller #0 PREEMPT(full) [ 398.186920][T12049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 398.186931][T12049] Call Trace: [ 398.186939][T12049] [ 398.186947][T12049] dump_stack_lvl+0xe8/0x150 [ 398.186978][T12049] should_fail_ex+0x40c/0x560 [ 398.187017][T12049] should_failslab+0xa8/0x100 [ 398.187051][T12049] __kmalloc_noprof+0xe8/0x750 [ 398.187078][T12049] ? is_bpf_text_address+0x26/0x2b0 [ 398.187100][T12049] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 398.187135][T12049] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 398.187171][T12049] genl_family_rcv_msg_doit+0xda/0x340 [ 398.187206][T12049] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 398.187242][T12049] ? apparmor_capable+0x126/0x170 [ 398.187267][T12049] ? bpf_lsm_capable+0x9/0x20 [ 398.187285][T12049] ? security_capable+0x7e/0x2c0 [ 398.187410][T12049] genl_rcv_msg+0x614/0x7a0 [ 398.187441][T12049] ? __pfx_genl_rcv_msg+0x10/0x10 [ 398.187464][T12049] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 398.187553][T12049] ? __pfx_nl80211_set_tid_config+0x10/0x10 [ 398.187597][T12049] ? __pfx_nl80211_post_doit+0x10/0x10 [ 398.187639][T12049] netlink_rcv_skb+0x226/0x4a0 [ 398.187663][T12049] ? __pfx_genl_rcv_msg+0x10/0x10 [ 398.187690][T12049] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 398.187730][T12049] ? down_read+0x270/0x2e0 [ 398.187779][T12049] ? genl_rcv+0xd/0x40 [ 398.187807][T12049] genl_rcv+0x28/0x40 [ 398.187832][T12049] netlink_unicast+0x7bb/0x940 [ 398.187880][T12049] netlink_sendmsg+0x813/0xb40 [ 398.187919][T12049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.187947][T12049] ? aa_sock_msg_perm+0xf1/0x1b0 [ 398.187979][T12049] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 398.188005][T12049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.188029][T12049] ____sys_sendmsg+0x9b9/0xa20 [ 398.188052][T12049] ? __might_fault+0xaf/0x130 [ 398.188085][T12049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.188118][T12049] ? import_iovec+0x73/0xa0 [ 398.188147][T12049] ___sys_sendmsg+0x2a5/0x360 [ 398.188167][T12049] ? __lock_acquire+0x683/0x2cd0 [ 398.188195][T12049] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.188257][T12049] ? __fget_files+0x2a/0x420 [ 398.188282][T12049] ? __fget_files+0x3a2/0x420 [ 398.188319][T12049] __x64_sys_sendmsg+0x1bd/0x2a0 [ 398.188346][T12049] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.188379][T12049] ? __pfx_ksys_write+0x10/0x10 [ 398.188419][T12049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.188443][T12049] do_syscall_64+0x174/0x580 [ 398.188466][T12049] ? trace_irq_disable+0x3b/0x140 [ 398.188494][T12049] ? clear_bhb_loop+0x40/0x90 [ 398.188520][T12049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.188541][T12049] RIP: 0033:0x7fd0f679ce59 [ 398.188561][T12049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.188578][T12049] RSP: 002b:00007fd0f75dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.188601][T12049] RAX: ffffffffffffffda RBX: 00007fd0f6a15fa0 RCX: 00007fd0f679ce59 [ 398.188616][T12049] RDX: 0000000000000800 RSI: 0000200000000ec0 RDI: 0000000000000003 [ 398.188629][T12049] RBP: 00007fd0f75dc090 R08: 0000000000000000 R09: 0000000000000000 [ 398.188641][T12049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.188652][T12049] R13: 00007fd0f6a16038 R14: 00007fd0f6a15fa0 R15: 00007ffeab0652b8 [ 398.188688][T12049] [ 398.595982][T12055] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1660'. [ 398.707567][T12062] veth1_to_bond: entered promiscuous mode [ 398.712419][T12056] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1661'. [ 398.714777][T12062] veth1_to_bond: entered allmulticast mode [ 398.733126][T12062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1663'. [ 398.756704][T12062] veth1_to_bond (unregistering): left promiscuous mode [ 398.757779][T12056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1661'. [ 398.763640][T12062] veth1_to_bond (unregistering): left allmulticast mode [ 398.854044][T12056] openvswitch: netlink: Flow actions attr not present in new flow. [ 398.912922][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1667'. [ 398.941328][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1667'. [ 399.018381][T12076] 8021q: VLANs not supported on ip6_vti0 [ 399.292586][T12082] lo speed is unknown, defaulting to 1000 [ 399.897622][T12092] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1674'. [ 400.287373][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1677'. [ 400.523810][T12110] batadv0: entered promiscuous mode [ 400.555770][T12110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1679'. [ 400.580824][T12110] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 400.614610][T12114] netlink: 'syz.3.1679': attribute type 1 has an invalid length. [ 400.649321][T12114] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1679'. [ 401.140283][T12143] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 403.575754][T12113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 404.105071][T12193] __nla_validate_parse: 3 callbacks suppressed [ 404.115306][T12193] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1699'. [ 404.323358][T12196] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1701'. [ 404.449616][T12208] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 404.487602][T12208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.515322][T12212] netlink: 'syz.1.1705': attribute type 13 has an invalid length. [ 404.946475][T12225] veth1_to_bond: Caught tx_queue_len zero misconfig [ 405.005993][T12228] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1711'. [ 405.029220][T12230] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1711'. [ 405.044121][T12230] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1711'. [ 405.086579][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1711'. [ 405.324255][T12239] netlink: 'syz.3.1714': attribute type 6 has an invalid length. [ 405.371293][T12243] netlink: 'syz.1.1716': attribute type 4 has an invalid length. [ 405.494035][T12249] syzkaller0: entered promiscuous mode [ 405.529736][T12249] syzkaller0: entered allmulticast mode [ 405.587568][T12256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1719'. [ 405.743682][T12262] FAULT_INJECTION: forcing a failure. [ 405.743682][T12262] name failslab, interval 1, probability 0, space 0, times 0 [ 405.803493][T12262] CPU: 1 UID: 0 PID: 12262 Comm: syz.0.1721 Not tainted syzkaller #0 PREEMPT(full) [ 405.803524][T12262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 405.803536][T12262] Call Trace: [ 405.803544][T12262] [ 405.803553][T12262] dump_stack_lvl+0xe8/0x150 [ 405.803583][T12262] should_fail_ex+0x40c/0x560 [ 405.803621][T12262] should_failslab+0xa8/0x100 [ 405.803655][T12262] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 405.803683][T12262] ? __alloc_skb+0x189/0x7a0 [ 405.803713][T12262] ? __alloc_skb+0x1d7/0x7a0 [ 405.803739][T12262] ? __local_bh_enable_ip+0xd0/0x130 [ 405.803766][T12262] __alloc_skb+0x1d7/0x7a0 [ 405.803801][T12262] netlink_sendmsg+0x5d4/0xb40 [ 405.803834][T12262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.803860][T12262] ? aa_sock_msg_perm+0xf1/0x1b0 [ 405.803892][T12262] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 405.803916][T12262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.803940][T12262] ____sys_sendmsg+0x9b9/0xa20 [ 405.803962][T12262] ? __might_fault+0xaf/0x130 [ 405.803993][T12262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 405.804024][T12262] ? import_iovec+0x73/0xa0 [ 405.804052][T12262] ___sys_sendmsg+0x2a5/0x360 [ 405.804073][T12262] ? __lock_acquire+0x683/0x2cd0 [ 405.804099][T12262] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.804159][T12262] ? __fget_files+0x2a/0x420 [ 405.804183][T12262] ? __fget_files+0x3a2/0x420 [ 405.804216][T12262] __x64_sys_sendmsg+0x1bd/0x2a0 [ 405.804241][T12262] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 405.804274][T12262] ? __pfx_ksys_write+0x10/0x10 [ 405.804313][T12262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.804336][T12262] do_syscall_64+0x174/0x580 [ 405.804359][T12262] ? trace_irq_disable+0x3b/0x140 [ 405.804389][T12262] ? clear_bhb_loop+0x40/0x90 [ 405.804415][T12262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.804446][T12262] RIP: 0033:0x7f286119ce59 [ 405.804465][T12262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.804483][T12262] RSP: 002b:00007f2862070028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.804510][T12262] RAX: ffffffffffffffda RBX: 00007f2861415fa0 RCX: 00007f286119ce59 [ 405.804524][T12262] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 405.804535][T12262] RBP: 00007f2862070090 R08: 0000000000000000 R09: 0000000000000000 [ 405.804547][T12262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.804559][T12262] R13: 00007f2861416038 R14: 00007f2861415fa0 R15: 00007ffeb136fca8 [ 405.804592][T12262] [ 406.118763][T12265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.647387][ T1227] IPVS: starting estimator thread 0... [ 406.662484][T12298] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1728'. [ 406.767414][T12297] IPVS: using max 29 ests per chain, 69600 per kthread [ 407.239103][T12317] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1734'. [ 407.329621][ T1227] IPVS: starting estimator thread 0... [ 407.445439][T12334] IPVS: using max 29 ests per chain, 69600 per kthread [ 407.749542][T12349] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 408.331819][T12368] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20003 [ 408.497079][T12377] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1749'. [ 408.787723][T12392] netlink: 'syz.2.1755': attribute type 1 has an invalid length. [ 408.953888][T12400] netlink: 'syz.4.1757': attribute type 29 has an invalid length. [ 409.009400][T12392] bond6: entered promiscuous mode [ 409.070686][T12392] 8021q: adding VLAN 0 to HW filter on device bond6 [ 409.140856][T12394] vlan2: entered allmulticast mode [ 409.163419][T12394] bond6: entered allmulticast mode [ 409.192438][T12408] netlink: 'syz.0.1761': attribute type 20 has an invalid length. [ 409.318589][T12413] netlink: 'syz.1.1762': attribute type 3 has an invalid length. [ 409.340031][T12402] bond6: (slave bridge4): making interface the new active one [ 409.345790][T12413] __nla_validate_parse: 8 callbacks suppressed [ 409.345809][T12413] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1762'. [ 409.359708][T12402] bridge4: entered promiscuous mode [ 409.378939][T12402] bridge4: entered allmulticast mode [ 409.407362][T12402] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 409.745910][T12417] lo speed is unknown, defaulting to 1000 [ 409.937143][T12434] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1765'. [ 409.971466][T12434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1765'. [ 410.020119][T12434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1765'. [ 410.221830][T12441] syzkaller1: entered promiscuous mode [ 410.236452][T12441] syzkaller1: entered allmulticast mode [ 410.257642][T12441] af_packet: tpacket_rcv: packet too big, clamped from 4300 to 3952. macoff=96 [ 410.311353][T12441] netlink: 'syz.3.1767': attribute type 4 has an invalid length. [ 410.378340][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'. [ 410.552164][T12451] syzkaller0: entered promiscuous mode [ 410.571879][T12451] syzkaller0: entered allmulticast mode [ 410.641713][ T11] block nbd3: Possible stuck request ffff8880276be000: control (read@0,1024B). Runtime 30 seconds [ 410.655892][ T11] block nbd3: Possible stuck request ffff8880276be1c0: control (read@1024,1024B). Runtime 30 seconds [ 410.667179][ T11] block nbd3: Possible stuck request ffff8880276be380: control (read@2048,1024B). Runtime 30 seconds [ 410.681586][ T11] block nbd3: Possible stuck request ffff8880276be540: control (read@3072,1024B). Runtime 30 seconds [ 411.048092][T12468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1775'. [ 411.279665][T12481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1778'. [ 411.385773][T12485] netlink: 'syz.0.1780': attribute type 362 has an invalid length. [ 411.432012][T12490] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1779'. [ 411.529550][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1780'. [ 411.638498][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1782'. [ 411.933628][T12502] syzkaller1: entered promiscuous mode [ 411.940248][T12502] syzkaller1: entered allmulticast mode [ 411.954318][T12502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.117748][T12504] FAULT_INJECTION: forcing a failure. [ 412.117748][T12504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.132844][T12504] CPU: 0 UID: 0 PID: 12504 Comm: syz.4.1784 Not tainted syzkaller #0 PREEMPT(full) [ 412.132872][T12504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 412.132883][T12504] Call Trace: [ 412.132890][T12504] [ 412.132898][T12504] dump_stack_lvl+0xe8/0x150 [ 412.132926][T12504] should_fail_ex+0x40c/0x560 [ 412.132963][T12504] _copy_from_iter+0x1d3/0x1660 [ 412.132988][T12504] ? rcu_is_watching+0x15/0xb0 [ 412.133014][T12504] ? __pfx__copy_from_iter+0x10/0x10 [ 412.133028][T12504] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 412.133061][T12504] ? netlink_sendmsg+0x650/0xb40 [ 412.133081][T12504] ? skb_put+0x112/0x210 [ 412.133099][T12504] netlink_sendmsg+0x6c0/0xb40 [ 412.133126][T12504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.133149][T12504] ? aa_sock_msg_perm+0xf1/0x1b0 [ 412.133176][T12504] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 412.133197][T12504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.133219][T12504] ____sys_sendmsg+0x9b9/0xa20 [ 412.133237][T12504] ? __might_fault+0xaf/0x130 [ 412.133265][T12504] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.133292][T12504] ? import_iovec+0x73/0xa0 [ 412.133315][T12504] ___sys_sendmsg+0x2a5/0x360 [ 412.133332][T12504] ? __lock_acquire+0x683/0x2cd0 [ 412.133356][T12504] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.133406][T12504] ? __fget_files+0x2a/0x420 [ 412.133427][T12504] ? __fget_files+0x3a2/0x420 [ 412.133457][T12504] __x64_sys_sendmsg+0x1bd/0x2a0 [ 412.133477][T12504] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 412.133517][T12504] ? __pfx_ksys_write+0x10/0x10 [ 412.133549][T12504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.133568][T12504] do_syscall_64+0x174/0x580 [ 412.133590][T12504] ? trace_irq_disable+0x3b/0x140 [ 412.133619][T12504] ? clear_bhb_loop+0x40/0x90 [ 412.133642][T12504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.133661][T12504] RIP: 0033:0x7f5215d9ce59 [ 412.133682][T12504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.133704][T12504] RSP: 002b:00007f5216b81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.133728][T12504] RAX: ffffffffffffffda RBX: 00007f5216015fa0 RCX: 00007f5215d9ce59 [ 412.133742][T12504] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 412.133755][T12504] RBP: 00007f5216b81090 R08: 0000000000000000 R09: 0000000000000000 [ 412.133766][T12504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.133778][T12504] R13: 00007f5216016038 R14: 00007f5216015fa0 R15: 00007ffe0f037218 [ 412.133811][T12504] [ 412.890596][T12537] xt_CT: You must specify a L4 protocol and not use inversions on it [ 414.260382][T12485] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 414.447806][T12549] tipc: New replicast peer: 255.255.255.255 [ 414.454679][T12549] tipc: Enabled bearer , priority 10 [ 414.556452][T12557] FAULT_INJECTION: forcing a failure. [ 414.556452][T12557] name failslab, interval 1, probability 0, space 0, times 0 [ 414.612557][T12557] CPU: 0 UID: 0 PID: 12557 Comm: syz.4.1798 Not tainted syzkaller #0 PREEMPT(full) [ 414.612589][T12557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 414.612602][T12557] Call Trace: [ 414.612610][T12557] [ 414.612619][T12557] dump_stack_lvl+0xe8/0x150 [ 414.612650][T12557] should_fail_ex+0x40c/0x560 [ 414.612687][T12557] should_failslab+0xa8/0x100 [ 414.612718][T12557] ? skb_clone+0x212/0x3a0 [ 414.612741][T12557] kmem_cache_alloc_noprof+0x87/0x650 [ 414.612768][T12557] ? apparmor_capable+0x126/0x170 [ 414.612799][T12557] skb_clone+0x212/0x3a0 [ 414.612819][T12557] ? nfnetlink_rcv+0x4b0/0x28c0 [ 414.612929][T12557] nfnetlink_rcv+0x4de/0x28c0 [ 414.612959][T12557] ? is_bpf_text_address+0x292/0x2b0 [ 414.612985][T12557] ? kernel_text_address+0xa5/0xe0 [ 414.613023][T12557] ? __kernel_text_address+0xd/0x30 [ 414.613050][T12557] ? unwind_get_return_address+0x4d/0x90 [ 414.613088][T12557] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 414.613127][T12557] ? arch_stack_walk+0xfb/0x150 [ 414.613187][T12557] ? __lock_acquire+0x683/0x2cd0 [ 414.613211][T12557] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 414.613264][T12557] ? __lock_acquire+0x683/0x2cd0 [ 414.613299][T12557] ? __netlink_lookup+0xc6/0x8b0 [ 414.613335][T12557] ? netlink_deliver_tap+0x2e/0x1b0 [ 414.613359][T12557] ? netlink_deliver_tap+0x2e/0x1b0 [ 414.613389][T12557] ? netlink_deliver_tap+0x2e/0x1b0 [ 414.613412][T12557] ? netlink_deliver_tap+0x2e/0x1b0 [ 414.613441][T12557] netlink_unicast+0x7bb/0x940 [ 414.613485][T12557] netlink_sendmsg+0x813/0xb40 [ 414.613519][T12557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.613547][T12557] ? aa_sock_msg_perm+0xf1/0x1b0 [ 414.613583][T12557] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.613609][T12557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.613635][T12557] ____sys_sendmsg+0x9b9/0xa20 [ 414.613658][T12557] ? __might_fault+0xaf/0x130 [ 414.613692][T12557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.613725][T12557] ? import_iovec+0x73/0xa0 [ 414.613753][T12557] ___sys_sendmsg+0x2a5/0x360 [ 414.613775][T12557] ? __lock_acquire+0x683/0x2cd0 [ 414.613802][T12557] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.613872][T12557] ? __fget_files+0x2a/0x420 [ 414.613898][T12557] ? __fget_files+0x3a2/0x420 [ 414.613936][T12557] __x64_sys_sendmsg+0x1bd/0x2a0 [ 414.613962][T12557] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.613996][T12557] ? __pfx_ksys_write+0x10/0x10 [ 414.614034][T12557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.614055][T12557] do_syscall_64+0x174/0x580 [ 414.614080][T12557] ? clear_bhb_loop+0x40/0x90 [ 414.614104][T12557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.614123][T12557] RIP: 0033:0x7f5215d9ce59 [ 414.614142][T12557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.614159][T12557] RSP: 002b:00007f5216b81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.614181][T12557] RAX: ffffffffffffffda RBX: 00007f5216015fa0 RCX: 00007f5215d9ce59 [ 414.614195][T12557] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 414.614206][T12557] RBP: 00007f5216b81090 R08: 0000000000000000 R09: 0000000000000000 [ 414.614217][T12557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.614228][T12557] R13: 00007f5216016038 R14: 00007f5216015fa0 R15: 00007ffe0f037218 [ 414.614259][T12557] [ 415.043699][T12562] __nla_validate_parse: 4 callbacks suppressed [ 415.043720][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1800'. [ 415.096926][T12567] IPVS: set_ctl: invalid protocol: 46 100.1.1.0:20002 [ 415.656003][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1810'. [ 415.698648][T12590] netlink: 'syz.1.1811': attribute type 62 has an invalid length. [ 415.727556][T12586] netlink: 'syz.0.1810': attribute type 26 has an invalid length. [ 415.747028][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1810'. [ 415.772837][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1810'. [ 415.807738][T12586] netlink: 'syz.0.1810': attribute type 26 has an invalid length. [ 415.811260][T12595] FAULT_INJECTION: forcing a failure. [ 415.811260][T12595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.840069][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1810'. [ 415.872922][T12595] CPU: 0 UID: 0 PID: 12595 Comm: syz.2.1812 Not tainted syzkaller #0 PREEMPT(full) [ 415.872951][T12595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 415.872964][T12595] Call Trace: [ 415.872971][T12595] [ 415.872979][T12595] dump_stack_lvl+0xe8/0x150 [ 415.873010][T12595] should_fail_ex+0x40c/0x560 [ 415.873047][T12595] _copy_from_user+0x2d/0xb0 [ 415.873073][T12595] ___sys_sendmsg+0x1c6/0x360 [ 415.873095][T12595] ? __lock_acquire+0x683/0x2cd0 [ 415.873121][T12595] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.873182][T12595] ? __fget_files+0x2a/0x420 [ 415.873207][T12595] ? __fget_files+0x3a2/0x420 [ 415.873243][T12595] __x64_sys_sendmsg+0x1bd/0x2a0 [ 415.873269][T12595] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 415.873301][T12595] ? __pfx_ksys_write+0x10/0x10 [ 415.873340][T12595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.873362][T12595] do_syscall_64+0x174/0x580 [ 415.873385][T12595] ? trace_irq_disable+0x3b/0x140 [ 415.873413][T12595] ? clear_bhb_loop+0x40/0x90 [ 415.873437][T12595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.873456][T12595] RIP: 0033:0x7fd0f679ce59 [ 415.873475][T12595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.873491][T12595] RSP: 002b:00007fd0f75dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.873513][T12595] RAX: ffffffffffffffda RBX: 00007fd0f6a15fa0 RCX: 00007fd0f679ce59 [ 415.873527][T12595] RDX: 0000000004004850 RSI: 0000200000000140 RDI: 0000000000000003 [ 415.873541][T12595] RBP: 00007fd0f75dc090 R08: 0000000000000000 R09: 0000000000000000 [ 415.873553][T12595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.873564][T12595] R13: 00007fd0f6a16038 R14: 00007fd0f6a15fa0 R15: 00007ffeab0652b8 [ 415.873601][T12595] [ 415.903307][T12599] sctp: [Deprecated]: syz.4.1813 (pid 12599) Use of int in maxseg socket option. [ 415.903307][T12599] Use struct sctp_assoc_value instead [ 416.038690][T12606] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1814'. [ 416.095460][T12607] netlink: 'syz.2.1817': attribute type 1 has an invalid length. [ 416.343503][T12607] macvlan2: entered promiscuous mode [ 416.358096][T12607] macvlan2: entered allmulticast mode [ 416.414524][T12612] syzkaller0: entered promiscuous mode [ 416.431013][T12612] syzkaller0: entered allmulticast mode [ 416.507625][T12617] tipc: Enabled bearer , priority 0 [ 416.534942][T12608] tipc: Resetting bearer [ 416.624857][T12608] tipc: Disabling bearer [ 416.636218][T12635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1819'. [ 416.737835][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1821'. [ 416.864025][T12630] lo speed is unknown, defaulting to 1000 [ 417.049406][T12649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1826'. [ 417.359279][T12664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1830'. [ 417.539110][T12670] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 417.780186][T12676] openvswitch: netlink: Flow key attr not present in new flow. [ 418.600459][T12691] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 419.011180][T12707] ieee802154 phy1 wpan1: encryption failed: -90 [ 419.620130][ T4946] block nbd0: Receive control failed (result -32) [ 420.108972][T12749] __nla_validate_parse: 4 callbacks suppressed [ 420.108994][T12749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1848'. [ 420.217008][T12749] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 420.256949][T12749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1848'. [ 420.410365][T12759] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1851'. [ 420.556005][T12753] bond5: entered allmulticast mode [ 420.630875][T12757] macvlan4: entered promiscuous mode [ 420.706572][T12757] macvlan4: entered allmulticast mode [ 420.772592][T12757] bond5: entered promiscuous mode [ 420.838371][T12757] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 420.906731][T12757] bond5: left promiscuous mode [ 420.993740][T12768] vlan4: entered promiscuous mode [ 421.002363][T12773] netlink: 'syz.3.1854': attribute type 4 has an invalid length. [ 421.020782][T12782] tipc: Resetting bearer [ 421.040910][T12782] team0: entered promiscuous mode [ 421.046483][T12782] xfrm0: entered promiscuous mode [ 421.235930][T12799] macsec1: entered promiscuous mode [ 421.456629][T12801] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 421.512442][T12801] bond0 (unregistering): Released all slaves [ 421.623532][T12819] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1866'. [ 421.672713][T12819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.697937][T12819] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 421.781995][T12823] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1867'. [ 421.831940][T12823] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1867'. [ 421.835114][T12825] openvswitch: netlink: IPv6 tunnel dst address is zero [ 421.865848][T12823] netlink: 'syz.1.1867': attribute type 6 has an invalid length. [ 421.906527][T12828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.939737][T12823] netlink: 'syz.1.1867': attribute type 5 has an invalid length. [ 421.981981][T12823] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1867'. [ 422.438584][T12820] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 422.474673][T12820] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 422.624655][T12820] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 422.636958][T12820] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 422.674443][T12820] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 422.686039][T12820] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 422.694662][T12865] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1878'. [ 422.703183][T12850] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.705336][T12865] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1878'. [ 422.724166][T12850] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.756916][T12820] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 422.765997][T12820] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 422.990625][T12873] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1880'. [ 423.023635][T12850] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.071585][T12850] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.260993][T12886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.276006][T12850] netdevsim netdevsim3 netdevsim1 (unregistering): left allmulticast mode [ 423.325514][T12850] netdevsim netdevsim3 netdevsim1 (unregistering): left promiscuous mode [ 423.333944][T12886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.376190][T12850] bridge0: port 1(netdevsim1) entered disabled state [ 423.399888][T12850] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.411792][T12850] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.442602][T12892] netlink: 'syz.1.1885': attribute type 1 has an invalid length. [ 423.453456][T12882] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 423.470390][T12882] bond8 (unregistering): Released all slaves [ 423.546383][T12850] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.561244][T12850] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.834853][ T48] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.872880][ T48] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.902872][T12902] netlink: 'syz.2.1888': attribute type 7 has an invalid length. [ 424.113234][ T48] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.148770][ T48] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.285780][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.300582][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.430758][ T62] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.461536][ T62] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.194862][T12947] netlink: 'syz.2.1903': attribute type 3 has an invalid length. [ 425.234307][T12947] __nla_validate_parse: 10 callbacks suppressed [ 425.234328][T12947] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1903'. [ 425.399113][T12955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1907'. [ 425.530762][T12960] netlink: 'syz.3.1908': attribute type 7 has an invalid length. [ 425.563686][T12960] netlink: 'syz.3.1908': attribute type 8 has an invalid length. [ 425.591616][T12960] netlink: 'syz.3.1908': attribute type 8 has an invalid length. [ 425.632758][T12960] netlink: 'syz.3.1908': attribute type 4 has an invalid length. [ 425.684877][T12960] netlink: 207236 bytes leftover after parsing attributes in process `syz.3.1908'. [ 425.821782][T12974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1912'. [ 426.682095][T13005] lo speed is unknown, defaulting to 1000 [ 426.792546][T13009] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1924'. [ 426.859598][T13011] bridge1: entered promiscuous mode [ 426.892769][T13011] bridge1: entered allmulticast mode [ 426.926027][T13011] team0: Device bridge1 is of different type [ 427.108277][T13026] validate_nla: 1 callbacks suppressed [ 427.108361][T13026] netlink: 'syz.4.1926': attribute type 10 has an invalid length. [ 427.160364][T13026] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1926'. [ 427.412078][T13035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1928'. [ 428.334743][T13066] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1935'. [ 428.409508][T13069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1936'. [ 428.628662][T13075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1938'. [ 429.300457][T13033] infiniband uyz0: set down [ 429.322503][T13033] infiniband uyz0: added bridge_slave_1 [ 429.379932][T13033] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 429.428991][T13033] infiniband uyz0: Couldn't open port 1 [ 429.478470][T13033] smbdirect: ib_dev[uyz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 429.539361][T13033] smbdirect: ib_dev[uyz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 429.630288][T13033] smbdirect: ib_dev[uyz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 429.783839][T13033] RDS/IB: uyz0: added [ 429.805792][T13033] smc: adding ib device uyz0 with port count 1 [ 429.831623][T13033] smc: ib device uyz0 port 1 has no pnetid [ 430.623385][T13139] netlink: 'syz.3.1952': attribute type 10 has an invalid length. [ 430.655889][T13139] openvswitch: netlink: Flow key attr not present in new flow. [ 430.786856][T13143] __nla_validate_parse: 5 callbacks suppressed [ 430.786884][T13143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1953'. [ 430.869004][T13147] netlink: 'syz.4.1954': attribute type 1 has an invalid length. [ 430.994446][T13147] bond6: entered promiscuous mode [ 431.029546][T13147] 8021q: adding VLAN 0 to HW filter on device bond6 [ 431.158947][T13156] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1956'. [ 431.183244][T13154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1955'. [ 431.724664][T13172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1962'. [ 431.790325][T13172] netlink: 'syz.1.1962': attribute type 1 has an invalid length. [ 432.015466][T13172] 8021q: adding VLAN 0 to HW filter on device bond7 [ 432.021320][T13185] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1962'. [ 432.110953][T13177] bond7: (slave geneve3): making interface the new active one [ 432.131590][T13177] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 432.153527][T13181] netlink: 'syz.1.1962': attribute type 8 has an invalid length. [ 432.164589][T13181] sch_fq: defrate 0 ignored. [ 432.172298][T13180] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1964'. [ 432.199309][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.226127][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.258459][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.292402][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.410141][T13190] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 432.538764][T13188] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 432.595010][T13198] lo: left promiscuous mode [ 432.719903][T13198] 0ªî{X¹¦: entered promiscuous mode [ 433.049911][T13198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.060396][T13198] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.083417][T13198] [ 433.085806][T13198] ============================================ [ 433.092045][T13198] WARNING: possible recursive locking detected [ 433.098281][T13198] syzkaller #0 Not tainted [ 433.102724][T13198] -------------------------------------------- [ 433.108879][T13198] syz.4.1965/13198 is trying to acquire lock: [ 433.115087][T13198] ffff88807d6c4e18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: __ethtool_get_link_ksettings+0x109/0x250 [ 433.126326][T13198] [ 433.126326][T13198] but task is already holding lock: [ 433.133688][T13198] ffff88807d6c4e18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670 [ 433.143421][T13198] and the lock comparison function returns 0: [ 433.149606][T13198] [ 433.149606][T13198] other info that might help us debug this: [ 433.157660][T13198] Possible unsafe locking scenario: [ 433.157660][T13198] [ 433.165151][T13198] CPU0 [ 433.168439][T13198] ---- [ 433.171717][T13198] lock(&dev_instance_lock_key#3); [ 433.177141][T13198] lock(&dev_instance_lock_key#3); [ 433.182351][T13198] [ 433.182351][T13198] *** DEADLOCK *** [ 433.182351][T13198] [ 433.190492][T13198] May be due to missing lock nesting notation [ 433.190492][T13198] [ 433.198844][T13198] 2 locks held by syz.4.1965/13198: [ 433.204039][T13198] #0: ffffffff8fdc1540 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 433.213142][T13198] #1: ffff88807d6c4e18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670 [ 433.223248][T13198] [ 433.223248][T13198] stack backtrace: [ 433.229141][T13198] CPU: 0 UID: 0 PID: 13198 Comm: syz.4.1965 Not tainted syzkaller #0 PREEMPT(full) [ 433.229160][T13198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 433.229170][T13198] Call Trace: [ 433.229178][T13198] [ 433.229185][T13198] dump_stack_lvl+0xe8/0x150 [ 433.229205][T13198] print_deadlock_bug+0x279/0x290 [ 433.229226][T13198] __lock_acquire+0x24bf/0x2cd0 [ 433.229243][T13198] ? __lock_acquire+0x683/0x2cd0 [ 433.229259][T13198] ? rtnl_newlink+0x148e/0x1bd0 [ 433.229282][T13198] ? rtnetlink_rcv_msg+0x802/0xc00 [ 433.229306][T13198] ? netlink_rcv_skb+0x226/0x4a0 [ 433.229322][T13198] ? netlink_unicast+0x7bb/0x940 [ 433.229345][T13198] ? netlink_sendmsg+0x813/0xb40 [ 433.229361][T13198] ? ____sys_sendmsg+0x9b9/0xa20 [ 433.229376][T13198] ? ___sys_sendmsg+0x2a5/0x360 [ 433.229390][T13198] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 433.229405][T13198] ? do_syscall_64+0x174/0x580 [ 433.229423][T13198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.229442][T13198] ? __ethtool_get_link_ksettings+0x109/0x250 [ 433.229461][T13198] lock_acquire+0x106/0x350 [ 433.229476][T13198] ? __ethtool_get_link_ksettings+0x109/0x250 [ 433.229500][T13198] __mutex_lock+0x19d/0x1590 [ 433.229518][T13198] ? __ethtool_get_link_ksettings+0x109/0x250 [ 433.229538][T13198] ? lockdep_hardirqs_on+0x7a/0x110 [ 433.229559][T13198] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 433.229610][T13198] ? __wake_up_common_lock+0x195/0x1f0 [ 433.229635][T13198] ? __ethtool_get_link_ksettings+0x109/0x250 [ 433.229657][T13198] ? __pfx___mutex_lock+0x10/0x10 [ 433.229678][T13198] ? igmp_group_added+0x238/0x910 [ 433.229741][T13198] ? igmpv3_del_delrec+0x204/0x710 [ 433.229758][T13198] __ethtool_get_link_ksettings+0x109/0x250 [ 433.229781][T13198] bond_netdev_event+0x643/0xf80 [ 433.229868][T13198] ? __pfx_bond_netdev_event+0x10/0x10 [ 433.229894][T13198] ? ipmr_device_event+0x1f6/0x220 [ 433.229941][T13198] notifier_call_chain+0x1a5/0x3d0 [ 433.229964][T13198] __dev_notify_flags+0x1aa/0x310 [ 433.229997][T13198] ? __pfx___dev_notify_flags+0x10/0x10 [ 433.230011][T13198] ? __dev_change_flags+0x5f1/0x820 [ 433.230028][T13198] ? __pfx___dev_change_flags+0x10/0x10 [ 433.230046][T13198] netif_change_flags+0xde/0x1b0 [ 433.230079][T13198] dev_change_flags+0x128/0x260 [ 433.230105][T13198] vlan_device_event+0x1b4e/0x1f00 [ 433.230155][T13198] ? packet_notifier+0xf1b/0xf70 [ 433.230195][T13198] ? br_device_event+0x282/0x9c0 [ 433.230233][T13198] ? __pfx_phonet_device_notify+0x10/0x10 [ 433.230268][T13198] ? __pfx_vlan_device_event+0x10/0x10 [ 433.230284][T13198] ? bcm_notifier+0xa9/0x890 [ 433.230316][T13198] ? raw_notifier+0x9d/0x7d0 [ 433.230357][T13198] ? cgw_notifier+0x314/0x380 [ 433.230374][T13198] notifier_call_chain+0x1a5/0x3d0 [ 433.230396][T13198] __dev_notify_flags+0x1aa/0x310 [ 433.230411][T13198] ? __pfx___dev_notify_flags+0x10/0x10 [ 433.230425][T13198] ? __dev_change_flags+0x5f1/0x820 [ 433.230442][T13198] ? __pfx___dev_change_flags+0x10/0x10 [ 433.230459][T13198] ? __local_bh_enable_ip+0xd0/0x130 [ 433.230476][T13198] netif_change_flags+0xde/0x1b0 [ 433.230492][T13198] do_setlink+0xdd6/0x4670 [ 433.230512][T13198] ? __lock_acquire+0x683/0x2cd0 [ 433.230529][T13198] ? __pfx_do_setlink+0x10/0x10 [ 433.230544][T13198] ? __lock_acquire+0x683/0x2cd0 [ 433.230566][T13198] ? do_raw_spin_lock+0x12b/0x2f0 [ 433.230594][T13198] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 433.230609][T13198] ? lockdep_hardirqs_on+0x7a/0x110 [ 433.230627][T13198] ? __mutex_lock+0x10ab/0x1590 [ 433.230646][T13198] ? __mutex_lock+0x5c5/0x1590 [ 433.230666][T13198] ? rtnl_newlink+0x8a3/0x1bd0 [ 433.230690][T13198] ? __pfx___mutex_lock+0x10/0x10 [ 433.230711][T13198] ? ns_capable+0x89/0xe0 [ 433.230727][T13198] ? rtnl_link_get_net_capable+0xd3/0x310 [ 433.230745][T13198] rtnl_newlink+0x148e/0x1bd0 [ 433.230773][T13198] ? __pfx_rtnl_newlink+0x10/0x10 [ 433.230806][T13198] ? __lock_acquire+0x683/0x2cd0 [ 433.230824][T13198] ? __lock_acquire+0x683/0x2cd0 [ 433.230841][T13198] ? __update_page_owner_handle+0x5a/0x570 [ 433.230865][T13198] ? __update_page_owner_handle+0x51a/0x570 [ 433.230888][T13198] ? unwind_next_frame+0x8f/0x2550 [ 433.230910][T13198] ? is_bpf_text_address+0x26/0x2b0 [ 433.230931][T13198] ? __lock_acquire+0x683/0x2cd0 [ 433.230949][T13198] ? kernel_text_address+0xa5/0xe0 [ 433.230972][T13198] ? __kernel_text_address+0xd/0x30 [ 433.230993][T13198] ? unwind_get_return_address+0x4d/0x90 [ 433.231012][T13198] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 433.231037][T13198] ? arch_stack_walk+0xfb/0x150 [ 433.231058][T13198] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 433.231082][T13198] ? __pfx_rtnl_newlink+0x10/0x10 [ 433.231110][T13198] ? __pfx_rtnl_newlink+0x10/0x10 [ 433.231133][T13198] rtnetlink_rcv_msg+0x802/0xc00 [ 433.231157][T13198] ? kasan_save_track+0x3e/0x80 [ 433.231179][T13198] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 433.231203][T13198] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 433.231228][T13198] ? __lock_acquire+0x683/0x2cd0 [ 433.231247][T13198] netlink_rcv_skb+0x226/0x4a0 [ 433.231281][T13198] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 433.231308][T13198] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.231329][T13198] ? netlink_deliver_tap+0x2e/0x1b0 [ 433.231345][T13198] ? netlink_deliver_tap+0x2e/0x1b0 [ 433.231363][T13198] netlink_unicast+0x7bb/0x940 [ 433.231391][T13198] netlink_sendmsg+0x813/0xb40 [ 433.231412][T13198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.231430][T13198] ? aa_sock_msg_perm+0xf1/0x1b0 [ 433.231454][T13198] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 433.231474][T13198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.231492][T13198] ____sys_sendmsg+0x9b9/0xa20 [ 433.231509][T13198] ? __might_fault+0xaf/0x130 [ 433.231531][T13198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.231550][T13198] ? import_iovec+0x73/0xa0 [ 433.231569][T13198] ___sys_sendmsg+0x2a5/0x360 [ 433.231584][T13198] ? __lock_acquire+0x683/0x2cd0 [ 433.231602][T13198] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.231620][T13198] ? futex_wake+0x4d7/0x5b0 [ 433.231662][T13198] ? __fget_files+0x2a/0x420 [ 433.231682][T13198] ? __fget_files+0x3a2/0x420 [ 433.231704][T13198] __x64_sys_sendmsg+0x1bd/0x2a0 [ 433.231721][T13198] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 433.231741][T13198] ? rcu_is_watching+0x15/0xb0 [ 433.231762][T13198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.231778][T13198] do_syscall_64+0x174/0x580 [ 433.231803][T13198] ? trace_irq_disable+0x3b/0x140 [ 433.231826][T13198] ? clear_bhb_loop+0x40/0x90 [ 433.231843][T13198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.231860][T13198] RIP: 0033:0x7f5215d9ce59 [ 433.231877][T13198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.231891][T13198] RSP: 002b:00007f5213ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.231909][T13198] RAX: ffffffffffffffda RBX: 00007f5216016090 RCX: 00007f5215d9ce59 [ 433.231922][T13198] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 000000000000000c [ 433.231933][T13198] RBP: 00007f5215e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 433.231943][T13198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.231953][T13198] R13: 00007f5216016128 R14: 00007f5216016090 R15: 00007ffe0f037218 [ 433.231971][T13198] [ 440.076094][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.715308][ T11] block nbd3: Possible stuck request ffff8880276be000: control (read@0,1024B). Runtime 60 seconds [ 440.727536][ T11] block nbd3: Possible stuck request ffff8880276be1c0: control (read@1024,1024B). Runtime 60 seconds [ 440.738516][ T11] block nbd3: Possible stuck request ffff8880276be380: control (read@2048,1024B). Runtime 60 seconds [ 440.749461][ T11] block nbd3: Possible stuck request ffff8880276be540: control (read@3072,1024B). Runtime 60 seconds [ 442.976018][ T4996] udevd[4996]: worker [9872] /devices/virtual/block/nbd3 is taking a long time