last executing test programs: 3.286548815s ago: executing program 0 (id=3597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a30000000000900030073797a3000000000140004800800010000000003080002000000000074000000060a010400000000000000000200000a0900010073797a30000000000900020073797a30000000004800048024000180090001006d6574610000000014000280080001000000000808000200000000002000018007000100637400001400028008000200000000120800040000000008"], 0xfc}, 0x1, 0x0, 0x0, 0x1e00}, 0x0) 3.093135747s ago: executing program 0 (id=3601): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="ddd7", 0x2}], 0x1, &(0x7f0000000900)=ANY=[@ANYBLOB="200b0000e79fabfbb4f63146", @ANYRES32=0x0], 0x20, 0x40001}], 0x1, 0x4008854) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f00000015c0)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000940)={'team_slave_0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000180)=0xfffffffa, 0x4) bind$inet(r5, &(0x7f0000000540)={0x2, 0x4e23, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x3}, 0x8, 0x10, &(0x7f0000001580)={0x0, 0x0, 0x4000, 0x4}, 0x10}, 0x94) sendto$inet(r5, 0x0, 0x0, 0x28040041, &(0x7f0000000600)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="17", 0x1}], 0x1}, 0x200008c0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000700)=0x193a, 0x4) recvmmsg(r5, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/188, 0x20}, 0xe0d}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf0100000000000000020000f8ffffffb7030000005e0000b704000000000000850000009500000000"], 0x0, 0x0, 0xfde4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x13}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x800, 0x1, 0x9, 0x400, 0x4, 0x6, 0x7, 0x0, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xfff2, 0xb}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x1, 0x3, 0x3, 0xe, 0x1, 0xd, 0x5, 0x8, 0x6, {0xfffff800, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x400c8a4}, 0x4890) socket$nl_route(0x10, 0x3, 0x0) 2.483326627s ago: executing program 1 (id=3611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a30000000000900030073797a3000000000140004800800010000000003080002000000000074000000060a010400000000000000000200000a0900010073797a30000000000900020073797a30000000004800048024000180090001006d6574610000000014000280080001000000000808000200000000002000018007000100637400001400028008000200000000120800040000000008"], 0xfc}, 0x1, 0x0, 0x0, 0x2200}, 0x0) 2.438943738s ago: executing program 3 (id=3613): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x18}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x7, 0x1001, &(0x7f0000000500)=""/4097, 0x41100, 0xc, '\x00', 0x0, 0x0, r0}, 0x94) (fail_nth: 71) 2.288960159s ago: executing program 1 (id=3616): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) getsockname$packet(r0, &(0x7f0000001940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001980)=0x14) sendmsg$nl_route(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e64001f0008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 2.016477277s ago: executing program 3 (id=3617): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2000000014000504010000000000000023000000010000000500020008000000", 0x20) (async) write(r1, &(0x7f0000000000)="2000000014000504010000000000000023000000010000000500020008000000", 0x20) r2 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x8000}, 0x8) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000180)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000300)="e6e2", 0x2}], 0x1}}, {{&(0x7f00000003c0)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000480)="a5", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x1) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f00000004c0)=""/4057, &(0x7f00000014c0)=0xfd9) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="40000000100039042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="011802000311f3ff200012800b0401006272696467650000100002800a0014000180c200000e0000"], 0x40}, 0x1, 0x0, 0x0, 0x410c0}, 0x4048084) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="40000000100039042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="011802000311f3ff200012800b0401006272696467650000100002800a0014000180c200000e0000"], 0x40}, 0x1, 0x0, 0x0, 0x410c0}, 0x4048084) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 1.787603972s ago: executing program 4 (id=3618): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001980)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x3b099b640cb637a) 1.627146007s ago: executing program 2 (id=3619): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="180000008d000000000000000320110018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf0900000000000055090020ffffffff950000000000000045000600040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ffffff1fb7030000080000005000000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000740)='GPL\x00', 0x3, 0x1001, &(0x7f0000000780)=""/4097, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 1.626435161s ago: executing program 0 (id=3620): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000300)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000480), 0x4) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000800000000000000001000000850000000f000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x53, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000100)={r1, &(0x7f0000000000)='\x00', 0x200200, &(0x7f0000000040)={@_ha_fsid={[0x28, 0x10000]}, {0x3, 0x4, 0x8, 0x7}}, 0xf38, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) readv(0xffffffffffffffff, &(0x7f0000000c80)=[{&(0x7f0000000700)=""/225, 0xe1}, {&(0x7f0000000800)=""/179, 0xb3}, {&(0x7f00000008c0)=""/69, 0x45}, {&(0x7f0000000940)=""/130, 0x82}, {&(0x7f0000000a00)=""/74, 0x4a}, {&(0x7f0000000a80)=""/150, 0x96}, {&(0x7f0000000b40)=""/6, 0x6}, {&(0x7f0000000b80)=""/237, 0xed}], 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000500)=0x2, 0x4) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000140)) ioctl$int_in(r0, 0x5421, &(0x7f0000000540)=0xffff) writev(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)="1b", 0x1}], 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r0) 1.58492015s ago: executing program 4 (id=3621): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000380)="b9ff030760030084b89e08d186ddcef11086808ba3a1cc136e6931fe9ccb9db10495161309e01b6fdf8edbd766612b0ee82cab6218c7", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01040000000000000000050000000900010073797a30000000004c000000030a01040000000000000000050000000900010073797a30000000000900030073797a300000000020000480080001000000000008000200000000000c00030073797a5f74756e0054000000060a01040000000000000000050000000900010073797a30000000000900020073797a300000000028000480240001800b00010072656a656374000014000280080001"], 0xe8}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f0000000840), 0x40000000000009f, 0x0) 1.545611139s ago: executing program 3 (id=3622): r0 = socket$rxrpc(0x21, 0x2, 0xa) write(r0, 0x0, 0x0) connect$rxrpc(r0, &(0x7f00000001c0)=@in6={0x21, 0x9, 0x2, 0x1c, {0xa, 0x4e23, 0x10039, @dev={0xfe, 0x80, '\x00', 0xa}, 0x8eab}}, 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7a0a0500212b0000440012800b000100697036746e6c000034000280140003000000000000000000000082620000003f14000200fe80"], 0x64}}, 0x24000000) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x33) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtaction={0x84, 0x30, 0x1, 0x70bd26, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ad8dc16d8f3d6e22063a2e69a8ba095c"}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0x4, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40800}, 0x1010) sendmmsg$inet6(r2, &(0x7f0000000f80)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e24, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffff7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001140)="a5", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000200)="1643554b93027352bdd23f695b7df26fdc01c510f3271e3beebd11deb6d3cdd7eec6da1b35f54ef695094937e2b054b94c8daa7622775164c1002705eba6fdb947e2c006d2995214ae80a5a388", 0x4d}], 0x1, &(0x7f0000000440)=[@dstopts_2292={{0x58, 0x29, 0x4, {0x1d, 0x8, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x81, 0x8, [0x5, 0xc, 0x2]}}, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x3}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x6}, @pad1, @jumbo={0xc2, 0x4, 0x9}]}}}], 0x58}}, {{&(0x7f0000000540)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000580)="a97b4c8c46b6c619b28430803ce5002aa571404e5bbd20ea0d3428275ecff7ecfce32b0350b75058d2085128e6ac7f1baed7a69a56b2a4016633588819f211eaa9bbde88e1361faa9537ef1234b0adbe4aa80335fb4129b8a987812b4208d217099950cfbb364d1d245f7effcad18a09b873d1986266bbd26ca8dc16bc25e5e4b95a2014a1a458b6d0cdfb1d8d6ee403e983a3e29f63721d69ea4b84bafa1585547b4132577af5aa48b37604a23bccd37c0edf79e14a63236609503a3859f44e15b7768b165fcf0676253cb8ecb575f9a59b3f35d4e43c06e8bf325be1", 0xdd}, {&(0x7f0000000780)="7e5c15194243e745c3937cd56605cf6c5482887c34dbfe6e822b8dff110adb9c5c1b9a429c646f28d355eef6981f645ec10e97e9617e483c", 0x38}], 0x2}}, {{&(0x7f0000000800)={0xa, 0x4e23, 0x40000009, @private0, 0x10000}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000840)="a723c36e0465a0", 0x7}, {&(0x7f0000000140)="030000004808268b52fc2d09e6dc7a812e0fa61176657c2f34233d6a6b155127a16e620a83c0ad3db5d01402343b52fac069ce45b5dcbb57bddb8a75c0b0f842f0b5a49a2f7804001f83fcd5855729622f834229823bb28e5a356d", 0x5b}, {&(0x7f00000008c0)="19b35d3ba5401ba78c2e8212458bcffc7580bf0063ef16e30c75dbf79209e80b340af6dc823ee251f4", 0x29}, {&(0x7f0000000900)="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", 0xfd}, {&(0x7f0000000a00)="525029d31969331d3b5235ce4dd7a5bb4ea3c35894b1be8672e6190fe5b13657341a49ca01062771c0", 0x29}, {&(0x7f0000000b80)="c3b96b84cd5c3206803711695540db7856a780e2f8b814103bd113947a6a9a265042d996893552b408b1a63aee2390710434cc34ac35f2c494c3d34b9d64e7f72e8363784fb0ed16677eb1e96cf82a99151b14da9f64a8195312f86a3275522703651302c73d8f912e2371710d166e62c17ed7d139c916ae389c7d0403237170a22d472b4b7f1a9be294a651da403053fefb09f375292178b1ab6a5570f8ef686efc438c3a7e1e8c0c", 0xa9}, {&(0x7f0000000c40)="908f88677522ac6da0026d472745f52a9c7fe5da8ca7f21b3f35d8840e1ad97f19a32aa9fdc60246bdb3be98a32d711dff3e9f84ba5f9f6471d6458e5c03a530a0a3472f6cc456930aa60b84ca3ace71bbb380d62940baaa130d6434859b59e149", 0x61}], 0x7, &(0x7f0000001200)=[@hoplimit={{0x14, 0x29, 0x34, 0x9}}, @dstopts={{0x20, 0x29, 0x37, {0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0xd83}]}}}, @tclass={{0x14, 0x29, 0x43, 0x63}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x32, 0x6, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x0, 0xa, [0x2]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x64}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x4, 0x0, '\x00', [@ra={0x5, 0x2, 0xd0}, @pad1]}}}, @rthdrdstopts={{0x170, 0x29, 0x37, {0x33, 0x2a, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x0, 0x12, 0x0, 0x8001, [0x1, 0x0, 0xaad, 0xe, 0xc000000000, 0xdcb5, 0x3, 0xffffffffffffffff, 0x4]}}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7f, 0x400, [0x3]}}, @generic={0xb, 0xdc, "1366d41f2d023c1bfcd85997ff4f7801e349e39f31c65693f508d094e75cdfbd91ca51ef44c75664592ab6d320fa1bace219edb37e9daf27ceeb881077d78972a5f6340a1ce5a4c66007d8d53568525624ad628607a1378074bf48acad66a45bf26315b4ddb14e4fe9e8082a0a6646c38d67cce18baddfebafc8edf2411b3618474f233ed1ccbaee2a59e106429defae3de5bdb11b244a27f581f29e5bd198a31043da0632c3bf51c4c5cc680c3d8960bd485a1229915fa335e808e66762299074dbfbef86f478b81c21ec0ec71f177d2c04adc17e4a0397e028c20a"}, @pad1, @ra]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}], 0x240}}], 0x5, 0x0) socket$rxrpc(0x21, 0x2, 0xa) (async) write(r0, 0x0, 0x0) (async) connect$rxrpc(r0, &(0x7f00000001c0)=@in6={0x21, 0x9, 0x2, 0x1c, {0xa, 0x4e23, 0x10039, @dev={0xfe, 0x80, '\x00', 0xa}, 0x8eab}}, 0x24) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7a0a0500212b0000440012800b000100697036746e6c000034000280140003000000000000000000000082620000003f14000200fe80"], 0x64}}, 0x24000000) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x33) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) (async) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtaction={0x84, 0x30, 0x1, 0x70bd26, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ad8dc16d8f3d6e22063a2e69a8ba095c"}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0x4, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40800}, 0x1010) (async) sendmmsg$inet6(r2, &(0x7f0000000f80)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e24, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffff7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001140)="a5", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000200)="1643554b93027352bdd23f695b7df26fdc01c510f3271e3beebd11deb6d3cdd7eec6da1b35f54ef695094937e2b054b94c8daa7622775164c1002705eba6fdb947e2c006d2995214ae80a5a388", 0x4d}], 0x1, &(0x7f0000000440)=[@dstopts_2292={{0x58, 0x29, 0x4, {0x1d, 0x8, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x81, 0x8, [0x5, 0xc, 0x2]}}, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x3}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x6}, @pad1, @jumbo={0xc2, 0x4, 0x9}]}}}], 0x58}}, {{&(0x7f0000000540)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000580)="a97b4c8c46b6c619b28430803ce5002aa571404e5bbd20ea0d3428275ecff7ecfce32b0350b75058d2085128e6ac7f1baed7a69a56b2a4016633588819f211eaa9bbde88e1361faa9537ef1234b0adbe4aa80335fb4129b8a987812b4208d217099950cfbb364d1d245f7effcad18a09b873d1986266bbd26ca8dc16bc25e5e4b95a2014a1a458b6d0cdfb1d8d6ee403e983a3e29f63721d69ea4b84bafa1585547b4132577af5aa48b37604a23bccd37c0edf79e14a63236609503a3859f44e15b7768b165fcf0676253cb8ecb575f9a59b3f35d4e43c06e8bf325be1", 0xdd}, {&(0x7f0000000780)="7e5c15194243e745c3937cd56605cf6c5482887c34dbfe6e822b8dff110adb9c5c1b9a429c646f28d355eef6981f645ec10e97e9617e483c", 0x38}], 0x2}}, {{&(0x7f0000000800)={0xa, 0x4e23, 0x40000009, @private0, 0x10000}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000840)="a723c36e0465a0", 0x7}, {&(0x7f0000000140)="030000004808268b52fc2d09e6dc7a812e0fa61176657c2f34233d6a6b155127a16e620a83c0ad3db5d01402343b52fac069ce45b5dcbb57bddb8a75c0b0f842f0b5a49a2f7804001f83fcd5855729622f834229823bb28e5a356d", 0x5b}, {&(0x7f00000008c0)="19b35d3ba5401ba78c2e8212458bcffc7580bf0063ef16e30c75dbf79209e80b340af6dc823ee251f4", 0x29}, {&(0x7f0000000900)="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", 0xfd}, {&(0x7f0000000a00)="525029d31969331d3b5235ce4dd7a5bb4ea3c35894b1be8672e6190fe5b13657341a49ca01062771c0", 0x29}, {&(0x7f0000000b80)="c3b96b84cd5c3206803711695540db7856a780e2f8b814103bd113947a6a9a265042d996893552b408b1a63aee2390710434cc34ac35f2c494c3d34b9d64e7f72e8363784fb0ed16677eb1e96cf82a99151b14da9f64a8195312f86a3275522703651302c73d8f912e2371710d166e62c17ed7d139c916ae389c7d0403237170a22d472b4b7f1a9be294a651da403053fefb09f375292178b1ab6a5570f8ef686efc438c3a7e1e8c0c", 0xa9}, {&(0x7f0000000c40)="908f88677522ac6da0026d472745f52a9c7fe5da8ca7f21b3f35d8840e1ad97f19a32aa9fdc60246bdb3be98a32d711dff3e9f84ba5f9f6471d6458e5c03a530a0a3472f6cc456930aa60b84ca3ace71bbb380d62940baaa130d6434859b59e149", 0x61}], 0x7, &(0x7f0000001200)=[@hoplimit={{0x14, 0x29, 0x34, 0x9}}, @dstopts={{0x20, 0x29, 0x37, {0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0xd83}]}}}, @tclass={{0x14, 0x29, 0x43, 0x63}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x32, 0x6, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x0, 0xa, [0x2]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x64}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x4, 0x0, '\x00', [@ra={0x5, 0x2, 0xd0}, @pad1]}}}, @rthdrdstopts={{0x170, 0x29, 0x37, {0x33, 0x2a, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x0, 0x12, 0x0, 0x8001, [0x1, 0x0, 0xaad, 0xe, 0xc000000000, 0xdcb5, 0x3, 0xffffffffffffffff, 0x4]}}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7f, 0x400, [0x3]}}, @generic={0xb, 0xdc, "1366d41f2d023c1bfcd85997ff4f7801e349e39f31c65693f508d094e75cdfbd91ca51ef44c75664592ab6d320fa1bace219edb37e9daf27ceeb881077d78972a5f6340a1ce5a4c66007d8d53568525624ad628607a1378074bf48acad66a45bf26315b4ddb14e4fe9e8082a0a6646c38d67cce18baddfebafc8edf2411b3618474f233ed1ccbaee2a59e106429defae3de5bdb11b244a27f581f29e5bd198a31043da0632c3bf51c4c5cc680c3d8960bd485a1229915fa335e808e66762299074dbfbef86f478b81c21ec0ec71f177d2c04adc17e4a0397e028c20a"}, @pad1, @ra]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}], 0x240}}], 0x5, 0x0) (async) 1.483572735s ago: executing program 1 (id=3623): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0xf, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x6}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)}, 0x94) 1.437710398s ago: executing program 2 (id=3624): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x29000000}, 0x94) 1.395426202s ago: executing program 1 (id=3625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000008c0)={'dummy0\x00', &(0x7f0000000900)=@ethtool_perm_addr={0x4b, 0x21, "5c76276f6c86622447091e9940a5f2781ad01612b415e66ee2f69b275061f3ca96"}}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000004c0)={0x0, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) write$tun(0xffffffffffffffff, 0x0, 0x340a) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xb, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000001c80)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xfff1}, {0x1, 0xfff1}, {0xd, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x1040}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newchain={0x2c, 0x64, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x7, 0x1}, {0x10, 0x3}, {0xfff1, 0xe}}, [@TCA_CHAIN={0xffffffffffffff5b, 0xb, 0x2}]}, 0x2c}}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000740)={0x0, {{0xa, 0xfffe, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}}}}, 0x108) close(r1) r8 = socket$inet(0x2, 0x2, 0x1) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000480)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'geneve0\x00', 0x0}) sendto$packet(r9, &(0x7f0000001c00)="0b03feffe2ff021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000001c40)={0x11, 0x0, r10}, 0x14) ioctl$SIOCGSTAMPNS(r9, 0x8907, &(0x7f0000000140)) setsockopt$sock_int(r4, 0x1, 0x5, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet(r8, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)='\b\x00', 0x2}, {&(0x7f0000000340)="2d0000008058", 0x6}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000000810000007000000940b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) socket$packet(0x11, 0x3, 0x300) getsockopt(r3, 0x41, 0x7, &(0x7f0000000b40)=""/4096, &(0x7f0000001b40)=0x1000) r11 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r11, 0x29, 0x7, &(0x7f0000000000)=0xfffffff7, 0x45) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1002}) 1.311114097s ago: executing program 0 (id=3626): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688474c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r1 = socket(0x40000000015, 0x5, 0x0) accept$unix(r1, 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000140)="0a000300010000", 0x7) (async, rerun: 64) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x40}], 0x15, 0x10040, 0x0) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000006c0)=@nat={'nat\x00', 0x1b, 0x5, 0x420, 0x0, 0x1b0, 0xffffffff, 0x260, 0x0, 0x388, 0x388, 0xffffffff, 0x388, 0x388, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'veth0\x00', {0x1}}}}, {{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xffffffff, 'ip_vti0\x00', 'tunl0\x00', {}, {}, 0x0, 0x1, 0x8}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1b, @multicast2, @loopback, @port=0x4e21, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x1a, "ee463db11481a65804155255c8d724a13f0f976311071f375021611de46a"}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_bridge\x00', {0x9, 0x1b7, 0x1, 0x7, 0xe00, 0x7fff, 0x7, 0x20, 0x8}, {0x1}}}, @common=@icmp={{0x28}, {0x5, "70ba", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) (async, rerun: 32) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@enum64={0x6, 0x3, 0x0, 0x13, 0x0, 0x8, [{0xd, 0xfffffffb, 0x6}, {0x1, 0x7, 0x1}, {0xe, 0x102ba42b, 0x7}]}]}, {0x0, [0x0, 0x5f, 0x0, 0x0, 0x2e, 0x61]}}, &(0x7f0000001b40)=""/4089, 0x50, 0xff9, 0x4}, 0x28) (async) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000040)=0x400) 1.310016224s ago: executing program 3 (id=3627): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x18}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x7, 0x1001, &(0x7f0000000500)=""/4097, 0x41100, 0xc, '\x00', 0x0, 0x0, r0}, 0x94) (fail_nth: 72) 1.236575483s ago: executing program 2 (id=3628): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000280)={&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @mcast2, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5c0000002d006bcd9e3fe3dc6e48ab31086b87033c0000001f03000000000000040014000d000aaf0d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000340)={{0x0, 0x1, 0x3, 0x3, 0x35, 0x1000, 0xf8, 0x4, 0x7fff, 0x3, 0xcd7, 0x4, 0x7fffffff, 0x7, 0x6}}) 1.232994058s ago: executing program 4 (id=3629): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socket$unix(0x1, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r6) sendmsg$NFC_CMD_LLC_SET_PARAMS(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x24, r8, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x7}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r10, &(0x7f0000000880)={0x24, @short={0x2, 0x0, 0xffff}}, 0x9) sendmsg$NFC_CMD_LLC_SDREQ(r2, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x24c, r8, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x228, 0x13, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [{0x8, 0x1, 'nbd\x00'}, {0x5, 0x1, '.'}, {0x8, 0x1, 'u32\x00'}, {0x11, 0x1, 'veth0_to_hsr\x00'}, {0x6, 0x1, 'B+'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x8, 0x1, 'u32\x00'}, {0x8, 0x1, 'nbd\x00'}, {0x11, 0x1, 'veth0_to_hsr\x00'}, {0x4}]}, {0x54, 0x0, 0x0, 0x1, [{0xd, 0x1, '/[)[^-[^$'}, {0x8, 0x1, 'nbd\x00'}, {0x11, 0x1, 'veth0_to_hsr\x00'}, {0x8, 0x1, 'htb\x00'}, {0x11, 0x1, ']:!&&}!^)%/$/'}, {0x5, 0x1, 'h'}]}, {0x64, 0x0, 0x0, 0x1, [{0x4}, {0x5, 0x1, '{'}, {0x8, 0x1, 'htb\x00'}, {0xb, 0x1, ',\xc9---.:'}, {0x6, 0x1, '^@'}, {0x6, 0x1, '[!'}, {0x8, 0x1, 'nbd\x00'}, {0xa, 0x1, '[+*D].'}, {0x8, 0x1, '$%%.'}, {0x11, 0x1, 'veth0_to_hsr\x00'}]}, {0x40, 0x0, 0x0, 0x1, [{0x5, 0x1, '-'}, {0x8, 0x1, 'u32\x00'}, {0x7, 0x1, '][#'}, {0x11, 0x1, 'veth0_to_hsr\x00'}, {0x6, 0x1, '-/'}, {0x8, 0x1, 'nbd\x00'}]}, {0x38, 0x0, 0x0, 0x1, [{0x6, 0x1, '{^'}, {0x7, 0x1, '.@+'}, {0x5, 0x1, 'q'}, {0x11, 0x1, 'veth0_to_hsr\x00'}, {0x5, 0x1, '^'}]}, {0x30, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xed(-[}{'}, {0x8, 0x1, 'u32\x00'}, {0x8, 0x1, '{*}:'}, {0x4}, {0x4}, {0x7, 0x1, '}-['}]}, {0x34, 0x0, 0x0, 0x1, [{0x4}, {0x6, 0x1, ',-'}, {0x5, 0x1, ']'}, {0x9, 0x1, '{#/*#'}, {0x7, 0x1, '>,}'}, {0x8, 0x1, 'htb\x00'}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [{0x8, 0x1, 'nbd\x00'}, {0x6, 0x1, ']-'}, {0x8, 0x1, 'nbd\x00'}, {0xb, 0x1, '*(*!^!{'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24c}}, 0x40000) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newtaction={0x48, 0x30, 0x53b, 0x70bd29, 0x25dfdbfd, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000ec0)={'wg2\x00'}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x3, 0xc, &(0x7f0000000d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@generic={0x61, 0x8, 0x1, 0x20}, @map_fd={0x18, 0x1, 0x1, 0x0, r12}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r13}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r14, &(0x7f0000000240)={&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x10000000, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000340)="3884", 0x2}], 0x2, 0x0, 0x0, 0x900}, 0x860) connect$nfc_raw(r0, &(0x7f0000000a00)={0x27, r9, 0x0, 0x1}, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}]}, 0x3c}}, 0x10) r15 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000e00)={0x1, 0x1c, &(0x7f0000000dc0)=[@in6={0xa, 0x7, 0xfff, @private1={0xfc, 0x1, '\x00', 0x1}}]}, &(0x7f0000000e40)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000000e80)={r16, 0xe00}, 0x8) writev(r15, &(0x7f0000000900)=[{&(0x7f00000009c0)="636f6e6e656374201689", 0xa}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6, 0x5}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x8, 0xd, 0x3, 0x8, 0xeb3, 0xbd0f, 0x2, 0x6, [{0x2, 0x80000001, 0xce, 0x722}, {0x4, 0x500, 0x0, 0x8}, {0x6, 0x4319, 0xffff, 0x9}]}}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) 872.2534ms ago: executing program 2 (id=3630): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x4010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000003e0007010000000005000000027c00000400fc680c000180062106"], 0x30}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r2, @ANYBLOB="21042abd7000fedbdf251a00000007002100626200000500920001000000f80022"], 0x11c}, 0x1, 0x0, 0x0, 0x4088}, 0x44840) syz_genetlink_get_family_id$team(&(0x7f0000000400), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)=ANY=[@ANYBLOB="a00000002100010000000000feffffff7f00000100000000000000000000000000000000000000000000000000000001fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc0200000020000000000000000000007688f27e0000000000040000dd4231fd00000000000000000000ffffffffffffffffffff0000000000000000000000006c010000"], 0xa0}, 0x1, 0x0, 0xffffff80, 0x800}, 0x4000000) 639.714868ms ago: executing program 3 (id=3631): close(0x3) r0 = socket(0x1d, 0x803, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010102}]}, &(0x7f0000000180)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x28, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x9, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}, @nested={0x8, 0x3, 0x0, 0x1, [@generic="21825c23"]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) socket$inet(0x2, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r7) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x107}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001300)=ANY=[@ANYRES16=r0, @ANYBLOB="00006c1e8ff500000000000000465723c9541f76f6a34e7e6e7f3e5212fb0b9234e8d31addc2b08324ead9b7c0586bc223991c005fb828c9be6b07713ae182b99b207644764547d0acc05572d1006da9e565719a8df35f772ade2999265ac8ec6763abea15f3532b9100aad715f44b23ca6de9d6b7d38b54c8cf9a633735ed1fdae104d713e013f731e1c86bde82c0c32f70d17415261ac18a8b36103441e96ea3d8504b58dd64144614f788b97ef4df87e7b998ebc8619974eb466b4abbf008b5712dc416ef186c2e5f9235913094", @ANYRESOCT=r8, @ANYBLOB="d3668fa98eff6ec6c3bd9a988209bb4c1a8759bec7c58c2bf0993f9757e35da053445fdc4aa3ef45a05241feef36e42aa7520654f67c32f6466e269e1cfcdd0db83009d56373ed470f63674e5a74de5059a10abea030f8f9725fec2980cff476da296e4ff0513a49c29946ca8c65b9d89d7c3fb0724de16f5bf373b5171acd20871be43f0566ca02d6ae3d458c0d320730042035f7784935dd9ae6a8580849ffda996bbd0273d5d028734982a8c19573f096059519ca8e91fa197fe70ccc45ef9ed46564", @ANYBLOB="bb602cfacd882600d7ba9fc5991b27c2fd3fc18072207c893e395d7ccff378ed8f5561cd0f175c40f27772e2590182d7f2e93177cb06e415db15bbf101634c5ae6976872ecd2f2bc28353a685303610d44926d24681afef2b5a47ef984f5bd0c7955aaabaa9792d510898a11c37c25677cf14a75f6dafc15368d470e6058c24cc48dd0bb65a39952a22bab5ee94eab9b3d00d88b8adb76158e832a53f2980d4f520c3c06037179d1531b6d3e068002c138c25966b7bfef570e9155a4c19ec8549bb5b3163c093691c4c3d69953be44b8dc", @ANYRESHEX=r0], 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x4b, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYBLOB="0ebfee252959284b1d246ed0fe7246314b88923ed9ea657e9fada0c9a0568846d05f18f431f362778d72ef6d1a7b21a84e88021474fe59bec51833c04a97b4ee0dd5ded0145806264716f272bb1014350f4e7d6cffad8a889e0981b7480a9e19db0a755e38ad35eae00d102bd3b4727726168a89f8232328fe5ff310c6f14de371afbf83c18e09681d3cba2c480b72ac86f45e0f22c8d7dffdaefe71b0d684638fef49c527b219f05f0e5dab8695d4b842bf26a48755f5b36e65573b717e816a09ee57d2c69815232a51126f", @ANYBLOB="010000000000000000000100000054000180060001000200000006000003007f000001000000000000000000000000060004005002000007000600727200000c00070000000000040000000800080064000000080009002000"/98], 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000600)={0x6c, r8, 0x1, 0x10, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5003}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x6c}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRESDEC=r3, @ANYRESHEX=r0], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000900)={0x70, r8, 0x1, 0x0, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x70}}, 0x80000) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000009c0)=ANY=[@ANYRESHEX=r2, @ANYRES16=r8, @ANYBLOB="5201000000000000000001000000580001800600010002000000060002000600000014000300ac14141c000040000000000000000000080005000100000007000600727200000c000700000000000400000008000800640000000c0007000100000019000000"], 0x6c}, 0x1, 0x0, 0x0, 0x400c014}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000680)={0x60, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5007}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x10}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa1}]}]}, 0x60}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="33f18a98b01cca45b028d33539b162cb07868d8c3cfe3cae", @ANYRES16=r8, @ANYRES16=r6], 0x68}}, 0x10) shutdown(0xffffffffffffffff, 0x56660e91fa37aa0c) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}}, 0x0) nanosleep(&(0x7f0000000f40)={0x0, 0x5f5e100}, 0x0) 636.948045ms ago: executing program 2 (id=3632): socket$packet(0x11, 0x3, 0x300) unshare(0x8040480) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) pipe(&(0x7f0000000240)={0xffffffffffffffff}) openat$cgroup_ro(r2, &(0x7f0000000280)='blkio.bfq.dequeue\x00', 0x0, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="480000001400190d09004beafd0d36fc690000000000000f00030000a2bc56f818d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0xe, 0xd0, &(0x7f0000000100)=""/208, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$packet(0x11, 0x3, 0x300) (async) unshare(0x8040480) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x4) (async) pipe(&(0x7f0000000240)) (async) openat$cgroup_ro(r2, &(0x7f0000000280)='blkio.bfq.dequeue\x00', 0x0, 0x0) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="480000001400190d09004beafd0d36fc690000000000000f00030000a2bc56f818d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0xe, 0xd0, &(0x7f0000000100)=""/208, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) 332.084967ms ago: executing program 1 (id=3633): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x5, 0x8, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0c00000004000000040000000500000000000000", @ANYRES32=r1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1, 0xc, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x93ff}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffffa}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 318.175732ms ago: executing program 0 (id=3634): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="180000008d000000000000000320110018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf090000000000005509011effffffff950000000000000045000600040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ffffff1fb7030000080000005000000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000740)='GPL\x00', 0x3, 0x1001, &(0x7f0000000780)=""/4097, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 301.89288ms ago: executing program 4 (id=3635): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0xf, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x6}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)}, 0x94) 169.064034ms ago: executing program 2 (id=3636): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x8}, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000021fc540b4804f216d408000000b70400000200000085000000820000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000480), &(0x7f00000004c0)=@tcp6=r0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r4, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x5, [@float={0x6, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x3, 0x1}, @fwd={0x8}, @typedef={0xc, 0x0, 0x0, 0x8, 0x4}, @struct={0x8, 0x5, 0x0, 0x4, 0x0, 0x10, [{0xa, 0x1, 0x81}, {0x3, 0x5}, {0x8, 0x1, 0xe34b}, {0x4, 0x5, 0x5}, {0x80000005, 0x5, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x2e]}}, &(0x7f0000000700)=""/59, 0x99, 0x3b, 0x0, 0x4}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0x10}, 0x18) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000900)=ANY=[], &(0x7f0000000940)='GPL\x00'}, 0x94) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r6, &(0x7f0000000980)={0x2, 0x0, @empty}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000100004000000000000000000005a00000a14000000000a010200000000000000000700000014000000100001000000000000000000008400"], 0x3c}, 0x1, 0x0, 0x0, 0x24048044}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x4005) sendmsg$nl_generic(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c0007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x1, 0x4, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000d80)='GPL\x00', 0xf}, 0x94) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000e00)={'ip6tnl0\x00', &(0x7f0000000e40)={'syztnl0\x00', 0x0, 0x2f, 0xa7, 0x9, 0x1, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x7, 0x80, 0x1, 0x7}}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f80)={0x38, r9, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r10}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000004) syz_emit_ethernet(0x46, &(0x7f0000001000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x1, 0x1, @loopback, @empty}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001080)={r5, 0x5, 0xb68, 0x4, &(0x7f0000001100)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 168.051937ms ago: executing program 4 (id=3637): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000780)=ANY=[@ANYBLOB="340000001100018028bd70c203d4f18027ef26d5d94b4521735bb36988aff588f036b08d00fded6249477c970098e45790481166f014be3291d40106cb28f9acc31721a5adfbb60bb6196902cb5763c0af0a00"/94, @ANYRES32=0x0, @ANYRESOCT=r1], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300008a000000b704000000000000850000003300000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000440)="63ec33b5e9e595c8547c21ce574e", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="540100001800010027bd7000fddbdf251d0104001e0106000701ff02ff71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e87ec5d42c3ef0619022c005c8d03000000000000002a5e15c8a95d29e5b2ea0000080005000d01f50215000300030000200503000054831bdbae1d82b30700000000b313298e4bd41bcc"], 0x154}}, 0x240448c8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000fc0)={'vxcan1\x00'}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x80, 0x0, @mcast2={0xff, 0x3}, 0x80000}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x6c, 0x2c, 0x1, 0x70bd2c, 0x25dfdbfe, {0x14}, [@nested={0x4, 0x86}, @generic="1852eee270859bcfc90016b2600ad14c5cc3396a8bf98dc97f9a653a0865f4330ddb163bd5677e32e5b96abffbba2591fb32ce7c847073ff392eb604fc94b82da8757a7f1fe97db3ae3d5ccd0108dac6c1"]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f00000000c0)={0x1}, 0x8) sendmmsg$sock(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="dce4c739", 0x4}], 0x1, &(0x7f00000001c0)=[@txtime={{0x18}}], 0x18}}], 0x1, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000001180)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000011c0)=0x1, 0x4) socket$inet(0x2, 0x5, 0x0) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) connect$inet(r6, &(0x7f0000001200)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000001240)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000001440)="cf", 0x1}, {&(0x7f0000001480)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000480)="8a", 0x1}, {&(0x7f0000001500)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)="ce90bfdb", 0x4}, {&(0x7f0000001680)="f2e659", 0x3}, {&(0x7f00000016c0)="d4", 0x1}], 0x3}}, {{0x0, 0xffffffffffffffa7, &(0x7f0000001700)=[{&(0x7f0000001780)="e1", 0x1}, {&(0x7f00000017c0)="fa", 0x1}, {&(0x7f0000001800)="d8", 0x1}, {&(0x7f00000004c0)="f2964dd1", 0x4}, {&(0x7f0000001880)="b8a2f6", 0x3}, {&(0x7f00000018c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000001980)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001a00)="87", 0x1}, {&(0x7f0000001a40)="11e09017", 0x4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000001a80)=0x7fffffff, 0x4) connect$pppoe(0xffffffffffffffff, &(0x7f0000001ac0)={0x18, 0x0, {0x1, @empty, 'veth0\x00'}}, 0x1e) 42.315669ms ago: executing program 1 (id=3638): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000000)={0x81, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}}, {{0x2, 0x4e24, @local}}}, 0x108) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0x10, &(0x7f00000006c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x23f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x4000000, 0xe, 0x0, &(0x7f0000000800)="00000000000010051a409ed86813", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000001bc0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b80)={&(0x7f0000000880)={0x12e0, 0x14, 0x300, 0x70bd29, 0x25dfdbff, {0x5, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xa5, 0x1, "83a685802a146762fa007f7a03deb412a62160c056329fd0c306a8ce057f3cc368ef7e51f2ef3f4959103393a9b48d74da74de7d0ad073594d62987d82fc69cb2736e2a0cf92fa0771e78d2a0101b27824d3e52ccd6c6ac7d7e8b1cad855a2ed42647349dc7053178b3d4c25c5d1a2751acdc9cfe9dc82c2227ed81725e5b18c5826982f62c05ab28664634297627ead2e8c2165dc7f8d7619d77ede3d1c089fee"}, @INET_DIAG_REQ_BYTECODE={0xa, 0x1, "1694407a919b"}, @INET_DIAG_REQ_BYTECODE={0x33, 0x1, "99c014fa1e723d39d131a97deef8c4a2a1bb11d44cb91babf1cf77145bf240377b4a292392483398ccce5fedd3bca9"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "43510b55a8aa9df9bfe11b3df2e13a3d8b83027308f6e6e4afb447f4f41fa723c4e458a7f82bacd503af2deecf2a4c1f2ac9d0411d4ad86a2966b420cb6860f4afdcc1f7e7a5c2c34919bf3ae9456a4c2f8d8a5caf0443ce89cc460037314dda3960ccc0bfdf61d1ea709c5a0afbc1881f7d40e4fe0fe77b39638f90f2cd7a809c045326be2221f00b48216f98797e6db11ec7a56754ac4767d8d98c8b586ff00671b1c5cfa867ddeb86ba0b285522a6724ada9829445603c2b97a0075ba32c0a0744dca6814c56dcaec22b3efb1874084a52c8a3ce9f3425122e59ee3a44cac81c944f2ea6067cbae1098be3aea47a923d1e3878f1461f89f98f0136bcfbe86d044a2acd4e34c6310c9d739d1d7e0aa903cfca75b9af44cf0cd914df284989e25301cbb2f70d8a8a4d79695cbb25890a27c8063d525a8e8d82a6efc5ee8a8ab122e45bbae7e7ff505929d18f81fadf9647ebca4d16180707265fc7f8aaa4cbb0f4bb983c7ae08cd69f64a45a055f0a777deac926ce781e5786ff0c66e725dbc899ff743c3b2218e9d9924e6c2919e3d8645d259a5fbe589e08999135ed8c3d87de5b17159f5c986bc4655e45cfeb1bc539fee33c238738f14ce278a9d225c938dff74dc9adbbc7ad7a8e5476cdf8109a8513f261f0a0208d13e35fe2342c9137ed0caf25cdf5f0d101bf1cf7b65666e2a5ae06ad89cecbff2473ffb7f959dce0d86137aea0dc19084c0fdcc93f845d85d4f22dfc9dc823a803afaf406d7ee74ea0acd9716063ced4620665161eca30adc5e014d64ac5fd06d467952a79fff11ab4d6e4fdae9819a2910a5b825827af1deaafb141a9c513c9eff7ac99ddc13f14a6fd3654f6e5a3f528da3ef60c5e8d83e12bec17aae92b882b0eb3f644778b58ccf86a4be18bd8594a55dbff1bb91888559e0158d9b1d4af551b9ef4e22864e1a483cb9ff68bf2fa29fc48259c924f265074261759dc3525302468d15aad9ea1d205fae13230a5effb12832855eab7c10cee473eb8157f5de6638d715e7601e0dfc77fe4840fa0d50f3adce77a2b07a31467532460827c6e5eaa87c27ea566de0dc20af124079d846ad526850a13b0f18e81e3cbf40118449fec07386c5b9e64dab1a8af48f4a4c27a3ede9a68e18721a16950a810a498e0f2cbf4af6ad9824d32051ecadcc770de10505b43cef4822e38ed5fe633ce1203319231087e4084a358157cff767ff620576394ca17e86a32d47172fff43bb4b0ce3da9573f8630d085aceed31535637901946b6f2bdd71b320c325cca660196af02a1bca79a67a4b6cb158f930d9123dc9269b20ffb1beaccd6ed0d1b7fd831959f1e4f2da584343d1e8b090f7d6b2d499e47e6e2055150c9cab2cc96950982cdf07897a4e31b341b0812a8260c10f48f034cfa69b325e663e0561dfa2ecada97ea070ca63b7b2d60e3b7cf28108fe30c3bce047bd9a7a90cce10e2e786cf8ea66d38ef8aad35c80e8cc5b8177bbbe82c2f462d5308cf61378cd13a94f6971c8a5da1112c6fa19743e409f1eae0185aaa01fb3ab05c1cc37eb38a2a889a8b6a5421018449d9bd56a8f609bf0c24cc66e130e6b709cdbc669a576121ab7aa2809d006b40238ff370adfadf2d353c31016b73353b8116033f6c09a7339a9024c47e096bee56f1cf8369a05b0d464c012ba655bbc73f228c464fb1e0302be5493023575c078e22ec6659a03c3c7c75be2abf388e7e14157dc346fce006b7a136edde34deac2e5abbde20506f71e5541a9d282bb06953366ba08efc1ea0434456054549f39a1df0013f2fa09a5585b95d6d7a5b6c60d5cb2de135a2442c6cec63e3e552c9e3af54c4c5c96c7d2405f1e4cf3fcf9fbd4e36294697f300b03a6f719a4f64075c15b327dd5eaf8b1a7a8f04e80f382b19b4ddead3ddb91750fa11a6fe44527d232406cafca09e639d6a0273d117a789522584e9d53fc733c8001da81665a2a46d7dc2b30912b4e255b0f6c6c9238bea11cf3c010d87430560387eca402e2abe2be81a3ad760bdf655ff129e05c983bda8dd9f14b2113e9fbe4a286d3445c96642ab486dc1c7a781d7972b484fa75ca3fd8515c51aad70cf3b7f37c1cb0e99cd01777722861d14ea115a0ed8c60724ebd0690576edea53ac3ad7e7eacaa0cae85804bada226ca38bb1add5673398affc029639dace161caeb5d45eebf20c98aa99055aff6affc1ac53aad719ac822d38abe901a58d8f7c3913b90e74b2bfb76644a1696a454ea99b26bd4a63009d9c5f71103a9a8abdb4cc854845699cd21644d1542f0a4bb6958840608af4b3391257f8fcccb0d7cbb0804b233990193e4f9714ff5b4df762047f4b44bc06d446abcff7764c24eb95e4ee764c48125126c59c178171d345f29135ef4150d8744129646e8805deb98bebe77ef08a7cf227cb0707829bf6bda91bfeabe3168e4e652b816f1067ae071928c82c5139abe54f129cc78c788673158d9e0477b1392d3e43d54f187bb78e90c54784a27ed256d0721341c23989df8e4560f286d912901f5b91287a90002ad44cd3b797f7068a8af4b78a24839f346e52592a2a9389aa2b9b17bfaf831d4666e0c764f5e1c5f7e160d96606a4dfc5ddfeed1e68d3ac9dde7021ba7a0d0af9426c49df6a1350a94a90377c61127ac92b570a523ea6b2e3f83f761a9c82103fedfac2f52cc36eda0502f5064dc091794448d5863d0809cfe8de0de54a29a1e4eb62b5babab65655394d08e5ab9d2a829a21fe69055131218a51df51f46c44b0fe09e13001e84e1cc6bf4d897552017f58ef885181635b939ab01d2d8b6b703585dce4ffc88b2df3f00a99fe31c370c1bbfb7e79231803cf7139246b038e860eb61aeed78342f26757fc6ebe695252184c861b469640849cda8e1bf0e0d7eb9a1e2d03aa1bf40d575a859e3c70e752c8d155246be2df46ade72ef23ca0ea9d4da53d8ed962ec5f9744f89d8e37d10a3b5b50f12272cda7cc1ccc30436c7c92c9188a38c505529e4c67c7c82574552f779cce1ef7b5d247e9594693cdb53ce090e6d90ddfb02a99be7ca3d97c749cec10019a4e6ccd4570f0073eaedf08f24e21f57d5c8e95b1bbc9874f23ae4fb56fef8d868872041db7f3f198be181f4528e73767a646ae6fee0437ce233480feb7fa46864a41baf69b882f1db84a56252acc2fd93aac8b117d9ae331c51c88d863d23a042729bbce60749fc0020f4b55af06a5a972cac2356a29940e50a5dcd6d3789fec0a2f275bb63391bc6bf7c3480cde0334040bd11333ab67e1959e8cd69495b61cd8e7c1a9437383dbf5aea41fef6cf0998275a48ec595bf84f57eb5265eb3da4442068a9c199edb1947b50aee609a00a3d594a04424773f2f0df27cf55b200f797cbf9e18e3bea8f8ef42b6757f03c37085b5eebb5dd1de10d1b75155704ee33f0337733ad5c45a9362880092e353f0c9fe434e933d5150e1a5b484e7b82c20e39bc462424f9a39a8099dbb5aaeb15cd766f38655c701842815202a990f533f42b9e5ed6053e643aee9c0b6913ea4f5087c760529d0a18b2524060be89f6e14055f77b595e16679f017104629bd4e35efbee1df11249ac1a7a6adac75d74927a313781bf357f47b745f44112187d182801c0b1876787df3de46e149c4c764cd8c86866f2ca6cd5c840e2109fd0c19719a1ba172ef9d347d1cda267214e0ab676e13a58ea75d36cfe4f0f80d3b3414cdc91bc5487c03709b4ad8b1075d07ac201bea6cd525e1fe055b20eec96890794d132398b4ac703d4446355f2a083d5059e8db6895356845ffd04d71a2efa3168b71186623d2d119bcf722995a0acd3ea4e2eb7011f55f591d8124113116b1d0b658a8a117008eb66201ce7ef2ebd14b807ace1bc6cd3e204717f6cb5c0a2af62c4c216a0f861fd08a1d2a5e5da3a13f3e437449bb751ad8df39042cf8590995ec7193f529715e69b69c9e66c5b5194bd5bd62c3ff9605153380c0c5f3d45c0fb1cdeac1e809f78ec39fa8e043c81bcd58ccc2d701b4fea89bab289c067490f73d07391297edc789ff22a196fa6ccf461e98c4d66fd3633cf47f2b257b211a8554da39d5daf8d1f1441f89cccfe0b3d301d7f84321ffb0952d06419bf9143b0be12527bb7f09d148e09bf9acc45efd469626fae541f71ff31939f5d97f19742eeadb5d80f65bca28c9f54f029700a27e5bcd78a2023d70ac3304ac2d88bba4cde17a768cb5356d9f892a74a1078d36c049331847b9fabe37af514484f371ef95bb0530bdd6239f1c3018cf4821cd590d36308494a4e54b7964eda52bf040f792083d86c3ddf9c76ab984ee8814b18629788735f537780c9811bf395ac0746775223bb1e819c697893e48a0eb5f03289c516bb3d7223bf03b3dac5f5e71816d11d5d442c700d25589cdbfb23385a6e2a5fc9d7fefa77953407a1632e8c0b7bb0536dd7aa3e8936e25e39b2cd89a536b4229685254c831ec4d66a4649bee56b236541de311b99a7da37374e88a5fc078099867ab97e826d62ecdeebc02a9d1786fe1b2c76dd4de2b9d10f35f67ee5fc4dc9cfd80ec275392990cb9ed5c3ecc1570477693c11f06ad0bf70bb5b48a8f68c5e9cbe64cb1973473fba9183e0a970784d36dccccf42938027de5b16e8c31c2487d976ec6f23f689eed7d897137c4e3e47f4e96a86776ff077086860035be7e9b74f4ae97b83c52e4ecde961f9ec5823d8221294cf6c62f6e99df3e2c4692bfe7f0f15777b558e6dea13514fcf58af955e973d5c25e420b7a58680bbc0213c1ac544a1efe3d1aaa35c3d1ecab8d8e3bce168f92a86106e209dd197cf89ed90290c298a17939eda9a1a6a46020adf7621c0f13293b5ec0c0b0ec0e84a76409230a0216f4e4c5b842184f9c11effff0b8b610d1794384afb0d6506f85b66f79179708a5893741381b201c3c19da8808e419b6d6d35be4f945d7b99686bc3cf29f164740bab4c0cf9bdb1238a7afc8c59a49eb1186665582e0150ef456dd9c08de9daace530dc3141d523b72be3088005fad23db176422bd6732943c802172d9423eb2f7f199e5d823320c1db40fbbda8c6016eb8063cd26dcdc0f60809dadd586cb719a69e347b5fddec0dd64319e35287bed20af2d9b547517f7707d35c94f972f856e087aa7a9bc6f67fe93fcfcf9a5caeada0dfbf7048564bab15a005c14b7b4564c85c9216d9ef4c917733d6d054e25cc7480ba3fd177e8ea468fc023d593b487c2eb4c764ffbfe5d4b6df629d21af9df44def5b71a410fd801d09695e196b45390c121bdd8f02aec8357456d2b7e4e74824971caaf5dffbb4914b32ef44b0e81092a9b8cd146ab7b1d327412ee28f3332b51744e3e720f50fac2076f41ce32b097a86f8d2cb0ad03cbf700ae1577bf50723b28ecefb12e459bdaac904dddfcaba4c73fb8b45774eb8198bfee87498ab545b8109f93e31a3ec1d13e9f23a0752bfc3831fb029ad786289e8b35b45a5a393d675d0d7fb87bc3724cf063617ea5135be7a26d04f3629581e2b5faad34177e1c166ff1a6b12cf6eefec8ba7b951abe9872c6384ae8724350d1f9c6de513ad680987c9050dc37d40743bad02ded3e1723eb361326b0181eff43854a1c2a7d275d854a8e82ca536668086f09eb7f6f43fe421b0f615005e1c4ac5d24d1b0ad44e6392327a0e2cd44687cf51f70bb41e616fc825f745103a31c6ac1aa90105b21ab45895b4d8132ba00c5977e36f92a0a2810162c9056c2ab61e9c2f828f7df042ada2c1f3e02011d8981667ac6ac80"}, @INET_DIAG_REQ_BYTECODE={0xb, 0x1, "10ce6a5f7663b5"}, @INET_DIAG_REQ_BYTECODE={0x103, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xcf, 0x1, "187e12a4570083e99dfd198b7d7fa9072e3de551c4da81d2bc1ce448b75349bff015ede0dbd26d1e222f21f0b965891b74c3ddb4510bd3a27764b4371b2359178fc72f3322cebfb945486978beb649210937d591ddd8c6a12cc88154902b2f187f1be99dde43bc07a83e6ff74286edac20714e233328a7e3003c9d705fe908f30f61299d436e9ebc374668be8a7eebd3296c502ebb08facacc019fc9d4a577e92050c21e80feca7301bc1732840907095b88348be7c3175c87924640ab6dfd69b328727717e9acacaba19e"}]}, 0x12e0}}, 0x20044014) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001c00), r7) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001cc0)={0x40, r8, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001d40), r10) sendmsg$NET_DM_CMD_START(r10, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e00)={0x14, r11, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NET_DM_CMD_STOP(r9, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001ec0)={0x14, r11, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8040) sendmsg$NET_DM_CMD_START(r6, &(0x7f0000001f80)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x14, r11, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x48000) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x0, 0xffffffff}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r12, 0x40047452, 0x0) close(r0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = accept(0xffffffffffffffff, &(0x7f0000000240)=@x25, &(0x7f00000002c0)=0x80) sendmsg$nl_xfrm(r14, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@newspdinfo={0x3c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfe, 0x7ff, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0x84}}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r15 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r13) sendmsg$WG_CMD_SET_DEVICE(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="94010000", @ANYRES16=r15, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 38.158697ms ago: executing program 4 (id=3639): r0 = socket$key(0xf, 0x3, 0x2) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) r1 = accept(r0, 0x0, &(0x7f0000000080)) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f00000000c0)=0x5a27, 0x4) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f0000000100)='$}Q[+[/\x92\x00', 0x2040, &(0x7f0000000140)={@_ha_fsid={[0x6, 0x2]}, {0x7, 0x7, 0x4, 0x3df1}}, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x400}) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x4, 0x1, 0x3, {0xa, 0x4e21, 0xc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}}}, 0x32) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000280)=0x0) sendmsg$kcm(r2, &(0x7f00000017c0)={&(0x7f00000002c0)=@nfc={0x27, r3, 0x1, 0x4}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000340)="f5ba8c0e0dc536340950d0aa42fd618f9fef61eaac2356fc4983468293c76576a0300d400dcb21f2d7b61f727b19a6b1a747717cb8a2b4416173a2e9dc92ad63c63831433e401e333faedf5ba3dd2e652e3cf3c132cf6374b0f92a8e3b12d6e02df2e76d425f3b5b0deaf679a700d7f572976ceb26a82dc066fb980ae818356893c53fc73c48d5e0ba1cd4a8ede64fec7e0b7d6a96", 0x95}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="e0e5f37217b0f7737716780d8bd3f24cf5fa2cd1044540424faf9d4d3578b4e0302a327979e4cce8c8a8e467995aecce40c9cebbe6d139c7b3770f667ddea04d8d1905d4eecc6b29fdaf1a", 0x4b}, {&(0x7f0000001480)="1cb88898eca94802c32bb2ec8263f9acb45f2d2fb3e247ed4423603cea24b9760f17675eac3a05e907da017399ef52e626c3e31b2f7f6407b25f6279a993d36f8b351c1d3ae8550ac144476ea7", 0x4d}, {&(0x7f0000001500)="43148411edf3d4c5e7656e443df84732097c8e5688ae0aead9ce21c393cb95b9e1d20057de4ba363e90a6cee3ef967e91234ae0c6663bcf6af20", 0x3a}, {&(0x7f0000001540)="38c1396f96c420f02ae0d1c21418cd9650f302e73049ab920524394357cb0d570e8937428b2abc9528b6f901e38c6e080335394490dacb8d8f5b2e1c351760fe7f6a678cf9ca7c3188b5428c56d523aa33871c98079e04868ddc23a66fe208daa2ca56f16cda1e0ae77511c906a6c2c75db0f0ae7bcc4237ed19131fffc20b61b065d5d8670e7c02fcf8e62c5eba9465ffc8b5e05b2a3eac7994afaa39e82faa4f", 0xa1}, {&(0x7f0000001600)="5a0fd1e5c9c0e1f1694bc8c6f7d02e62d4a507c0441fa8cdfcab5e3286e39fa2ce42a498589e3fcdd45cebb33aa1af3b4b825d7c164af3dadfb988aa89ad9522885d66895a16ad9192b02675a93a5d70450909c158b649b62ad8ccaaceadf37a55d26ee8dca92218b3a183d7e0d7c55f2f52e2311be82dd8788d6e6e9e31bd16466d8ee9a8354e5693d800ab2927bc1288700963562ef0911d7d11667b5c6520da89c95691dabc73edbe0b832321bc69c6c81b347d767d1e2dfc47d447d2aec18aaa28e88e3d7a2e0106988803ea3203a361f62d4adade", 0xd7}], 0x7, &(0x7f0000001780)}, 0x40d0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000001900)={r2, &(0x7f0000001800)='$}Q[+[/\x92\x00', 0x200000, &(0x7f0000001840)={@_ha_fsid={[0x0, 0x34]}, {0x7, 0x1, 0x6b3, 0x6}}, 0x9, &(0x7f0000001880)={@_ha_fsid}, &(0x7f00000018c0)=0x400}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SDREQ(r5, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x1c, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$MRT6_PIM(r2, 0x29, 0xcf, &(0x7f0000001a80)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_EVENT(r2, 0x84, 0x7f, &(0x7f0000001ac0)={0x1, 0x800c, 0x1}, &(0x7f0000001b00)=0x8) (async) ioctl$SIOCGSKNS(r4, 0x894c, &(0x7f0000001b40)={'geneve0\x00', 0x400}) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001bc0), r5) (rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001c00)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001c40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000001d40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x74, r8, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x880) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000001d80)={r7, @in6={{0xa, 0x4e21, 0x1, @mcast2, 0x7}}, [0xffffffffffffffc0, 0x9, 0x3, 0xa286, 0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x4, 0x2, 0x5, 0x635a, 0xfffffffffffffffb, 0x623]}, &(0x7f0000001e80)=0x100) (rerun: 64) read(r1, &(0x7f0000001ec0)=""/172, 0xac) (async) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000001f80)=0x2, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000001fc0)={0x0, @aes128, 0x0, @desc1}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002000)={'veth1_macvtap\x00'}) (async) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x24, r6, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0xc844}, 0xb1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000002140)={r11, 0x9}, 0x8) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000002180)={0x0, 'team0\x00', {0x1}, 0x10}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000022c0)={0xffffffffffffffff, &(0x7f00000021c0)='(}\\/*-)^\x00', 0x42080, &(0x7f0000002200)={@align=0x3, {0x2, 0x6, 0x9, 0xc31}}, 0x7, &(0x7f0000002240)={@_ha_fsid}, &(0x7f0000002280)=0x9}) (async, rerun: 32) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r1, 0x40106e8c, &(0x7f0000002300)=[0x7f80, 0x9]) (rerun: 32) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 35.379425ms ago: executing program 0 (id=3640): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind(r0, &(0x7f00000002c0)=@can={0x1d, r1, 0x1, 0x2}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000080)={&(0x7f00000000c0)={0x1d, r4}, 0x10, &(0x7f0000000100)={0x0, 0x48}, 0x2, 0x0, 0x0, 0x24040040}, 0x3000c091) recvmmsg$unix(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/146, 0x92}, {0x0}, {&(0x7f00000004c0)=""/103, 0x67}], 0x3}}], 0x40000eb, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) sendmsg$can_raw(r2, &(0x7f0000000540)={&(0x7f0000000580)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000600)=@can={{0x1}, 0x8, 0x0, 0x0, 0x0, "0100"}, 0x10}}, 0x0) 0s ago: executing program 3 (id=3641): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000020000000000000000000008500000027000000180100002020702500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000007500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f00000005c0)={'wlan1\x00', @random="000500000020"}) r2 = openat$cgroup_ro(r1, &(0x7f0000000580)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0x10448) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x0, @local}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000300)={r4, 0x53, 0x30, 0x7}, 0x0) r5 = openat$tun(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000440)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000480)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r5, 0x401054d5, &(0x7f00000004c0)=ANY=[]) r6 = openat$tun(0xffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000540)={'pim6reg0\x00', 0x2102}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x12, r2, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@local}, &(0x7f0000000240)=0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbe9abc89b6f5b2e", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): /0x2d0 [ 408.762495][T15679] ? ktime_get_with_offset+0x93/0x2d0 [ 408.762593][T15679] ? __pfx_bpf_check+0x10/0x10 [ 408.762658][T15679] ? bpf_obj_name_cpy+0x194/0x1e0 [ 408.762729][T15679] bpf_prog_load+0x14da/0x1c60 [ 408.762815][T15679] ? __pfx_bpf_prog_load+0x10/0x10 [ 408.762917][T15679] ? __might_fault+0xaf/0x130 [ 408.763000][T15679] __sys_bpf+0xd86/0xe00 [ 408.763075][T15679] ? __pfx___sys_bpf+0x10/0x10 [ 408.763158][T15679] ? __fget_files+0x2a/0x420 [ 408.763337][T15679] ? ksys_write+0x242/0x270 [ 408.763433][T15679] ? __pfx_ksys_write+0x10/0x10 [ 408.763534][T15679] __x64_sys_bpf+0xba/0xd0 [ 408.763614][T15679] do_syscall_64+0x166/0x520 [ 408.763685][T15679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.763734][T15679] ? clear_bhb_loop+0x70/0xc0 [ 408.763797][T15679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.763850][T15679] RIP: 0033:0x7f0d5099fb19 [ 408.763908][T15679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.763953][T15679] RSP: 002b:00007f0d518fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 408.764006][T15679] RAX: ffffffffffffffda RBX: 00007f0d50c25fa0 RCX: 00007f0d5099fb19 [ 408.764046][T15679] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 408.764085][T15679] RBP: 00007f0d518fd090 R08: 0000000000000000 R09: 0000000000000000 [ 408.764117][T15679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 408.764148][T15679] R13: 00007f0d50c26038 R14: 00007f0d50c25fa0 R15: 00007fffbaefe538 [ 408.764241][T15679] [ 408.764261][T15679] Mem-Info: [ 408.764284][T15679] active_anon:5819 inactive_anon:0 isolated_anon:0 [ 408.764284][T15679] active_file:0 inactive_file:43581 isolated_file:0 [ 408.764284][T15679] unevictable:0 dirty:215 writeback:0 [ 408.764284][T15679] slab_reclaimable:11730 slab_unreclaimable:109805 [ 408.764284][T15679] mapped:29695 shmem:530 pagetables:1226 [ 408.764284][T15679] sec_pagetables:0 bounce:0 [ 408.764284][T15679] kernel_misc_reclaimable:0 [ 408.764284][T15679] free:1291723 free_pcp:10019 free_cma:0 [ 408.764416][T15679] Node 0 active_anon:23276kB inactive_anon:0kB active_file:0kB inactive_file:174120kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118780kB dirty:860kB writeback:0kB shmem:2120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13940kB pagetables:4756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 408.764562][T15679] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 408.764707][T15679] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 408.764877][T15679] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 408.764968][T15679] Node 0 DMA32 free:1200336kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23276kB inactive_anon:0kB active_file:0kB inactive_file:174120kB unevictable:0kB writepending:860kB zspages:0kB present:3129332kB managed:2522828kB mlocked:0kB bounce:0kB free_pcp:40072kB local_pcp:19040kB free_cma:0kB [ 408.765126][T15679] lowmem_reserve[]: 0 0 1 1 1 [ 408.765258][T15679] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 408.765428][T15679] lowmem_reserve[]: 0 0 0 0 0 [ 408.765523][T15679] Node 1 Normal free:3951196kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 408.765680][T15679] lowmem_reserve[]: 0 0 0 0 0 [ 408.765777][T15679] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 408.872499][T15679] Node 0 DMA32: 480*4kB (UME) 284*8kB (UME) 149*16kB (UME) 193*32kB (UME) 68*64kB (UME) 30*128kB (UME) 7*256kB (ME) 6*512kB (UME) 5*1024kB (UME) 11*2048kB (UME) 280*4096kB (UM) = 1200336kB [ 408.873015][T15679] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 408.873343][T15679] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 7*16kB (UM) 10*32kB (UM) 10*64kB (UM) 8*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 962*4096kB (M) = 3951196kB [ 408.873861][T15679] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 408.873908][T15679] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 408.873955][T15679] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 408.874002][T15679] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 408.874061][T15679] 44109 total pagecache pages [ 408.874092][T15679] 0 pages in swap cache [ 408.874114][T15679] Free swap = 124996kB [ 408.874137][T15679] Total swap = 124996kB [ 408.874161][T15679] 2097051 pages RAM [ 408.874183][T15679] 0 pages HighMem/MovableOnly [ 408.874205][T15679] 434380 pages reserved [ 408.874227][T15679] 0 pages cma reserved [ 408.890353][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 409.778408][T15688] netlink: 'syz.4.2938': attribute type 1 has an invalid length. [ 409.835434][T15691] sit0: left promiscuous mode [ 409.871661][T15691] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.885355][T15691] bridge0: port 3(dummy0) entered blocking state [ 409.885488][T15691] bridge0: port 3(dummy0) entered forwarding state [ 409.890548][T15691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.893816][T15695] netlink: 'syz.4.2938': attribute type 2 has an invalid length. [ 409.893874][T15695] netlink: 'syz.4.2938': attribute type 1 has an invalid length. [ 409.932131][ T7429] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 410.094359][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 410.334523][ T53] Bluetooth: hci2: command tx timeout [ 410.664844][T15691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.688885][T15691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.764377][T15691] veth1_vlan: left promiscuous mode [ 410.773630][T15691] veth0_vlan: left promiscuous mode [ 410.787563][T15691] veth0_vlan: entered promiscuous mode [ 410.789939][T15691] veth1_vlan: entered promiscuous mode [ 410.821350][T15691] veth1_macvtap: left promiscuous mode [ 410.822614][T15691] veth0_macvtap: left promiscuous mode [ 410.823757][T15691] veth0_macvtap: entered promiscuous mode [ 410.852007][T15691] veth1_macvtap: entered promiscuous mode [ 410.904594][T15691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 410.906317][T15691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 410.907402][T15691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 410.908560][T15691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 410.972500][T15691] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 411.001826][T15691] 8021q: adding VLAN 0 to HW filter on device bond1 [ 411.026827][T15691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 411.031517][T15691] 8021q: adding VLAN 0 to HW filter on device bond3 [ 411.063104][T15691] 8021q: adding VLAN 0 to HW filter on device bond4 [ 411.097455][T15691] 8021q: adding VLAN 0 to HW filter on device bond5 [ 411.098339][ T104] bond6: (slave macvlan3): link status up again after 0 ms [ 411.098502][ T104] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 411.098801][T15691] 8021q: adding VLAN 0 to HW filter on device bond6 [ 411.130193][ T104] bond6: (slave macvlan3): link status up again after 0 ms [ 411.141219][T15691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.141904][T15691] A link change request failed with some changes committed already. Interface macvlan2 may have been left with an inconsistent configuration, please check. [ 411.220982][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.221220][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.261621][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.261857][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.363147][T15731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2944'. [ 411.459995][ T5297] 8021q: adding VLAN 0 to HW filter on device eth4 [ 411.460461][ T1097] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.460530][ T1097] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.467349][ T1097] bond6: (slave macvlan3): link status definitely down, disabling slave [ 411.766639][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.766678][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.977334][ T1166] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 411.977957][ T1166] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 412.020387][ T1097] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.020460][ T1097] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.145736][ T5639] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 412.341881][ T104] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.341955][ T104] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.405788][ T53] Bluetooth: hci2: command tx timeout [ 412.680946][T15593] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.681084][T15593] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.681254][T15593] bridge_slave_0: entered allmulticast mode [ 412.769588][T15593] bridge_slave_0: entered promiscuous mode [ 412.848555][T15593] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.848825][T15593] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.849251][T15593] bridge_slave_1: entered allmulticast mode [ 412.882702][T15593] bridge_slave_1: entered promiscuous mode [ 413.171762][T15766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'. [ 413.491582][T15783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2955'. [ 414.909652][T15811] FAULT_INJECTION: forcing a failure. [ 414.909652][T15811] name failslab, interval 1, probability 0, space 0, times 0 [ 414.909686][T15811] CPU: 1 UID: 0 PID: 15811 Comm: syz.1.2961 Not tainted syzkaller #0 PREEMPT(full) [ 414.909711][T15811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 414.909724][T15811] Call Trace: [ 414.909733][T15811] [ 414.909742][T15811] dump_stack_lvl+0xe8/0x150 [ 414.909782][T15811] should_fail_ex+0x3eb/0x540 [ 414.909816][T15811] should_failslab+0xa8/0x100 [ 414.909841][T15811] __kmalloc_node_noprof+0xfb/0x720 [ 414.909869][T15811] ? __get_vm_area_node+0x200/0x2f0 [ 414.909892][T15811] ? __get_vm_area_node+0x283/0x2f0 [ 414.909914][T15811] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 414.909939][T15811] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 414.909974][T15811] __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 414.910009][T15811] ? lock_acquire+0x115/0x350 [ 414.910075][T15811] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 414.910102][T15811] ? bpf_verifier_vlog+0x58d/0x900 [ 414.910137][T15811] ? bpf_prog_calc_tag+0x51/0x370 [ 414.910158][T15811] __vmalloc_noprof+0xd2/0x120 [ 414.910183][T15811] ? bpf_prog_calc_tag+0x51/0x370 [ 414.910212][T15811] bpf_prog_calc_tag+0x51/0x370 [ 414.910239][T15811] check_and_resolve_insns+0xc0/0x28e0 [ 414.910265][T15811] ? __asan_memset+0x22/0x50 [ 414.910294][T15811] ? add_subprog+0x40b/0x550 [ 414.910321][T15811] ? bpf_check+0x1934/0x34e0 [ 414.910346][T15811] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 414.910370][T15811] ? check_subprogs+0x413/0x540 [ 414.910413][T15811] bpf_check+0x1c12/0x34e0 [ 414.910450][T15811] ? ktime_get_with_offset+0x93/0x2d0 [ 414.910482][T15811] ? ktime_get_with_offset+0x93/0x2d0 [ 414.910513][T15811] ? __pfx_bpf_check+0x10/0x10 [ 414.910540][T15811] ? bpf_obj_name_cpy+0x194/0x1e0 [ 414.910573][T15811] bpf_prog_load+0x14da/0x1c60 [ 414.910618][T15811] ? __pfx_bpf_prog_load+0x10/0x10 [ 414.910659][T15811] ? __might_fault+0xaf/0x130 [ 414.910692][T15811] __sys_bpf+0xd86/0xe00 [ 414.910723][T15811] ? __pfx___sys_bpf+0x10/0x10 [ 414.910758][T15811] ? __fget_files+0x2a/0x420 [ 414.910806][T15811] ? ksys_write+0x242/0x270 [ 414.910840][T15811] ? __pfx_ksys_write+0x10/0x10 [ 414.910877][T15811] __x64_sys_bpf+0xba/0xd0 [ 414.910914][T15811] do_syscall_64+0x166/0x520 [ 414.910942][T15811] ? trace_irq_disable+0x3b/0x140 [ 414.910972][T15811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.910995][T15811] ? clear_bhb_loop+0x70/0xc0 [ 414.911023][T15811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.911045][T15811] RIP: 0033:0x7f867199fb19 [ 414.911075][T15811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.911094][T15811] RSP: 002b:00007f8672895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 414.911117][T15811] RAX: ffffffffffffffda RBX: 00007f8671c25fa0 RCX: 00007f867199fb19 [ 414.911134][T15811] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 414.911148][T15811] RBP: 00007f8672895090 R08: 0000000000000000 R09: 0000000000000000 [ 414.911162][T15811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 414.911175][T15811] R13: 00007f8671c26038 R14: 00007f8671c25fa0 R15: 00007ffd8e212c18 [ 414.911210][T15811] [ 415.292268][T15813] xt_CT: You must specify a L4 protocol and not use inversions on it [ 415.458278][T15815] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2963'. [ 415.684618][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 416.577602][T15778] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2955'. [ 416.582568][T15593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.605143][ T1181] dummy0: left promiscuous mode [ 416.988843][ T1181] team0 (unregistering): Port device team_slave_1 removed [ 417.012253][ T1181] team0 (unregistering): Port device team_slave_0 removed [ 417.218632][ T5297] 8021q: adding VLAN 0 to HW filter on device eth5 [ 417.428246][T15593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.758238][T15593] team0: Port device team_slave_0 added [ 417.847484][T15593] team0: Port device team_slave_1 added [ 418.088775][T15593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.088809][T15593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.088848][T15593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.130616][T15593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.130658][T15593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.130730][T15593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.226678][ T1181] IPVS: stop unused estimator thread 0... [ 418.392996][T15861] ip_tables: iptables: counters copy to user failed while replacing table [ 418.393703][T15861] ip_tables: iptables: counters copy to user failed while replacing table [ 418.418887][T15861] ip_tables: iptables: counters copy to user failed while replacing table [ 418.419279][T15861] ip_tables: iptables: counters copy to user failed while replacing table [ 418.419620][T15861] ip_tables: iptables: counters copy to user failed while replacing table [ 418.419991][T15861] ip_tables: iptables: counters copy to user failed while replacing table [ 418.470680][T15861] ip_tables: iptables: counters copy to user failed while replacing table [ 418.694490][T15867] netlink: 'syz.2.2972': attribute type 16 has an invalid length. [ 418.694515][T15867] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2972'. [ 418.722739][T15593] hsr_slave_0: entered promiscuous mode [ 418.723842][T15593] hsr_slave_1: entered promiscuous mode [ 418.759034][T15593] debugfs: 'hsr0' already exists in 'hsr' [ 418.759075][T15593] Cannot create hsr debugfs directory [ 419.031669][T15861] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.102221][T15861] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.637738][T15893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2979'. [ 419.920437][T15899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2980'. [ 420.345570][ T5297] 8021q: adding VLAN 0 to HW filter on device eth6 [ 421.571590][T15933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2988'. [ 421.745080][T15943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2990'. [ 422.077356][T15593] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 422.151157][T15593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.153434][T15593] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 422.204756][T15593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 422.207672][T15593] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 422.232533][T15593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 422.233573][T15593] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 422.267155][T15593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 422.639663][T15593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.692353][T15593] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.759087][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.759315][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.871120][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.871350][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.964545][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 423.694302][T15986] FAULT_INJECTION: forcing a failure. [ 423.694302][T15986] name failslab, interval 1, probability 0, space 0, times 0 [ 423.694338][T15986] CPU: 0 UID: 0 PID: 15986 Comm: syz.4.3001 Not tainted syzkaller #0 PREEMPT(full) [ 423.694364][T15986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 423.694377][T15986] Call Trace: [ 423.694385][T15986] [ 423.694395][T15986] dump_stack_lvl+0xe8/0x150 [ 423.694438][T15986] should_fail_ex+0x3eb/0x540 [ 423.694473][T15986] should_failslab+0xa8/0x100 [ 423.694498][T15986] __kvmalloc_node_noprof+0x171/0x820 [ 423.694535][T15986] ? bpf_compute_loops+0x2dd9/0x3e80 [ 423.694560][T15986] ? bpf_compute_loops+0x2dd9/0x3e80 [ 423.694593][T15986] bpf_compute_loops+0x2dd9/0x3e80 [ 423.694646][T15986] bpf_check+0x2ce7/0x34e0 [ 423.694684][T15986] ? ktime_get_with_offset+0x93/0x2d0 [ 423.694717][T15986] ? ktime_get_with_offset+0x93/0x2d0 [ 423.694749][T15986] ? __pfx_bpf_check+0x10/0x10 [ 423.694776][T15986] ? bpf_obj_name_cpy+0x194/0x1e0 [ 423.694811][T15986] bpf_prog_load+0x14da/0x1c60 [ 423.694849][T15986] ? __pfx_bpf_prog_load+0x10/0x10 [ 423.694891][T15986] ? __might_fault+0xaf/0x130 [ 423.694924][T15986] __sys_bpf+0xd86/0xe00 [ 423.694957][T15986] ? __pfx___sys_bpf+0x10/0x10 [ 423.694992][T15986] ? __fget_files+0x2a/0x420 [ 423.695045][T15986] ? ksys_write+0x242/0x270 [ 423.695080][T15986] ? __pfx_ksys_write+0x10/0x10 [ 423.695126][T15986] __x64_sys_bpf+0xba/0xd0 [ 423.695164][T15986] do_syscall_64+0x166/0x520 [ 423.695193][T15986] ? trace_irq_disable+0x3b/0x140 [ 423.695224][T15986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.695247][T15986] ? clear_bhb_loop+0x70/0xc0 [ 423.695276][T15986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.695298][T15986] RIP: 0033:0x7f8992f9fb19 [ 423.695320][T15986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.695339][T15986] RSP: 002b:00007f8993e7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 423.695363][T15986] RAX: ffffffffffffffda RBX: 00007f8993225fa0 RCX: 00007f8992f9fb19 [ 423.695380][T15986] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 423.695394][T15986] RBP: 00007f8993e7a090 R08: 0000000000000000 R09: 0000000000000000 [ 423.695408][T15986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 423.695421][T15986] R13: 00007f8993226038 R14: 00007f8993225fa0 R15: 00007ffc93a193e8 [ 423.695458][T15986] [ 424.248364][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 424.678365][ T53] Bluetooth: hci4: ISO packet for unknown connection handle 3684 [ 425.113039][T15593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.236460][T15593] veth0_vlan: entered promiscuous mode [ 425.270487][T15593] veth1_vlan: entered promiscuous mode [ 425.337753][T15593] veth0_macvtap: entered promiscuous mode [ 425.343349][T15593] veth1_macvtap: entered promiscuous mode [ 425.470498][T16018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3006'. [ 425.470525][T16018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3006'. [ 425.522256][T16016] bond10: entered promiscuous mode [ 425.522284][T16016] bond10: entered allmulticast mode [ 425.605172][T15593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.642498][T15593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.695377][ T104] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.699043][T14527] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.699216][T14527] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.699307][T14527] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.894491][T16022] netlink: 'syz.1.3008': attribute type 1 has an invalid length. [ 425.989451][T16022] bond11: option mode: invalid value (7) [ 426.007487][T16022] bond11 (unregistering): Released all slaves [ 426.116346][T16030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3007'. [ 426.152555][T16030] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3007'. [ 426.169419][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 426.319400][T16038] FAULT_INJECTION: forcing a failure. [ 426.319400][T16038] name failslab, interval 1, probability 0, space 0, times 0 [ 426.319428][T16038] CPU: 0 UID: 0 PID: 16038 Comm: syz.4.3011 Not tainted syzkaller #0 PREEMPT(full) [ 426.319447][T16038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 426.319457][T16038] Call Trace: [ 426.319464][T16038] [ 426.319472][T16038] dump_stack_lvl+0xe8/0x150 [ 426.319507][T16038] should_fail_ex+0x3eb/0x540 [ 426.319535][T16038] should_failslab+0xa8/0x100 [ 426.319559][T16038] __kvmalloc_node_noprof+0x171/0x820 [ 426.319587][T16038] ? bpf_compute_loops+0x2dd9/0x3e80 [ 426.319608][T16038] ? bpf_compute_loops+0x2dd9/0x3e80 [ 426.319641][T16038] bpf_compute_loops+0x2dd9/0x3e80 [ 426.319693][T16038] bpf_check+0x2ce7/0x34e0 [ 426.319731][T16038] ? ktime_get_with_offset+0x93/0x2d0 [ 426.319772][T16038] ? ktime_get_with_offset+0x93/0x2d0 [ 426.319802][T16038] ? __pfx_bpf_check+0x10/0x10 [ 426.319829][T16038] ? bpf_obj_name_cpy+0x194/0x1e0 [ 426.319862][T16038] bpf_prog_load+0x14da/0x1c60 [ 426.319899][T16038] ? __pfx_bpf_prog_load+0x10/0x10 [ 426.319940][T16038] ? __might_fault+0xaf/0x130 [ 426.319972][T16038] __sys_bpf+0xd86/0xe00 [ 426.320003][T16038] ? __pfx___sys_bpf+0x10/0x10 [ 426.320038][T16038] ? __fget_files+0x2a/0x420 [ 426.320087][T16038] ? ksys_write+0x242/0x270 [ 426.320121][T16038] ? __pfx_ksys_write+0x10/0x10 [ 426.320159][T16038] __x64_sys_bpf+0xba/0xd0 [ 426.320196][T16038] do_syscall_64+0x166/0x520 [ 426.320225][T16038] ? trace_irq_disable+0x3b/0x140 [ 426.320256][T16038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.320280][T16038] ? clear_bhb_loop+0x70/0xc0 [ 426.320307][T16038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.320328][T16038] RIP: 0033:0x7f8992f9fb19 [ 426.320349][T16038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.320368][T16038] RSP: 002b:00007f8993e7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 426.320390][T16038] RAX: ffffffffffffffda RBX: 00007f8993225fa0 RCX: 00007f8992f9fb19 [ 426.320407][T16038] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 426.320421][T16038] RBP: 00007f8993e7a090 R08: 0000000000000000 R09: 0000000000000000 [ 426.320435][T16038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 426.320448][T16038] R13: 00007f8993226038 R14: 00007f8993225fa0 R15: 00007ffc93a193e8 [ 426.320485][T16038] [ 426.586362][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.586385][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.256198][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.256262][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.600535][T16072] FAULT_INJECTION: forcing a failure. [ 427.600535][T16072] name failslab, interval 1, probability 0, space 0, times 0 [ 427.600603][T16072] CPU: 1 UID: 0 PID: 16072 Comm: syz.0.3016 Not tainted syzkaller #0 PREEMPT(full) [ 427.600631][T16072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 427.600645][T16072] Call Trace: [ 427.600654][T16072] [ 427.600663][T16072] dump_stack_lvl+0xe8/0x150 [ 427.600705][T16072] should_fail_ex+0x3eb/0x540 [ 427.600738][T16072] should_failslab+0xa8/0x100 [ 427.600763][T16072] __kvmalloc_node_noprof+0x171/0x820 [ 427.600805][T16072] ? __kvmalloc_node_noprof+0x340/0x820 [ 427.600836][T16072] ? bpf_compute_postorder+0x179/0x9a0 [ 427.600867][T16072] ? bpf_compute_postorder+0x179/0x9a0 [ 427.600907][T16072] bpf_compute_postorder+0x179/0x9a0 [ 427.600940][T16072] ? __pfx_resolve_func_ptrs+0x10/0x10 [ 427.600978][T16072] bpf_check+0x298f/0x34e0 [ 427.601016][T16072] ? ktime_get_with_offset+0x93/0x2d0 [ 427.601047][T16072] ? ktime_get_with_offset+0x93/0x2d0 [ 427.601078][T16072] ? __pfx_bpf_check+0x10/0x10 [ 427.601105][T16072] ? bpf_obj_name_cpy+0x194/0x1e0 [ 427.601159][T16072] bpf_prog_load+0x14da/0x1c60 [ 427.601197][T16072] ? __pfx_bpf_prog_load+0x10/0x10 [ 427.601250][T16072] __sys_bpf+0xd86/0xe00 [ 427.601282][T16072] ? __pfx___sys_bpf+0x10/0x10 [ 427.601342][T16072] ? ksys_write+0x242/0x270 [ 427.601376][T16072] ? __pfx_ksys_write+0x10/0x10 [ 427.601415][T16072] __x64_sys_bpf+0xba/0xd0 [ 427.601451][T16072] do_syscall_64+0x166/0x520 [ 427.601480][T16072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.601503][T16072] ? clear_bhb_loop+0x70/0xc0 [ 427.601531][T16072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.601554][T16072] RIP: 0033:0x7f0d5099fb19 [ 427.601574][T16072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.601594][T16072] RSP: 002b:00007f0d518fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 427.601617][T16072] RAX: ffffffffffffffda RBX: 00007f0d50c25fa0 RCX: 00007f0d5099fb19 [ 427.601633][T16072] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 427.601646][T16072] RBP: 00007f0d518fd090 R08: 0000000000000000 R09: 0000000000000000 [ 427.601660][T16072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 427.601672][T16072] R13: 00007f0d50c26038 R14: 00007f0d50c25fa0 R15: 00007fffbaefe538 [ 427.601709][T16072] [ 428.635398][T16095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2920'. [ 428.871506][T16101] netlink: 'syz.4.3026': attribute type 1 has an invalid length. [ 429.080909][T16112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3026'. [ 429.100346][T16114] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3026'. [ 429.290069][T16102] 8021q: adding VLAN 0 to HW filter on device bond9 [ 429.305277][T16102] bond8: (slave bond9): making interface the new active one [ 429.314607][T16102] bond8: (slave bond9): Enslaving as an active interface with an up link [ 429.462445][T16112] 8021q: adding VLAN 0 to HW filter on device bond8 [ 429.617390][ T5643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 429.627341][ T5643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 429.648222][ T5643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 429.653310][ T5643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 429.663630][ T5643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 430.048032][T16132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3030'. [ 430.769662][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3034'. [ 431.038296][ T1097] IPVS: starting estimator thread 0... [ 431.111143][T16165] netlink: 'syz.0.3035': attribute type 10 has an invalid length. [ 431.129454][T16161] IPVS: using max 27 ests per chain, 64800 per kthread [ 431.259560][ T1166] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.259603][ T1166] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.259633][ T1166] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 431.392327][T16165] team0: Port device netdevsim1 removed [ 431.764128][ T53] Bluetooth: hci0: command tx timeout [ 432.080836][T16188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3037'. [ 432.679945][T16208] netlink: 'syz.0.3045': attribute type 11 has an invalid length. [ 432.931833][ T1166] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.931875][ T1166] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.931904][ T1166] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 433.152462][T16188] dummy0: left allmulticast mode [ 433.152580][T16188] dummy0: left promiscuous mode [ 433.152901][T16188] bridge0: port 3(dummy0) entered disabled state [ 433.199017][T16188] bridge_slave_1: left allmulticast mode [ 433.199085][T16188] bridge_slave_1: left promiscuous mode [ 433.199613][T16188] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.251737][T16188] bridge_slave_0: left allmulticast mode [ 433.252016][T16188] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.378931][T16212] batadv_slave_1: entered promiscuous mode [ 433.543056][ T1166] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.543100][ T1166] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.543142][ T1166] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 433.613302][T16207] batadv_slave_1: left promiscuous mode [ 433.655574][T16125] rxe_eth0 speed is unknown, defaulting to 1000 [ 433.845126][ T53] Bluetooth: hci0: command tx timeout [ 433.931474][ T1166] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.948567][ T1166] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.948603][ T1166] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 433.976665][T16235] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3047'. [ 435.350475][ T1166] bond9 (unregistering): (slave ip6gretap4): Releasing active interface [ 435.924618][ T53] Bluetooth: hci0: command tx timeout [ 437.047018][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 437.937116][ T1166] bond5 (unregistering): (slave gretap1): Releasing active interface [ 438.005049][ T53] Bluetooth: hci0: command tx timeout [ 438.067870][T16284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3060'. [ 438.081977][ T1166] bond4 (unregistering): (slave geneve2): Releasing active interface [ 439.173450][ T1166] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 439.271888][ T1166] bond1 (unregistering): Released all slaves [ 439.298142][ T1166] bond2 (unregistering): Released all slaves [ 439.320550][ T1166] bond3 (unregistering): Released all slaves [ 439.342452][ T1166] bond4 (unregistering): Released all slaves [ 439.376032][ T1166] bond5 (unregistering): Released all slaves [ 439.399435][ T1166] bond6 (unregistering): Released all slaves [ 439.434264][ T1166] bond7 (unregistering): Released all slaves [ 439.460339][ T1166] bond8 (unregistering): (slave macvlan2): Releasing backup interface [ 439.460760][ T1166] macvlan2: left allmulticast mode [ 439.462317][ T1166] bond8 (unregistering): (slave macvlan4): Releasing backup interface [ 439.462817][ T1166] macvlan4: left allmulticast mode [ 439.462834][ T1166] bond0 (unregistering): left allmulticast mode [ 439.491035][ T1166] bond8 (unregistering): Released all slaves [ 439.542045][ T1166] bond0 (unregistering): Released all slaves [ 439.576684][ T1166] bond9 (unregistering): Released all slaves [ 439.597660][ T1166] bond10 (unregistering): Released all slaves [ 439.630461][T16125] hsr0 speed is unknown, defaulting to 1000 [ 439.770116][T16284] vlan2: entered allmulticast mode [ 439.770143][T16284] bridge_slave_0: entered allmulticast mode [ 440.017126][ T1166] tipc: Left network mode [ 440.379906][T16299] xt_CT: You must specify a L4 protocol and not use inversions on it [ 441.288786][ T1166] hsr_slave_0: left promiscuous mode [ 441.293219][ T1166] hsr_slave_1: left promiscuous mode [ 441.339263][ T1166] veth0_to_bridge: left promiscuous mode [ 441.339490][ T1166] veth1_macvtap: left promiscuous mode [ 441.339524][ T1166] veth0_macvtap: left promiscuous mode [ 441.339690][ T1166] veth1_vlan: left promiscuous mode [ 441.339772][ T1166] veth0_vlan: left promiscuous mode [ 442.200969][T16343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3075'. [ 442.390407][ T1097] smbdirect: ib_dev[syz0] removed [ 442.861284][ T7429] infiniband syz0: ib_query_port failed (-19) [ 442.907876][T16359] tc_dump_action: action bad kind [ 443.510824][T16125] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.510965][T16125] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.511143][T16125] bridge_slave_0: entered allmulticast mode [ 443.541866][T16125] bridge_slave_0: entered promiscuous mode [ 443.571478][T16125] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.571593][T16125] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.571768][T16125] bridge_slave_1: entered allmulticast mode [ 443.593508][T16125] bridge_slave_1: entered promiscuous mode [ 443.785263][T16385] netlink: 'syz.3.3082': attribute type 1 has an invalid length. [ 443.966315][T16125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.973704][T16125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.251150][T16403] netlink: 'syz.0.3085': attribute type 1 has an invalid length. [ 444.359998][T16409] Bluetooth: MGMT ver 1.23 [ 444.421106][T16385] mac80211_hwsim hwsim23 wlan1: entered promiscuous mode [ 444.523440][T16403] 8021q: adding VLAN 0 to HW filter on device bond11 [ 444.586569][T16125] team0: Port device team_slave_0 added [ 444.586932][ T1166] IPVS: stop unused estimator thread 0... [ 444.593772][T16125] team0: Port device team_slave_1 added [ 444.696170][T16125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.696191][T16125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.696220][T16125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.701173][T16125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.701192][T16125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.701220][T16125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.938014][T16125] hsr_slave_0: entered promiscuous mode [ 444.944404][T16125] hsr_slave_1: entered promiscuous mode [ 444.952857][T16125] debugfs: 'hsr0' already exists in 'hsr' [ 444.952912][T16125] Cannot create hsr debugfs directory [ 445.060472][T16433] netlink: 'syz.4.3091': attribute type 19 has an invalid length. [ 445.364285][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 445.681546][T16452] x_tables: ip6_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0 [ 445.687355][ T7425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.972774][T16461] netlink: 'syz.4.3102': attribute type 1 has an invalid length. [ 446.006208][ T7414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.047735][T16461] 8021q: adding VLAN 0 to HW filter on device bond10 [ 446.075995][T16468] bond7: (slave erspan0): Releasing active interface [ 446.132612][T16468] bond10: (slave erspan0): making interface the new active one [ 446.145852][T16468] bond10: (slave erspan0): Enslaving as an active interface with an up link [ 446.238339][T16476] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3107'. [ 446.254913][T16476] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 446.262492][T16476] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3107'. [ 446.395201][T16125] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 446.406852][ T53] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 446.419460][ T53] Bluetooth: hci0: command 0x0c13 tx timeout [ 446.423931][T16125] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 446.439025][T16125] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 446.456945][T16125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 446.459507][T16125] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 446.483405][T16125] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 446.491764][T16125] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 446.509985][T16125] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 446.702157][T16125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.726906][ T7429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.777724][T16125] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.808670][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.808781][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.863595][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.863707][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.170671][T16510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.172432][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.297334][ T1166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.381370][T16515] netlink: 5716 bytes leftover after parsing attributes in process `syz.4.3116'. [ 447.381456][T16515] netlink: 5716 bytes leftover after parsing attributes in process `syz.4.3116'. [ 447.417807][T16515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3116'. [ 447.417834][T16515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3116'. [ 447.766157][ T7429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.217657][T16555] x_tables: duplicate entry at hook 3 [ 448.329964][T16564] x_tables: duplicate entry at hook 3 [ 448.442539][T16559] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.804427][ T7425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.870346][T16125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.965579][T16583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3125'. [ 449.130476][T16125] veth0_vlan: entered promiscuous mode [ 449.155868][T16588] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 449.172162][T16125] veth1_vlan: entered promiscuous mode [ 449.205080][ T53] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 449.205507][ T53] Bluetooth: hci0: command 0x0c13 tx timeout [ 449.382166][T16125] veth0_macvtap: entered promiscuous mode [ 449.392255][T16601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.392642][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.427288][T16125] veth1_macvtap: entered promiscuous mode [ 449.591720][T16604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3130'. [ 449.591747][T16604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3130'. [ 449.995009][T16601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.008716][T16601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.458721][T16625] ebt_limit: overflow, try lower: 0/0 [ 450.511509][T16125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.524621][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.524668][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.524708][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.524747][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.581266][T16125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.625019][ T1181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.625077][ T1181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.625118][ T1181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.625156][ T1181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.903272][T16633] 8021q: adding VLAN 0 to HW filter on device bond2 [ 451.041212][T16633] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3134'. [ 451.066931][ T1181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.066956][ T1181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.515241][T16654] ip6gretap0: entered promiscuous mode [ 451.563426][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.563450][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.633820][T16665] syz_tun: entered allmulticast mode [ 451.679904][T16665] syz_tun: left allmulticast mode [ 452.267920][T16701] FAULT_INJECTION: forcing a failure. [ 452.267920][T16701] name failslab, interval 1, probability 0, space 0, times 0 [ 452.267952][T16701] CPU: 1 UID: 0 PID: 16701 Comm: syz.1.3029 Not tainted syzkaller #0 PREEMPT(full) [ 452.267978][T16701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 452.267996][T16701] Call Trace: [ 452.268004][T16701] [ 452.268014][T16701] dump_stack_lvl+0xe8/0x150 [ 452.268054][T16701] should_fail_ex+0x3eb/0x540 [ 452.268088][T16701] should_failslab+0xa8/0x100 [ 452.268111][T16701] __kvmalloc_node_noprof+0x171/0x820 [ 452.268145][T16701] ? __kvmalloc_node_noprof+0x340/0x820 [ 452.268175][T16701] ? bpf_compute_postorder+0x127/0x9a0 [ 452.268206][T16701] ? bpf_compute_postorder+0x127/0x9a0 [ 452.268245][T16701] bpf_compute_postorder+0x127/0x9a0 [ 452.268287][T16701] ? __pfx_resolve_func_ptrs+0x10/0x10 [ 452.268326][T16701] bpf_check+0x298f/0x34e0 [ 452.268363][T16701] ? ktime_get_with_offset+0x93/0x2d0 [ 452.268395][T16701] ? ktime_get_with_offset+0x93/0x2d0 [ 452.268426][T16701] ? __pfx_bpf_check+0x10/0x10 [ 452.268455][T16701] ? bpf_obj_name_cpy+0x194/0x1e0 [ 452.268489][T16701] bpf_prog_load+0x14da/0x1c60 [ 452.268527][T16701] ? __pfx_bpf_prog_load+0x10/0x10 [ 452.268568][T16701] ? __might_fault+0xaf/0x130 [ 452.268600][T16701] __sys_bpf+0xd86/0xe00 [ 452.268632][T16701] ? __pfx___sys_bpf+0x10/0x10 [ 452.268668][T16701] ? __fget_files+0x2a/0x420 [ 452.268717][T16701] ? ksys_write+0x242/0x270 [ 452.268751][T16701] ? __pfx_ksys_write+0x10/0x10 [ 452.268789][T16701] __x64_sys_bpf+0xba/0xd0 [ 452.268825][T16701] do_syscall_64+0x166/0x520 [ 452.268854][T16701] ? trace_irq_disable+0x3b/0x140 [ 452.268884][T16701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.268908][T16701] ? clear_bhb_loop+0x70/0xc0 [ 452.268935][T16701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.268958][T16701] RIP: 0033:0x7f6f86f9fb19 [ 452.268979][T16701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.268998][T16701] RSP: 002b:00007f6f87e93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 452.269022][T16701] RAX: ffffffffffffffda RBX: 00007f6f87225fa0 RCX: 00007f6f86f9fb19 [ 452.269038][T16701] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 452.269052][T16701] RBP: 00007f6f87e93090 R08: 0000000000000000 R09: 0000000000000000 [ 452.269066][T16701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 452.269078][T16701] R13: 00007f6f87226038 R14: 00007f6f87225fa0 R15: 00007ffc411f73e8 [ 452.269113][T16701] [ 452.271565][T16688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3144'. [ 452.682305][T16688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3144'. [ 452.696567][T16688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3144'. [ 452.712623][T16700] netlink: 15 bytes leftover after parsing attributes in process `syz.0.3143'. [ 452.751366][T16688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3144'. [ 452.751660][T16688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3144'. [ 452.751910][T16688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3144'. [ 452.752155][T16688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3144'. [ 452.752412][T16688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3144'. [ 452.792944][T16688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3144'. [ 452.793918][T16688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3144'. [ 452.883774][T16709] netlink: 'syz.0.3143': attribute type 1 has an invalid length. [ 452.945772][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 452.950608][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 452.951465][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 452.978130][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 452.987820][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 453.458805][T16728] FAULT_INJECTION: forcing a failure. [ 453.458805][T16728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.458837][T16728] CPU: 0 UID: 0 PID: 16728 Comm: syz.0.3150 Not tainted syzkaller #0 PREEMPT(full) [ 453.458862][T16728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 453.458874][T16728] Call Trace: [ 453.458882][T16728] [ 453.458892][T16728] dump_stack_lvl+0xe8/0x150 [ 453.458933][T16728] should_fail_ex+0x3eb/0x540 [ 453.458967][T16728] _copy_to_user+0x31/0xb0 [ 453.458998][T16728] bpf_verifier_vlog+0x496/0x900 [ 453.459038][T16728] bpf_verifier_log_write+0x11d/0x1a0 [ 453.459070][T16728] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 453.459094][T16728] ? __kvmalloc_node_noprof+0x52a/0x820 [ 453.459128][T16728] ? record_arg_access+0x14f/0xa80 [ 453.459187][T16728] analyze_subprog+0x6cbe/0xb150 [ 453.459284][T16728] ? __pfx_analyze_subprog+0x10/0x10 [ 453.459313][T16728] ? kasan_save_track+0x4f/0x80 [ 453.459341][T16728] ? kasan_save_track+0x3e/0x80 [ 453.459370][T16728] ? __kasan_kmalloc+0x93/0xb0 [ 453.459399][T16728] ? __kvmalloc_node_noprof+0x50a/0x820 [ 453.459428][T16728] ? call_instance+0x263/0x560 [ 453.459455][T16728] ? bpf_compute_subprog_arg_access+0x2cb/0x15c0 [ 453.459483][T16728] ? bpf_compute_live_registers+0x10b0/0x1df0 [ 453.459512][T16728] ? bpf_check+0x2d0b/0x34e0 [ 453.459533][T16728] ? bpf_prog_load+0x14da/0x1c60 [ 453.459553][T16728] ? __sys_bpf+0xd86/0xe00 [ 453.459571][T16728] ? __x64_sys_bpf+0xba/0xd0 [ 453.459600][T16728] ? mas_prev_node+0xc12/0xe80 [ 453.459622][T16728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.459689][T16728] ? call_instance+0x263/0x560 [ 453.459716][T16728] ? rcu_is_watching+0x16/0xb0 [ 453.459749][T16728] ? call_instance+0x263/0x560 [ 453.459776][T16728] ? trace_kmalloc+0x2a/0xf0 [ 453.459806][T16728] ? call_instance+0x263/0x560 [ 453.459831][T16728] ? __kvmalloc_node_noprof+0x52a/0x820 [ 453.459864][T16728] ? __kvmalloc_node_noprof+0x340/0x820 [ 453.459893][T16728] ? call_instance+0x263/0x560 [ 453.459919][T16728] ? call_instance+0x263/0x560 [ 453.459964][T16728] bpf_compute_subprog_arg_access+0x2f1/0x15c0 [ 453.460020][T16728] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 453.460059][T16728] ? __kvmalloc_node_noprof+0x340/0x820 [ 453.460088][T16728] ? bpf_compute_live_registers+0x142/0x1df0 [ 453.460118][T16728] ? bpf_compute_live_registers+0x142/0x1df0 [ 453.460161][T16728] bpf_compute_live_registers+0x10b0/0x1df0 [ 453.460216][T16728] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 453.460269][T16728] bpf_check+0x2d0b/0x34e0 [ 453.460307][T16728] ? ktime_get_with_offset+0x93/0x2d0 [ 453.460339][T16728] ? ktime_get_with_offset+0x93/0x2d0 [ 453.460371][T16728] ? __pfx_bpf_check+0x10/0x10 [ 453.460399][T16728] ? bpf_obj_name_cpy+0x194/0x1e0 [ 453.460437][T16728] bpf_prog_load+0x14da/0x1c60 [ 453.460473][T16728] ? __pfx_bpf_prog_load+0x10/0x10 [ 453.460514][T16728] ? __might_fault+0xaf/0x130 [ 453.460545][T16728] __sys_bpf+0xd86/0xe00 [ 453.460576][T16728] ? __pfx___sys_bpf+0x10/0x10 [ 453.460610][T16728] ? __fget_files+0x2a/0x420 [ 453.460660][T16728] ? ksys_write+0x242/0x270 [ 453.460694][T16728] ? __pfx_ksys_write+0x10/0x10 [ 453.460732][T16728] __x64_sys_bpf+0xba/0xd0 [ 453.460769][T16728] do_syscall_64+0x166/0x520 [ 453.460798][T16728] ? trace_irq_disable+0x3b/0x140 [ 453.460828][T16728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.460851][T16728] ? clear_bhb_loop+0x70/0xc0 [ 453.460880][T16728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.460902][T16728] RIP: 0033:0x7f0d5099fb19 [ 453.460923][T16728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.460942][T16728] RSP: 002b:00007f0d518fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 453.460964][T16728] RAX: ffffffffffffffda RBX: 00007f0d50c25fa0 RCX: 00007f0d5099fb19 [ 453.460980][T16728] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 453.460994][T16728] RBP: 00007f0d518fd090 R08: 0000000000000000 R09: 0000000000000000 [ 453.461015][T16728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 453.461027][T16728] R13: 00007f0d50c26038 R14: 00007f0d50c25fa0 R15: 00007fffbaefe538 [ 453.461064][T16728] [ 454.527551][T16710] rxe_eth0 speed is unknown, defaulting to 1000 [ 455.045393][ T53] Bluetooth: hci3: command tx timeout [ 455.284520][ T5643] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 455.287029][ T53] Bluetooth: hci0: command 0x0c13 tx timeout [ 455.383982][T16710] hsr0 speed is unknown, defaulting to 1000 [ 456.020146][T16794] netlink: 'syz.3.3162': attribute type 1 has an invalid length. [ 456.143270][T16794] 8021q: adding VLAN 0 to HW filter on device bond1 [ 456.343218][T16799] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 456.452855][T16805] net_ratelimit: 1 callbacks suppressed [ 456.452879][T16805] Set syz1 is full, maxelem 6117 reached [ 456.671765][T16816] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 456.895626][T16826] netlink: 'syz.3.3168': attribute type 1 has an invalid length. [ 457.125848][ T5643] Bluetooth: hci3: command tx timeout [ 457.219850][T16846] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 457.263979][T16710] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.264551][T16710] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.264707][T16710] bridge_slave_0: entered allmulticast mode [ 457.266688][T16710] bridge_slave_0: entered promiscuous mode [ 457.296992][T16710] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.297191][T16710] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.297344][T16710] bridge_slave_1: entered allmulticast mode [ 457.299428][T16710] bridge_slave_1: entered promiscuous mode [ 457.516710][T16710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.538486][T16710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.733162][T16710] team0: Port device team_slave_0 added [ 457.753734][T16710] team0: Port device team_slave_1 added [ 457.846996][T16710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.847015][T16710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.847040][T16710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.851229][T16710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.851247][T16710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.851275][T16710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.209549][T16710] hsr_slave_0: entered promiscuous mode [ 458.211928][T16710] hsr_slave_1: entered promiscuous mode [ 458.215467][T16710] debugfs: 'hsr0' already exists in 'hsr' [ 458.215509][T16710] Cannot create hsr debugfs directory [ 458.261126][T16864] netlink: 'syz.1.3174': attribute type 4 has an invalid length. [ 458.305453][T16863] netlink: 'syz.1.3174': attribute type 4 has an invalid length. [ 459.207153][ T5643] Bluetooth: hci3: command tx timeout [ 459.222905][T16897] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 459.296626][T16710] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.296667][T16710] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.400335][T16897] veth4: entered allmulticast mode [ 459.490837][T16710] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.490877][T16710] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.551306][T16914] __nla_validate_parse: 26 callbacks suppressed [ 459.551329][T16914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3189'. [ 459.775853][T16710] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.775904][T16710] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.882968][ T62] IPVS: starting estimator thread 0... [ 459.974754][T16932] IPVS: using max 26 ests per chain, 62400 per kthread [ 460.022798][T16909] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3188'. [ 460.033048][T16710] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.033149][T16710] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.079535][T16909] netlink: 'syz.1.3188': attribute type 1 has an invalid length. [ 460.079561][T16909] netlink: 'syz.1.3188': attribute type 268 has an invalid length. [ 460.079579][T16909] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3188'. [ 460.142778][T16940] xt_CT: You must specify a L4 protocol and not use inversions on it [ 460.782835][T16956] veth3: entered promiscuous mode [ 460.882773][T16962] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 460.894573][T16963] netlink: 'syz.2.3197': attribute type 1 has an invalid length. [ 460.993589][T16963] 8021q: adding VLAN 0 to HW filter on device bond3 [ 461.001314][T16710] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 461.014471][T16710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 461.020058][T16966] bond3: entered promiscuous mode [ 461.020084][T16966] bond3: entered allmulticast mode [ 461.020126][T16976] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3198'. [ 461.055189][T16710] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 461.077576][T16710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 461.078613][T16710] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 461.102392][T16710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.102900][T16960] syzkaller0: entered promiscuous mode [ 461.102921][T16960] syzkaller0: entered allmulticast mode [ 461.123954][T16710] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 461.138009][T16710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 461.173664][T16960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3196'. [ 461.286104][ T5643] Bluetooth: hci3: command tx timeout [ 461.461339][T16710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.528494][T16710] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.563402][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.563577][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.597900][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.598014][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.633524][T16999] xt_CT: You must specify a L4 protocol and not use inversions on it [ 461.662076][T17000] netlink: 'syz.1.3203': attribute type 4 has an invalid length. [ 461.697087][T17001] netlink: 'syz.1.3203': attribute type 21 has an invalid length. [ 461.799251][T17011] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 462.576698][T17043] netlink: 'syz.1.3214': attribute type 1 has an invalid length. [ 462.977883][T17061] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3219'. [ 462.999573][T17068] xfrm0: entered allmulticast mode [ 463.013334][T17068] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 463.032867][T17068] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3222'. [ 463.081637][T17068] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3222'. [ 463.083307][T17068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3222'. [ 463.098563][T17068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3222'. [ 463.243001][T16710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.404642][T17079] syzkaller0: entered promiscuous mode [ 463.404668][T17079] syzkaller0: entered allmulticast mode [ 463.529945][T17083] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 463.790156][T17092] netlink: 'syz.3.3226': attribute type 11 has an invalid length. [ 463.790183][T17092] netlink: 'syz.3.3226': attribute type 13 has an invalid length. [ 464.088879][T16710] veth0_vlan: entered promiscuous mode [ 464.119298][T16710] veth1_vlan: entered promiscuous mode [ 464.181903][T17109] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 464.287313][ T5643] Bluetooth: hci4: unexpected cc 0x2060 length: 24 > 7 [ 464.287367][ T5643] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 464.310933][T17116] ip6tnl4: entered allmulticast mode [ 464.341534][T16710] veth0_macvtap: entered promiscuous mode [ 464.370261][T16710] veth1_macvtap: entered promiscuous mode [ 464.442061][T16710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.482233][T16710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.533261][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.533313][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.565258][T17124] openvswitch: netlink: Port 536870913 exceeds max allowable 65535 [ 464.565609][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 464.674307][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.689527][T17127] netlink: 'syz.2.3240': attribute type 1 has an invalid length. [ 464.782486][T17127] 8021q: adding VLAN 0 to HW filter on device bond4 [ 464.821364][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.821389][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.854161][ T1166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.899648][ T3042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.899672][ T3042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.721492][T17163] __nla_validate_parse: 8 callbacks suppressed [ 465.721514][T17163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3248'. [ 465.772316][T17162] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3250'. [ 465.905282][T17167] tipc: Enabling of bearer rejected, failed to enable media [ 466.108631][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 466.115225][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 466.131681][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 466.143089][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 466.143834][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 466.478755][T17181] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3254'. [ 466.478784][T17181] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3254'. [ 466.578876][T17184] netlink: 'syz.2.3255': attribute type 1 has an invalid length. [ 466.578902][T17184] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3255'. [ 466.748627][ T1166] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.748665][ T1166] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 37902 - 0 [ 467.012028][ T1166] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.012069][ T1166] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 37902 - 0 [ 467.354967][T17215] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3261'. [ 467.354997][T17215] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3261'. [ 467.396671][T17215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3261'. [ 467.420991][ T1166] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.421031][ T1166] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 37902 - 0 [ 467.515954][T17215] bridge_slave_1: left allmulticast mode [ 467.515987][T17215] bridge_slave_1: left promiscuous mode [ 467.516273][T17215] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.538061][T17215] bridge_slave_0: left allmulticast mode [ 467.538146][T17215] bridge_slave_0: left promiscuous mode [ 467.540318][T17215] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.672646][ T1166] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 467.799926][T17174] rxe_eth0 speed is unknown, defaulting to 1000 [ 468.195004][T17243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3268'. [ 468.244615][ T53] Bluetooth: hci1: command tx timeout [ 468.291300][T17245] No such timeout policy "syz1" [ 468.460902][ T1166] bond2 (unregistering): (slave ip6gretap2): Releasing active interface [ 468.520447][T17255] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3270'. [ 468.732888][ T1166] bond9 (unregistering): (slave bridge0): Releasing active interface [ 468.749152][ T1166] bond1 (unregistering): Released all slaves [ 468.770630][ T1166] team0: Port device macvlan2 removed [ 468.787315][ T1166] bond2 (unregistering): Released all slaves [ 468.809024][ T1166] bond3 (unregistering): (slave lo): Releasing backup interface [ 468.809506][ T1166] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 468.812175][ T1166] bond3 (unregistering): Released all slaves [ 468.855446][ T1166] bond4 (unregistering): Released all slaves [ 468.872741][ T1166] bond5 (unregistering): Released all slaves [ 468.892901][ T1166] bond6 (unregistering): Released all slaves [ 468.913629][ T1166] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 468.930479][ T1166] bond7 (unregistering): Released all slaves [ 468.952747][ T1166] bond8 (unregistering): (slave macvlan3): Releasing backup interface [ 468.953142][ T1166] macvlan3: left allmulticast mode [ 468.953155][ T1166] bond0 (unregistering): left allmulticast mode [ 468.975641][ T1166] bond8 (unregistering): Released all slaves [ 469.006674][ T1166] bond0 (unregistering): Released all slaves [ 469.028721][ T1166] bond9 (unregistering): Released all slaves [ 469.057725][ T1166] bond10 (unregistering): Released all slaves [ 469.075114][ T1166] bond11 (unregistering): Released all slaves [ 469.149947][T17174] hsr0 speed is unknown, defaulting to 1000 [ 469.253379][T17262] lo speed is unknown, defaulting to 1000 [ 469.296972][ T1166] tipc: Left network mode [ 469.378193][T17262] lo speed is unknown, defaulting to 1000 [ 469.379054][T17262] lo speed is unknown, defaulting to 1000 [ 469.379747][T17266] syz_tun: entered allmulticast mode [ 469.436627][ T62] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 469.436696][ T62] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 469.436736][ T62] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 469.455579][ T62] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 469.626354][T17267] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 469.626419][T17267] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 469.626472][T17267] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 470.201439][T17292] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 470.326326][ T53] Bluetooth: hci1: command tx timeout [ 470.797142][ T5297] 8021q: adding VLAN 0 to HW filter on device eth3 [ 471.000380][T17320] __nla_validate_parse: 2 callbacks suppressed [ 471.000402][T17320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3287'. [ 471.091393][T17262] infiniband syz0: set down [ 471.091416][T17262] infiniband syz0: added lo [ 471.202122][ T7415] lo speed is unknown, defaulting to 1000 [ 471.217415][T17262] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 471.217466][T17262] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 471.217511][T17262] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 471.398049][T17262] RDS/IB: syz0: added [ 471.398117][T17262] smc: adding ib device syz0 with port count 1 [ 471.398139][T17262] smc: ib device syz0 port 1 has no pnetid [ 471.466622][ T7415] lo speed is unknown, defaulting to 1000 [ 471.466756][T17262] lo speed is unknown, defaulting to 1000 [ 471.610814][T17342] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 471.760212][T17174] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.763529][T17174] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.763691][T17174] bridge_slave_0: entered allmulticast mode [ 471.773672][T17174] bridge_slave_0: entered promiscuous mode [ 471.799718][T17174] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.799902][T17174] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.800062][T17174] bridge_slave_1: entered allmulticast mode [ 471.832947][T17174] bridge_slave_1: entered promiscuous mode [ 472.025046][T17174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.046584][T17174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.217660][ T5297] 8021q: adding VLAN 0 to HW filter on device eth4 [ 472.226450][T17174] team0: Port device team_slave_0 added [ 472.252394][T17174] team0: Port device team_slave_1 added [ 472.335815][T17369] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3297'. [ 472.340224][T17174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.340963][T17174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.340994][T17174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.404642][ T5643] Bluetooth: hci1: command tx timeout [ 472.428324][T17174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.428340][T17174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.428366][T17174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.513361][T17367] netlink: 'syz.2.3298': attribute type 1 has an invalid length. [ 472.600187][T17367] 8021q: adding VLAN 0 to HW filter on device bond5 [ 472.619577][ T1166] hsr_slave_0: left promiscuous mode [ 472.620286][ T1166] hsr_slave_1: left promiscuous mode [ 472.640627][T17367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3298'. [ 472.657198][ T1166] veth1_macvtap: left promiscuous mode [ 472.657230][ T1166] veth0_macvtap: left promiscuous mode [ 472.657472][ T1166] veth1_vlan: left promiscuous mode [ 472.657523][ T1166] veth0_vlan: left promiscuous mode [ 472.746191][T17381] block nbd1: server does not support multiple connections per device. [ 472.748624][T17380] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3296'. [ 472.748655][T17380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3296'. [ 472.750916][T17381] block nbd1: shutting down sockets [ 473.031518][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 473.059618][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 473.190925][T17371] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 473.191012][T17262] lo speed is unknown, defaulting to 1000 [ 473.212741][T17367] bridge2: entered promiscuous mode [ 473.232867][T17367] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 473.487082][T17174] hsr_slave_0: entered promiscuous mode [ 473.488234][T17174] hsr_slave_1: entered promiscuous mode [ 473.489060][T17174] debugfs: 'hsr0' already exists in 'hsr' [ 473.489076][T17174] Cannot create hsr debugfs directory [ 473.641715][T17262] lo speed is unknown, defaulting to 1000 [ 473.671094][T17391] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 473.841868][ T1166] IPVS: stop unused estimator thread 0... [ 473.866903][T17389] xt_MASQUERADE: bad MAP_IPS. [ 474.010123][T17400] openvswitch: netlink: Duplicate or invalid key (type 0). [ 474.010167][T17400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.484525][ T5643] Bluetooth: hci1: command tx timeout [ 474.800904][T17412] netlink: 'syz.4.3308': attribute type 1 has an invalid length. [ 474.800932][T17412] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3308'. [ 474.801912][T17262] lo speed is unknown, defaulting to 1000 [ 474.838724][T17415] netlink: 'syz.4.3308': attribute type 29 has an invalid length. [ 475.209933][T17428] bridge0: port 3(veth0) entered blocking state [ 475.210057][T17428] bridge0: port 3(veth0) entered disabled state [ 475.210238][T17428] veth0: entered allmulticast mode [ 475.239435][T17428] veth0: entered promiscuous mode [ 475.578218][T17438] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 475.998090][T17457] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3315'. [ 476.040298][T17456] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 476.078281][T17262] lo speed is unknown, defaulting to 1000 [ 476.125428][T17174] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 476.157391][T17174] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 476.158868][T17174] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 476.190434][T17174] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.221847][T17174] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 476.239111][T17174] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 476.242070][T17174] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 476.279411][T17174] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 476.502943][T17174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.558892][T17174] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.583149][T14530] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.583265][T14530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.669085][T14530] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.669195][T14530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.907000][T17491] sctp: [Deprecated]: syz.4.3323 (pid 17491) Use of int in max_burst socket option. [ 476.907000][T17491] Use struct sctp_assoc_value instead [ 476.947877][T17262] lo speed is unknown, defaulting to 1000 [ 477.358580][T17505] Bluetooth: MGMT ver 1.23 [ 477.687751][T17262] lo speed is unknown, defaulting to 1000 [ 477.885104][T17521] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 478.547052][T17174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.769787][T17174] veth0_vlan: entered promiscuous mode [ 478.800787][T17174] veth1_vlan: entered promiscuous mode [ 478.956417][T17174] veth0_macvtap: entered promiscuous mode [ 478.987157][T17174] veth1_macvtap: entered promiscuous mode [ 479.023546][T17174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.055360][T17174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.134282][ T1166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.134341][ T1166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.134373][ T1166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.134405][ T1166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.555863][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.555888][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.696093][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.696119][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.790626][T17566] tipc: Enabling of bearer rejected, failed to enable media [ 479.938048][T17584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3340'. [ 480.454954][T17600] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3341'. [ 480.528926][T17605] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3341'. [ 480.698395][T17614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.920443][T17617] sctp: [Deprecated]: syz.4.3348 (pid 17617) Use of int in max_burst socket option deprecated. [ 480.920443][T17617] Use struct sctp_assoc_value instead [ 483.142895][T17652] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 483.143848][T17652] batman_adv: batadv0: Adding interface: gretap1 [ 483.143863][T17652] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.143899][T17652] batman_adv: batadv0: Interface activated: gretap1 [ 483.383353][T17672] netlink: 18708 bytes leftover after parsing attributes in process `syz.3.3358'. [ 483.383687][T17672] unsupported nlmsg_type 40 [ 483.547123][T17685] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 483.591644][T17690] netlink: 'syz.2.3363': attribute type 1 has an invalid length. [ 483.626760][T17690] 8021q: adding VLAN 0 to HW filter on device bond6 [ 483.636389][T17690] bond6: (slave erspan0): making interface the new active one [ 483.643798][T17690] bond6: (slave erspan0): Enslaving as an active interface with an up link [ 486.487569][T17725] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3375'. [ 486.576484][T17726] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 486.662689][T17735] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3380'. [ 486.707377][T17737] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20001 [ 486.757774][T17735] netlink: 'syz.3.3380': attribute type 1 has an invalid length. [ 486.939626][T17745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3384'. [ 486.979905][T17752] ip_tables: iptables: counters copy to user failed while replacing table [ 487.051540][T17752] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.061782][T17752] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.086971][T17754] netlink: 'syz.0.3388': attribute type 16 has an invalid length. [ 487.086996][T17754] netlink: 'syz.0.3388': attribute type 17 has an invalid length. [ 487.175793][T17754] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.175956][T17754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.179159][T17754] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.179303][T17754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.517637][T17772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3393'. [ 487.517662][T17772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3393'. [ 487.688319][T17787] FAULT_INJECTION: forcing a failure. [ 487.688319][T17787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.688352][T17787] CPU: 0 UID: 0 PID: 17787 Comm: syz.4.3397 Not tainted syzkaller #0 PREEMPT(full) [ 487.688376][T17787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 487.688389][T17787] Call Trace: [ 487.688398][T17787] [ 487.688407][T17787] dump_stack_lvl+0xe8/0x150 [ 487.688449][T17787] should_fail_ex+0x3eb/0x540 [ 487.688568][T17787] _copy_to_user+0x31/0xb0 [ 487.688652][T17787] bpf_verifier_vlog+0x496/0x900 [ 487.688692][T17787] bpf_verifier_log_write+0x11d/0x1a0 [ 487.688725][T17787] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 487.688749][T17787] ? __kvmalloc_node_noprof+0x52a/0x820 [ 487.688781][T17787] ? record_arg_access+0x14f/0xa80 [ 487.688822][T17787] analyze_subprog+0x648d/0xb150 [ 487.688912][T17787] ? __pfx_analyze_subprog+0x10/0x10 [ 487.688942][T17787] ? kasan_save_track+0x4f/0x80 [ 487.688970][T17787] ? kasan_save_track+0x3e/0x80 [ 487.688998][T17787] ? __kasan_kmalloc+0x93/0xb0 [ 487.689027][T17787] ? __kvmalloc_node_noprof+0x50a/0x820 [ 487.689057][T17787] ? call_instance+0x263/0x560 [ 487.689083][T17787] ? bpf_compute_subprog_arg_access+0x2cb/0x15c0 [ 487.689112][T17787] ? bpf_compute_live_registers+0x10b0/0x1df0 [ 487.689141][T17787] ? bpf_check+0x2d0b/0x34e0 [ 487.689171][T17787] ? bpf_prog_load+0x14da/0x1c60 [ 487.689191][T17787] ? __sys_bpf+0xd86/0xe00 [ 487.689210][T17787] ? __x64_sys_bpf+0xba/0xd0 [ 487.689238][T17787] ? mas_prev_node+0xc12/0xe80 [ 487.689261][T17787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.689325][T17787] ? call_instance+0x263/0x560 [ 487.689354][T17787] ? rcu_is_watching+0x16/0xb0 [ 487.689387][T17787] ? call_instance+0x263/0x560 [ 487.689414][T17787] ? trace_kmalloc+0x2a/0xf0 [ 487.689444][T17787] ? call_instance+0x263/0x560 [ 487.689472][T17787] ? __kvmalloc_node_noprof+0x52a/0x820 [ 487.689505][T17787] ? __kvmalloc_node_noprof+0x340/0x820 [ 487.689535][T17787] ? call_instance+0x263/0x560 [ 487.689562][T17787] ? call_instance+0x263/0x560 [ 487.689611][T17787] bpf_compute_subprog_arg_access+0x2f1/0x15c0 [ 487.689669][T17787] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 487.689707][T17787] ? __kvmalloc_node_noprof+0x340/0x820 [ 487.689738][T17787] ? bpf_compute_live_registers+0x142/0x1df0 [ 487.689767][T17787] ? bpf_compute_live_registers+0x142/0x1df0 [ 487.689805][T17787] bpf_compute_live_registers+0x10b0/0x1df0 [ 487.689863][T17787] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 487.689907][T17787] bpf_check+0x2d0b/0x34e0 [ 487.689945][T17787] ? ktime_get_with_offset+0x93/0x2d0 [ 487.689975][T17787] ? ktime_get_with_offset+0x93/0x2d0 [ 487.690007][T17787] ? __pfx_bpf_check+0x10/0x10 [ 487.690036][T17787] ? bpf_obj_name_cpy+0x194/0x1e0 [ 487.690069][T17787] bpf_prog_load+0x14da/0x1c60 [ 487.690107][T17787] ? __pfx_bpf_prog_load+0x10/0x10 [ 487.690148][T17787] ? __might_fault+0xaf/0x130 [ 487.690190][T17787] __sys_bpf+0xd86/0xe00 [ 487.690222][T17787] ? __pfx___sys_bpf+0x10/0x10 [ 487.690258][T17787] ? __fget_files+0x2a/0x420 [ 487.690353][T17787] ? ksys_write+0x242/0x270 [ 487.690412][T17787] ? __pfx_ksys_write+0x10/0x10 [ 487.690450][T17787] __x64_sys_bpf+0xba/0xd0 [ 487.690486][T17787] do_syscall_64+0x166/0x520 [ 487.690514][T17787] ? trace_irq_disable+0x3b/0x140 [ 487.690545][T17787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.690568][T17787] ? clear_bhb_loop+0x70/0xc0 [ 487.690595][T17787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.690618][T17787] RIP: 0033:0x7fd431d9fb19 [ 487.690639][T17787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.690658][T17787] RSP: 002b:00007fd432be0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 487.690683][T17787] RAX: ffffffffffffffda RBX: 00007fd432025fa0 RCX: 00007fd431d9fb19 [ 487.690699][T17787] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 487.690714][T17787] RBP: 00007fd432be0090 R08: 0000000000000000 R09: 0000000000000000 [ 487.690727][T17787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 487.690740][T17787] R13: 00007fd432026038 R14: 00007fd432025fa0 R15: 00007ffe696a6358 [ 487.690776][T17787] [ 488.153031][ T3042] IPVS: starting estimator thread 0... [ 488.205768][T17796] ip_tables: iptables: counters copy to user failed while replacing table [ 488.247389][T17794] IPVS: using max 28 ests per chain, 67200 per kthread [ 488.358593][T17800] syzkaller1: entered promiscuous mode [ 488.358620][T17800] syzkaller1: entered allmulticast mode [ 488.360539][T17800] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 488.525356][T17809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3409'. [ 488.715229][T17820] FAULT_INJECTION: forcing a failure. [ 488.715229][T17820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.715260][T17820] CPU: 0 UID: 0 PID: 17820 Comm: syz.3.3412 Not tainted syzkaller #0 PREEMPT(full) [ 488.715284][T17820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 488.715298][T17820] Call Trace: [ 488.715307][T17820] [ 488.715316][T17820] dump_stack_lvl+0xe8/0x150 [ 488.715357][T17820] should_fail_ex+0x3eb/0x540 [ 488.715393][T17820] _copy_to_user+0x31/0xb0 [ 488.715424][T17820] bpf_verifier_vlog+0x496/0x900 [ 488.715463][T17820] bpf_verifier_log_write+0x11d/0x1a0 [ 488.715496][T17820] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 488.715518][T17820] ? __kvmalloc_node_noprof+0x52a/0x820 [ 488.715551][T17820] ? record_arg_access+0x14f/0xa80 [ 488.715600][T17820] analyze_subprog+0x64ac/0xb150 [ 488.715690][T17820] ? __pfx_analyze_subprog+0x10/0x10 [ 488.715721][T17820] ? kasan_save_track+0x4f/0x80 [ 488.715750][T17820] ? kasan_save_track+0x3e/0x80 [ 488.715778][T17820] ? __kasan_kmalloc+0x93/0xb0 [ 488.715808][T17820] ? __kvmalloc_node_noprof+0x50a/0x820 [ 488.715837][T17820] ? call_instance+0x263/0x560 [ 488.715864][T17820] ? bpf_compute_subprog_arg_access+0x2cb/0x15c0 [ 488.715893][T17820] ? bpf_compute_live_registers+0x10b0/0x1df0 [ 488.715922][T17820] ? bpf_check+0x2d0b/0x34e0 [ 488.715944][T17820] ? bpf_prog_load+0x14da/0x1c60 [ 488.715969][T17820] ? __sys_bpf+0xd86/0xe00 [ 488.715988][T17820] ? __x64_sys_bpf+0xba/0xd0 [ 488.716016][T17820] ? mas_prev_node+0xc12/0xe80 [ 488.716039][T17820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.716106][T17820] ? call_instance+0x263/0x560 [ 488.716134][T17820] ? rcu_is_watching+0x16/0xb0 [ 488.716167][T17820] ? call_instance+0x263/0x560 [ 488.716194][T17820] ? trace_kmalloc+0x2a/0xf0 [ 488.716223][T17820] ? call_instance+0x263/0x560 [ 488.716251][T17820] ? __kvmalloc_node_noprof+0x52a/0x820 [ 488.716284][T17820] ? __kvmalloc_node_noprof+0x340/0x820 [ 488.716313][T17820] ? call_instance+0x263/0x560 [ 488.716340][T17820] ? call_instance+0x263/0x560 [ 488.716388][T17820] bpf_compute_subprog_arg_access+0x2f1/0x15c0 [ 488.716446][T17820] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 488.716483][T17820] ? __kvmalloc_node_noprof+0x340/0x820 [ 488.716532][T17820] ? bpf_compute_live_registers+0x142/0x1df0 [ 488.716561][T17820] ? bpf_compute_live_registers+0x142/0x1df0 [ 488.716606][T17820] bpf_compute_live_registers+0x10b0/0x1df0 [ 488.716663][T17820] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 488.716708][T17820] bpf_check+0x2d0b/0x34e0 [ 488.716745][T17820] ? ktime_get_with_offset+0x93/0x2d0 [ 488.716776][T17820] ? ktime_get_with_offset+0x93/0x2d0 [ 488.716808][T17820] ? __pfx_bpf_check+0x10/0x10 [ 488.716835][T17820] ? bpf_obj_name_cpy+0x194/0x1e0 [ 488.716869][T17820] bpf_prog_load+0x14da/0x1c60 [ 488.716907][T17820] ? __pfx_bpf_prog_load+0x10/0x10 [ 488.716948][T17820] ? __might_fault+0xaf/0x130 [ 488.716981][T17820] __sys_bpf+0xd86/0xe00 [ 488.717014][T17820] ? __pfx___sys_bpf+0x10/0x10 [ 488.717050][T17820] ? __fget_files+0x2a/0x420 [ 488.717099][T17820] ? ksys_write+0x242/0x270 [ 488.717134][T17820] ? __pfx_ksys_write+0x10/0x10 [ 488.717171][T17820] __x64_sys_bpf+0xba/0xd0 [ 488.717208][T17820] do_syscall_64+0x166/0x520 [ 488.717236][T17820] ? trace_irq_disable+0x3b/0x140 [ 488.717267][T17820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.717290][T17820] ? clear_bhb_loop+0x70/0xc0 [ 488.717319][T17820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.717340][T17820] RIP: 0033:0x7fa3ead9fb19 [ 488.717362][T17820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.717380][T17820] RSP: 002b:00007fa3ebc23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 488.717404][T17820] RAX: ffffffffffffffda RBX: 00007fa3eb025fa0 RCX: 00007fa3ead9fb19 [ 488.717419][T17820] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 488.717434][T17820] RBP: 00007fa3ebc23090 R08: 0000000000000000 R09: 0000000000000000 [ 488.717447][T17820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 488.717459][T17820] R13: 00007fa3eb026038 R14: 00007fa3eb025fa0 R15: 00007ffdd15f4598 [ 488.717496][T17820] [ 488.821231][T17821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3407'. [ 488.821303][T17821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3407'. [ 489.318126][T17824] netlink: 1404 bytes leftover after parsing attributes in process `syz.0.3413'. [ 490.003671][T17856] FAULT_INJECTION: forcing a failure. [ 490.003671][T17856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.003704][T17856] CPU: 0 UID: 0 PID: 17856 Comm: syz.1.3426 Not tainted syzkaller #0 PREEMPT(full) [ 490.003729][T17856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 490.003743][T17856] Call Trace: [ 490.003751][T17856] [ 490.003761][T17856] dump_stack_lvl+0xe8/0x150 [ 490.003802][T17856] should_fail_ex+0x3eb/0x540 [ 490.003835][T17856] _copy_to_user+0x31/0xb0 [ 490.003867][T17856] bpf_verifier_vlog+0x496/0x900 [ 490.003906][T17856] verbose+0x11d/0x1a0 [ 490.003953][T17856] ? __pfx_verbose+0x10/0x10 [ 490.003990][T17856] ? lock_acquire+0x115/0x350 [ 490.004025][T17856] print_bpf_insn+0x197b/0x2a90 [ 490.004053][T17856] ? __pfx_verbose+0x10/0x10 [ 490.004082][T17856] ? __might_fault+0xaf/0x130 [ 490.004107][T17856] ? __pfx_print_bpf_insn+0x10/0x10 [ 490.004131][T17856] ? _copy_to_user+0x8a/0xb0 [ 490.004160][T17856] ? bpf_verifier_vlog+0x58d/0x900 [ 490.004198][T17856] ? bpf_verifier_log_write+0x11d/0x1a0 [ 490.004228][T17856] bpf_verbose_insn+0xcb/0x130 [ 490.004260][T17856] ? __pfx_bpf_verbose_insn+0x10/0x10 [ 490.004291][T17856] ? __pfx_verbose+0x10/0x10 [ 490.004320][T17856] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 490.004353][T17856] ? record_arg_access+0x14f/0xa80 [ 490.004393][T17856] analyze_subprog+0x649d/0xb150 [ 490.004483][T17856] ? __pfx_analyze_subprog+0x10/0x10 [ 490.004512][T17856] ? kasan_save_track+0x4f/0x80 [ 490.004541][T17856] ? kasan_save_track+0x3e/0x80 [ 490.004569][T17856] ? __kasan_kmalloc+0x93/0xb0 [ 490.004599][T17856] ? __kvmalloc_node_noprof+0x50a/0x820 [ 490.004628][T17856] ? call_instance+0x263/0x560 [ 490.004655][T17856] ? bpf_compute_subprog_arg_access+0x2cb/0x15c0 [ 490.004685][T17856] ? bpf_compute_live_registers+0x10b0/0x1df0 [ 490.004714][T17856] ? bpf_check+0x2d0b/0x34e0 [ 490.004735][T17856] ? bpf_prog_load+0x14da/0x1c60 [ 490.004755][T17856] ? __sys_bpf+0xd86/0xe00 [ 490.004774][T17856] ? __x64_sys_bpf+0xba/0xd0 [ 490.004804][T17856] ? mas_prev_node+0xc12/0xe80 [ 490.004826][T17856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.004893][T17856] ? call_instance+0x263/0x560 [ 490.004920][T17856] ? rcu_is_watching+0x16/0xb0 [ 490.004960][T17856] ? call_instance+0x263/0x560 [ 490.004986][T17856] ? trace_kmalloc+0x2a/0xf0 [ 490.005016][T17856] ? call_instance+0x263/0x560 [ 490.005043][T17856] ? __kvmalloc_node_noprof+0x52a/0x820 [ 490.005076][T17856] ? __kvmalloc_node_noprof+0x340/0x820 [ 490.005105][T17856] ? call_instance+0x263/0x560 [ 490.005131][T17856] ? call_instance+0x263/0x560 [ 490.005178][T17856] bpf_compute_subprog_arg_access+0x2f1/0x15c0 [ 490.005235][T17856] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 490.005272][T17856] ? __kvmalloc_node_noprof+0x340/0x820 [ 490.005301][T17856] ? bpf_compute_live_registers+0x142/0x1df0 [ 490.005330][T17856] ? bpf_compute_live_registers+0x142/0x1df0 [ 490.005367][T17856] bpf_compute_live_registers+0x10b0/0x1df0 [ 490.005424][T17856] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 490.005467][T17856] bpf_check+0x2d0b/0x34e0 [ 490.005504][T17856] ? ktime_get_with_offset+0x93/0x2d0 [ 490.005534][T17856] ? ktime_get_with_offset+0x93/0x2d0 [ 490.005566][T17856] ? __pfx_bpf_check+0x10/0x10 [ 490.005593][T17856] ? bpf_obj_name_cpy+0x194/0x1e0 [ 490.005626][T17856] bpf_prog_load+0x14da/0x1c60 [ 490.005663][T17856] ? __pfx_bpf_prog_load+0x10/0x10 [ 490.005704][T17856] ? __might_fault+0xaf/0x130 [ 490.005735][T17856] __sys_bpf+0xd86/0xe00 [ 490.005767][T17856] ? __pfx___sys_bpf+0x10/0x10 [ 490.005802][T17856] ? __fget_files+0x2a/0x420 [ 490.005851][T17856] ? ksys_write+0x242/0x270 [ 490.005884][T17856] ? __pfx_ksys_write+0x10/0x10 [ 490.005921][T17856] __x64_sys_bpf+0xba/0xd0 [ 490.005964][T17856] do_syscall_64+0x166/0x520 [ 490.005992][T17856] ? trace_irq_disable+0x3b/0x140 [ 490.006021][T17856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.006044][T17856] ? clear_bhb_loop+0x70/0xc0 [ 490.006071][T17856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.006093][T17856] RIP: 0033:0x7f6f86f9fb19 [ 490.006113][T17856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.006131][T17856] RSP: 002b:00007f6f87e93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 490.006155][T17856] RAX: ffffffffffffffda RBX: 00007f6f87225fa0 RCX: 00007f6f86f9fb19 [ 490.006172][T17856] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 490.006185][T17856] RBP: 00007f6f87e93090 R08: 0000000000000000 R09: 0000000000000000 [ 490.006199][T17856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 490.006211][T17856] R13: 00007f6f87226038 R14: 00007f6f87225fa0 R15: 00007ffc411f73e8 [ 490.006248][T17856] [ 490.732577][T17872] x_tables: unsorted underflow at hook 3 [ 490.875951][T17882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3433'. [ 490.881937][T17883] netlink: 'syz.0.3435': attribute type 1 has an invalid length. [ 491.069009][T17871] macsec1: entered promiscuous mode [ 491.367683][T17898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.387726][T17898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.586002][ T3042] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.586949][ T3042] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.589486][ T3042] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.589528][ T3042] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.908203][T17913] tipc: Started in network mode [ 491.908258][T17913] tipc: Node identity de1c90284701, cluster identity 4711 [ 491.908438][T17913] tipc: Enabled bearer , priority 0 [ 491.909003][T17913] syzkaller0: entered promiscuous mode [ 491.909025][T17913] syzkaller0: entered allmulticast mode [ 491.980419][T17913] tipc: Resetting bearer [ 492.359795][T17912] tipc: Resetting bearer [ 492.382791][T17912] tipc: Disabling bearer [ 492.746197][T17946] geneve2: entered promiscuous mode [ 492.999473][ T30] audit: type=1804 audit(1794049191.352:4): pid=17957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3457" name="/newroot/59/cgroup.controllers" dev="tmpfs" ino=323 res=1 errno=0 [ 493.001114][ T30] audit: type=1800 audit(1794049191.352:5): pid=17957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3457" name="cgroup.controllers" dev="tmpfs" ino=323 res=0 errno=-22 [ 493.111841][T17961] __nla_validate_parse: 3 callbacks suppressed [ 493.111863][T17961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3456'. [ 493.158334][T17963] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3458'. [ 493.376011][T17977] netpci0: tun_chr_ioctl cmd 1074025673 [ 493.597433][T17994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3466'. [ 493.842927][T18002] netlink: 'syz.3.3470': attribute type 14 has an invalid length. [ 493.842950][T18002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3470'. [ 493.843193][T18003] netlink: 'syz.3.3470': attribute type 14 has an invalid length. [ 493.843209][T18003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3470'. [ 494.022109][T18009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3472'. [ 494.573610][T18037] netlink: 820 bytes leftover after parsing attributes in process `syz.0.3479'. [ 494.573699][T18037] netlink: 820 bytes leftover after parsing attributes in process `syz.0.3479'. [ 494.620106][T18039] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3481'. [ 494.637451][T18037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3479'. [ 494.659823][T18036] netlink: 'syz.0.3479': attribute type 4 has an invalid length. [ 494.742870][T18042] xt_IDLETIMER: timeout value is zero [ 494.872761][T18042] geneve3: entered allmulticast mode [ 495.249487][T17967] udevd[17967]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 496.310113][T18092] netlink: 'syz.1.3497': attribute type 2 has an invalid length. [ 496.310141][T18092] netlink: 'syz.1.3497': attribute type 2 has an invalid length. [ 496.313238][T18092] netlink: 'syz.1.3497': attribute type 12 has an invalid length. [ 496.691980][T18108] netlink: 'syz.1.3504': attribute type 4 has an invalid length. [ 496.752515][T18100] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.919117][T18100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.940463][T18100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.194470][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.194511][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 497.195618][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.195649][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 497.195690][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.195717][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 497.195754][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.195781][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 497.284510][ T5769] s`z1: Port: 1 Link DOWN [ 497.599759][T18131] ±ÿ: renamed from lo [ 498.113394][T18160] x_tables: duplicate underflow at hook 3 [ 498.139217][T18163] netlink: 'syz.1.3522': attribute type 1 has an invalid length. [ 498.180952][T18163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.182716][T18165] sch_tbf: peakrate 4 is lower than or equals to rate 124 ! [ 498.228160][T18163] bond1: (slave geneve5): making interface the new active one [ 498.242721][T18163] bond1: (slave geneve5): Enslaving as an active interface with an up link [ 498.250767][T18169] __nla_validate_parse: 16 callbacks suppressed [ 498.250818][T18169] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3524'. [ 498.418427][T18170] syzkaller1: entered promiscuous mode [ 498.418452][T18170] syzkaller1: entered allmulticast mode [ 498.420103][T18177] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 498.421717][T18177] ip_tables: iptables: counters copy to user failed while replacing table [ 498.781863][T18190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3529'. [ 498.867432][T18193] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 498.982643][T18196] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 499.187630][T18208] netlink: 'syz.1.3533': attribute type 1 has an invalid length. [ 499.228109][T18208] 8021q: adding VLAN 0 to HW filter on device bond2 [ 499.245245][T18208] bond2: (slave erspan0): making interface the new active one [ 499.247021][T18208] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 499.336927][T18212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3534'. [ 499.341850][T18213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3534'. [ 499.461508][T18217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3536'. [ 499.505675][T18217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3536'. [ 499.880539][T18231] bond1: entered allmulticast mode [ 499.897651][T18231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 500.188999][T18247] netlink: 'syz.4.3545': attribute type 1 has an invalid length. [ 500.301678][T18247] 8021q: adding VLAN 0 to HW filter on device bond2 [ 500.302974][T18253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3546'. [ 500.397170][T18251] bond2: (slave erspan0): making interface the new active one [ 500.403851][T18251] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 500.500730][T18257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3547'. [ 500.600427][T18261] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3549'. [ 500.653350][T18264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3550'. [ 500.937803][T18275] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 501.002510][T18266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.023601][T18266] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.090960][T18266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.319111][T18266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.340029][T18266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.372292][T18266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 501.372322][T18266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 501.432213][T18288] netlink: 'syz.1.3556': attribute type 1 has an invalid length. [ 501.432385][T18288] netlink: 'syz.1.3556': attribute type 1 has an invalid length. [ 501.432544][T18288] netlink: 'syz.1.3556': attribute type 1 has an invalid length. [ 501.432805][T18288] netlink: 'syz.1.3556': attribute type 1 has an invalid length. [ 501.432959][T18288] netlink: 'syz.1.3556': attribute type 1 has an invalid length. [ 501.433107][T18288] netlink: 'syz.1.3556': attribute type 1 has an invalid length. [ 501.445168][T18288] netlink: 'syz.1.3556': attribute type 1 has an invalid length. [ 501.445748][T18288] netlink: 'syz.1.3556': attribute type 1 has an invalid length. [ 501.446227][T18288] netlink: 'syz.1.3556': attribute type 1 has an invalid length. [ 501.475760][T18288] netlink: 'syz.1.3556': attribute type 1 has an invalid length. [ 501.549376][T18266] veth1_vlan: left promiscuous mode [ 501.562750][T18266] veth0_vlan: left promiscuous mode [ 501.588754][T18266] veth0_vlan: entered promiscuous mode [ 501.608290][T18266] veth1_vlan: entered promiscuous mode [ 501.636806][T18266] veth1_macvtap: left promiscuous mode [ 501.640155][T18266] veth0_macvtap: left promiscuous mode [ 501.655028][T18266] veth0_macvtap: entered promiscuous mode [ 501.657539][T18266] veth1_macvtap: entered promiscuous mode [ 501.683827][T18266] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 501.698840][T18266] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 501.701667][T18266] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 501.703376][T18266] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 501.731500][T18266] mac80211_hwsim hwsim23 wlan1: left promiscuous mode [ 501.747532][T18266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 501.851420][T18301] nbd: illegal input index 393236 [ 501.852750][ T7429] s`z1: Port: 1 Link ACTIVE [ 501.872992][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.873111][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.888862][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.889169][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.024446][T18305] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 502.159056][ T1166] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.159097][ T1166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.159125][ T1166] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 502.159833][ T1166] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.159865][ T1166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.159893][ T1166] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 502.203781][ T1166] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.203869][ T1166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.203942][ T1166] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 502.282147][ T1166] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.282213][ T1166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.282239][ T1166] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 502.313021][T18311] FAULT_INJECTION: forcing a failure. [ 502.313021][T18311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.313052][T18311] CPU: 0 UID: 0 PID: 18311 Comm: syz.1.3561 Not tainted syzkaller #0 PREEMPT(full) [ 502.313077][T18311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 502.313090][T18311] Call Trace: [ 502.313099][T18311] [ 502.313109][T18311] dump_stack_lvl+0xe8/0x150 [ 502.313152][T18311] should_fail_ex+0x3eb/0x540 [ 502.313178][T18311] _copy_to_user+0x31/0xb0 [ 502.313207][T18311] bpf_verifier_vlog+0x496/0x900 [ 502.313235][T18311] bpf_verifier_log_write+0x11d/0x1a0 [ 502.313260][T18311] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 502.313280][T18311] ? record_arg_access+0x14f/0xa80 [ 502.313310][T18311] analyze_subprog+0x6cbe/0xb150 [ 502.313377][T18311] ? __pfx_analyze_subprog+0x10/0x10 [ 502.313399][T18311] ? kasan_save_track+0x4f/0x80 [ 502.313421][T18311] ? kasan_save_track+0x3e/0x80 [ 502.313441][T18311] ? __kasan_kmalloc+0x93/0xb0 [ 502.313496][T18311] ? __kvmalloc_node_noprof+0x50a/0x820 [ 502.313528][T18311] ? call_instance+0x263/0x560 [ 502.313548][T18311] ? bpf_compute_subprog_arg_access+0x2cb/0x15c0 [ 502.313569][T18311] ? bpf_compute_live_registers+0x10b0/0x1df0 [ 502.313590][T18311] ? bpf_check+0x2d0b/0x34e0 [ 502.313606][T18311] ? bpf_prog_load+0x14da/0x1c60 [ 502.313620][T18311] ? __sys_bpf+0xd86/0xe00 [ 502.313633][T18311] ? __x64_sys_bpf+0xba/0xd0 [ 502.313655][T18311] ? mas_prev_node+0xc12/0xe80 [ 502.313670][T18311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.313718][T18311] ? call_instance+0x263/0x560 [ 502.313738][T18311] ? rcu_is_watching+0x16/0xb0 [ 502.313761][T18311] ? call_instance+0x263/0x560 [ 502.313785][T18311] ? trace_kmalloc+0x2a/0xf0 [ 502.313807][T18311] ? call_instance+0x263/0x560 [ 502.313827][T18311] ? __kvmalloc_node_noprof+0x52a/0x820 [ 502.313850][T18311] ? __kvmalloc_node_noprof+0x340/0x820 [ 502.313872][T18311] ? call_instance+0x263/0x560 [ 502.313891][T18311] ? call_instance+0x263/0x560 [ 502.313925][T18311] bpf_compute_subprog_arg_access+0x2f1/0x15c0 [ 502.313966][T18311] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 502.314018][T18311] ? __kvmalloc_node_noprof+0x340/0x820 [ 502.314047][T18311] ? bpf_compute_live_registers+0x142/0x1df0 [ 502.314074][T18311] ? bpf_compute_live_registers+0x142/0x1df0 [ 502.314112][T18311] bpf_compute_live_registers+0x10b0/0x1df0 [ 502.314170][T18311] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 502.314220][T18311] bpf_check+0x2d0b/0x34e0 [ 502.314258][T18311] ? ktime_get_with_offset+0x93/0x2d0 [ 502.314290][T18311] ? ktime_get_with_offset+0x93/0x2d0 [ 502.314321][T18311] ? __pfx_bpf_check+0x10/0x10 [ 502.314349][T18311] ? bpf_obj_name_cpy+0x194/0x1e0 [ 502.314383][T18311] bpf_prog_load+0x14da/0x1c60 [ 502.314420][T18311] ? __pfx_bpf_prog_load+0x10/0x10 [ 502.314460][T18311] ? __might_fault+0xaf/0x130 [ 502.314492][T18311] __sys_bpf+0xd86/0xe00 [ 502.314525][T18311] ? __pfx___sys_bpf+0x10/0x10 [ 502.314560][T18311] ? __fget_files+0x2a/0x420 [ 502.314605][T18311] ? ksys_write+0x242/0x270 [ 502.314640][T18311] ? __pfx_ksys_write+0x10/0x10 [ 502.314676][T18311] __x64_sys_bpf+0xba/0xd0 [ 502.314713][T18311] do_syscall_64+0x166/0x520 [ 502.314742][T18311] ? trace_irq_disable+0x3b/0x140 [ 502.314773][T18311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.314796][T18311] ? clear_bhb_loop+0x70/0xc0 [ 502.314824][T18311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.314846][T18311] RIP: 0033:0x7f6f86f9fb19 [ 502.314867][T18311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.314885][T18311] RSP: 002b:00007f6f87e93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 502.314916][T18311] RAX: ffffffffffffffda RBX: 00007f6f87225fa0 RCX: 00007f6f86f9fb19 [ 502.314928][T18311] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 502.314938][T18311] RBP: 00007f6f87e93090 R08: 0000000000000000 R09: 0000000000000000 [ 502.314948][T18311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 502.314958][T18311] R13: 00007f6f87226038 R14: 00007f6f87225fa0 R15: 00007ffc411f73e8 [ 502.314983][T18311] [ 502.798869][T18309] bond3: entered promiscuous mode [ 502.816169][T18309] 8021q: adding VLAN 0 to HW filter on device bond3 [ 502.877500][T18313] 8021q: adding VLAN 0 to HW filter on device bond3 [ 502.881425][T18313] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 502.881452][T18313] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 502.882288][T18313] bond3: (slave gre1): Opening slave failed [ 502.928460][ T5643] Bluetooth: hci2: unexpected cc 0x2060 length: 24 > 7 [ 503.205621][T18336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.475497][T18344] ip_tables: iptables: counters copy to user failed while replacing table [ 503.542158][T18347] __nla_validate_parse: 72 callbacks suppressed [ 503.542184][T18347] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3574'. [ 505.210959][T18371] Set syz1 is full, maxelem 6117 reached [ 505.270556][T18397] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3590'. [ 505.379857][ T30] audit: type=1804 audit(1794049203.732:6): pid=18397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3590" name="/newroot/83/cgroup.controllers" dev="tmpfs" ino=438 res=1 errno=0 [ 505.383729][ T30] audit: type=1800 audit(1794049203.732:7): pid=18397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3590" name="cgroup.controllers" dev="tmpfs" ino=438 res=0 errno=-22 [ 505.440180][T18402] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 505.442399][ T13] IPVS: starting estimator thread 0... [ 505.535655][T18406] IPVS: using max 25 ests per chain, 60000 per kthread [ 505.897271][T18424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3599'. [ 506.053694][T18432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3602'. [ 506.389909][T18449] Bluetooth: hci0: load_link_keys: too big key_count value 5120 [ 506.624808][T18462] FAULT_INJECTION: forcing a failure. [ 506.624808][T18462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.624842][T18462] CPU: 0 UID: 0 PID: 18462 Comm: syz.3.3613 Not tainted syzkaller #0 PREEMPT(full) [ 506.624869][T18462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 506.624882][T18462] Call Trace: [ 506.624890][T18462] [ 506.624901][T18462] dump_stack_lvl+0xe8/0x150 [ 506.624943][T18462] should_fail_ex+0x3eb/0x540 [ 506.624982][T18462] _copy_to_user+0x31/0xb0 [ 506.625014][T18462] bpf_verifier_vlog+0x496/0x900 [ 506.625055][T18462] bpf_verifier_log_write+0x11d/0x1a0 [ 506.625090][T18462] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 506.625120][T18462] ? record_arg_access+0x14f/0xa80 [ 506.625163][T18462] analyze_subprog+0x648d/0xb150 [ 506.625265][T18462] ? __pfx_analyze_subprog+0x10/0x10 [ 506.625297][T18462] ? kasan_save_track+0x4f/0x80 [ 506.625328][T18462] ? kasan_save_track+0x3e/0x80 [ 506.625357][T18462] ? __kasan_kmalloc+0x93/0xb0 [ 506.625388][T18462] ? __kvmalloc_node_noprof+0x50a/0x820 [ 506.625419][T18462] ? call_instance+0x263/0x560 [ 506.625446][T18462] ? bpf_compute_subprog_arg_access+0x2cb/0x15c0 [ 506.625475][T18462] ? bpf_compute_live_registers+0x10b0/0x1df0 [ 506.625506][T18462] ? bpf_check+0x2d0b/0x34e0 [ 506.625527][T18462] ? bpf_prog_load+0x14da/0x1c60 [ 506.625547][T18462] ? __sys_bpf+0xd86/0xe00 [ 506.625566][T18462] ? __x64_sys_bpf+0xba/0xd0 [ 506.625596][T18462] ? mas_prev_node+0xc12/0xe80 [ 506.625619][T18462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.625686][T18462] ? call_instance+0x263/0x560 [ 506.625715][T18462] ? rcu_is_watching+0x16/0xb0 [ 506.625749][T18462] ? call_instance+0x263/0x560 [ 506.625777][T18462] ? trace_kmalloc+0x2a/0xf0 [ 506.625807][T18462] ? call_instance+0x263/0x560 [ 506.625835][T18462] ? __kvmalloc_node_noprof+0x52a/0x820 [ 506.625867][T18462] ? __kvmalloc_node_noprof+0x340/0x820 [ 506.625898][T18462] ? call_instance+0x263/0x560 [ 506.625925][T18462] ? call_instance+0x263/0x560 [ 506.625973][T18462] bpf_compute_subprog_arg_access+0x2f1/0x15c0 [ 506.626031][T18462] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 506.626070][T18462] ? __kvmalloc_node_noprof+0x340/0x820 [ 506.626102][T18462] ? bpf_compute_live_registers+0x142/0x1df0 [ 506.626131][T18462] ? bpf_compute_live_registers+0x142/0x1df0 [ 506.626179][T18462] bpf_compute_live_registers+0x10b0/0x1df0 [ 506.626238][T18462] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 506.626283][T18462] bpf_check+0x2d0b/0x34e0 [ 506.626321][T18462] ? ktime_get_with_offset+0x93/0x2d0 [ 506.626354][T18462] ? ktime_get_with_offset+0x93/0x2d0 [ 506.626386][T18462] ? __pfx_bpf_check+0x10/0x10 [ 506.626414][T18462] ? bpf_obj_name_cpy+0x194/0x1e0 [ 506.626449][T18462] bpf_prog_load+0x14da/0x1c60 [ 506.626488][T18462] ? __pfx_bpf_prog_load+0x10/0x10 [ 506.626530][T18462] ? __might_fault+0xaf/0x130 [ 506.626564][T18462] __sys_bpf+0xd86/0xe00 [ 506.626597][T18462] ? __pfx___sys_bpf+0x10/0x10 [ 506.626634][T18462] ? __fget_files+0x2a/0x420 [ 506.626681][T18462] ? ksys_write+0x242/0x270 [ 506.626716][T18462] ? __pfx_ksys_write+0x10/0x10 [ 506.626754][T18462] __x64_sys_bpf+0xba/0xd0 [ 506.626789][T18462] do_syscall_64+0x166/0x520 [ 506.626817][T18462] ? trace_irq_disable+0x3b/0x140 [ 506.626848][T18462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.626871][T18462] ? clear_bhb_loop+0x70/0xc0 [ 506.626898][T18462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.626921][T18462] RIP: 0033:0x7fa3ead9fb19 [ 506.626942][T18462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.626961][T18462] RSP: 002b:00007fa3ebc23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 506.626986][T18462] RAX: ffffffffffffffda RBX: 00007fa3eb025fa0 RCX: 00007fa3ead9fb19 [ 506.627003][T18462] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 506.627017][T18462] RBP: 00007fa3ebc23090 R08: 0000000000000000 R09: 0000000000000000 [ 506.627031][T18462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 506.627043][T18462] R13: 00007fa3eb026038 R14: 00007fa3eb025fa0 R15: 00007ffdd15f4598 [ 506.627078][T18462] [ 507.045796][T18470] validate_nla: 57 callbacks suppressed [ 507.045856][T18470] netlink: 'syz.1.3616': attribute type 1 has an invalid length. [ 507.121550][T18465] bond7: Unable to set down delay as MII monitoring is disabled [ 507.132360][T18474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3617'. [ 507.132977][T18473] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3617'. [ 507.155363][T18465] bond7 (unregistering): Released all slaves [ 507.237732][T18470] 8021q: adding VLAN 0 to HW filter on device bond3 [ 507.258083][T18471] bond2: (slave erspan0): Releasing active interface [ 507.279821][T18471] bond3: (slave erspan0): making interface the new active one [ 507.282289][T18471] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 507.448436][T18488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3622'. [ 507.466713][T18488] ip6tnl2: entered allmulticast mode [ 507.473588][T18488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3622'. [ 507.512160][T18492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3621'. [ 507.724909][T18508] FAULT_INJECTION: forcing a failure. [ 507.724909][T18508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.724942][T18508] CPU: 1 UID: 0 PID: 18508 Comm: syz.3.3627 Not tainted syzkaller #0 PREEMPT(full) [ 507.724967][T18508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 507.724982][T18508] Call Trace: [ 507.724991][T18508] [ 507.725001][T18508] dump_stack_lvl+0xe8/0x150 [ 507.725044][T18508] should_fail_ex+0x3eb/0x540 [ 507.725083][T18508] _copy_to_user+0x31/0xb0 [ 507.725114][T18508] bpf_verifier_vlog+0x496/0x900 [ 507.725154][T18508] bpf_verifier_log_write+0x11d/0x1a0 [ 507.725187][T18508] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 507.725215][T18508] ? record_arg_access+0x14f/0xa80 [ 507.725257][T18508] analyze_subprog+0x648d/0xb150 [ 507.725350][T18508] ? __pfx_analyze_subprog+0x10/0x10 [ 507.725380][T18508] ? kasan_save_track+0x4f/0x80 [ 507.725411][T18508] ? kasan_save_track+0x3e/0x80 [ 507.725441][T18508] ? __kasan_kmalloc+0x93/0xb0 [ 507.725472][T18508] ? __kvmalloc_node_noprof+0x50a/0x820 [ 507.725503][T18508] ? call_instance+0x263/0x560 [ 507.725531][T18508] ? bpf_compute_subprog_arg_access+0x2cb/0x15c0 [ 507.725561][T18508] ? bpf_compute_live_registers+0x10b0/0x1df0 [ 507.725600][T18508] ? bpf_check+0x2d0b/0x34e0 [ 507.725622][T18508] ? bpf_prog_load+0x14da/0x1c60 [ 507.725644][T18508] ? __sys_bpf+0xd86/0xe00 [ 507.725663][T18508] ? __x64_sys_bpf+0xba/0xd0 [ 507.725694][T18508] ? mas_prev_node+0xc12/0xe80 [ 507.725717][T18508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.725785][T18508] ? call_instance+0x263/0x560 [ 507.725812][T18508] ? rcu_is_watching+0x16/0xb0 [ 507.725844][T18508] ? call_instance+0x263/0x560 [ 507.725870][T18508] ? trace_kmalloc+0x2a/0xf0 [ 507.725900][T18508] ? call_instance+0x263/0x560 [ 507.725929][T18508] ? __kvmalloc_node_noprof+0x52a/0x820 [ 507.725963][T18508] ? __kvmalloc_node_noprof+0x340/0x820 [ 507.725994][T18508] ? call_instance+0x263/0x560 [ 507.726022][T18508] ? call_instance+0x263/0x560 [ 507.726071][T18508] bpf_compute_subprog_arg_access+0x2f1/0x15c0 [ 507.726130][T18508] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 507.726171][T18508] ? __kvmalloc_node_noprof+0x340/0x820 [ 507.726202][T18508] ? bpf_compute_live_registers+0x142/0x1df0 [ 507.726233][T18508] ? bpf_compute_live_registers+0x142/0x1df0 [ 507.726273][T18508] bpf_compute_live_registers+0x10b0/0x1df0 [ 507.726331][T18508] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 507.726376][T18508] bpf_check+0x2d0b/0x34e0 [ 507.726415][T18508] ? ktime_get_with_offset+0x93/0x2d0 [ 507.726447][T18508] ? ktime_get_with_offset+0x93/0x2d0 [ 507.726480][T18508] ? __pfx_bpf_check+0x10/0x10 [ 507.726508][T18508] ? bpf_obj_name_cpy+0x194/0x1e0 [ 507.726542][T18508] bpf_prog_load+0x14da/0x1c60 [ 507.726589][T18508] ? __pfx_bpf_prog_load+0x10/0x10 [ 507.726632][T18508] ? __might_fault+0xaf/0x130 [ 507.726666][T18508] __sys_bpf+0xd86/0xe00 [ 507.726699][T18508] ? __pfx___sys_bpf+0x10/0x10 [ 507.726735][T18508] ? __fget_files+0x2a/0x420 [ 507.726786][T18508] ? ksys_write+0x242/0x270 [ 507.726821][T18508] ? __pfx_ksys_write+0x10/0x10 [ 507.726860][T18508] __x64_sys_bpf+0xba/0xd0 [ 507.726897][T18508] do_syscall_64+0x166/0x520 [ 507.726927][T18508] ? trace_irq_disable+0x3b/0x140 [ 507.726958][T18508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.726981][T18508] ? clear_bhb_loop+0x70/0xc0 [ 507.727010][T18508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.727033][T18508] RIP: 0033:0x7fa3ead9fb19 [ 507.727055][T18508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.727073][T18508] RSP: 002b:00007fa3ebc23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 507.727096][T18508] RAX: ffffffffffffffda RBX: 00007fa3eb025fa0 RCX: 00007fa3ead9fb19 [ 507.727113][T18508] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 507.727127][T18508] RBP: 00007fa3ebc23090 R08: 0000000000000000 R09: 0000000000000000 [ 507.727141][T18508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 507.727154][T18508] R13: 00007fa3eb026038 R14: 00007fa3eb025fa0 R15: 00007ffdd15f4598 [ 507.727190][T18508] [ 507.841112][T18510] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3628'. [ 508.282586][T18516] nbd1: detected capacity change from 0 to 63 [ 508.320291][ T5643] block nbd1: Receive control failed (result -32) [ 508.322364][ T1748] block nbd1: Send control failed (result -32) [ 508.322456][ T1748] block nbd1: Request send failed, requeueing [ 508.328725][ T1748] block nbd1: Dead connection, failed to find a fallback [ 508.328753][ T1748] block nbd1: shutting down sockets [ 508.337962][ T1748] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 508.338234][ T1748] Buffer I/O error on dev nbd1, logical block 0, async page read [ 508.385031][ T1717] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 508.385072][ T1717] Buffer I/O error on dev nbd1, logical block 1, async page read [ 508.385589][ T1717] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 508.385629][ T1717] Buffer I/O error on dev nbd1, logical block 2, async page read [ 508.385761][ T1717] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 508.385789][ T1717] Buffer I/O error on dev nbd1, logical block 3, async page read [ 508.386176][ T1717] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 508.386205][ T1717] Buffer I/O error on dev nbd1, logical block 0, async page read [ 508.386316][ T1717] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 508.386343][ T1717] Buffer I/O error on dev nbd1, logical block 1, async page read [ 508.386447][ T1717] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 508.386474][ T1717] Buffer I/O error on dev nbd1, logical block 2, async page read [ 508.386578][ T1717] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 508.386605][ T1717] Buffer I/O error on dev nbd1, logical block 3, async page read [ 508.386735][ T1717] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 508.386763][ T1717] Buffer I/O error on dev nbd1, logical block 0, async page read [ 508.386866][ T1717] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 508.386893][ T1717] Buffer I/O error on dev nbd1, logical block 1, async page read [ 508.427693][T18518] ldm_validate_partition_table(): Disk read failed. [ 508.446886][T18518] Dev nbd1: unable to read RDB block 0 [ 508.475196][T18518] nbd1: unable to read partition table [ 508.583567][T18518] ldm_validate_partition_table(): Disk read failed. [ 508.591825][T18518] Dev nbd1: unable to read RDB block 0 [ 508.593451][T18518] nbd1: unable to read partition table [ 508.817781][T18537] __nla_validate_parse: 1 callbacks suppressed [ 508.817806][T18537] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3637'. [ 508.820424][T18537] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3637'. [ 508.893630][T18539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3636'. [ 508.986783][T18539] [ 508.989190][T18539] ====================================================== [ 508.996237][T18539] WARNING: possible circular locking dependency detected [ 509.003297][T18539] syzkaller #0 Not tainted [ 509.007740][T18539] ------------------------------------------------------ [ 509.014786][T18539] syz.2.3636/18539 is trying to acquire lock: [ 509.020903][T18539] ffff88801d28d2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 509.030887][T18539] [ 509.030887][T18539] but task is already holding lock: [ 509.038276][T18539] ffffffff90c20c20 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 509.047117][T18539] [ 509.047117][T18539] which lock already depends on the new lock. [ 509.047117][T18539] [ 509.057551][T18539] [ 509.057551][T18539] the existing dependency chain (in reverse order) is: [ 509.066593][T18539] [ 509.066593][T18539] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 509.073850][T18539] __mutex_lock+0x197/0x15a0 [ 509.078998][T18539] get_device_parent+0x16f/0x3a0 [ 509.084493][T18539] device_add+0x2d4/0xb80 [ 509.089370][T18539] device_create+0x269/0x300 [ 509.094515][T18539] msr_device_create+0x33/0x50 [ 509.099917][T18539] cpuhp_invoke_callback+0x434/0x810 [ 509.105774][T18539] cpuhp_thread_fun+0x362/0x780 [ 509.111174][T18539] smpboot_thread_fn+0x5f8/0xb30 [ 509.116670][T18539] kthread+0x38b/0x480 [ 509.121283][T18539] ret_from_fork+0x514/0xb70 [ 509.126422][T18539] ret_from_fork_asm+0x1a/0x30 [ 509.131728][T18539] [ 509.131728][T18539] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 509.139307][T18539] cpuhp_thread_fun+0x127/0x780 [ 509.144709][T18539] smpboot_thread_fn+0x5f8/0xb30 [ 509.150194][T18539] kthread+0x38b/0x480 [ 509.154801][T18539] ret_from_fork+0x514/0xb70 [ 509.159957][T18539] ret_from_fork_asm+0x1a/0x30 [ 509.165264][T18539] [ 509.165264][T18539] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 509.173041][T18539] cpus_read_lock+0x3d/0x160 [ 509.178179][T18539] static_key_slow_inc+0x12/0x30 [ 509.183661][T18539] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 509.190002][T18539] nbd_genl_foreach_sock+0x265/0x450 [ 509.195832][T18539] nbd_genl_reconfigure+0xbbb/0x1040 [ 509.201654][T18539] genl_family_rcv_msg_doit+0x233/0x340 [ 509.207846][T18539] genl_rcv_msg+0x614/0x7a0 [ 509.212892][T18539] netlink_rcv_skb+0x226/0x4a0 [ 509.218206][T18539] genl_rcv+0x28/0x40 [ 509.222729][T18539] netlink_unicast+0x8ef/0xa80 [ 509.228036][T18539] netlink_sendmsg+0x7f0/0xb20 [ 509.233334][T18539] sock_sendmsg_nosec+0x14e/0x190 [ 509.238997][T18539] ____sys_sendmsg+0x54e/0x850 [ 509.244300][T18539] ___sys_sendmsg+0x2a5/0x360 [ 509.249537][T18539] __x64_sys_sendmsg+0x1b1/0x290 [ 509.255022][T18539] do_syscall_64+0x166/0x520 [ 509.260162][T18539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.266597][T18539] [ 509.266597][T18539] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 509.274272][T18539] __mutex_lock+0x197/0x15a0 [ 509.279417][T18539] nbd_queue_rq+0x373/0xff0 [ 509.284483][T18539] blk_mq_dispatch_rq_list+0x499/0x1990 [ 509.290689][T18539] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 509.297608][T18539] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 509.304129][T18539] blk_mq_run_work_fn+0x167/0x2f0 [ 509.309707][T18539] process_scheduled_works+0xc3d/0x1630 [ 509.315795][T18539] worker_thread+0xa47/0xfb0 [ 509.320929][T18539] kthread+0x38b/0x480 [ 509.325540][T18539] ret_from_fork+0x514/0xb70 [ 509.330668][T18539] ret_from_fork_asm+0x1a/0x30 [ 509.335976][T18539] [ 509.335976][T18539] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 509.343207][T18539] __mutex_lock+0x197/0x15a0 [ 509.348339][T18539] nbd_queue_rq+0xc1/0xff0 [ 509.353301][T18539] blk_mq_dispatch_rq_list+0x499/0x1990 [ 509.359416][T18539] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 509.366299][T18539] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 509.372839][T18539] blk_mq_run_work_fn+0x167/0x2f0 [ 509.378434][T18539] process_scheduled_works+0xc3d/0x1630 [ 509.384547][T18539] worker_thread+0xa47/0xfb0 [ 509.389701][T18539] kthread+0x38b/0x480 [ 509.394320][T18539] ret_from_fork+0x514/0xb70 [ 509.399484][T18539] ret_from_fork_asm+0x1a/0x30 [ 509.404794][T18539] [ 509.404794][T18539] -> #5 (set->srcu){.+.+}-{0:0}: [ 509.411944][T18539] __synchronize_srcu+0xca/0x2f0 [ 509.417476][T18539] elevator_switch+0x1e8/0x7b0 [ 509.422897][T18539] elevator_change+0x2fa/0x480 [ 509.428295][T18539] elevator_set_default+0x375/0x440 [ 509.434049][T18539] blk_register_queue+0x404/0x4f0 [ 509.439680][T18539] __add_disk+0x6b8/0xdb0 [ 509.444555][T18539] add_disk_fwnode+0x100/0x3a0 [ 509.449873][T18539] nbd_dev_add+0x733/0xb60 [ 509.454828][T18539] nbd_init+0x168/0x1f0 [ 509.459530][T18539] do_one_initcall+0x250/0x870 [ 509.464859][T18539] do_initcall_level+0x10a/0x1a0 [ 509.470342][T18539] do_initcalls+0x59/0xa0 [ 509.475215][T18539] kernel_init_freeable+0x29d/0x3e0 [ 509.480991][T18539] kernel_init+0x22/0x1d0 [ 509.485919][T18539] ret_from_fork+0x514/0xb70 [ 509.491074][T18539] ret_from_fork_asm+0x1a/0x30 [ 509.496392][T18539] [ 509.496392][T18539] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 509.504238][T18539] __mutex_lock+0x197/0x15a0 [ 509.509393][T18539] elevator_change+0x1af/0x480 [ 509.514716][T18539] elevator_set_none+0xb5/0x140 [ 509.520118][T18539] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 509.526466][T18539] nbd_start_device+0x189/0xb30 [ 509.531862][T18539] nbd_genl_connect+0x167d/0x1cd0 [ 509.537435][T18539] genl_family_rcv_msg_doit+0x233/0x340 [ 509.543529][T18539] genl_rcv_msg+0x614/0x7a0 [ 509.548605][T18539] netlink_rcv_skb+0x226/0x4a0 [ 509.553928][T18539] genl_rcv+0x28/0x40 [ 509.558449][T18539] netlink_unicast+0x8ef/0xa80 [ 509.563761][T18539] netlink_sendmsg+0x7f0/0xb20 [ 509.569060][T18539] sock_sendmsg_nosec+0x14e/0x190 [ 509.574631][T18539] ____sys_sendmsg+0x54e/0x850 [ 509.579939][T18539] ___sys_sendmsg+0x2a5/0x360 [ 509.585156][T18539] __x64_sys_sendmsg+0x1b1/0x290 [ 509.590629][T18539] do_syscall_64+0x166/0x520 [ 509.595767][T18539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.602202][T18539] [ 509.602202][T18539] -> #3 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 509.610831][T18539] blk_alloc_queue+0x544/0x690 [ 509.616167][T18539] __blk_mq_alloc_disk+0x194/0x390 [ 509.621842][T18539] nbd_dev_add+0x494/0xb60 [ 509.626800][T18539] nbd_init+0x168/0x1f0 [ 509.631508][T18539] do_one_initcall+0x250/0x870 [ 509.636808][T18539] do_initcall_level+0x10a/0x1a0 [ 509.642299][T18539] do_initcalls+0x59/0xa0 [ 509.647166][T18539] kernel_init_freeable+0x29d/0x3e0 [ 509.652908][T18539] kernel_init+0x22/0x1d0 [ 509.657793][T18539] ret_from_fork+0x514/0xb70 [ 509.662929][T18539] ret_from_fork_asm+0x1a/0x30 [ 509.668237][T18539] [ 509.668237][T18539] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 509.675496][T18539] fs_reclaim_acquire+0x71/0x100 [ 509.681007][T18539] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 509.687280][T18539] alloc_inode+0xb8/0x1b0 [ 509.692226][T18539] iget_locked+0x12c/0x690 [ 509.697189][T18539] kernfs_get_inode+0x4f/0x770 [ 509.702495][T18539] kernfs_get_tree+0x5dc/0x9a0 [ 509.707870][T18539] vfs_get_tree+0x92/0x2a0 [ 509.712891][T18539] do_new_mount+0x325/0xb00 [ 509.717987][T18539] __se_sys_mount+0x31d/0x420 [ 509.723213][T18539] do_syscall_64+0x166/0x520 [ 509.728350][T18539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.734784][T18539] [ 509.734784][T18539] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 509.742793][T18539] down_write+0x91/0x200 [ 509.747598][T18539] kernfs_remove_by_name_ns+0x4e/0x140 [ 509.753603][T18539] device_links_driver_bound+0x4ab/0x1440 [ 509.759965][T18539] driver_bound+0xd8/0x2e0 [ 509.765001][T18539] really_probe+0x774/0xae0 [ 509.770052][T18539] __driver_probe_device+0x1e8/0x360 [ 509.775877][T18539] driver_probe_device+0x4f/0x240 [ 509.781447][T18539] __device_attach_driver+0x270/0x410 [ 509.787356][T18539] bus_for_each_drv+0x258/0x2f0 [ 509.792753][T18539] __device_attach+0x2bd/0x430 [ 509.798053][T18539] device_initial_probe+0x9c/0x100 [ 509.803706][T18539] __bus_probe_device+0x126/0x220 [ 509.809282][T18539] device_add+0x7d7/0xb80 [ 509.814154][T18539] faux_device_create_with_groups+0x1a5/0x2b0 [ 509.820834][T18539] regulator_dummy_init+0x19/0x40 [ 509.826406][T18539] regulator_init+0xca/0x110 [ 509.831544][T18539] do_one_initcall+0x250/0x870 [ 509.836849][T18539] do_initcall_level+0x10a/0x1a0 [ 509.842328][T18539] do_initcalls+0x59/0xa0 [ 509.847199][T18539] kernel_init_freeable+0x29d/0x3e0 [ 509.852961][T18539] kernel_init+0x22/0x1d0 [ 509.857860][T18539] ret_from_fork+0x514/0xb70 [ 509.862988][T18539] ret_from_fork_asm+0x1a/0x30 [ 509.868292][T18539] [ 509.868292][T18539] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 509.876910][T18539] __lock_acquire+0x164c/0x2de0 [ 509.882326][T18539] lock_acquire+0x115/0x350 [ 509.887376][T18539] down_read+0x45/0x320 [ 509.892095][T18539] kernfs_remove+0x35/0x80 [ 509.897065][T18539] __kobject_del+0xe0/0x310 [ 509.902144][T18539] kobject_del+0x45/0x60 [ 509.906939][T18539] cleanup_glue_dir+0x1a3/0x220 [ 509.912338][T18539] device_del+0x77d/0x8f0 [ 509.917217][T18539] device_destroy+0xb2/0x1a0 [ 509.922348][T18539] macvtap_device_event+0x226/0x400 [ 509.928196][T18539] notifier_call_chain+0x1a5/0x3d0 [ 509.933851][T18539] unregister_netdevice_many_notify+0x1432/0x1d80 [ 509.940895][T18539] macvlan_device_event+0x93a/0x9e0 [ 509.946641][T18539] notifier_call_chain+0x1a5/0x3d0 [ 509.952291][T18539] unregister_netdevice_many_notify+0x1432/0x1d80 [ 509.959255][T18539] rtnl_dellink+0x5bc/0x810 [ 509.964891][T18539] rtnetlink_rcv_msg+0x802/0xc00 [ 509.970390][T18539] netlink_rcv_skb+0x226/0x4a0 [ 509.975709][T18539] netlink_unicast+0x8ef/0xa80 [ 509.981022][T18539] netlink_sendmsg+0x7f0/0xb20 [ 509.986328][T18539] sock_sendmsg_nosec+0x14e/0x190 [ 509.991904][T18539] ____sys_sendmsg+0x54e/0x850 [ 509.997206][T18539] ___sys_sendmsg+0x2a5/0x360 [ 510.002422][T18539] __x64_sys_sendmsg+0x1b1/0x290 [ 510.007906][T18539] do_syscall_64+0x166/0x520 [ 510.013057][T18539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.019487][T18539] [ 510.019487][T18539] other info that might help us debug this: [ 510.019487][T18539] [ 510.029733][T18539] Chain exists of: [ 510.029733][T18539] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 510.029733][T18539] [ 510.043871][T18539] Possible unsafe locking scenario: [ 510.043871][T18539] [ 510.051337][T18539] CPU0 CPU1 [ 510.056718][T18539] ---- ---- [ 510.062100][T18539] lock(gdp_mutex); [ 510.066011][T18539] lock(cpuhp_state-up); [ 510.072875][T18539] lock(gdp_mutex); [ 510.079304][T18539] rlock(&root->kernfs_supers_rwsem); [ 510.084779][T18539] [ 510.084779][T18539] *** DEADLOCK *** [ 510.084779][T18539] [ 510.092940][T18539] locks held by syz.2.3636/18539: 2, last CPU#0: [ 510.099282][T18539] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x419/0x810 [ 510.108383][T18539] #1: ffffffff90c20c20 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 510.117555][T18539] [ 510.117555][T18539] stack backtrace: [ 510.123487][T18539] CPU: 0 UID: 0 PID: 18539 Comm: syz.2.3636 Not tainted syzkaller #0 PREEMPT(full) [ 510.132874][T18539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 510.142951][T18539] Call Trace: [ 510.146247][T18539] [ 510.149196][T18539] dump_stack_lvl+0xe8/0x150 [ 510.153820][T18539] print_circular_bug+0x2e2/0x300 [ 510.158873][T18539] check_noncircular+0x12f/0x150 [ 510.163860][T18539] __lock_acquire+0x164c/0x2de0 [ 510.168747][T18539] lock_acquire+0x115/0x350 [ 510.173271][T18539] ? kernfs_remove+0x35/0x80 [ 510.177905][T18539] down_read+0x45/0x320 [ 510.182091][T18539] ? kernfs_remove+0x35/0x80 [ 510.186706][T18539] kernfs_remove+0x35/0x80 [ 510.191138][T18539] __kobject_del+0xe0/0x310 [ 510.195687][T18539] kobject_del+0x45/0x60 [ 510.199949][T18539] cleanup_glue_dir+0x1a3/0x220 [ 510.204819][T18539] device_del+0x77d/0x8f0 [ 510.209168][T18539] ? __pfx_device_del+0x10/0x10 [ 510.214040][T18539] ? kobject_put+0x50f/0x550 [ 510.218655][T18539] device_destroy+0xb2/0x1a0 [ 510.223274][T18539] ? __pfx_device_destroy+0x10/0x10 [ 510.228499][T18539] ? kernfs_remove_by_name_ns+0x101/0x140 [ 510.234258][T18539] macvtap_device_event+0x226/0x400 [ 510.239497][T18539] ? __pfx_ipvlan_device_event+0x10/0x10 [ 510.245238][T18539] ? __pfx_macvtap_device_event+0x10/0x10 [ 510.250987][T18539] ? lockdep_rtnl_is_held+0x26/0x40 [ 510.256299][T18539] notifier_call_chain+0x1a5/0x3d0 [ 510.261451][T18539] unregister_netdevice_many_notify+0x1432/0x1d80 [ 510.267909][T18539] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 510.274722][T18539] ? netdev_upper_dev_unlink+0x99/0xe0 [ 510.280204][T18539] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 510.286208][T18539] ? macvlan_dellink+0x3e4/0x470 [ 510.291168][T18539] macvlan_device_event+0x93a/0x9e0 [ 510.296391][T18539] ? __pfx_ipvlan_device_event+0x10/0x10 [ 510.302050][T18539] ? __pfx_macvlan_device_event+0x10/0x10 [ 510.307787][T18539] ? lockdep_rtnl_is_held+0x26/0x40 [ 510.313017][T18539] notifier_call_chain+0x1a5/0x3d0 [ 510.318155][T18539] unregister_netdevice_many_notify+0x1432/0x1d80 [ 510.324610][T18539] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 510.331405][T18539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.337522][T18539] ? __pfx_veth_dellink+0x10/0x10 [ 510.342641][T18539] ? __pfx_veth_dellink+0x10/0x10 [ 510.347685][T18539] rtnl_dellink+0x5bc/0x810 [ 510.352214][T18539] ? __pfx_rtnl_dellink+0x10/0x10 [ 510.357259][T18539] ? __lock_acquire+0x747/0x2de0 [ 510.362246][T18539] ? lock_acquire+0x115/0x350 [ 510.366943][T18539] ? __pfx_rtnl_dellink+0x10/0x10 [ 510.372006][T18539] ? __pfx_rtnl_dellink+0x10/0x10 [ 510.377053][T18539] rtnetlink_rcv_msg+0x802/0xc00 [ 510.382023][T18539] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 510.387152][T18539] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 510.392628][T18539] ? __lock_acquire+0x747/0x2de0 [ 510.397588][T18539] netlink_rcv_skb+0x226/0x4a0 [ 510.402386][T18539] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 510.407862][T18539] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 510.413182][T18539] ? netlink_deliver_tap+0x2e/0x1b0 [ 510.418403][T18539] ? netlink_deliver_tap+0x2e/0x1b0 [ 510.423628][T18539] netlink_unicast+0x8ef/0xa80 [ 510.428424][T18539] netlink_sendmsg+0x7f0/0xb20 [ 510.433209][T18539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.438512][T18539] ? aa_sock_msg_perm+0x144/0x210 [ 510.443652][T18539] ? apparmor_socket_sendmsg+0x18b/0x360 [ 510.449413][T18539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.454740][T18539] sock_sendmsg_nosec+0x14e/0x190 [ 510.459809][T18539] ____sys_sendmsg+0x54e/0x850 [ 510.464641][T18539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.469975][T18539] ? import_iovec+0x73/0xa0 [ 510.474587][T18539] ___sys_sendmsg+0x2a5/0x360 [ 510.479289][T18539] ? __lock_acquire+0x747/0x2de0 [ 510.484264][T18539] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.489506][T18539] ? futex_wait+0x2a2/0x390 [ 510.494065][T18539] ? __fget_files+0x3a2/0x420 [ 510.498803][T18539] ? __fget_files+0x2a/0x420 [ 510.503437][T18539] __x64_sys_sendmsg+0x1b1/0x290 [ 510.508413][T18539] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.513924][T18539] do_syscall_64+0x166/0x520 [ 510.518542][T18539] ? trace_irq_disable+0x3b/0x140 [ 510.523773][T18539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.529867][T18539] ? clear_bhb_loop+0x70/0xc0 [ 510.534588][T18539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.540502][T18539] RIP: 0033:0x7fb1b939fb19 [ 510.544935][T18539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.564564][T18539] RSP: 002b:00007fb1ba220028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.573009][T18539] RAX: ffffffffffffffda RBX: 00007fb1b9625fa0 RCX: 00007fb1b939fb19 [ 510.581000][T18539] RDX: 0000000024048004 RSI: 0000200000000540 RDI: 0000000000000006 [ 510.588988][T18539] RBP: 00007fb1b9437b70 R08: 0000000000000000 R09: 0000000000000000 [ 510.596979][T18539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.604967][T18539] R13: 00007fb1b9626038 R14: 00007fb1b9625fa0 R15: 00007fff0d85a048 [ 510.612970][T18539] [ 510.773014][T18541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.781299][T18541] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.792137][T18541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.824154][T18541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.825936][T18541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.829368][T18541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 510.829406][T18541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 510.833284][T18541] veth1_vlan: left promiscuous mode [ 510.833938][T18541] veth0_vlan: left promiscuous mode [ 510.861840][T18541] veth0_vlan: entered promiscuous mode [ 510.870498][T18541] veth1_vlan: entered promiscuous mode [ 510.896912][T18541] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 510.897734][T18541] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 510.898619][T18541] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 510.899356][T18541] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 510.901017][T18541] vlan2: left promiscuous mode [ 510.901031][T18541] bond0: left promiscuous mode [ 510.901042][T18541] bond_slave_0: left promiscuous mode [ 510.901142][T18541] bond_slave_1: left promiscuous mode [ 510.911196][T18541] 8021q: adding VLAN 0 to HW filter on device bond1 [ 510.912078][T18541] 8021q: adding VLAN 0 to HW filter on device bond2 [ 510.969808][T18541] bond3: left promiscuous mode [ 510.970066][T18541] 8021q: adding VLAN 0 to HW filter on device bond3 [ 510.971087][T18541] 8021q: adding VLAN 0 to HW filter on device bond4 [ 510.972537][T18541] 8021q: adding VLAN 0 to HW filter on device bond5 [ 510.973449][T18541] bridge2: left promiscuous mode [ 511.006602][T18541] 8021q: adding VLAN 0 to HW filter on device bond6 [ 511.043360][ T62] bridge0: port 3(veth0) entered blocking state [ 511.043464][ T62] bridge0: port 3(veth0) entered forwarding state [ 511.058479][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.058564][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.060999][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.061056][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.110795][T18551] kthread_run failed with err -4 [ 511.154317][ T3042] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.154352][ T3042] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.154378][ T3042] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.154401][ T3042] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0