last executing test programs: 3.914648377s ago: executing program 4 (id=2238): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0000001}) (rerun: 32) ppoll(&(0x7f0000000380)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000580)={0xa0000004}) 3.598835157s ago: executing program 2 (id=2242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e570a7a4a78ebb13eb1dfb6c57571924dda3cd0", 0x14}], 0x1) 3.491404864s ago: executing program 2 (id=2246): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x800) ioctl$sock_proto_private(r1, 0x89e1, &(0x7f0000000100)="eb1114") sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x25dfdbfc, {0x0, 0x0, 0xe403, 0x0, 0x800, 0x610c3}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x5c}}, 0x0) 3.362701963s ago: executing program 2 (id=2247): r0 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x7fffffff}}]}}]}, 0x48}}, 0x20040084) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xd}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x3004c8b9}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x24048004) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) getsockopt$sock_timeval(r9, 0x1, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r11, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) getsockopt$inet_opts(r11, 0x0, 0x9, &(0x7f0000000100)=""/17, &(0x7f0000002040)=0x11) sendmmsg$unix(r10, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000003c0)="b18a475fbe26449b4d5863d6c14cb918827f3c3cebb00d7a50d1549dee4383e0dbc03e7b7e0287817f65131d63e357edc7c59a73e745b9361e3621189def49561be2c8bf85458ef048e0363b41fd5ddbdcac5c327c3220b10a4bcb0217698ed011023491e41ccce22f8b6e2e5717edc97157", 0x72}, {&(0x7f0000000780)="54649a7e5c4d1190b5aba18b62be5bae78f79058de38e6618a648eafc44a5a4be1cc9f0ad5bb9c000083e6f91055e8c411d593c80600000000000000183a38d136aa5a14b10320643243de4790d8ebe892c60d16bf1048ff7ea7d62042d9d78642663ba18903b1eb024086227b70b815d9c957a2b594e9f53b0f99f7275c591fd7c5707fd3b064f0e838618c8e1328cc3f249db250de1b2430dd52f1865dc8121535fefcd088f62bbcafe4015effc9abbb58ea1a418edd8f408ca7fb4d382941376653a86daabcb342c2e5cd0287", 0xce}, {&(0x7f0000000140)="9c0f900000", 0x5}, {&(0x7f0000000940)="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", 0xfffffe8b}], 0x4, 0x0, 0x0, 0x4004001}}], 0x1, 0x4040011) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000001d00070f000000000000080007000000", @ANYRES32=r12, @ANYBLOB="800072"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) 3.047464418s ago: executing program 4 (id=2250): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000810f00007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x15, 0x5, 0x0) getpeername$packet(r4, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r5, 0x1, 0x15, &(0x7f0000000e40)=""/4096, &(0x7f0000001e40)=0x1000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x401, 0x1000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) 2.814161198s ago: executing program 4 (id=2253): r0 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0xf7e}, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x8, [@type_tag={0x4, 0x0, 0x0, 0x12, 0x4}, @volatile={0xc, 0x0, 0x0, 0x9, 0x3}, @restrict={0xd, 0x0, 0x0, 0xb, 0x4}, @enum64={0x1, 0x3, 0x0, 0x13, 0x0, 0x9, [{0x7, 0x1, 0x8}, {0xd, 0x2, 0x5e}, {0x4, 0xfffffff9, 0xc1}]}, @volatile={0x7, 0x0, 0x0, 0x9, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x14000}}, @restrict={0x3, 0x0, 0x0, 0xb, 0x4}, @float={0x3, 0x0, 0x0, 0x10, 0x4}, @volatile={0x6, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x61, 0x2e, 0x61, 0x2e, 0x2e, 0x2e]}}, &(0x7f0000000300)=""/209, 0xbc, 0xd1, 0x0, 0xd36}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1e, 0x7, 0x0, 0xb, 0x2800, 0xffffffffffffffff, 0x3, '\x00', 0x0, r2, 0x2, 0x3, 0x4}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast, @random="ea6576681159", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @broadcast, @remote, @loopback}}}}, 0x0) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0) 2.743149181s ago: executing program 0 (id=2254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0x98}], 0x1, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000040)=0x80000004, 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000280)={'veth0_virt_wifi\x00', 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="10040000", @ANYRES16=r7, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="f10333008000e100ffffffffffff080211000000080211000001000000000000000000003f0003480301b3060204000587"], 0x410}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa8, r7, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x14, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x1}]}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0xff}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x7}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x54, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x5}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x40}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x91}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x1}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x40}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x879c}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x4}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x40}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x4}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x8}]}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_QUEUE={0x5}]}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000) close(0xffffffffffffffff) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 2.302662954s ago: executing program 1 (id=2256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x3}}, 0x26) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = socket$inet(0x2, 0x0, 0x2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f0000000640)={'filter\x00', 0x4}, 0x68) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r6, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfffffffffffffd58, &(0x7f0000000000), &(0x7f00000001c0)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110", 0x0, 0x0, 0x4}, 0x48) r8 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0x7}, 0x1c) listen(r8, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00f100", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x4e23, 0x4e22, 0x2, 0x1, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000000)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r12, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r9, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0x34, r12, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x24000080) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r17, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', r3, r17, 0x5, 0x4, 0x2}, 0x50) 2.081373766s ago: executing program 2 (id=2257): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011"], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011"], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001740)=""/208, 0xd0}, {&(0x7f0000000240)=""/84, 0x54}, {0x0}], 0x3}, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) (async) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3}, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0xc3}, {0xfffffffffffffffd, 0x1, 0x2, 0x7, 0x0, 0x2, 0x0, 0x1d}, {0x0, 0xfffffffffffffffa, 0x0, 0x2dd}, 0x0, 0x6e6bc0, 0x2}, [@tmpl={0x104, 0x5, [{{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x7ff}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x6c}, 0x2, @in6=@mcast2, 0xffffffff, 0x3, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x88000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="3a2205000a010000300012800b00010067656e6576650000200002"], 0x50}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="3a2205000a010000300012800b00010067656e6576650000200002"], 0x50}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) 1.928160311s ago: executing program 4 (id=2258): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) read(r3, &(0x7f0000000100)=""/28, 0x1c) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000440)=""/96, 0x60}, {0x0}, {&(0x7f0000000040)=""/117, 0x75}], 0x3, 0xe, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000ffff26bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1d950300bcb7040008000a00", @ANYRES32=r1, @ANYBLOB="140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB="7975cc9424b282e62c327a0b9daef59d5edeb342c6c2c174d715f915c19c7af863702c4f106a366e0441e06196183d88a956880f22757bd8df49e5423d"], 0x44}, 0x1, 0x0, 0x0, 0x24004854}, 0x8000002) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000080)=@get={0x1, 0x0, 0x78ba}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_FSCOUNTS(r5, 0x80205871, &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd0010000000004000700070100000807f3007500fcff0003000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x109, &(0x7f0000000640)=""/265, 0x41000}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x40) 1.814945688s ago: executing program 3 (id=2259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random="000500000020"}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000100)=0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth1\x00', {0x4}, 0x3ff}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a30000000050a014a00000000000000000a00000a0900010073797a31000000000c0002400000000000000002040004"], 0x58}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) 1.633438694s ago: executing program 2 (id=2260): syz_emit_ethernet(0x32, &(0x7f0000000640)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@rr={0x7, 0x3, 0xfd}, @ra={0x94, 0x4}]}}, @address_reply={0xd}}}}}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'lo\x00', 0x2000}) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = socket$inet6(0xa, 0x2, 0x7fffffff) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x400, @empty, 0x4}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x40000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x7, 0x5}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x81}}}, &(0x7f0000000300)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) 1.630634811s ago: executing program 1 (id=2261): r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b0000000500000000"], 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) (async) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) unshare(0x22020600) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) (async) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000004fc0)=0xfffffff7, 0x4) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c, 0x0, 0x0, 0xfffffffd}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="0100000002"], 0x40) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/95, 0x2}, 0x20) (async) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x200010, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r5}, 0x20) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20000084) 1.321875268s ago: executing program 2 (id=2262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r4, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0x5) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1b4, r5, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "ffc10a504fea17dcf53b6d65c231484a987a05f924ca7f8c6003f0b5954045d1"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x9e, 0x3, "ac699ecde5a8661514ced622ce0d33d89adccbbf3efd7851669ecbabafebbb2e66397e6b34bbf20adfe2457b18570b097ec24c05682d3aa6fb7da446b87cfb96d8a15c714d459382ef7fe137e613889409ac81deabb608989f018c90eced59adb0aa6c8c9191c25ab398b210b31d79ebacf9449b7404876e4d8b05d0bdbd2d33d391e55cb2d12fd8c324b0aef22021d2db88b0d05867a9914c2d"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0xfcf6, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x671a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r2, 0x80809440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) (async) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) connect$netlink(r4, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0x5) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1b4, r5, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "ffc10a504fea17dcf53b6d65c231484a987a05f924ca7f8c6003f0b5954045d1"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x9e, 0x3, "ac699ecde5a8661514ced622ce0d33d89adccbbf3efd7851669ecbabafebbb2e66397e6b34bbf20adfe2457b18570b097ec24c05682d3aa6fb7da446b87cfb96d8a15c714d459382ef7fe137e613889409ac81deabb608989f018c90eced59adb0aa6c8c9191c25ab398b210b31d79ebacf9449b7404876e4d8b05d0bdbd2d33d391e55cb2d12fd8c324b0aef22021d2db88b0d05867a9914c2d"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0xfcf6, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x671a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) socket(0x2a, 0x2, 0x0) (async) ioctl$BTRFS_IOC_ENCODED_READ(r2, 0x80809440, 0x0) (async) 1.295928893s ago: executing program 4 (id=2263): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000090000000060a010400000000000000000100000008000b400000000068000480340001800b000100657874686472000024000280080001400000000c080003400000003b0800044000000022050002000700000030000180080001006e6174002400028008000440fffffffa0800024000000002080001400000000008000340000000040900010073797a30"], 0x104}}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020100020a0000000000000000000000030005000000000002000000000000000000004fae0000000200100020000000ffffffff00000000030006000000000002000000640101"], 0x50}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (rerun: 32) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd28, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffe0}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x60880}, 0x0) (async) sendmsg$NFT_BATCH(r2, 0x0, 0x24000000) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x19, '\x00', r5}, 0x94) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0xffffffd7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) (async, rerun: 64) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (rerun: 64) getsockopt$bt_BT_POWER(r6, 0x112, 0x9, 0x0, &(0x7f0000000340)) (async) socket$unix(0x1, 0x1, 0x0) (async) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) socket(0x8, 0x4, 0x10) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r2, @ANYRES32=r0, @ANYBLOB, @ANYBLOB="678ee53866cd9af33396c8580aa40b023e399934c5c4310987bb4b18a842a2bc46f8e5a534f588429eb97fc6dfe2b47e3948d35a81db188eef7b0e6fbdf51cffe69e5c006b596a7942650f9c9fdf"], 0x10) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1000, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xbffffffffffffffe, 0x0, 0x0, 0xfffffffffffffff9, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) 1.294104085s ago: executing program 3 (id=2264): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008080) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c40000001900010000000000fc98510f7682316edbdf25e0000002000000000000000000000000e0e00001000000000000000000000000000000000000ae9efdcec9c2001769327f6b6200000a0020008700000046c92822ffc00b1b190a8354d516c69f24a8a447b5d293e24d25c3e6533838c25714426c445535fdb2e3", @ANYRES32=0x0, @ANYBLOB="3f2d9fe29fc51b7e6b82b4255adf2026bdb6fc64e894745ad64dd566a5af3af7ce12870a3892", @ANYBLOB="00000000000000004a5c00000000000000000000000000000000000000000200000000000000000000000000002000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000000000000000000000800000000014fb2c208cee4e6f0d038f00000000010002000000000c0015005d073500d70c0000484dd3a0e0358a2d2b03e1d57a120240eb715526e33a402f21c62d"], 0xc4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x203, 0x70bd28, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x100, 0xa, 0x10, 0x96f23147092a967e}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x2}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) r3 = socket(0x2, 0x2, 0x1) connect$unix(r3, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)={0x1dc, r4, 0xd38, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x24000044}, 0x24008881) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0xb4, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x84, 0x2, [@TCA_BASIC_ACT={0x70, 0x3, [@m_connmark={0x6c, 0x1, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffc700, 0x3, 0x6, 0xf16, 0x3}, 0x3f82}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x3, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x5, 0xb}}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000020201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c4000"], 0xc8}}, 0x0) r12 = socket(0x10, 0x803, 0x0) sendto(r12, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) pipe(&(0x7f0000000000)) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0bf00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r13, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.264193076s ago: executing program 0 (id=2265): syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @empty, @local, {[], {{0xfffd, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0xf64a}}}}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @empty, @local, {[], {{0xfffd, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0xf64a}}}}}}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) 1.190722375s ago: executing program 1 (id=2266): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x40080) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r1, 0xa9}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r4, &(0x7f00000000c0)=@in={0x2, 0x270f, @rand_addr=0x64010101}, 0x10) listen(r4, 0x5) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f005c0000000000000100003c00"], 0x6a) r5 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r5, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000001580)=""/60, 0x3c}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f0000000480)=""/4088, 0xff8}, {&(0x7f0000001840)=""/115, 0x73}, {&(0x7f0000001480)=""/195, 0xc3}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f00000018c0)=""/133, 0x85}], 0x9}}], 0x1, 0x40010122, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1c, 0x21a1, &(0x7f00000003c0)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xcb, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.106669714s ago: executing program 0 (id=2267): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r1, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) 903.840997ms ago: executing program 0 (id=2268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000740)={@val={0x8, 0x19}, @val={0x3, 0x0, 0x4, 0x0, 0x14}, @ipv4=@tipc={{0x5, 0x4, 0x0, 0x2b, 0x40, 0x67, 0x0, 0x8, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x1, 0x1, 0xb, 0x3, 0x2, 0x5, 0x0, 0x0, 0x3, 0x1, 0x1, 0x8000, 0x100, 0x3, 0x4e22, 0x4e21}, 0x98, 0x1}, 0x4, 0x2}, 0x4}}}}}, 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x3}], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "9a"}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x5f]}}, &(0x7f00000014c0)=""/2, 0x46, 0x2, 0x1}, 0x28) 654.903714ms ago: executing program 3 (id=2269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x4) 629.497457ms ago: executing program 1 (id=2270): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_deladdr={0x20, 0x15, 0x1, 0xfffffffc, 0x0, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000015000100000000000000", @ANYRES32], 0x20}}, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x809000, 0x1000, 0x0, 0x3}, 0x20) 508.587078ms ago: executing program 3 (id=2271): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xbfffffff, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff3}, {0xa, 0xe}, {0xa, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x6}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0xf) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000204e0000", 0x58}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000080), 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012abd7000ffdbdf256b00000008000300", @ANYRES32=r7, @ANYBLOB="0c009900c70a00004c0000000a001a0008021100000100000a00060008021100000100000a001a00ffffffffffff0000"], 0x4c}, 0x1, 0x0, 0x0, 0x400c1}, 0x40) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003a00290200800000fadbdf250200000008"], 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x420, 0xf0, 0xf0, 0xfeffffff, 0xf0, 0x2d0, 0x388, 0x388, 0xffffffff, 0x388, 0x388, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {0xff}, 0x6, 0x2}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x8, 0x8}}, @common=@addrtype={{0x30}, {0x8, 0x22b, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xf, 0x5}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xff000000, 0xffffff00, 'wg0\x00', 'syzkaller0\x00', {}, {0xff}, 0x84, 0x1, 0x20}, 0x0, 0x100, 0x138, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000003]}}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9, 0x0, 0x2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00', {}, {}, 0x5c}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @gre_key=0x3}}}}, {{@ip={@remote, @private=0xa010101, 0x0, 0x0, 'pim6reg0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x3}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@dev={0xac, 0x14, 0x14, 0x43}, @port, @gre_key=0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) sendfile(r4, r4, 0x0, 0x38c6) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r9, r9, 0x7, 0x2, &(0x7f0000000040)='9f', 0xe, 0x4, 0x8, 0x9, 0x3, 0x2, 0x2, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000500)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x11}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r8, 0x4018f514, &(0x7f00000004c0)={0x401, 0x0, 0x1}) 338.296776ms ago: executing program 0 (id=2272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='cpu.idle\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r1, 0x3, 0x1, 0xffffffff, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800044000000004080007400000000908000640000000010500020000000000080003400000fe030900020073797a32000000000900010073797a30"], 0x94}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_int(r2, 0x1, 0x48, 0x0, &(0x7f0000000000)=0x54) 333.876216ms ago: executing program 1 (id=2273): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) write(r1, &(0x7f0000000200)="1452f8b63202e51313515bf5a1c02c198f6a9977cc8457327b9b5f4da199710d9417ee514baee4641ede37aa2dc9728255b1317b85af2e4727d69f18c663b65a302851768740f05c89e3441dba336a14ff152b699441d525c2d1c0d83036e256813349287473f27b5970d63ff4fedc5083f3a230320bff4fa93eb8862ec0c30daabc1528099ac80ee2ecd95846cddc6ac897c557b96614e9e824c5edeccdca92f4c94da3a39b8a228d84b982cab1b683ab254065180fbe8f366f186e18e5c7e443a66c3a2a0efd8172643fbe3476ccb854649ee009", 0xd5) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) (async, rerun: 32) syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x1000002, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x2, {0x0, 0xffff}}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000005180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)=""/43, 0x2b}, 0x7fd}], 0x1, 0x40002002, 0x0) 187.322647ms ago: executing program 1 (id=2274): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @loopback, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0xe501, 0x3, 0x258, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x1c0, 0x230, 0x230, 0x1c0, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003006400000074"], 0x104}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c800}, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000001540)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r12, {0x10}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) 171.030793ms ago: executing program 3 (id=2275): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600200086dd00000c0003000500110004"]}, 0x58}}, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000002040)="162dd3cad75f87", 0x7}], 0x1, 0x6) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000004000000000000010000000071121a00000000009500000000000100"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 90.781131ms ago: executing program 4 (id=2276): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ppoll(&(0x7f0000000100)=[{r1, 0x1a0}], 0x1, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)={0x28, 0x1, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2b4}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000840}, 0x20008800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000400), &(0x7f00000004c0)=r6}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000080)=ANY=[], 0x0) socket(0x1a, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) unshare(0x2a020400) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001100), 0x200200, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x48, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @mcast2, [@fragment={0x2f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x65}, @hopopts={0xbe}], "01a102e9493a5d5b"}}}}}}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x9}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x431}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x804) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 73.572582ms ago: executing program 0 (id=2277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="44ed36bdae1769eb45c0d322d295f13647b584719757dbe30ea41a055ebe7a212e34e34d2f49d59a14715ea618d8c901dbc9c121f90ba25f5b58c020ddd7266230c4117c61dc11dbdc7fc8658b57b89a40a9ea391478922ddac36e53ab703b047dc302907b050e1671a13a6d5e6f23a4b407d0d25ec1b1a6f4f3ae2ecb"], 0x141) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}, "17c1b7df60c70000"}}}}}, 0x0) write(r4, &(0x7f0000000400)="110000001000ffffff97000000000000000097000000", 0x16) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x2}, 0x20000014) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x134, r6, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xde, 0xa8, @random="a19b415243ef366496c00d22e7d55fa82f4b931070ba82c143e249f09ffff3420e4c71d5e5c10d3bdf414cb86284b916390eaa189684208b65bb63820d76b3306aa10fd66490a3daddd7cc5ce6aaf7eb69e1b5bbe035c7cb37c42987a150d87b5fa597aec0bd4cf3355ad9ea98ac60c0fac6467e35992cb7ed44d63a3147f797e39972fd2e626c0f7556c028abe9564bd923809b6058350f12221c1a1e5bae7e24b38c94a83df7ff8fbe4dac12ccc702ffc14742f9b7b71ca75a66c2f7a1d3597baf72104cb452d8d38e27412a7c5386420b6274b7e1d11306eb"}]}, 0x134}}, 0x44040) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r6, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x40) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$sock_ifreq(r5, 0x8991, &(0x7f0000000540)={'team_slave_0\x00', @ifru_map={0x6, 0x40, 0x7, 0x51, 0x40, 0x1}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, r7, 0x952de000) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000008000000000000000000000000caec31149ca8562df2482b28087302a4e45007902c6b55654498bcf8a07658c9cafe130b3e3d9029d98d3a4072f2d68e684a87bbd11dd69ed45c71837921de95e05ef0e9c7b9c3cc1983f101"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000055090200000300006e00000000000000b7090000ffffffb0739af0ff00000000ce09020000000000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES16=r8, @ANYRES8=r9], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r10, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000940)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=2278): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r3, 0x1, 0x70bd28, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x34}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r3, 0x301}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x34}}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SDREQ(r2, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000480)={0x3d0, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_SDP={0x70, 0x13, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}]}, {0x18, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0xc, 0x1, '{!}!),{*'}]}, {0x48, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0xb, 0x1, '.}!+,}^'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x8, 0x1, '-@/^'}, {0x6, 0x1, '\x15]'}, {0x7, 0x1, '={/'}, {0x5, 0x1, '\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x1e0, 0x13, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [{0x7, 0x1, '&@.'}]}, {0x14, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x8, 0x1, '%[{%'}]}, {0x40, 0x0, 0x0, 0x1, [{0x6, 0x1, '\'&'}, {0x6, 0x1, '#{'}, {0x4}, {0x4}, {0x7, 0x1, '*#}'}, {0x5, 0x1, '\x00'}, {0xc, 0x1, '-[[%:*+D'}, {0x5, 0x1, '\x00'}]}, {0x40, 0x0, 0x0, 0x1, [{0x11, 0x1, '--\x15[@-@^*\xcf$/]'}, {0x5, 0x1, '\x00'}, {0xd, 0x1, '\xbf-{@(@*[:'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x7, 0x1, ':-\x9a'}, {0x6, 0x1, '*{'}, {0xe, 0x1, '\xe4.}@\xdb#+{%;'}, {0x5, 0x1, '\x00'}]}, {0x58, 0x0, 0x0, 0x1, [{0x9, 0x1, '+[)!!'}, {0x6, 0x1, '!%'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x7, 0x1, '$\'{'}, {0x4}, {0xa, 0x1, '/*{\x8c\'('}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}]}, {0x64, 0x0, 0x0, 0x1, [{0x7, 0x1, '\\[*'}, {0x11, 0x1, '@-[:{##$}&r{+'}, {0x5, 0x1, '\x00'}, {0x4}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x8, 0x1, '+\\*#'}, {0x8, 0x1, '(\xfd-*'}, {0x16, 0x1, '[([\'\'&-@]]]\x82!]&*\\]'}]}, {0x54, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x9, 0x1, '([P&$'}, {0x5, 0x1, '\x00'}, {0x4}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '*'}, {0x5, 0x1, '\x00'}, {0x7, 0x1, '&{/'}]}]}, @NFC_ATTR_LLC_SDP={0x88, 0x13, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [{0x5, 0x1, 'P'}, {0x5, 0x1, ','}]}, {0x30, 0x0, 0x0, 0x1, [{0xf, 0x1, '/:.%{,$*-^{'}, {0x5, 0x1, '\x00'}, {0x4}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}]}, {0x24, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}]}, {0x1c, 0x0, 0x0, 0x1, [{0x6, 0x1, '!$'}, {0x7, 0x1, '-(,'}, {0x5, 0x1, '\x00'}]}]}, @NFC_ATTR_LLC_SDP={0xd4, 0x13, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [{0x4}]}, {0x18, 0x0, 0x0, 0x1, [{0x8, 0x1, '{)>-'}, {0x9, 0x1, '{R,$['}]}, {0x24, 0x0, 0x0, 0x1, [{0x5, 0x1, '%'}, {0xe, 0x1, ':*\xcf-}{%:@#'}, {0x5, 0x1, '\x00'}]}, {0x1c, 0x0, 0x0, 0x1, [{0xf, 0x1, '^$#r):[!/,\\'}, {0x5, 0x1, '\x00'}]}, {0x40, 0x0, 0x0, 0x1, [{0x9, 0x1, '%%%^!'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}]}, {0x14, 0x0, 0x0, 0x1, [{0x6, 0x1, '\\:'}, {0x5, 0x1, '\x00'}]}, {0x1c, 0x0, 0x0, 0x1, [{0x7, 0x1, '+[@'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}]}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x0, 0x3, 0x4, 0x1, 0x7f}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1546], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000002f00ea4027bd70000980"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000040)=""/77, &(0x7f0000000140)=0x4d) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x401, 0xa733, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002680)={0x6, 0x2f, &(0x7f0000001340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @generic={0xf7, 0x3, 0x1, 0x0, 0x8958}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @generic={0x40, 0x0, 0x5, 0x400, 0xffffe000}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x4d6f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000014c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000025c0)={0x5, 0x8, 0x5, 0x10000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002600)=[r6, r6, r6, r6], &(0x7f0000002640)=[{0x2, 0x4, 0xb, 0x3}, {0x2, 0x5, 0x1, 0x7}], 0x10, 0xf6}, 0x94) recvfrom(r0, &(0x7f00000015c0)=""/4059, 0xfdb, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50006fcb5d15966b46ca64f7e76268cd64007095adfef77465b69ec03139854d6f07d5f9bd01000046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0xde4}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) kernel console output (not intermixed with test programs): ority 0 [ 259.780758][T11697] tipc: Resetting bearer [ 260.096244][T11713] netlink: 'syz.3.1370': attribute type 1 has an invalid length. [ 261.835627][T11697] tipc: Disabling bearer [ 261.839318][T11713] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 261.841749][ T5717] tipc: Node number set to 3284644800 [ 261.983893][T11740] openvswitch: netlink: Tunnel attr 24 out of range max 16 [ 262.042317][T11744] netlink: 'syz.0.1379': attribute type 4 has an invalid length. [ 262.042506][T11742] syz.1.1377 (11742) used obsolete PPPIOCDETACH ioctl [ 262.042710][T11744] netlink: 'syz.0.1379': attribute type 4 has an invalid length. [ 262.133378][T11748] IPVS: set_ctl: invalid protocol: 108 172.30.0.3:20002 [ 262.133435][T11750] IPVS: set_ctl: invalid protocol: 108 172.30.0.3:20002 [ 262.215967][T11755] tipc: Enabled bearer , priority 10 [ 262.460883][T11762] netlink: ct family unspecified [ 262.460921][T11762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.803880][T11780] v: renamed from ip6_vti0 [ 262.829287][T11780] v: entered allmulticast mode [ 262.830599][T11780] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 262.973994][T11785] __nla_validate_parse: 184 callbacks suppressed [ 262.974013][T11785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1389'. [ 263.077235][T11786] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 263.077270][T11786] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 263.077306][T11786] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 263.086623][T11786] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 263.115308][T11786] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 263.122182][T11791] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1391'. [ 263.128850][T11791] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1391'. [ 263.220368][T11796] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1393'. [ 263.339726][ T5717] tipc: Node number set to 2077194774 [ 263.352806][T11798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1394'. [ 263.372996][T11794] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1391'. [ 263.373022][T11794] nbd: nbd64 already in use [ 263.374087][T11800] block nbd64: NBD_DISCONNECT [ 263.467182][T11798] 8021q: adding VLAN 0 to HW filter on device bond5 [ 263.629444][T11800] udevd[11800]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 263.852415][T11823] openvswitch: netlink: IP tunnel dst address not specified [ 263.882393][ T6198] smbdirect: ib_dev[syz2] removed [ 263.942168][T11821] syzkaller0: entered promiscuous mode [ 263.942189][T11821] syzkaller0: entered allmulticast mode [ 264.271321][T11846] xt_hashlimit: max too large, truncated to 1048576 [ 264.310859][T11846] No such timeout policy "syz1" [ 264.500549][T11859] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1405'. [ 264.627741][T11870] SET target dimension over the limit! [ 264.650799][T11869] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1412'. [ 264.825709][T11877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1416'. [ 264.959738][T11886] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1420'. [ 265.070569][T11886] bridge_slave_1: left allmulticast mode [ 265.070810][T11886] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.258365][T11886] bridge_slave_0: left allmulticast mode [ 265.259012][T11886] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.572669][T11913] sock: sock_timestamping_bind_phc: sock not bind to device [ 265.741621][T11922] netlink: Only one type of NAT may be specified [ 265.741652][T11922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.767500][T11922] ip_tables: iptables: counters copy to user failed while replacing table [ 266.470667][T11950] xt_hashlimit: size too large, truncated to 1048576 [ 266.716779][T11960] IPv6: Can't replace route, no match found [ 267.043027][T11973] ipvlan0: Caught tx_queue_len zero misconfig [ 267.694095][T12004] syzkaller1: entered allmulticast mode [ 267.952407][T12028] netlink: 'syz.3.1455': attribute type 21 has an invalid length. [ 267.952433][T12028] IPv6: NLM_F_CREATE should be specified when creating new route [ 267.952511][T12028] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 267.952521][T12028] IPv6: NLM_F_CREATE should be set when creating new route [ 267.952559][T12028] IPv6: NLM_F_CREATE should be set when creating new route [ 267.952582][T12028] IPv6: NLM_F_CREATE should be set when creating new route [ 267.995358][T12028] __nla_validate_parse: 9 callbacks suppressed [ 267.995376][T12028] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1455'. [ 267.999847][T12028] netlink: NAT attribute has 8 unknown bytes [ 267.999877][T12028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.101557][T12033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.205517][T12042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1458'. [ 268.205550][T12042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1458'. [ 268.338505][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1454'. [ 268.447833][T12058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1460'. [ 268.539792][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1460'. [ 269.496959][T12095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1464'. [ 269.892597][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1469'. [ 269.895148][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1466'. [ 270.087391][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1466'. [ 271.050558][T12156] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.205912][T12159] syzkaller1: entered promiscuous mode [ 271.205933][T12159] syzkaller1: entered allmulticast mode [ 271.245004][T12163] netlink: 'syz.1.1485': attribute type 1 has an invalid length. [ 271.462356][T12170] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 271.462391][T12170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.830711][T12252] netlink: 'syz.2.1508': attribute type 1 has an invalid length. [ 272.972670][T12264] x_tables: duplicate underflow at hook 1 [ 273.159511][T12277] __nla_validate_parse: 13 callbacks suppressed [ 273.159530][T12277] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1515'. [ 273.181172][T12273] syzkaller1: entered promiscuous mode [ 273.181192][T12273] syzkaller1: entered allmulticast mode [ 273.187677][T12276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1516'. [ 273.294212][T12276] netlink: 'syz.4.1516': attribute type 2 has an invalid length. [ 273.319789][T12287] pim6reg99999999: entered allmulticast mode [ 273.321636][T12287] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 273.328576][ T31] audit: type=1804 audit(1790928466.040:2): pid=12287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1519" name="/newroot/320/cgroup.controllers" dev="tmpfs" ino=1660 res=1 errno=0 [ 273.331301][ T31] audit: type=1800 audit(1790928466.040:3): pid=12287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1519" name="cgroup.controllers" dev="tmpfs" ino=1660 res=0 errno=0 [ 273.515948][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1521'. [ 273.813871][T12305] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1523'. [ 273.880683][T12310] IPVS: Unknown mcast interface: lo [ 273.908396][T12310] tipc: Enabling of bearer rejected, failed to enable media [ 274.128499][T12320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.210364][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1531'. [ 274.210386][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1531'. [ 274.369753][T12339] lo: left promiscuous mode [ 274.408989][T12333] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.595788][T12349] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 274.606634][T12349] bond7 (unregistering): Released all slaves [ 274.634565][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1536'. [ 274.634584][T12352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1536'. [ 275.190167][T12373] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1541'. [ 275.332271][T12386] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1544'. [ 275.426006][T12383] netlink: 'syz.1.1543': attribute type 2 has an invalid length. [ 275.469359][T12392] xt_limit: Overflow, try lower: 268435456/134217728 [ 275.632210][T12405] block nbd1: Unsupported socket: should be TCP or UNIX. [ 275.678194][T12405] block nbd2: Unsupported socket: should be TCP or UNIX. [ 276.000101][T12419] C: renamed from veth1_to_team (while UP) [ 276.005938][T12419] netlink: 'syz.3.1548': attribute type 1 has an invalid length. [ 276.006387][T12419] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 276.047670][T12422] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 277.971881][T12491] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 277.972096][T12491] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 277.972298][T12491] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 277.972498][T12491] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 277.972694][T12491] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 277.972880][T12491] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 278.032431][T12491] netlink: 'syz.2.1570': attribute type 32 has an invalid length. [ 278.221223][T12495] __nla_validate_parse: 6 callbacks suppressed [ 278.221241][T12495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1572'. [ 278.282008][T12500] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1571'. [ 278.352115][T12502] tipc: Enabled bearer , priority 0 [ 278.352710][T12502] syzkaller0: entered promiscuous mode [ 278.352728][T12502] syzkaller0: entered allmulticast mode [ 278.377538][T12502] tipc: Resetting bearer [ 278.382522][T12501] tipc: Resetting bearer [ 278.451194][T12501] tipc: Disabling bearer [ 278.526209][T12504] netpci0: tun_chr_ioctl cmd 1074025681 [ 278.746438][T12516] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1577'. [ 279.008712][T12530] netlink: 'syz.2.1581': attribute type 3 has an invalid length. [ 279.015203][T12526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1579'. [ 279.015225][T12526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1579'. [ 279.017387][T12526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1579'. [ 279.017406][T12526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1579'. [ 279.017540][T12526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1579'. [ 279.017554][T12526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1579'. [ 279.079777][T12542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1585'. [ 280.056840][T12555] tc_dump_action: action bad kind [ 280.263512][T12574] bond10: option tlb_dynamic_lb: invalid value (128) [ 280.272248][T12574] bond10 (unregistering): Released all slaves [ 280.367300][T12582] netlink: 'syz.4.1591': attribute type 2 has an invalid length. [ 280.911247][T12589] net_ratelimit: 27 callbacks suppressed [ 280.911268][T12589] netlink: Setting conntrack mark requires 'commit' flag. [ 280.911293][T12589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.023245][T12609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.043615][T12655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.144400][T12652] netlink: 'syz.0.1611': attribute type 11 has an invalid length. [ 282.194449][T12665] netlink: 'syz.4.1613': attribute type 7 has an invalid length. [ 282.327842][T12669] bond7: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 282.347258][T12669] bond7: (slave ip6tnl2): Error -95 calling set_mac_address [ 282.524443][T12676] openvswitch: netlink: Key 8 has unexpected len 2 expected 40 [ 282.691626][T12681] netlink: 'syz.1.1618': attribute type 1 has an invalid length. [ 283.371876][T12700] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.372949][T12700] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.024662][T12700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.428790][T12705] tipc: Enabled bearer , priority 10 [ 284.485129][ T8081] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.485170][ T8081] netdevsim netdevsim3 eth3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 284.485194][ T8081] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.485227][ T8081] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.485249][ T8081] netdevsim netdevsim3 eth2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 284.485271][ T8081] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.485301][ T8081] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.485323][ T8081] netdevsim netdevsim3 eth1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 284.485345][ T8081] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.485375][ T8081] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.485397][ T8081] netdevsim netdevsim3 eth0: unset [0, 1] type 1 family 0 port 4352 - 0 [ 284.485419][ T8081] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.613883][ T5624] block nbd1: Receive control failed (result -32) [ 284.831069][T12757] __nla_validate_parse: 9 callbacks suppressed [ 284.831087][T12757] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1631'. [ 284.831100][T12757] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1631'. [ 284.833929][T12758] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1631'. [ 284.833946][T12758] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1631'. [ 284.972074][T12753] 8021q: adding VLAN 0 to HW filter on device bond7 [ 285.244118][T12779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1636'. [ 286.299662][T12815] bond8: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 286.327920][T12815] bond8 (unregistering): Released all slaves [ 286.812573][T12846] netlink: Unknown nat attribute (0) [ 286.812606][T12846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.106078][T12858] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1651'. [ 287.767951][T12893] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 287.854234][T12902] netlink: 'syz.3.1658': attribute type 5 has an invalid length. [ 287.854255][T12902] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1658'. [ 287.875760][T12899] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1657'. [ 287.877107][T12902] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1658'. [ 288.183569][T12909] netlink: 688 bytes leftover after parsing attributes in process `syz.2.1660'. [ 288.600171][T12942] netlink: 'syz.2.1669': attribute type 1 has an invalid length. [ 288.662650][T12942] bridge5: entered promiscuous mode [ 288.672177][T12942] bond7: (slave bridge5): making interface the new active one [ 288.672963][T12942] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 288.700914][T12942] bridge6: entered promiscuous mode [ 288.711475][T12942] bond7: (slave bridge6): Enslaving as a backup interface with an up link [ 289.258737][T12978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.379940][T12981] macsec1: entered promiscuous mode [ 289.570006][ T5624] block nbd2: Receive control failed (result -1) [ 289.763914][T13002] syzkaller0: entered promiscuous mode [ 289.763935][T13002] syzkaller0: entered allmulticast mode [ 289.996584][T13007] netlink: 'syz.3.1691': attribute type 10 has an invalid length. [ 290.175908][T13016] netlink: 'syz.0.1693': attribute type 15 has an invalid length. [ 291.158290][T13030] sctp: [Deprecated]: syz.0.1698 (pid 13030) Use of int in maxseg socket option. [ 291.158290][T13030] Use struct sctp_assoc_value instead [ 291.309994][T13034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.310943][T13034] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.314054][T13034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.361263][T13034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.375591][T13034] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 291.375614][T13034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.379420][T13034] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 291.380131][T13039] __nla_validate_parse: 6 callbacks suppressed [ 291.380163][T13039] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1700'. [ 291.392110][T13032] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1699'. [ 291.428951][T13036] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 291.430716][T13036] bond10 (unregistering): Released all slaves [ 291.509702][T13037] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 291.511180][T13037] bond10 (unregistering): Released all slaves [ 291.538403][ T8079] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.538464][ T8079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.540111][ T8079] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.540168][ T8079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.589466][T13038] syzkaller0: entered promiscuous mode [ 291.589481][T13038] syzkaller0: entered allmulticast mode [ 291.617585][T13034] macsec2: entered promiscuous mode [ 291.617606][T13034] macsec2: entered allmulticast mode [ 291.886727][T13055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1705'. [ 291.886751][T13055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1705'. [ 291.887574][T13057] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1705'. [ 291.887591][T13057] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1705'. [ 291.890356][T13055] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1705'. [ 291.890369][T13055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1705'. [ 291.891062][T13055] lo: left promiscuous mode [ 291.891195][T13055] tunl0: left promiscuous mode [ 291.891279][T13055] gre0: left promiscuous mode [ 291.891360][T13055] gretap0: left promiscuous mode [ 291.891421][T13055] erspan0: left promiscuous mode [ 291.891489][T13055] ip_vti0: left promiscuous mode [ 291.891566][T13055] ip6_vti0: left promiscuous mode [ 291.891643][T13055] sit0: left promiscuous mode [ 291.891705][T13055] ip6tnl0: left promiscuous mode [ 291.891764][T13055] ip6gre0: left promiscuous mode [ 291.891839][T13055] syz_tun: left promiscuous mode [ 291.891934][T13055] bridge0: left promiscuous mode [ 291.892027][T13055] vcan0: left promiscuous mode [ 291.892171][T13055] team0: left promiscuous mode [ 291.892416][T13055] dummy0: left promiscuous mode [ 291.893929][T13055] nlmon0: left promiscuous mode [ 291.894059][T13055] batadv0: left promiscuous mode [ 291.894137][T13055] vxcan0: left promiscuous mode [ 291.894213][T13055] vxcan1: left promiscuous mode [ 291.894287][T13055] veth0: left promiscuous mode [ 291.894388][T13055] veth1: left promiscuous mode [ 291.894474][T13055] wg0: left promiscuous mode [ 291.894552][T13055] wg1: left promiscuous mode [ 291.894627][T13055] wg2: left promiscuous mode [ 291.894736][T13055] veth0_to_bridge: left promiscuous mode [ 291.897508][T13055] veth1_to_bridge: left promiscuous mode [ 291.897649][T13055] veth0_to_bond: left promiscuous mode [ 291.897934][T13055] veth1_to_bond: left promiscuous mode [ 291.898191][T13055] veth1_to_team: left promiscuous mode [ 291.898346][T13055] team_slave_1: left promiscuous mode [ 291.898511][T13055] veth0_to_batadv: left promiscuous mode [ 291.898643][T13055] batadv_slave_0: left promiscuous mode [ 291.898773][T13055] veth1_to_batadv: left promiscuous mode [ 291.898929][T13055] batadv_slave_1: left promiscuous mode [ 291.899097][T13055] xfrm0: left promiscuous mode [ 291.899229][T13055] veth0_to_hsr: left promiscuous mode [ 291.899513][T13055] hsr0: left promiscuous mode [ 291.899675][T13055] veth1_virt_wifi: left promiscuous mode [ 291.899805][T13055] veth0_virt_wifi: left promiscuous mode [ 291.899933][T13055] virt_wifi0: left promiscuous mode [ 291.900324][T13055] vlan0: left promiscuous mode [ 291.900619][T13055] vlan1: left promiscuous mode [ 291.900932][T13055] macvlan0: left promiscuous mode [ 291.901064][T13055] macvlan1: left promiscuous mode [ 291.901226][T13055] ipvlan0: left promiscuous mode [ 291.901358][T13055] ipvlan1: left promiscuous mode [ 291.901752][T13055] macvtap0: left promiscuous mode [ 291.901909][T13055] macsec0: left promiscuous mode [ 291.902010][T13055] geneve0: left promiscuous mode [ 291.902143][T13055] geneve1: left promiscuous mode [ 291.902303][T13055] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 291.902418][T13055] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 291.902535][T13055] netdevsim netdevsim4 netdevsim2: left promiscuous mode [ 291.902642][T13055] netdevsim netdevsim4 netdevsim3: left promiscuous mode [ 291.902774][T13055] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 291.902959][T13055] mac80211_hwsim hwsim12 wlan2: left promiscuous mode [ 291.903095][T13055] mac80211_hwsim hwsim13 wlan3: left promiscuous mode [ 291.903225][T13055] bond1: left promiscuous mode [ 291.903366][T13055] macvlan2: left promiscuous mode [ 291.903510][T13055] ip6gre1: left promiscuous mode [ 291.903614][T13055] gre1: left promiscuous mode [ 291.903717][T13055] bond2: left promiscuous mode [ 291.903846][T13055] ip6gre2: left promiscuous mode [ 291.903947][T13055] geneve2: left promiscuous mode [ 291.904080][T13055] bond3: left promiscuous mode [ 291.904184][T13055] ip6tnl1: left promiscuous mode [ 291.904311][T13055] bond4: left promiscuous mode [ 291.904417][T13055] gre2: left promiscuous mode [ 291.904525][T13055] bond5: left promiscuous mode [ 291.904536][T13055] bond0: left promiscuous mode [ 291.904547][T13055] bond_slave_0: left promiscuous mode [ 291.904773][T13055] bond_slave_1: left promiscuous mode [ 291.918108][T13055] bridge1: left promiscuous mode [ 291.918229][T13055] bridge2: left promiscuous mode [ 291.918366][T13055] bridge3: left promiscuous mode [ 291.918483][T13055] geneve3: left promiscuous mode [ 291.918586][T13055] dvmrp8: left promiscuous mode [ 291.918687][T13055] vxcan2: left promiscuous mode [ 291.918844][T13055] vxcan3: left promiscuous mode [ 291.923211][T13055] macsec1: left promiscuous mode [ 292.179719][T13064] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1708'. [ 292.213070][T13062] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1707'. [ 292.237869][ T5624] block nbd3: Receive control failed (result -32) [ 292.286264][T13062] ip_tables: iptables: counters copy to user failed while replacing table [ 293.046990][ T6197] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 293.048422][ T6197] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 293.049392][ T8080] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 293.074923][ T6197] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 293.668104][T13144] netlink: zone id is out of range [ 293.668119][T13144] netlink: zone id is out of range [ 293.668144][T13144] netlink: zone id is out of range [ 293.668152][T13144] netlink: zone id is out of range [ 293.668160][T13144] netlink: zone id is out of range [ 293.668167][T13144] netlink: zone id is out of range [ 293.668178][T13144] netlink: zone id is out of range [ 293.668185][T13144] netlink: zone id is out of range [ 293.668192][T13144] netlink: zone id is out of range [ 293.939441][T13137] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.023719][T13137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.039662][T13137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.362936][T13137] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 294.491804][T13137] bridge3: left promiscuous mode [ 294.491828][T13137] bridge3: left allmulticast mode [ 294.509573][T13137] bond3: left promiscuous mode [ 294.509586][T13137] bond3: left allmulticast mode [ 294.550028][T13137] bond5: left promiscuous mode [ 294.622400][T13137] ip6gre2: left allmulticast mode [ 294.645640][T13137] vlan4: left promiscuous mode [ 294.645659][T13137] bridge0: left promiscuous mode [ 294.676599][T13137] bridge5: left promiscuous mode [ 294.680473][T13137] bridge6: left promiscuous mode [ 294.837185][ T49] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.837216][ T49] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 294.837239][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.837337][ T49] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.837359][ T49] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 294.837380][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.837409][ T49] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.837430][ T49] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 294.837451][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.877153][ T8079] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.877183][ T8079] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 4352 - 0 [ 294.877206][ T8079] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.949811][T13174] xt_CT: No such helper "snmp" [ 295.057392][T13174] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 295.402330][T13206] netlink: 'syz.4.1739': attribute type 30 has an invalid length. [ 295.448256][T13206] vxlan1: entered promiscuous mode [ 295.448278][T13206] vxlan1: entered allmulticast mode [ 295.467844][T13208] netlink: 'syz.4.1739': attribute type 30 has an invalid length. [ 295.480556][ T1158] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.481197][ T6197] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.481267][ T6197] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.481298][ T6197] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.394732][T13253] __nla_validate_parse: 15 callbacks suppressed [ 296.394751][T13253] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1748'. [ 296.622148][T13268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1751'. [ 296.844639][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1753'. [ 296.856616][T13282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1753'. [ 296.869979][T13282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1753'. [ 296.899232][T13281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1756'. [ 296.901922][T13286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1756'. [ 296.962211][T13283] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1753'. [ 296.993010][T13290] No such timeout policy "syz1" [ 297.038089][T13292] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1759'. [ 297.038111][T13292] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1759'. [ 297.133643][T13295] syzkaller0: entered promiscuous mode [ 297.133665][T13295] syzkaller0: entered allmulticast mode [ 297.816753][T13337] : renamed from bond0 [ 298.851608][T13384] gre0: entered promiscuous mode [ 298.851630][T13384] gre0: entered allmulticast mode [ 299.752767][T13431] macsec1: entered allmulticast mode [ 299.752792][T13431] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 299.753252][T13431] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 299.754568][T13431] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 299.902728][T13442] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 299.912199][T13436] can: request_module (can-proto-4) failed. [ 300.117743][T13452] netlink: 'syz.2.1797': attribute type 7 has an invalid length. [ 301.136816][T13494] FAULT_INJECTION: forcing a failure. [ 301.136816][T13494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.136848][T13494] CPU: 0 UID: 0 PID: 13494 Comm: syz.4.1805 Not tainted syzkaller #0 PREEMPT(full) [ 301.136868][T13494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.136890][T13494] Call Trace: [ 301.136898][T13494] [ 301.136906][T13494] dump_stack_lvl+0xe8/0x150 [ 301.136937][T13494] should_fail_ex+0x410/0x560 [ 301.136964][T13494] _copy_from_user+0x2d/0xb0 [ 301.136987][T13494] __sys_bpf+0x2e7/0xd90 [ 301.137016][T13494] ? __pfx___sys_bpf+0x10/0x10 [ 301.137047][T13494] ? __fget_files+0x2a/0x420 [ 301.137089][T13494] ? ksys_write+0x242/0x270 [ 301.137124][T13494] ? __pfx_ksys_write+0x10/0x10 [ 301.137151][T13494] __x64_sys_bpf+0xba/0xd0 [ 301.137171][T13494] do_syscall_64+0x166/0x520 [ 301.137194][T13494] ? trace_irq_disable+0x3b/0x140 [ 301.137210][T13494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.137229][T13494] ? clear_bhb_loop+0x70/0xc0 [ 301.137249][T13494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.137269][T13494] RIP: 0033:0x7fdc5c59e159 [ 301.137287][T13494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.137302][T13494] RSP: 002b:00007fdc5a7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 301.137322][T13494] RAX: ffffffffffffffda RBX: 00007fdc5c825fa0 RCX: 00007fdc5c59e159 [ 301.137336][T13494] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 301.137348][T13494] RBP: 00007fdc5a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 301.137360][T13494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.137371][T13494] R13: 00007fdc5c826038 R14: 00007fdc5c825fa0 R15: 00007ffd4665cbf8 [ 301.137403][T13494] [ 301.446095][T13489] syzkaller0: entered promiscuous mode [ 301.446119][T13489] syzkaller0: entered allmulticast mode [ 301.636969][T13516] __nla_validate_parse: 6 callbacks suppressed [ 301.636988][T13516] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1811'. [ 303.600190][T13512] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1808'. [ 303.707093][T13540] FAULT_INJECTION: forcing a failure. [ 303.707093][T13540] name failslab, interval 1, probability 0, space 0, times 1 [ 303.707122][T13540] CPU: 0 UID: 0 PID: 13540 Comm: syz.4.1817 Not tainted syzkaller #0 PREEMPT(full) [ 303.707142][T13540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 303.707153][T13540] Call Trace: [ 303.707160][T13540] [ 303.707168][T13540] dump_stack_lvl+0xe8/0x150 [ 303.707198][T13540] should_fail_ex+0x410/0x560 [ 303.707224][T13540] should_failslab+0xa8/0x100 [ 303.707248][T13540] __kmalloc_cache_node_noprof+0xaa/0x620 [ 303.707269][T13540] ? __get_vm_area_node+0x155/0x2f0 [ 303.707292][T13540] ? __get_vm_area_node+0x155/0x2f0 [ 303.707323][T13540] __get_vm_area_node+0x155/0x2f0 [ 303.707354][T13540] __vmalloc_node_range_noprof+0x343/0x1540 [ 303.707380][T13540] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 303.707407][T13540] ? __lock_acquire+0x747/0x2de0 [ 303.707451][T13540] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 303.707488][T13540] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 303.707506][T13540] __vmalloc_noprof+0xd2/0x120 [ 303.707532][T13540] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 303.707556][T13540] bpf_prog_alloc_no_stats+0x47/0x560 [ 303.707575][T13540] ? bpf_prog_alloc+0x2a/0x1a0 [ 303.707598][T13540] bpf_prog_alloc+0x3c/0x1a0 [ 303.707621][T13540] bpf_prog_load+0x7f8/0x1c20 [ 303.707654][T13540] ? __pfx_bpf_prog_load+0x10/0x10 [ 303.707700][T13540] __sys_bpf+0xd0d/0xd90 [ 303.707728][T13540] ? __pfx___sys_bpf+0x10/0x10 [ 303.707759][T13540] ? __fget_files+0x2a/0x420 [ 303.707800][T13540] ? ksys_write+0x242/0x270 [ 303.707829][T13540] ? __pfx_ksys_write+0x10/0x10 [ 303.707860][T13540] __x64_sys_bpf+0xba/0xd0 [ 303.707881][T13540] do_syscall_64+0x166/0x520 [ 303.707905][T13540] ? trace_irq_disable+0x3b/0x140 [ 303.707922][T13540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.707941][T13540] ? clear_bhb_loop+0x70/0xc0 [ 303.707964][T13540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.707981][T13540] RIP: 0033:0x7fdc5c59e159 [ 303.707997][T13540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.708011][T13540] RSP: 002b:00007fdc5a7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 303.708032][T13540] RAX: ffffffffffffffda RBX: 00007fdc5c825fa0 RCX: 00007fdc5c59e159 [ 303.708044][T13540] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 303.708055][T13540] RBP: 00007fdc5a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 303.708066][T13540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.708076][T13540] R13: 00007fdc5c826038 R14: 00007fdc5c825fa0 R15: 00007ffd4665cbf8 [ 303.708104][T13540] [ 303.708132][T13540] syz.4.1817: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 303.708201][T13540] CPU: 0 UID: 0 PID: 13540 Comm: syz.4.1817 Not tainted syzkaller #0 PREEMPT(full) [ 303.708221][T13540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 303.708231][T13540] Call Trace: [ 303.708238][T13540] [ 303.708245][T13540] dump_stack_lvl+0xe8/0x150 [ 303.708272][T13540] warn_alloc+0x24d/0x270 [ 303.708299][T13540] ? __kasan_kmalloc+0x22/0xb0 [ 303.708323][T13540] ? __pfx_warn_alloc+0x10/0x10 [ 303.708350][T13540] ? __get_vm_area_node+0x155/0x2f0 [ 303.708381][T13540] ? __get_vm_area_node+0x2a9/0x2f0 [ 303.708420][T13540] __vmalloc_node_range_noprof+0x36b/0x1540 [ 303.708448][T13540] ? __lock_acquire+0x747/0x2de0 [ 303.708491][T13540] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 303.708527][T13540] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 303.708546][T13540] __vmalloc_noprof+0xd2/0x120 [ 303.708572][T13540] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 303.708595][T13540] bpf_prog_alloc_no_stats+0x47/0x560 [ 303.708614][T13540] ? bpf_prog_alloc+0x2a/0x1a0 [ 303.708637][T13540] bpf_prog_alloc+0x3c/0x1a0 [ 303.708660][T13540] bpf_prog_load+0x7f8/0x1c20 [ 303.708693][T13540] ? __pfx_bpf_prog_load+0x10/0x10 [ 303.708738][T13540] __sys_bpf+0xd0d/0xd90 [ 303.708767][T13540] ? __pfx___sys_bpf+0x10/0x10 [ 303.708798][T13540] ? __fget_files+0x2a/0x420 [ 303.708839][T13540] ? ksys_write+0x242/0x270 [ 303.708867][T13540] ? __pfx_ksys_write+0x10/0x10 [ 303.708898][T13540] __x64_sys_bpf+0xba/0xd0 [ 303.708918][T13540] do_syscall_64+0x166/0x520 [ 303.708942][T13540] ? trace_irq_disable+0x3b/0x140 [ 303.708959][T13540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.708977][T13540] ? clear_bhb_loop+0x70/0xc0 [ 303.709001][T13540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.709023][T13540] RIP: 0033:0x7fdc5c59e159 [ 303.709039][T13540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.709053][T13540] RSP: 002b:00007fdc5a7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 303.709071][T13540] RAX: ffffffffffffffda RBX: 00007fdc5c825fa0 RCX: 00007fdc5c59e159 [ 303.709084][T13540] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 303.709100][T13540] RBP: 00007fdc5a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 303.709112][T13540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.709123][T13540] R13: 00007fdc5c826038 R14: 00007fdc5c825fa0 R15: 00007ffd4665cbf8 [ 303.709154][T13540] [ 303.709161][T13540] Mem-Info: [ 303.709169][T13540] active_anon:5690 inactive_anon:0 isolated_anon:0 [ 303.709169][T13540] active_file:0 inactive_file:43381 isolated_file:0 [ 303.709169][T13540] unevictable:0 dirty:217 writeback:0 [ 303.709169][T13540] slab_reclaimable:11789 slab_unreclaimable:107507 [ 303.709169][T13540] mapped:29447 shmem:525 pagetables:1152 [ 303.709169][T13540] sec_pagetables:0 bounce:0 [ 303.709169][T13540] kernel_misc_reclaimable:0 [ 303.709169][T13540] free:1317338 free_pcp:12394 free_cma:0 [ 303.709220][T13540] Node 0 active_anon:22760kB inactive_anon:0kB active_file:0kB inactive_file:173320kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117788kB dirty:864kB writeback:0kB shmem:2100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14144kB pagetables:4432kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 303.709269][T13540] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 303.709315][T13540] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 303.709367][T13540] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 303.709407][T13540] Node 0 DMA32 free:1312384kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22760kB inactive_anon:0kB active_file:0kB inactive_file:173320kB unevictable:0kB writepending:864kB zspages:0kB present:3129332kB managed:2547148kB mlocked:0kB bounce:0kB free_pcp:49576kB local_pcp:32600kB free_cma:0kB [ 303.709461][T13540] lowmem_reserve[]: 0 0 0 0 0 [ 303.709493][T13540] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 303.709542][T13540] lowmem_reserve[]: 0 0 0 0 0 [ 303.709575][T13540] Node 1 Normal free:3941608kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 303.709626][T13540] lowmem_reserve[]: 0 0 0 0 0 [ 303.709659][T13540] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 303.709756][T13540] Node 0 DMA32: 1253*4kB (UME) 854*8kB (UM) 244*16kB (UME) 916*32kB (UME) 402*64kB (UME) 130*128kB (UME) 63*256kB (UME) 23*512kB (UME) 7*1024kB (M) 3*2048kB (UM) 289*4096kB (UM) = 1312388kB [ 303.709904][T13540] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 303.709996][T13540] Node 1 Normal: 2*4kB (M) 6*8kB (UM) 7*16kB (UM) 6*32kB (UM) 8*64kB (UM) 5*128kB (UM) 5*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3941608kB [ 303.710149][T13540] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 303.710164][T13540] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 303.710179][T13540] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 303.710193][T13540] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 303.710208][T13540] 43902 total pagecache pages [ 303.710215][T13540] 0 pages in swap cache [ 303.710222][T13540] Free swap = 124996kB [ 303.710229][T13540] Total swap = 124996kB [ 303.710236][T13540] 2097051 pages RAM [ 303.710243][T13540] 0 pages HighMem/MovableOnly [ 303.710249][T13540] 428648 pages reserved [ 303.710256][T13540] 0 pages cma reserved [ 304.250534][T13555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1821'. [ 304.343159][T13558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1821'. [ 304.678883][T13566] netlink: 'syz.0.1822': attribute type 1 has an invalid length. [ 305.012061][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1818'. [ 305.012094][T13579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1818'. [ 305.296732][ T8079] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.297305][ T8079] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.297339][ T8079] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.297370][ T8079] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.460390][T13589] can: request_module (can-proto-5) failed. [ 305.575325][T13599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1826'. [ 305.724622][T13616] FAULT_INJECTION: forcing a failure. [ 305.724622][T13616] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 305.724661][T13616] CPU: 0 UID: 0 PID: 13616 Comm: syz.4.1829 Not tainted syzkaller #0 PREEMPT(full) [ 305.724682][T13616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.724692][T13616] Call Trace: [ 305.724699][T13616] [ 305.724706][T13616] dump_stack_lvl+0xe8/0x150 [ 305.724736][T13616] should_fail_ex+0x410/0x560 [ 305.724761][T13616] prepare_alloc_pages+0x223/0x600 [ 305.724788][T13616] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 305.724811][T13616] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 305.724834][T13616] ? __pfx_policy_nodemask+0x10/0x10 [ 305.724853][T13616] ? __get_vm_area_node+0x155/0x2f0 [ 305.724876][T13616] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 305.724901][T13616] ? __vmalloc_noprof+0xd2/0x120 [ 305.724924][T13616] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 305.724944][T13616] ? bpf_prog_alloc+0x3c/0x1a0 [ 305.724962][T13616] ? __sys_bpf+0xd0d/0xd90 [ 305.724979][T13616] ? __x64_sys_bpf+0xba/0xd0 [ 305.724994][T13616] ? do_syscall_64+0x166/0x520 [ 305.725017][T13616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.725040][T13616] alloc_pages_mpol+0x21e/0x390 [ 305.725069][T13616] alloc_pages_noprof+0xb1/0x2b0 [ 305.725093][T13616] get_free_pages_noprof+0xf/0x80 [ 305.725113][T13616] __kasan_populate_vmalloc+0x38/0x1c0 [ 305.725144][T13616] ? do_raw_spin_unlock+0xf5/0x200 [ 305.725174][T13616] alloc_vmap_area+0xd1a/0x1420 [ 305.725213][T13616] ? __pfx_alloc_vmap_area+0x10/0x10 [ 305.725235][T13616] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 305.725256][T13616] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 305.725273][T13616] ? __get_vm_area_node+0x155/0x2f0 [ 305.725303][T13616] __get_vm_area_node+0x200/0x2f0 [ 305.725334][T13616] __vmalloc_node_range_noprof+0x343/0x1540 [ 305.725361][T13616] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 305.725381][T13616] ? __lock_acquire+0x747/0x2de0 [ 305.725424][T13616] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 305.725459][T13616] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 305.725478][T13616] __vmalloc_noprof+0xd2/0x120 [ 305.725503][T13616] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 305.725526][T13616] bpf_prog_alloc_no_stats+0x47/0x560 [ 305.725545][T13616] ? bpf_prog_alloc+0x2a/0x1a0 [ 305.725567][T13616] bpf_prog_alloc+0x3c/0x1a0 [ 305.725590][T13616] bpf_prog_load+0x7f8/0x1c20 [ 305.725622][T13616] ? __pfx_bpf_prog_load+0x10/0x10 [ 305.725673][T13616] __sys_bpf+0xd0d/0xd90 [ 305.725701][T13616] ? __pfx___sys_bpf+0x10/0x10 [ 305.725731][T13616] ? __fget_files+0x2a/0x420 [ 305.725772][T13616] ? ksys_write+0x242/0x270 [ 305.725800][T13616] ? __pfx_ksys_write+0x10/0x10 [ 305.725832][T13616] __x64_sys_bpf+0xba/0xd0 [ 305.725852][T13616] do_syscall_64+0x166/0x520 [ 305.725875][T13616] ? trace_irq_disable+0x3b/0x140 [ 305.725891][T13616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.725909][T13616] ? clear_bhb_loop+0x70/0xc0 [ 305.725931][T13616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.725950][T13616] RIP: 0033:0x7fdc5c59e159 [ 305.725967][T13616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.725982][T13616] RSP: 002b:00007fdc5a7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.726001][T13616] RAX: ffffffffffffffda RBX: 00007fdc5c825fa0 RCX: 00007fdc5c59e159 [ 305.726015][T13616] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 305.726026][T13616] RBP: 00007fdc5a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 305.726037][T13616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.726048][T13616] R13: 00007fdc5c826038 R14: 00007fdc5c825fa0 R15: 00007ffd4665cbf8 [ 305.726079][T13616] [ 306.328455][T13637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1833'. [ 306.847746][T13639] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 306.855784][T13639] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 307.235694][T13679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1843'. [ 307.235720][T13679] netlink: 'syz.2.1843': attribute type 1 has an invalid length. [ 307.238548][T13679] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1843'. [ 307.426805][T13683] block nbd0: NBD_DISCONNECT [ 307.426831][T13683] block nbd0: Send disconnect failed -32 [ 307.426850][T13683] block nbd0: Send disconnect failed -32 [ 307.426867][T13683] block nbd0: shutting down sockets [ 307.894540][T13714] syzkaller0: entered promiscuous mode [ 307.894562][T13714] syzkaller0: entered allmulticast mode [ 307.942536][T13710] pim6reg: entered allmulticast mode [ 307.997860][T13717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1854'. [ 308.003511][T13717] bond0: (slave bond_slave_0): Releasing backup interface [ 308.011232][T13717] bond_slave_0: left allmulticast mode [ 308.074006][T13717] net_ratelimit: 496 callbacks suppressed [ 308.074024][T13717] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 308.555628][ T4936] block nbd0: Receive control failed (result -32) [ 308.556653][ T5624] block nbd0: Receive control failed (result -32) [ 308.557723][ T5618] block nbd4: Receive control failed (result -32) [ 308.560169][ T5625] block nbd4: Receive control failed (result -32) [ 309.109754][T13768] FAULT_INJECTION: forcing a failure. [ 309.109754][T13768] name failslab, interval 1, probability 0, space 0, times 0 [ 309.109785][T13768] CPU: 1 UID: 0 PID: 13768 Comm: syz.3.1864 Not tainted syzkaller #0 PREEMPT(full) [ 309.109805][T13768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 309.109816][T13768] Call Trace: [ 309.109823][T13768] [ 309.109831][T13768] dump_stack_lvl+0xe8/0x150 [ 309.109884][T13768] should_fail_ex+0x410/0x560 [ 309.109910][T13768] should_failslab+0xa8/0x100 [ 309.109935][T13768] __kmalloc_node_noprof+0x100/0x720 [ 309.109962][T13768] ? __get_vm_area_node+0x200/0x2f0 [ 309.109985][T13768] ? __get_vm_area_node+0x283/0x2f0 [ 309.110006][T13768] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 309.110030][T13768] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 309.110067][T13768] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 309.110094][T13768] ? __lock_acquire+0x747/0x2de0 [ 309.110138][T13768] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 309.110174][T13768] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 309.110194][T13768] __vmalloc_noprof+0xd2/0x120 [ 309.110220][T13768] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 309.110243][T13768] bpf_prog_alloc_no_stats+0x47/0x560 [ 309.110262][T13768] ? bpf_prog_alloc+0x2a/0x1a0 [ 309.110285][T13768] bpf_prog_alloc+0x3c/0x1a0 [ 309.110308][T13768] bpf_prog_load+0x7f8/0x1c20 [ 309.110340][T13768] ? __pfx_bpf_prog_load+0x10/0x10 [ 309.110385][T13768] __sys_bpf+0xd0d/0xd90 [ 309.110412][T13768] ? __pfx___sys_bpf+0x10/0x10 [ 309.110440][T13768] ? __fget_files+0x2a/0x420 [ 309.110479][T13768] ? ksys_write+0x242/0x270 [ 309.110508][T13768] ? __pfx_ksys_write+0x10/0x10 [ 309.110538][T13768] __x64_sys_bpf+0xba/0xd0 [ 309.110559][T13768] do_syscall_64+0x166/0x520 [ 309.110583][T13768] ? trace_irq_disable+0x3b/0x140 [ 309.110600][T13768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.110618][T13768] ? clear_bhb_loop+0x70/0xc0 [ 309.110640][T13768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.110658][T13768] RIP: 0033:0x7f0880d9e159 [ 309.110675][T13768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.110690][T13768] RSP: 002b:00007f0881cd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 309.110711][T13768] RAX: ffffffffffffffda RBX: 00007f0881025fa0 RCX: 00007f0880d9e159 [ 309.110725][T13768] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 309.110737][T13768] RBP: 00007f0881cd5090 R08: 0000000000000000 R09: 0000000000000000 [ 309.110748][T13768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.110760][T13768] R13: 00007f0881026038 R14: 00007f0881025fa0 R15: 00007fff2eb57ad8 [ 309.110791][T13768] [ 309.260067][T13775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1866'. [ 309.443896][T13783] netlink: 4416 bytes leftover after parsing attributes in process `syz.3.1868'. [ 309.561767][T13785] tipc: Resetting bearer [ 309.592708][T13785] tipc: Resetting bearer [ 309.753102][T13797] C: entered promiscuous mode [ 309.753269][T13797] tunl0: entered promiscuous mode [ 309.773780][T13797] gretap0: entered promiscuous mode [ 309.773919][T13797] erspan0: entered promiscuous mode [ 309.774034][T13797] ip_vti0: entered promiscuous mode [ 309.774180][T13797] ip6_vti0: entered promiscuous mode [ 309.774288][T13797] sit0: entered promiscuous mode [ 309.774395][T13797] ip6tnl0: entered promiscuous mode [ 309.774507][T13797] ip6gre0: entered promiscuous mode [ 309.818978][T13797] syz_tun: entered promiscuous mode [ 309.819165][T13797] ip6gretap0: entered promiscuous mode [ 309.819278][T13797] bridge0: entered promiscuous mode [ 309.819400][T13797] vcan0: entered promiscuous mode [ 309.819533][T13797] : entered promiscuous mode [ 309.819546][T13797] bond_slave_0: entered promiscuous mode [ 309.819855][T13797] nlmon0: entered promiscuous mode [ 309.819991][T13797] batadv0: entered promiscuous mode [ 309.820126][T13797] veth0: entered promiscuous mode [ 309.820297][T13797] veth1: entered promiscuous mode [ 309.845150][T13797] wg0: entered promiscuous mode [ 309.845338][T13797] wg1: entered promiscuous mode [ 309.845474][T13797] wg2: entered promiscuous mode [ 309.845607][T13797] veth0_to_bridge: entered promiscuous mode [ 309.845840][T13797] veth1_to_bridge: entered promiscuous mode [ 309.846125][T13797] veth0_to_bond: entered promiscuous mode [ 309.846384][T13797] veth0_to_team: entered promiscuous mode [ 309.859471][T13797] team_slave_0: entered promiscuous mode [ 309.859634][T13797] veth1_to_team: entered promiscuous mode [ 309.859779][T13797] team_slave_1: entered promiscuous mode [ 309.861602][T13797] veth0_to_batadv: entered promiscuous mode [ 309.861758][T13797] batadv_slave_0: entered promiscuous mode [ 309.861893][T13797] veth1_to_batadv: entered promiscuous mode [ 309.862029][T13797] batadv_slave_1: entered promiscuous mode [ 309.862163][T13797] xfrm0: entered promiscuous mode [ 309.862305][T13797] veth0_to_hsr: entered promiscuous mode [ 309.885376][T13797] hsr0: entered promiscuous mode [ 309.885531][T13797] veth1_virt_wifi: entered promiscuous mode [ 309.885669][T13797] veth0_virt_wifi: entered promiscuous mode [ 309.885830][T13797] virt_wifi0: entered promiscuous mode [ 309.886260][T13797] vlan0: entered promiscuous mode [ 309.886534][T13797] vlan1: entered promiscuous mode [ 309.886822][T13797] macvlan0: entered promiscuous mode [ 309.893089][T13797] macvlan1: entered promiscuous mode [ 309.893244][T13797] ipvlan0: entered promiscuous mode [ 309.893388][T13797] ipvlan1: entered promiscuous mode [ 309.895592][T13797] macvtap0: entered promiscuous mode [ 309.895731][T13797] macsec0: entered promiscuous mode [ 309.899148][T13797] geneve1: entered promiscuous mode [ 309.900184][T13797] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 309.900319][T13797] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 309.901287][T13797] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 309.901460][T13797] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 309.903261][T13797] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 309.903405][T13797] bridge1: entered promiscuous mode [ 309.903522][T13797] bond1: entered promiscuous mode [ 309.905898][T13797] syztnl1: entered promiscuous mode [ 309.906012][T13797] bond2: entered promiscuous mode [ 309.911235][T13797] bridge2: entered promiscuous mode [ 309.911356][T13797] vrf0: entered promiscuous mode [ 309.911494][T13797] gtp0: entered promiscuous mode [ 309.911653][T13797] geneve2: entered promiscuous mode [ 309.911807][T13797] veth2: entered promiscuous mode [ 309.912003][T13797] veth3: entered promiscuous mode [ 309.912131][T13797] bridge3: entered promiscuous mode [ 309.923608][T13797] tun0: entered promiscuous mode [ 309.927516][T13797] vlan3: entered promiscuous mode [ 309.927822][T13797] sit1: entered promiscuous mode [ 309.927935][T13797] bond3: entered promiscuous mode [ 309.928048][T13797] bond4: entered promiscuous mode [ 309.928158][T13797] sit2: entered promiscuous mode [ 309.928288][T13797] ip6gre1: entered promiscuous mode [ 309.928395][T13797] bond5: entered promiscuous mode [ 309.928502][T13797] bridge4: entered promiscuous mode [ 309.928614][T13797] ip6gre2: entered promiscuous mode [ 309.928742][T13797] : entered promiscuous mode [ 309.928854][T13797] veth4: entered promiscuous mode [ 309.962338][T13807] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1873'. [ 309.962527][T13797] veth5: entered promiscuous mode [ 309.962679][T13797] vlan4: entered promiscuous mode [ 309.962939][T13797] macvlan2: entered promiscuous mode [ 309.963072][T13797] macvlan3: entered promiscuous mode [ 309.963234][T13797] bond6: entered promiscuous mode [ 309.963343][T13797] ip6tnl1: entered promiscuous mode [ 309.963565][T13797] gre1: entered promiscuous mode [ 309.963667][T13797] veth0.4: entered promiscuous mode [ 309.963951][T13797] vlan0004: entered promiscuous mode [ 309.967965][T13803] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1873'. [ 309.983019][T13797] bond7: entered promiscuous mode [ 309.983036][T13797] bridge5: entered promiscuous mode [ 309.983369][T13797] bridge6: entered promiscuous mode [ 309.987116][T13797] vxlan0: entered promiscuous mode [ 309.987265][T13797] bridge7: entered promiscuous mode [ 309.987380][T13797] bridge8: entered promiscuous mode [ 309.991903][T13797] ipip0: entered promiscuous mode [ 310.483689][T13823] netlink: 'syz.0.1875': attribute type 4 has an invalid length. [ 310.544272][T13823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1875'. [ 310.861938][T13835] bond8 (unregistering): Released all slaves [ 311.004178][T13854] netlink: 'syz.0.1881': attribute type 29 has an invalid length. [ 311.004206][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1881'. [ 311.023379][T13854] netlink: 'syz.0.1881': attribute type 29 has an invalid length. [ 311.023400][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1881'. [ 311.328840][T13871] smc: removing ib device syz0 [ 311.538204][T13871] smbdirect: ib_dev[syz0] removed [ 311.608065][T13878] netlink: 'syz.3.1885': attribute type 1 has an invalid length. [ 311.757545][T13881] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 311.757757][T13878] 8021q: adding VLAN 0 to HW filter on device bond6 [ 311.782369][T13884] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 311.872025][T13890] openvswitch: netlink: Key type 354 is out of range max 32 [ 311.892201][T13887] x_tables: duplicate entry at hook 1 [ 312.038491][T13896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.754185][T13929] bond8: Removing last arp target with arp_interval on [ 313.466169][T13963] __nla_validate_parse: 6 callbacks suppressed [ 313.466187][T13963] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1907'. [ 313.466207][T13963] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1907'. [ 314.177593][T13979] FAULT_INJECTION: forcing a failure. [ 314.177593][T13979] name failslab, interval 1, probability 0, space 0, times 0 [ 314.177623][T13979] CPU: 1 UID: 0 PID: 13979 Comm: syz.0.1911 Not tainted syzkaller #0 PREEMPT(full) [ 314.177643][T13979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 314.177655][T13979] Call Trace: [ 314.177662][T13979] [ 314.177670][T13979] dump_stack_lvl+0xe8/0x150 [ 314.177700][T13979] should_fail_ex+0x410/0x560 [ 314.177727][T13979] should_failslab+0xa8/0x100 [ 314.177751][T13979] __kmalloc_cache_noprof+0xa3/0x600 [ 314.177770][T13979] ? bpf_prog_alloc_no_stats+0xd8/0x560 [ 314.177791][T13979] ? bpf_prog_alloc_no_stats+0xd8/0x560 [ 314.177818][T13979] bpf_prog_alloc_no_stats+0xd8/0x560 [ 314.177837][T13979] ? bpf_prog_alloc+0x2a/0x1a0 [ 314.177860][T13979] bpf_prog_alloc+0x3c/0x1a0 [ 314.177892][T13979] bpf_prog_load+0x7f8/0x1c20 [ 314.177926][T13979] ? __pfx_bpf_prog_load+0x10/0x10 [ 314.177973][T13979] __sys_bpf+0xd0d/0xd90 [ 314.178002][T13979] ? __pfx___sys_bpf+0x10/0x10 [ 314.178033][T13979] ? __fget_files+0x2a/0x420 [ 314.178076][T13979] ? ksys_write+0x242/0x270 [ 314.178105][T13979] ? __pfx_ksys_write+0x10/0x10 [ 314.178137][T13979] __x64_sys_bpf+0xba/0xd0 [ 314.178157][T13979] do_syscall_64+0x166/0x520 [ 314.178181][T13979] ? trace_irq_disable+0x3b/0x140 [ 314.178198][T13979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.178216][T13979] ? clear_bhb_loop+0x70/0xc0 [ 314.178238][T13979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.178256][T13979] RIP: 0033:0x7f2e66f9e159 [ 314.178273][T13979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.178288][T13979] RSP: 002b:00007f2e651f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 314.178308][T13979] RAX: ffffffffffffffda RBX: 00007f2e67225fa0 RCX: 00007f2e66f9e159 [ 314.178322][T13979] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 314.178334][T13979] RBP: 00007f2e651f6090 R08: 0000000000000000 R09: 0000000000000000 [ 314.178346][T13979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.178357][T13979] R13: 00007f2e67226038 R14: 00007f2e67225fa0 R15: 00007ffdfad02418 [ 314.178387][T13979] [ 314.491899][T13993] openvswitch: netlink: Flow actions attr not present in new flow. [ 314.492312][T13993] netlink: 69 bytes leftover after parsing attributes in process `syz.2.1916'. [ 314.735435][T14001] netlink: 'syz.1.1913': attribute type 29 has an invalid length. [ 314.735455][T14001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1913'. [ 314.812006][T13986] netlink: 'syz.1.1913': attribute type 29 has an invalid length. [ 314.812021][T13986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1913'. [ 314.850657][T14007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1920'. [ 315.035282][T14020] xt_cgroup: invalid path, errno=-2 [ 315.232071][T14028] netlink: 'syz.2.1923': attribute type 8 has an invalid length. [ 315.336135][T14036] FAULT_INJECTION: forcing a failure. [ 315.336135][T14036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.336166][T14036] CPU: 0 UID: 0 PID: 14036 Comm: syz.4.1926 Not tainted syzkaller #0 PREEMPT(full) [ 315.336187][T14036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 315.336199][T14036] Call Trace: [ 315.336206][T14036] [ 315.336214][T14036] dump_stack_lvl+0xe8/0x150 [ 315.336247][T14036] should_fail_ex+0x410/0x560 [ 315.336271][T14036] _copy_from_user+0x2d/0xb0 [ 315.336296][T14036] copy_from_bpfptr+0x5c/0x90 [ 315.336317][T14036] bpf_prog_load+0xcdb/0x1c20 [ 315.336349][T14036] ? __pfx_bpf_prog_load+0x10/0x10 [ 315.336395][T14036] __sys_bpf+0xd0d/0xd90 [ 315.336423][T14036] ? __pfx___sys_bpf+0x10/0x10 [ 315.336453][T14036] ? __fget_files+0x2a/0x420 [ 315.336493][T14036] ? ksys_write+0x242/0x270 [ 315.336520][T14036] ? __pfx_ksys_write+0x10/0x10 [ 315.336552][T14036] __x64_sys_bpf+0xba/0xd0 [ 315.336573][T14036] do_syscall_64+0x166/0x520 [ 315.336596][T14036] ? trace_irq_disable+0x3b/0x140 [ 315.336613][T14036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.336632][T14036] ? clear_bhb_loop+0x70/0xc0 [ 315.336655][T14036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.336672][T14036] RIP: 0033:0x7fdc5c59e159 [ 315.336689][T14036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.336703][T14036] RSP: 002b:00007fdc5a7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 315.336722][T14036] RAX: ffffffffffffffda RBX: 00007fdc5c825fa0 RCX: 00007fdc5c59e159 [ 315.336736][T14036] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 315.336748][T14036] RBP: 00007fdc5a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 315.336766][T14036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.336776][T14036] R13: 00007fdc5c826038 R14: 00007fdc5c825fa0 R15: 00007ffd4665cbf8 [ 315.336805][T14036] [ 315.712593][T14048] x_tables: duplicate underflow at hook 3 [ 316.049494][T14063] openvswitch: netlink: VLAN attribute unexpected. [ 316.301623][T14074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1933'. [ 316.583039][T14090] netlink: 'syz.1.1936': attribute type 1 has an invalid length. [ 316.652866][T14090] 8021q: adding VLAN 0 to HW filter on device bond9 [ 316.690392][T14090] bond9: (slave geneve4): making interface the new active one [ 316.691718][T14090] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 316.705155][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.705378][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.705410][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.705440][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.951783][T14112] netlink: 'syz.1.1942': attribute type 1 has an invalid length. [ 316.988958][T14112] 8021q: adding VLAN 0 to HW filter on device bond10 [ 317.053273][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.112886][T14120] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1943'. [ 317.138103][T14109] bond10: (slave veth7): Enslaving as an active interface with a down link [ 317.162357][T14115] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 317.187708][T14115] bond10: (slave batadv1): making interface the new active one [ 317.195525][T14115] batadv1: entered promiscuous mode [ 317.225986][T14115] bond10: (slave batadv1): Enslaving as an active interface with an up link [ 317.404351][T14079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1934'. [ 317.448902][T14124] ip_tables: iptables: counters copy to user failed while replacing table [ 318.014613][T14163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1949'. [ 318.902677][T14214] __nla_validate_parse: 2 callbacks suppressed [ 318.902697][T14214] netlink: 280 bytes leftover after parsing attributes in process `syz.3.1959'. [ 319.723197][T14262] nbd5: detected capacity change from 0 to 63 [ 319.783888][ T5625] block nbd5: Receive control failed (result -104) [ 319.853980][T14269] syzkaller0: entered promiscuous mode [ 319.854002][T14269] syzkaller0: entered allmulticast mode [ 319.858524][T14271] netlink: 'syz.1.1972': attribute type 1 has an invalid length. [ 319.891240][T14271] bond11: entered promiscuous mode [ 319.891508][T14271] 8021q: adding VLAN 0 to HW filter on device bond11 [ 319.970082][T14274] bond11: (slave bridge6): making interface the new active one [ 319.970104][T14274] bridge6: entered promiscuous mode [ 319.971306][T14274] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 320.069089][T14274] bond11: (slave bridge7): Enslaving as a backup interface with an up link [ 320.149834][T14274] bond11: (slave bridge8): Enslaving as a backup interface with an up link [ 320.203184][T14274] bond11: (slave bridge9): Enslaving as a backup interface with an up link [ 320.228060][T14274] bond11: (slave bridge10): Enslaving as a backup interface with an up link [ 320.257970][T14274] bond11: (slave bridge11): Enslaving as a backup interface with an up link [ 320.311038][T14274] bond11: (slave bridge12): Enslaving as a backup interface with an up link [ 320.346501][T14274] bond11: (slave bridge13): Enslaving as a backup interface with an up link [ 320.406451][T14274] bond11: (slave bridge14): Enslaving as a backup interface with an up link [ 320.430139][T14274] bond11: (slave bridge15): Enslaving as a backup interface with an up link [ 320.456599][T14274] bond11: (slave bridge16): Enslaving as a backup interface with an up link [ 320.492479][T14274] bond11: (slave bridge17): Enslaving as a backup interface with an up link [ 320.516625][T14274] bond11: (slave bridge18): Enslaving as a backup interface with an up link [ 320.546577][T14274] bond11: (slave bridge19): Enslaving as a backup interface with an up link [ 320.570797][T14274] bond11: (slave bridge20): Enslaving as a backup interface with an up link [ 320.602080][T14274] bond11: (slave bridge21): Enslaving as a backup interface with an up link [ 320.625792][T14274] bond11: (slave bridge22): Enslaving as a backup interface with an up link [ 320.650680][T14274] bond11: (slave bridge23): Enslaving as a backup interface with an up link [ 320.673434][T14274] bond11: (slave bridge24): Enslaving as a backup interface with an up link [ 320.728793][T14274] bond11: (slave bridge25): Enslaving as a backup interface with an up link [ 321.087295][T14312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1979'. [ 321.141694][T14317] netlink: 'syz.3.1981': attribute type 11 has an invalid length. [ 321.141713][T14317] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1981'. [ 321.151698][T14317] netlink: 'syz.3.1981': attribute type 3 has an invalid length. [ 321.397104][T14324] netlink: 'syz.2.1983': attribute type 1 has an invalid length. [ 321.555306][T14331] geneve1: entered promiscuous mode [ 321.557722][T14329] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1985'. [ 321.816491][T14342] bond0: Removing last arp target with arp_interval on [ 321.817350][T14350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1988'. [ 322.421182][T14372] syzkaller0: entered promiscuous mode [ 322.421203][T14372] syzkaller0: entered allmulticast mode [ 322.678735][T14386] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1993'. [ 322.725427][T14386] netlink: 'syz.4.1993': attribute type 1 has an invalid length. [ 322.725447][T14386] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1993'. [ 322.973412][T14393] netlink: 'syz.3.1994': attribute type 12 has an invalid length. [ 322.973432][T14393] netlink: 'syz.3.1994': attribute type 29 has an invalid length. [ 322.973443][T14393] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1994'. [ 323.507032][T14425] netlink: 296 bytes leftover after parsing attributes in process `syz.4.1998'. [ 323.514657][T14429] tipc: Enabled bearer , priority 0 [ 323.660505][T14439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2000'. [ 323.760362][T14425] syzkaller0: entered promiscuous mode [ 323.760398][T14425] syzkaller0: entered allmulticast mode [ 323.761870][T14425] tipc: Resetting bearer [ 323.783667][ T31] audit: type=1107 audit(1790928516.490:4): pid=14438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ïFwCc{U¶Ñ"ð!kŒ´äšÞ]ûÑè€>ÓÕ~#£¯ÍÊ…Ò'é€|¿ÉE_M b¶y¾ÞrôíH|SM÷]7'[v®~úÌȳn;îŸÞPÀ{^„”ÙK¸' [ 323.802969][ T31] audit: type=1107 audit(1790928516.500:5): pid=14438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ïFwCc{U¶Ñ"ð!kŒ´äšÞ]ûÑè€>ÓÕ~#£¯ÍÊ…Ò'é€|¿ÉE_M b¶y¾ÞrôíH|SM÷]7'[v®~úÌȳn;îŸÞPÀ{^„”ÙK¸' [ 323.908623][T14423] tipc: Resetting bearer [ 324.182642][T14456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2003'. [ 324.252824][T14457] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2003'. [ 324.521124][T14463] netlink: 308 bytes leftover after parsing attributes in process `syz.3.2005'. [ 325.961678][T14423] tipc: Disabling bearer [ 326.080677][T13155] tipc: Node number set to 602662359 [ 326.426860][T14495] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2013'. [ 326.447953][T14495] netlink: 'syz.1.2013': attribute type 11 has an invalid length. [ 326.473700][T14500] netlink: 'syz.0.2011': attribute type 3 has an invalid length. [ 326.473720][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2011'. [ 326.531344][T14488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.554667][T14490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2014'. [ 327.172239][T14532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2019'. [ 327.189805][T14528] can: request_module (can-proto-0) failed. [ 328.216109][T14594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2028'. [ 328.216288][T14594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2028'. [ 328.216309][T14594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2028'. [ 328.914976][ T49] batadv1: left promiscuous mode [ 329.118008][T14632] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 329.286599][T14645] bridge0: port 3(veth1_to_bridge) entered blocking state [ 329.286727][T14645] bridge0: port 3(veth1_to_bridge) entered disabled state [ 329.286876][T14645] veth1_to_bridge: entered allmulticast mode [ 329.302025][T14645] veth1_to_bridge: entered promiscuous mode [ 329.376738][T14645] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 329.376772][T14645] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 329.376820][T14645] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 329.544297][T14645] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 329.631570][T14664] __nla_validate_parse: 426 callbacks suppressed [ 329.631590][T14664] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2044'. [ 330.113890][T14688] netlink: 'syz.1.2049': attribute type 4 has an invalid length. [ 330.113914][T14688] netlink: 'syz.1.2049': attribute type 8 has an invalid length. [ 330.113926][T14688] netlink: 'syz.1.2049': attribute type 1 has an invalid length. [ 330.113937][T14688] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2049'. [ 330.113968][T14688] NCSI netlink: No device for ifindex 48485 [ 330.179901][T14693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2049'. [ 330.364458][T14690] 8021q: adding VLAN 0 to HW filter on device  [ 330.377027][T14690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.545189][T14690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.550385][T14690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.580095][T14690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.605709][T14690] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 330.652323][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.652422][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.654604][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.654701][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.754007][T14708] tipc: Enabled bearer , priority 0 [ 331.030185][T14736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2057'. [ 331.177312][T14743] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2059'. [ 331.181177][T14740] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2057'. [ 331.287125][T14751] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 331.289410][T14750] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 331.331841][T14760] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 331.353670][T14760] bond0 (unregistering): Released all slaves [ 331.465586][T14761] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2061'. [ 331.465765][T14761] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2061'. [ 331.601497][T14769] ip_tables: iptables: counters copy to user failed while replacing table [ 331.986760][T14797] FAULT_INJECTION: forcing a failure. [ 331.986760][T14797] name failslab, interval 1, probability 0, space 0, times 0 [ 331.986791][T14797] CPU: 1 UID: 0 PID: 14797 Comm: syz.2.2064 Not tainted syzkaller #0 PREEMPT(full) [ 331.986812][T14797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.986823][T14797] Call Trace: [ 331.986831][T14797] [ 331.986838][T14797] dump_stack_lvl+0xe8/0x150 [ 331.986868][T14797] should_fail_ex+0x410/0x560 [ 331.986894][T14797] should_failslab+0xa8/0x100 [ 331.986917][T14797] __kmalloc_node_noprof+0x100/0x720 [ 331.986943][T14797] ? __get_vm_area_node+0x200/0x2f0 [ 331.986966][T14797] ? __get_vm_area_node+0x283/0x2f0 [ 331.986988][T14797] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 331.987012][T14797] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 331.987046][T14797] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 331.987101][T14797] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 331.987137][T14797] ? bpf_prog_calc_tag+0x51/0x370 [ 331.987156][T14797] __vmalloc_noprof+0xd2/0x120 [ 331.987182][T14797] ? bpf_prog_calc_tag+0x51/0x370 [ 331.987204][T14797] bpf_prog_calc_tag+0x51/0x370 [ 331.987224][T14797] ? __pfx_cmp_subprogs+0x10/0x10 [ 331.987248][T14797] check_and_resolve_insns+0xbb/0x21d0 [ 331.987274][T14797] ? add_subprog+0x2e2/0x3f0 [ 331.987297][T14797] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 331.987327][T14797] bpf_check+0x18f9/0x2ef0 [ 331.987365][T14797] ? __pfx_bpf_check+0x10/0x10 [ 331.987387][T14797] ? bpf_obj_name_cpy+0x194/0x1e0 [ 331.987416][T14797] bpf_prog_load+0x14d6/0x1c20 [ 331.987456][T14797] ? __pfx_bpf_prog_load+0x10/0x10 [ 331.987501][T14797] __sys_bpf+0xd0d/0xd90 [ 331.987530][T14797] ? __pfx___sys_bpf+0x10/0x10 [ 331.987561][T14797] ? __fget_files+0x2a/0x420 [ 331.987601][T14797] ? ksys_write+0x242/0x270 [ 331.987630][T14797] ? __pfx_ksys_write+0x10/0x10 [ 331.987661][T14797] __x64_sys_bpf+0xba/0xd0 [ 331.987682][T14797] do_syscall_64+0x166/0x520 [ 331.987706][T14797] ? trace_irq_disable+0x3b/0x140 [ 331.987724][T14797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.987742][T14797] ? clear_bhb_loop+0x70/0xc0 [ 331.987765][T14797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.987784][T14797] RIP: 0033:0x7f73e859e159 [ 331.987800][T14797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.987816][T14797] RSP: 002b:00007f73e94bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 331.987836][T14797] RAX: ffffffffffffffda RBX: 00007f73e8825fa0 RCX: 00007f73e859e159 [ 331.987850][T14797] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 331.987861][T14797] RBP: 00007f73e94bb090 R08: 0000000000000000 R09: 0000000000000000 [ 331.987873][T14797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 331.987884][T14797] R13: 00007f73e8826038 R14: 00007f73e8825fa0 R15: 00007fffdc2a21e8 [ 331.987915][T14797] [ 331.988583][T14797] warn_alloc: 2 callbacks suppressed [ 331.988596][T14797] syz.2.2064: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 331.988648][T14797] CPU: 1 UID: 0 PID: 14797 Comm: syz.2.2064 Not tainted syzkaller #0 PREEMPT(full) [ 331.988668][T14797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.988678][T14797] Call Trace: [ 331.988685][T14797] [ 331.988692][T14797] dump_stack_lvl+0xe8/0x150 [ 331.988720][T14797] warn_alloc+0x24d/0x270 [ 331.988754][T14797] ? __pfx_warn_alloc+0x10/0x10 [ 331.988788][T14797] ? __kmalloc_node_noprof+0x4d7/0x720 [ 331.988815][T14797] ? __get_vm_area_node+0x200/0x2f0 [ 331.988838][T14797] ? __get_vm_area_node+0x283/0x2f0 [ 331.988861][T14797] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 331.988886][T14797] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 331.988919][T14797] __vmalloc_node_range_noprof+0x969/0x1540 [ 331.988974][T14797] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 331.989012][T14797] ? bpf_prog_calc_tag+0x51/0x370 [ 331.989034][T14797] __vmalloc_noprof+0xd2/0x120 [ 331.989060][T14797] ? bpf_prog_calc_tag+0x51/0x370 [ 331.989084][T14797] bpf_prog_calc_tag+0x51/0x370 [ 331.989104][T14797] ? __pfx_cmp_subprogs+0x10/0x10 [ 331.989129][T14797] check_and_resolve_insns+0xbb/0x21d0 [ 331.989154][T14797] ? add_subprog+0x2e2/0x3f0 [ 331.989177][T14797] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 331.989209][T14797] bpf_check+0x18f9/0x2ef0 [ 331.989248][T14797] ? __pfx_bpf_check+0x10/0x10 [ 331.989270][T14797] ? bpf_obj_name_cpy+0x194/0x1e0 [ 331.989297][T14797] bpf_prog_load+0x14d6/0x1c20 [ 331.989327][T14797] ? __pfx_bpf_prog_load+0x10/0x10 [ 331.989371][T14797] __sys_bpf+0xd0d/0xd90 [ 331.989399][T14797] ? __pfx___sys_bpf+0x10/0x10 [ 331.989437][T14797] ? __fget_files+0x2a/0x420 [ 331.989478][T14797] ? ksys_write+0x242/0x270 [ 331.989506][T14797] ? __pfx_ksys_write+0x10/0x10 [ 331.989536][T14797] __x64_sys_bpf+0xba/0xd0 [ 331.989557][T14797] do_syscall_64+0x166/0x520 [ 331.989581][T14797] ? trace_irq_disable+0x3b/0x140 [ 331.989598][T14797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.989617][T14797] ? clear_bhb_loop+0x70/0xc0 [ 331.989641][T14797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.989659][T14797] RIP: 0033:0x7f73e859e159 [ 331.989675][T14797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.989689][T14797] RSP: 002b:00007f73e94bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 331.989707][T14797] RAX: ffffffffffffffda RBX: 00007f73e8825fa0 RCX: 00007f73e859e159 [ 331.989736][T14797] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 331.989748][T14797] RBP: 00007f73e94bb090 R08: 0000000000000000 R09: 0000000000000000 [ 331.989760][T14797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 331.989770][T14797] R13: 00007f73e8826038 R14: 00007f73e8825fa0 R15: 00007fffdc2a21e8 [ 331.989802][T14797] [ 331.989874][T14797] Mem-Info: [ 331.989883][T14797] active_anon:5882 inactive_anon:0 isolated_anon:0 [ 331.989883][T14797] active_file:0 inactive_file:43395 isolated_file:0 [ 331.989883][T14797] unevictable:0 dirty:193 writeback:0 [ 331.989883][T14797] slab_reclaimable:12137 slab_unreclaimable:104893 [ 331.989883][T14797] mapped:29471 shmem:534 pagetables:1300 [ 331.989883][T14797] sec_pagetables:0 bounce:0 [ 331.989883][T14797] kernel_misc_reclaimable:0 [ 331.989883][T14797] free:1280457 free_pcp:11844 free_cma:0 [ 331.989929][T14797] Node 0 active_anon:23528kB inactive_anon:0kB active_file:0kB inactive_file:173376kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117884kB dirty:772kB writeback:0kB shmem:2136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14880kB pagetables:5024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 331.989978][T14797] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 331.990024][T14797] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 331.990076][T14797] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 331.990110][T14797] Node 0 DMA32 free:1164864kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23528kB inactive_anon:0kB active_file:0kB inactive_file:173376kB unevictable:0kB writepending:772kB zspages:0kB present:3129332kB managed:2547148kB mlocked:0kB bounce:0kB free_pcp:47376kB local_pcp:21216kB free_cma:0kB [ 331.990164][T14797] lowmem_reserve[]: 0 0 0 0 0 [ 331.990195][T14797] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 331.990244][T14797] lowmem_reserve[]: 0 0 0 0 0 [ 331.990275][T14797] Node 1 Normal free:3941604kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 331.990327][T14797] lowmem_reserve[]: 0 0 0 0 0 [ 331.990358][T14797] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 331.990468][T14797] Node 0 DMA32: 2204*4kB (UME) 870*8kB (UME) 538*16kB (UME) 469*32kB (UME) 396*64kB (UME) 135*128kB (UME) 58*256kB (UME) 24*512kB (UM) 9*1024kB (UME) 3*2048kB (UME) 254*4096kB (UM) = 1164896kB [ 331.990618][T14797] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 331.990710][T14797] Node 1 Normal: 3*4kB (UM) 5*8kB (UM) 7*16kB (UM) 6*32kB (UM) 8*64kB (UM) 5*128kB (UM) 5*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3941604kB [ 331.990855][T14797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 331.990870][T14797] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 331.990884][T14797] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 331.990897][T14797] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 331.990973][T14797] 43925 total pagecache pages [ 331.990980][T14797] 0 pages in swap cache [ 331.990987][T14797] Free swap = 124996kB [ 331.990994][T14797] Total swap = 124996kB [ 331.991001][T14797] 2097051 pages RAM [ 331.991007][T14797] 0 pages HighMem/MovableOnly [ 331.991014][T14797] 428648 pages reserved [ 331.991020][T14797] 0 pages cma reserved [ 332.315554][T14810] netlink: 'syz.4.2066': attribute type 21 has an invalid length. [ 332.315583][T14810] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2066'. [ 332.315651][T14810] netlink: 'syz.4.2066': attribute type 4 has an invalid length. [ 332.315662][T14810] netlink: 'syz.4.2066': attribute type 5 has an invalid length. [ 332.315672][T14810] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2066'. [ 332.380080][T14807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.448043][T14812] syzkaller0: entered promiscuous mode [ 332.448063][T14812] syzkaller0: entered allmulticast mode [ 332.488110][T14810] netlink: 'syz.4.2066': attribute type 12 has an invalid length. [ 332.488129][T14810] netlink: 'syz.4.2066': attribute type 29 has an invalid length. [ 333.140548][T14829] batadv0: entered promiscuous mode [ 333.140570][T14829] batadv0: entered allmulticast mode [ 333.141624][T14829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.193164][T14827] netlink: 'syz.3.2071': attribute type 39 has an invalid length. [ 333.207754][T14835] veth0_to_batadv: mtu less than device minimum [ 334.379910][T14919] FAULT_INJECTION: forcing a failure. [ 334.379910][T14919] name failslab, interval 1, probability 0, space 0, times 0 [ 334.379941][T14919] CPU: 0 UID: 0 PID: 14919 Comm: syz.3.2090 Not tainted syzkaller #0 PREEMPT(full) [ 334.379962][T14919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 334.379974][T14919] Call Trace: [ 334.379982][T14919] [ 334.379990][T14919] dump_stack_lvl+0xe8/0x150 [ 334.380020][T14919] should_fail_ex+0x410/0x560 [ 334.380047][T14919] should_failslab+0xa8/0x100 [ 334.380071][T14919] __kvmalloc_node_noprof+0x176/0x820 [ 334.380103][T14919] ? bpf_check_cfg+0x13f/0x3840 [ 334.380129][T14919] ? bpf_check_cfg+0x13f/0x3840 [ 334.380168][T14919] bpf_check_cfg+0x13f/0x3840 [ 334.380209][T14919] ? irqentry_exit+0x218/0x910 [ 334.380233][T14919] ? lockdep_hardirqs_on+0x7b/0x110 [ 334.380257][T14919] ? irqentry_exit+0x218/0x910 [ 334.380279][T14919] ? trace_irq_disable+0x3b/0x140 [ 334.380309][T14919] ? __pfx_bpf_check_cfg+0x10/0x10 [ 334.380339][T14919] ? check_and_resolve_insns+0x548/0x21d0 [ 334.380361][T14919] ? __sanitizer_cov_trace_switch+0x6c/0x110 [ 334.380394][T14919] ? check_and_resolve_insns+0x1d54/0x21d0 [ 334.380425][T14919] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 334.380449][T14919] ? add_kfuncs+0x251/0x2e0 [ 334.380472][T14919] bpf_check+0x25fd/0x2ef0 [ 334.380510][T14919] ? __pfx_bpf_check+0x10/0x10 [ 334.380533][T14919] ? bpf_obj_name_cpy+0x194/0x1e0 [ 334.380562][T14919] bpf_prog_load+0x14d6/0x1c20 [ 334.380593][T14919] ? __pfx_bpf_prog_load+0x10/0x10 [ 334.380639][T14919] __sys_bpf+0xd0d/0xd90 [ 334.380668][T14919] ? __pfx___sys_bpf+0x10/0x10 [ 334.380700][T14919] ? __fget_files+0x2a/0x420 [ 334.380742][T14919] ? ksys_write+0x242/0x270 [ 334.380771][T14919] ? __pfx_ksys_write+0x10/0x10 [ 334.380803][T14919] __x64_sys_bpf+0xba/0xd0 [ 334.380824][T14919] do_syscall_64+0x166/0x520 [ 334.380848][T14919] ? trace_irq_disable+0x3b/0x140 [ 334.380865][T14919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.380884][T14919] ? clear_bhb_loop+0x70/0xc0 [ 334.380907][T14919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.380926][T14919] RIP: 0033:0x7f0880d9e159 [ 334.380943][T14919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.380959][T14919] RSP: 002b:00007f0881cd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 334.380980][T14919] RAX: ffffffffffffffda RBX: 00007f0881025fa0 RCX: 00007f0880d9e159 [ 334.380994][T14919] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 334.381006][T14919] RBP: 00007f0881cd5090 R08: 0000000000000000 R09: 0000000000000000 [ 334.381018][T14919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 334.381029][T14919] R13: 00007f0881026038 R14: 00007f0881025fa0 R15: 00007fff2eb57ad8 [ 334.381061][T14919] [ 334.704906][T14924] __nla_validate_parse: 3 callbacks suppressed [ 334.704923][T14924] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2091'. [ 334.822090][T14933] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2093'. [ 334.823043][T14931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2092'. [ 334.933053][T14940] netlink: 'syz.0.2095': attribute type 1 has an invalid length. [ 334.938263][T14943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2094'. [ 334.973400][T14940] bond10: entered promiscuous mode [ 334.973782][T14940] 8021q: adding VLAN 0 to HW filter on device bond10 [ 334.989746][T14940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2095'. [ 334.989778][T14940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2095'. [ 335.031393][T14940] bond10: (slave bridge0): making interface the new active one [ 335.031414][T14940] bridge0: entered promiscuous mode [ 335.032990][T14940] bond10: (slave bridge0): Enslaving as an active interface with an up link [ 335.784669][T14970] batadv1: entered promiscuous mode [ 335.784690][T14970] batadv1: entered allmulticast mode [ 335.805931][T14970] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 336.025687][T14974] FAULT_INJECTION: forcing a failure. [ 336.025687][T14974] name failslab, interval 1, probability 0, space 0, times 0 [ 336.025719][T14974] CPU: 0 UID: 0 PID: 14974 Comm: syz.4.2102 Not tainted syzkaller #0 PREEMPT(full) [ 336.025740][T14974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 336.025750][T14974] Call Trace: [ 336.025757][T14974] [ 336.025763][T14974] dump_stack_lvl+0xe8/0x150 [ 336.025788][T14974] should_fail_ex+0x410/0x560 [ 336.025807][T14974] should_failslab+0xa8/0x100 [ 336.025826][T14974] __kvmalloc_node_noprof+0x176/0x820 [ 336.025845][T14974] ? bpf_check_cfg+0x1ad/0x3840 [ 336.025865][T14974] ? bpf_check_cfg+0x1ad/0x3840 [ 336.025891][T14974] bpf_check_cfg+0x1ad/0x3840 [ 336.025927][T14974] ? kasan_quarantine_put+0xbb/0x1f0 [ 336.025941][T14974] ? lockdep_hardirqs_on+0x7b/0x110 [ 336.025963][T14974] ? __pfx_bpf_check_cfg+0x10/0x10 [ 336.025983][T14974] ? bpf_prog_calc_tag+0x310/0x370 [ 336.025998][T14974] ? vfree+0x42b/0x490 [ 336.026019][T14974] ? bpf_prog_calc_tag+0x310/0x370 [ 336.026038][T14974] ? check_and_resolve_insns+0x1d54/0x21d0 [ 336.026061][T14974] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 336.026079][T14974] ? add_kfuncs+0x251/0x2e0 [ 336.026097][T14974] bpf_check+0x25fd/0x2ef0 [ 336.026124][T14974] ? __pfx_bpf_check+0x10/0x10 [ 336.026141][T14974] ? bpf_obj_name_cpy+0x194/0x1e0 [ 336.026163][T14974] bpf_prog_load+0x14d6/0x1c20 [ 336.026188][T14974] ? __pfx_bpf_prog_load+0x10/0x10 [ 336.026221][T14974] __sys_bpf+0xd0d/0xd90 [ 336.026242][T14974] ? __pfx___sys_bpf+0x10/0x10 [ 336.026265][T14974] ? __fget_files+0x2a/0x420 [ 336.026299][T14974] ? ksys_write+0x242/0x270 [ 336.026321][T14974] ? __pfx_ksys_write+0x10/0x10 [ 336.026344][T14974] __x64_sys_bpf+0xba/0xd0 [ 336.026365][T14974] do_syscall_64+0x166/0x520 [ 336.026383][T14974] ? trace_irq_disable+0x3b/0x140 [ 336.026397][T14974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.026411][T14974] ? clear_bhb_loop+0x70/0xc0 [ 336.026429][T14974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.026443][T14974] RIP: 0033:0x7fdc5c59e159 [ 336.026457][T14974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.026468][T14974] RSP: 002b:00007fdc5a7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 336.026484][T14974] RAX: ffffffffffffffda RBX: 00007fdc5c825fa0 RCX: 00007fdc5c59e159 [ 336.026495][T14974] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 336.026504][T14974] RBP: 00007fdc5a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 336.026513][T14974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 336.026522][T14974] R13: 00007fdc5c826038 R14: 00007fdc5c825fa0 R15: 00007ffd4665cbf8 [ 336.026544][T14974] [ 336.084734][T14973] block nbd6: shutting down sockets [ 337.375307][T15040] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2111'. [ 337.437218][T15046] netlink: zone id is out of range [ 337.437232][T15046] netlink: zone id is out of range [ 337.437241][T15046] netlink: zone id is out of range [ 337.437248][T15046] netlink: zone id is out of range [ 337.437255][T15046] netlink: zone id is out of range [ 337.437261][T15046] netlink: zone id is out of range [ 337.437267][T15046] netlink: zone id is out of range [ 337.437274][T15046] netlink: zone id is out of range [ 337.437280][T15046] netlink: zone id is out of range [ 337.437287][T15046] netlink: set zone limit has 4 unknown bytes [ 337.552847][T15053] FAULT_INJECTION: forcing a failure. [ 337.552847][T15053] name failslab, interval 1, probability 0, space 0, times 0 [ 337.552878][T15053] CPU: 0 UID: 0 PID: 15053 Comm: syz.0.2115 Not tainted syzkaller #0 PREEMPT(full) [ 337.552899][T15053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 337.552909][T15053] Call Trace: [ 337.552916][T15053] [ 337.552923][T15053] dump_stack_lvl+0xe8/0x150 [ 337.552952][T15053] should_fail_ex+0x410/0x560 [ 337.552978][T15053] should_failslab+0xa8/0x100 [ 337.553003][T15053] __kvmalloc_node_noprof+0x176/0x820 [ 337.553026][T15053] ? bpf_compute_postorder+0x83/0x970 [ 337.553052][T15053] ? bpf_compute_postorder+0x83/0x970 [ 337.553084][T15053] bpf_compute_postorder+0x83/0x970 [ 337.553112][T15053] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 337.553135][T15053] ? add_kfuncs+0x251/0x2e0 [ 337.553159][T15053] bpf_check+0x261f/0x2ef0 [ 337.553194][T15053] ? __pfx_bpf_check+0x10/0x10 [ 337.553216][T15053] ? bpf_obj_name_cpy+0x194/0x1e0 [ 337.553253][T15053] bpf_prog_load+0x14d6/0x1c20 [ 337.553284][T15053] ? __pfx_bpf_prog_load+0x10/0x10 [ 337.553331][T15053] __sys_bpf+0xd0d/0xd90 [ 337.553359][T15053] ? __pfx___sys_bpf+0x10/0x10 [ 337.553390][T15053] ? __fget_files+0x2a/0x420 [ 337.553431][T15053] ? ksys_write+0x242/0x270 [ 337.553460][T15053] ? __pfx_ksys_write+0x10/0x10 [ 337.553491][T15053] __x64_sys_bpf+0xba/0xd0 [ 337.553511][T15053] do_syscall_64+0x166/0x520 [ 337.553534][T15053] ? trace_irq_disable+0x3b/0x140 [ 337.553552][T15053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.553570][T15053] ? clear_bhb_loop+0x70/0xc0 [ 337.553591][T15053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.553613][T15053] RIP: 0033:0x7f2e66f9e159 [ 337.553630][T15053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.553643][T15053] RSP: 002b:00007f2e651f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 337.553664][T15053] RAX: ffffffffffffffda RBX: 00007f2e67225fa0 RCX: 00007f2e66f9e159 [ 337.553677][T15053] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 337.553693][T15053] RBP: 00007f2e651f6090 R08: 0000000000000000 R09: 0000000000000000 [ 337.553704][T15053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 337.553715][T15053] R13: 00007f2e67226038 R14: 00007f2e67225fa0 R15: 00007ffdfad02418 [ 337.553745][T15053] [ 337.689662][T15057] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2117'. [ 337.689695][T15057] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2117'. [ 337.733884][T15058] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2117'. [ 337.910946][T15068] netlink: 'syz.0.2118': attribute type 1 has an invalid length. [ 338.066225][T15068] bond11: entered promiscuous mode [ 338.072274][T15068] bond11: entered allmulticast mode [ 338.072745][T15068] 8021q: adding VLAN 0 to HW filter on device bond11 [ 338.090623][T15081] dummy0: entered promiscuous mode [ 338.136316][T15060] batman_adv: batadv0: Adding interface: veth0 [ 338.136332][T15060] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.136358][T15060] batman_adv: batadv0: Interface activated: veth0 [ 339.048791][T15133] FAULT_INJECTION: forcing a failure. [ 339.048791][T15133] name failslab, interval 1, probability 0, space 0, times 0 [ 339.048822][T15133] CPU: 0 UID: 0 PID: 15133 Comm: syz.0.2128 Not tainted syzkaller #0 PREEMPT(full) [ 339.048842][T15133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 339.048853][T15133] Call Trace: [ 339.048861][T15133] [ 339.048868][T15133] dump_stack_lvl+0xe8/0x150 [ 339.048899][T15133] should_fail_ex+0x410/0x560 [ 339.048925][T15133] should_failslab+0xa8/0x100 [ 339.048953][T15133] __kvmalloc_node_noprof+0x176/0x820 [ 339.048978][T15133] ? bpf_check_cfg+0x13f/0x3840 [ 339.049003][T15133] ? bpf_check_cfg+0x13f/0x3840 [ 339.049037][T15133] bpf_check_cfg+0x13f/0x3840 [ 339.049126][T15133] ? kasan_quarantine_put+0xbb/0x1f0 [ 339.049150][T15133] ? lockdep_hardirqs_on+0x7b/0x110 [ 339.049182][T15133] ? __pfx_bpf_check_cfg+0x10/0x10 [ 339.049207][T15133] ? bpf_prog_calc_tag+0x310/0x370 [ 339.049226][T15133] ? vfree+0x42b/0x490 [ 339.049254][T15133] ? bpf_prog_calc_tag+0x310/0x370 [ 339.049279][T15133] ? check_and_resolve_insns+0x1d54/0x21d0 [ 339.049310][T15133] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 339.049333][T15133] ? add_kfuncs+0x251/0x2e0 [ 339.049358][T15133] bpf_check+0x25fd/0x2ef0 [ 339.049396][T15133] ? __pfx_bpf_check+0x10/0x10 [ 339.049418][T15133] ? bpf_obj_name_cpy+0x194/0x1e0 [ 339.049448][T15133] bpf_prog_load+0x14d6/0x1c20 [ 339.049481][T15133] ? __pfx_bpf_prog_load+0x10/0x10 [ 339.049528][T15133] __sys_bpf+0xd0d/0xd90 [ 339.049556][T15133] ? __pfx___sys_bpf+0x10/0x10 [ 339.049587][T15133] ? __fget_files+0x2a/0x420 [ 339.049629][T15133] ? ksys_write+0x242/0x270 [ 339.049658][T15133] ? __pfx_ksys_write+0x10/0x10 [ 339.049690][T15133] __x64_sys_bpf+0xba/0xd0 [ 339.049711][T15133] do_syscall_64+0x166/0x520 [ 339.049735][T15133] ? trace_irq_disable+0x3b/0x140 [ 339.049751][T15133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.049770][T15133] ? clear_bhb_loop+0x70/0xc0 [ 339.049793][T15133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.049812][T15133] RIP: 0033:0x7f2e66f9e159 [ 339.049829][T15133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.049843][T15133] RSP: 002b:00007f2e651f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 339.049862][T15133] RAX: ffffffffffffffda RBX: 00007f2e67225fa0 RCX: 00007f2e66f9e159 [ 339.049875][T15133] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 339.049886][T15133] RBP: 00007f2e651f6090 R08: 0000000000000000 R09: 0000000000000000 [ 339.049897][T15133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 339.049908][T15133] R13: 00007f2e67226038 R14: 00007f2e67225fa0 R15: 00007ffdfad02418 [ 339.049936][T15133] [ 339.808253][T15149] netlink: 'syz.4.2134': attribute type 1 has an invalid length. [ 339.904107][T15154] netlink: 'syz.2.2137': attribute type 2 has an invalid length. [ 339.904127][T15154] __nla_validate_parse: 5 callbacks suppressed [ 339.904137][T15154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2137'. [ 339.931641][T15151] bond8: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 339.952241][T15154] ¿: entered promiscuous mode [ 339.979947][T15149] veth3: entered promiscuous mode [ 339.982748][T15149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2134'. [ 339.984527][T15149] 8021q: adding VLAN 0 to HW filter on device bond8 [ 340.083731][T15161] FAULT_INJECTION: forcing a failure. [ 340.083731][T15161] name failslab, interval 1, probability 0, space 0, times 0 [ 340.083760][T15161] CPU: 0 UID: 0 PID: 15161 Comm: syz.4.2139 Not tainted syzkaller #0 PREEMPT(full) [ 340.083781][T15161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 340.083791][T15161] Call Trace: [ 340.083798][T15161] [ 340.083806][T15161] dump_stack_lvl+0xe8/0x150 [ 340.083836][T15161] should_fail_ex+0x410/0x560 [ 340.083862][T15161] should_failslab+0xa8/0x100 [ 340.083886][T15161] __kvmalloc_node_noprof+0x176/0x820 [ 340.083908][T15161] ? __kvmalloc_node_noprof+0x345/0x820 [ 340.083927][T15161] ? bpf_check_cfg+0x1ad/0x3840 [ 340.083953][T15161] ? bpf_check_cfg+0x1ad/0x3840 [ 340.083996][T15161] bpf_check_cfg+0x1ad/0x3840 [ 340.084046][T15161] ? kasan_quarantine_put+0xbb/0x1f0 [ 340.084065][T15161] ? lockdep_hardirqs_on+0x7b/0x110 [ 340.084094][T15161] ? __pfx_bpf_check_cfg+0x10/0x10 [ 340.084120][T15161] ? bpf_prog_calc_tag+0x310/0x370 [ 340.084140][T15161] ? vfree+0x42b/0x490 [ 340.084168][T15161] ? bpf_prog_calc_tag+0x310/0x370 [ 340.084192][T15161] ? check_and_resolve_insns+0x1d54/0x21d0 [ 340.084223][T15161] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 340.084246][T15161] ? add_kfuncs+0x251/0x2e0 [ 340.084270][T15161] bpf_check+0x25fd/0x2ef0 [ 340.084307][T15161] ? __pfx_bpf_check+0x10/0x10 [ 340.084329][T15161] ? bpf_obj_name_cpy+0x194/0x1e0 [ 340.084357][T15161] bpf_prog_load+0x14d6/0x1c20 [ 340.084389][T15161] ? __pfx_bpf_prog_load+0x10/0x10 [ 340.084436][T15161] __sys_bpf+0xd0d/0xd90 [ 340.084464][T15161] ? __pfx___sys_bpf+0x10/0x10 [ 340.084494][T15161] ? __fget_files+0x2a/0x420 [ 340.084536][T15161] ? ksys_write+0x242/0x270 [ 340.084565][T15161] ? __pfx_ksys_write+0x10/0x10 [ 340.084595][T15161] __x64_sys_bpf+0xba/0xd0 [ 340.084616][T15161] do_syscall_64+0x166/0x520 [ 340.084638][T15161] ? trace_irq_disable+0x3b/0x140 [ 340.084656][T15161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.084675][T15161] ? clear_bhb_loop+0x70/0xc0 [ 340.084698][T15161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.084716][T15161] RIP: 0033:0x7fdc5c59e159 [ 340.084734][T15161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.084749][T15161] RSP: 002b:00007fdc5a7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 340.084768][T15161] RAX: ffffffffffffffda RBX: 00007fdc5c825fa0 RCX: 00007fdc5c59e159 [ 340.084782][T15161] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 340.084792][T15161] RBP: 00007fdc5a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 340.084803][T15161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 340.084813][T15161] R13: 00007fdc5c826038 R14: 00007fdc5c825fa0 R15: 00007ffd4665cbf8 [ 340.084843][T15161] [ 350.327893][ T2644] block nbd5: Possible stuck request ffff888027870000: control (read@0,1024B). Runtime 30 seconds [ 350.329392][ T2644] block nbd5: Possible stuck request ffff8880278701c0: control (read@1024,1024B). Runtime 30 seconds [ 350.329421][ T2644] block nbd5: Possible stuck request ffff888027870380: control (read@2048,1024B). Runtime 30 seconds [ 350.329446][ T2644] block nbd5: Possible stuck request ffff888027870540: control (read@3072,1024B). Runtime 30 seconds [ 378.486999][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.414353][ T2644] block nbd5: Possible stuck request ffff888027870000: control (read@0,1024B). Runtime 60 seconds [ 380.414381][ T2644] block nbd5: Possible stuck request ffff8880278701c0: control (read@1024,1024B). Runtime 60 seconds [ 380.414396][ T2644] block nbd5: Possible stuck request ffff888027870380: control (read@2048,1024B). Runtime 60 seconds [ 380.414408][ T2644] block nbd5: Possible stuck request ffff888027870540: control (read@3072,1024B). Runtime 60 seconds [ 382.563180][ T4986] udevd[4986]: worker [14267] /devices/virtual/block/nbd5 is taking a long time [ 386.789734][T15196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2148'. [ 386.881475][T15203] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2150'. [ 386.972694][T15210] FAULT_INJECTION: forcing a failure. [ 386.972694][T15210] name failslab, interval 1, probability 0, space 0, times 0 [ 386.972750][T15210] CPU: 0 UID: 0 PID: 15210 Comm: syz.4.2151 Not tainted syzkaller #0 PREEMPT(full) [ 386.972771][T15210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 386.972785][T15210] Call Trace: [ 386.972793][T15210] [ 386.972801][T15210] dump_stack_lvl+0xe8/0x150 [ 386.972829][T15210] should_fail_ex+0x410/0x560 [ 386.972854][T15210] should_failslab+0xa8/0x100 [ 386.972877][T15210] __kvmalloc_node_noprof+0x176/0x820 [ 386.972900][T15210] ? bpf_compute_postorder+0x83/0x970 [ 386.972926][T15210] ? bpf_compute_postorder+0x83/0x970 [ 386.972957][T15210] bpf_compute_postorder+0x83/0x970 [ 386.972982][T15210] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 386.973005][T15210] ? add_kfuncs+0x251/0x2e0 [ 386.973028][T15210] bpf_check+0x261f/0x2ef0 [ 386.973064][T15210] ? __pfx_bpf_check+0x10/0x10 [ 386.973084][T15210] ? bpf_obj_name_cpy+0x194/0x1e0 [ 386.973111][T15210] bpf_prog_load+0x14d6/0x1c20 [ 386.973143][T15210] ? __pfx_bpf_prog_load+0x10/0x10 [ 386.973187][T15210] __sys_bpf+0xd0d/0xd90 [ 386.973214][T15210] ? __pfx___sys_bpf+0x10/0x10 [ 386.973245][T15210] ? __fget_files+0x2a/0x420 [ 386.973286][T15210] ? ksys_write+0x242/0x270 [ 386.973315][T15210] ? __pfx_ksys_write+0x10/0x10 [ 386.973346][T15210] __x64_sys_bpf+0xba/0xd0 [ 386.973366][T15210] do_syscall_64+0x166/0x520 [ 386.973389][T15210] ? trace_irq_disable+0x3b/0x140 [ 386.973406][T15210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.973423][T15210] ? clear_bhb_loop+0x70/0xc0 [ 386.973445][T15210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.973469][T15210] RIP: 0033:0x7fdc5c59e159 [ 386.973486][T15210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.973501][T15210] RSP: 002b:00007fdc5a7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 386.973521][T15210] RAX: ffffffffffffffda RBX: 00007fdc5c825fa0 RCX: 00007fdc5c59e159 [ 386.973534][T15210] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 386.973546][T15210] RBP: 00007fdc5a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 386.973557][T15210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 386.973568][T15210] R13: 00007fdc5c826038 R14: 00007fdc5c825fa0 R15: 00007ffd4665cbf8 [ 386.973596][T15210] [ 387.041827][T15211] vlan1: entered promiscuous mode [ 387.044107][T15211] vlan1: entered allmulticast mode [ 387.044122][T15211] bond10: entered allmulticast mode [ 387.044133][T15211] bridge0: entered allmulticast mode [ 387.064108][T15211] bond0: (slave vlan1): Enslaving as an active interface with an up link [ 387.181802][ T31] audit: type=1804 audit(1790928579.890:6): pid=15203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2150" name="/newroot/454/cgroup.controllers" dev="tmpfs" ino=2348 res=1 errno=0 [ 387.193652][ T31] audit: type=1800 audit(1790928579.900:7): pid=15203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2150" name="cgroup.controllers" dev="tmpfs" ino=2348 res=0 errno=0 [ 387.254256][T15216] bridge0: port 3(batadv2) entered blocking state [ 387.254363][T15216] bridge0: port 3(batadv2) entered disabled state [ 387.254504][T15216] batadv2: entered allmulticast mode [ 387.273742][T15216] batadv2: entered promiscuous mode [ 387.332188][T15222] netlink: 'syz.1.2155': attribute type 1 has an invalid length. [ 387.332208][T15222] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2155'. [ 387.359613][T15222] net_ratelimit: 3 callbacks suppressed [ 387.359629][T15222] openvswitch: netlink: Duplicate key (type 3). [ 387.527016][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2157'. [ 387.529988][T15235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2157'. [ 387.715850][T15114] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 387.715868][T15114] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 388.079360][T15259] syzkaller1: entered promiscuous mode [ 388.079382][T15259] syzkaller1: entered allmulticast mode [ 388.152192][T15269] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2161'. [ 388.197250][T15267] team0 (unregistering): Port device team_slave_0 removed [ 388.245753][T15267] team0 (unregistering): Port device team_slave_1 removed [ 388.460377][T15284] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 388.596883][T15287] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2166'. [ 388.597002][T15287] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2166'. [ 388.600148][T15287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2166'. [ 388.967681][T15305] batman_adv: batadv0: Interface deactivated: veth0 [ 389.375723][T15114] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.375765][T15114] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.375793][T15114] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.375821][T15114] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.603258][T15334] block nbd7: server does not support multiple connections per device. [ 389.625739][T15334] block nbd7: shutting down sockets [ 389.707773][T15338] ip_tables: iptables: counters copy to user failed while replacing table [ 389.711520][T15338] ip_tables: iptables: counters copy to user failed while replacing table [ 389.812525][T15342] FAULT_INJECTION: forcing a failure. [ 389.812525][T15342] name failslab, interval 1, probability 0, space 0, times 0 [ 389.812552][T15342] CPU: 0 UID: 0 PID: 15342 Comm: syz.1.2180 Not tainted syzkaller #0 PREEMPT(full) [ 389.812569][T15342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.812578][T15342] Call Trace: [ 389.812584][T15342] [ 389.812590][T15342] dump_stack_lvl+0xe8/0x150 [ 389.812614][T15342] should_fail_ex+0x410/0x560 [ 389.812635][T15342] should_failslab+0xa8/0x100 [ 389.812655][T15342] __kvmalloc_node_noprof+0x176/0x820 [ 389.812673][T15342] ? __kvmalloc_node_noprof+0x345/0x820 [ 389.812689][T15342] ? bpf_compute_postorder+0x131/0x970 [ 389.812713][T15342] ? bpf_compute_postorder+0x131/0x970 [ 389.812756][T15342] bpf_compute_postorder+0x131/0x970 [ 389.812780][T15342] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 389.812803][T15342] ? add_kfuncs+0x251/0x2e0 [ 389.812824][T15342] bpf_check+0x261f/0x2ef0 [ 389.812858][T15342] ? __pfx_bpf_check+0x10/0x10 [ 389.812879][T15342] ? bpf_obj_name_cpy+0x194/0x1e0 [ 389.812906][T15342] bpf_prog_load+0x14d6/0x1c20 [ 389.812945][T15342] ? __pfx_bpf_prog_load+0x10/0x10 [ 389.812993][T15342] __sys_bpf+0xd0d/0xd90 [ 389.813021][T15342] ? __pfx___sys_bpf+0x10/0x10 [ 389.813052][T15342] ? __fget_files+0x2a/0x420 [ 389.813094][T15342] ? ksys_write+0x242/0x270 [ 389.813122][T15342] ? __pfx_ksys_write+0x10/0x10 [ 389.813153][T15342] __x64_sys_bpf+0xba/0xd0 [ 389.813174][T15342] do_syscall_64+0x166/0x520 [ 389.813198][T15342] ? trace_irq_disable+0x3b/0x140 [ 389.813215][T15342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.813235][T15342] ? clear_bhb_loop+0x70/0xc0 [ 389.813256][T15342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.813274][T15342] RIP: 0033:0x7f42d0b9e159 [ 389.813290][T15342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.813304][T15342] RSP: 002b:00007f42d1afa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 389.813323][T15342] RAX: ffffffffffffffda RBX: 00007f42d0e25fa0 RCX: 00007f42d0b9e159 [ 389.813336][T15342] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 389.813347][T15342] RBP: 00007f42d1afa090 R08: 0000000000000000 R09: 0000000000000000 [ 389.813358][T15342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 389.813369][T15342] R13: 00007f42d0e26038 R14: 00007f42d0e25fa0 R15: 00007ffe46ae3bb8 [ 389.813396][T15342] [ 390.330686][T15368] vlan0: entered promiscuous mode [ 390.330706][T15368] bridge0: entered promiscuous mode [ 390.595967][T15388] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2189'. [ 390.704763][T15393] FAULT_INJECTION: forcing a failure. [ 390.704763][T15393] name failslab, interval 1, probability 0, space 0, times 0 [ 390.704968][T15393] CPU: 0 UID: 0 PID: 15393 Comm: syz.4.2193 Not tainted syzkaller #0 PREEMPT(full) [ 390.704989][T15393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 390.705000][T15393] Call Trace: [ 390.705007][T15393] [ 390.705015][T15393] dump_stack_lvl+0xe8/0x150 [ 390.705043][T15393] should_fail_ex+0x410/0x560 [ 390.705069][T15393] should_failslab+0xa8/0x100 [ 390.705092][T15393] __kvmalloc_node_noprof+0x176/0x820 [ 390.705113][T15393] ? bpf_compute_postorder+0x87c/0x970 [ 390.705143][T15393] ? bpf_stack_liveness_init+0x29/0x90 [ 390.705161][T15393] ? bpf_stack_liveness_init+0x29/0x90 [ 390.705191][T15393] bpf_stack_liveness_init+0x29/0x90 [ 390.705211][T15393] bpf_check+0x2641/0x2ef0 [ 390.705249][T15393] ? __pfx_bpf_check+0x10/0x10 [ 390.705271][T15393] ? bpf_obj_name_cpy+0x194/0x1e0 [ 390.705300][T15393] bpf_prog_load+0x14d6/0x1c20 [ 390.705331][T15393] ? __pfx_bpf_prog_load+0x10/0x10 [ 390.705372][T15393] __sys_bpf+0xd0d/0xd90 [ 390.705398][T15393] ? __pfx___sys_bpf+0x10/0x10 [ 390.705429][T15393] ? __fget_files+0x2a/0x420 [ 390.705470][T15393] ? ksys_write+0x242/0x270 [ 390.705498][T15393] ? __pfx_ksys_write+0x10/0x10 [ 390.705530][T15393] __x64_sys_bpf+0xba/0xd0 [ 390.705551][T15393] do_syscall_64+0x166/0x520 [ 390.705575][T15393] ? trace_irq_disable+0x3b/0x140 [ 390.705593][T15393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.705613][T15393] ? clear_bhb_loop+0x70/0xc0 [ 390.705635][T15393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.705654][T15393] RIP: 0033:0x7fdc5c59e159 [ 390.705671][T15393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.705686][T15393] RSP: 002b:00007fdc5a7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 390.705705][T15393] RAX: ffffffffffffffda RBX: 00007fdc5c825fa0 RCX: 00007fdc5c59e159 [ 390.705718][T15393] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 390.705730][T15393] RBP: 00007fdc5a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 390.705742][T15393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 390.705753][T15393] R13: 00007fdc5c826038 R14: 00007fdc5c825fa0 R15: 00007ffd4665cbf8 [ 390.705783][T15393] [ 391.051956][T15398] 8021q: adding VLAN 0 to HW filter on device bond7 [ 391.775859][T15446] syzkaller0: entered promiscuous mode [ 391.775881][T15446] syzkaller0: entered allmulticast mode [ 391.810895][T15444] tipc: Enabled bearer , priority 0 [ 391.881971][T15442] tipc: Resetting bearer [ 391.922647][T15442] tipc: Disabling bearer [ 392.027823][T15463] FAULT_INJECTION: forcing a failure. [ 392.027823][T15463] name failslab, interval 1, probability 0, space 0, times 0 [ 392.027853][T15463] CPU: 0 UID: 0 PID: 15463 Comm: syz.2.2207 Not tainted syzkaller #0 PREEMPT(full) [ 392.027874][T15463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.027886][T15463] Call Trace: [ 392.027893][T15463] [ 392.027901][T15463] dump_stack_lvl+0xe8/0x150 [ 392.027931][T15463] should_fail_ex+0x410/0x560 [ 392.027957][T15463] should_failslab+0xa8/0x100 [ 392.027985][T15463] __kvmalloc_node_noprof+0x176/0x820 [ 392.028004][T15463] ? kasan_save_track+0x3e/0x80 [ 392.028023][T15463] ? __kvmalloc_node_noprof+0x50f/0x820 [ 392.028041][T15463] ? bpf_stack_liveness_init+0x29/0x90 [ 392.028060][T15463] ? bpf_check+0x2641/0x2ef0 [ 392.028078][T15463] ? bpf_compute_const_regs+0x18f/0x3450 [ 392.028099][T15463] ? bpf_compute_const_regs+0x18f/0x3450 [ 392.028128][T15463] bpf_compute_const_regs+0x18f/0x3450 [ 392.028172][T15463] ? __pfx_bpf_compute_const_regs+0x10/0x10 [ 392.028192][T15463] ? check_attach_btf_id+0x325/0x1a30 [ 392.028218][T15463] ? rcu_is_watching+0x16/0xb0 [ 392.028237][T15463] ? bpf_stack_liveness_init+0x29/0x90 [ 392.028254][T15463] ? trace_kmalloc+0x2a/0xf0 [ 392.028281][T15463] ? __pfx_check_attach_btf_id+0x10/0x10 [ 392.028301][T15463] ? bpf_stack_liveness_init+0x29/0x90 [ 392.028320][T15463] ? __kvmalloc_node_noprof+0x52f/0x820 [ 392.028350][T15463] ? __asan_memset+0x22/0x50 [ 392.028379][T15463] bpf_check+0x26ae/0x2ef0 [ 392.028424][T15463] ? __pfx_bpf_check+0x10/0x10 [ 392.028447][T15463] ? bpf_obj_name_cpy+0x194/0x1e0 [ 392.028476][T15463] bpf_prog_load+0x14d6/0x1c20 [ 392.028509][T15463] ? __pfx_bpf_prog_load+0x10/0x10 [ 392.028555][T15463] __sys_bpf+0xd0d/0xd90 [ 392.028583][T15463] ? __pfx___sys_bpf+0x10/0x10 [ 392.028614][T15463] ? __fget_files+0x2a/0x420 [ 392.028656][T15463] ? ksys_write+0x242/0x270 [ 392.028685][T15463] ? __pfx_ksys_write+0x10/0x10 [ 392.028716][T15463] __x64_sys_bpf+0xba/0xd0 [ 392.028743][T15463] do_syscall_64+0x166/0x520 [ 392.028766][T15463] ? trace_irq_disable+0x3b/0x140 [ 392.028783][T15463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.028801][T15463] ? clear_bhb_loop+0x70/0xc0 [ 392.028823][T15463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.028840][T15463] RIP: 0033:0x7f73e859e159 [ 392.028857][T15463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.028873][T15463] RSP: 002b:00007f73e94bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 392.028892][T15463] RAX: ffffffffffffffda RBX: 00007f73e8825fa0 RCX: 00007f73e859e159 [ 392.028906][T15463] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 392.028918][T15463] RBP: 00007f73e94bb090 R08: 0000000000000000 R09: 0000000000000000 [ 392.028930][T15463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 392.028941][T15463] R13: 00007f73e8826038 R14: 00007f73e8825fa0 R15: 00007fffdc2a21e8 [ 392.028972][T15463] [ 392.167283][T15470] __nla_validate_parse: 5 callbacks suppressed [ 392.167301][T15470] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2209'. [ 392.355170][T15479] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2209'. [ 392.531756][T15484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.634187][T15493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2214'. [ 392.706187][T15493] syzkaller0: entered promiscuous mode [ 392.706211][T15493] syzkaller0: entered allmulticast mode [ 393.112570][T15510] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2218'. [ 395.072578][T15523] wg2 speed is unknown, defaulting to 1000 [ 395.117055][T15523] wg2 speed is unknown, defaulting to 1000 [ 395.117908][T15523] wg2 speed is unknown, defaulting to 1000 [ 395.123553][T15523] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 395.123585][T15523] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 395.123622][T15523] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 395.209811][T15523] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 395.337226][T15523] wg2 speed is unknown, defaulting to 1000 [ 395.339081][T15523] wg2 speed is unknown, defaulting to 1000 [ 395.341110][T15523] wg2 speed is unknown, defaulting to 1000 [ 395.342969][T15523] wg2 speed is unknown, defaulting to 1000 [ 395.405410][T15523] wg2 speed is unknown, defaulting to 1000 [ 395.488459][T15545] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2226'. [ 395.545236][T15551] netlink: 'syz.3.2229': attribute type 10 has an invalid length. [ 395.545269][T15551] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 395.604328][T15558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2230'. [ 395.604349][T15558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2230'. [ 395.664512][T15561] tipc: New replicast peer: 255.255.255.255 [ 395.672798][T15561] tipc: Enabled bearer , priority 10 [ 395.685570][T15559] nbd: must specify a device to reconfigure [ 395.794318][T15568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2231'. [ 395.794340][T15568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2231'. [ 396.117925][T15582] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 396.171465][T15582] veth0_vlan: entered allmulticast mode [ 396.191893][T15587] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2237'. [ 396.634373][T15606] x_tables: duplicate underflow at hook 3 [ 396.914432][ T31] audit: type=1800 audit(1790928589.620:8): pid=15622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2249" name="memory.events" dev="tmpfs" ino=2194 res=0 errno=0 [ 397.119046][T15624] gre3: entered promiscuous mode [ 397.119067][T15624] gre3: entered allmulticast mode [ 397.178987][T15629] __nla_validate_parse: 1 callbacks suppressed [ 397.179007][T15629] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2251'. [ 397.203984][T15629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2251'. [ 397.204160][T15628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2251'. [ 397.422749][T15639] tap0: tun_chr_ioctl cmd 1074025680 [ 397.444826][T15639] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 398.236907][T15651] netlink: 'syz.2.2257': attribute type 5 has an invalid length. [ 398.236927][T15651] netlink: 'syz.2.2257': attribute type 9 has an invalid length. [ 398.236939][T15651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2257'. [ 398.238992][T15653] netlink: 'syz.2.2257': attribute type 5 has an invalid length. [ 398.239008][T15653] netlink: 'syz.2.2257': attribute type 9 has an invalid length. [ 398.239020][T15653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2257'. [ 398.377708][T15644] vlan3: entered allmulticast mode [ 398.377885][T15644] bridge0: port 3(vlan3) entered blocking state [ 398.378892][T15644] bridge0: port 3(vlan3) entered disabled state [ 398.380229][T15644] vlan3: entered promiscuous mode [ 398.382584][T15635] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 398.674129][T15658] geneve0: Device is already in use. [ 398.874829][T15682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2264'. [ 399.058869][T15682] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2264'. [ 399.537622][T15708] syzkaller1: entered promiscuous mode [ 399.537645][T15708] syzkaller1: entered allmulticast mode [ 399.750904][T15719] x_tables: ip_tables: osf match: only valid for protocol 6 [ 400.100678][T15734] [ 400.103036][T15734] ====================================================== [ 400.110054][T15734] WARNING: possible circular locking dependency detected [ 400.117084][T15734] syzkaller #0 Not tainted [ 400.121517][T15734] ------------------------------------------------------ [ 400.128536][T15734] syz.1.2274/15734 is trying to acquire lock: [ 400.134598][T15734] ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 400.145051][T15734] [ 400.145051][T15734] but task is already holding lock: [ 400.152418][T15734] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 400.161809][T15734] [ 400.161809][T15734] which lock already depends on the new lock. [ 400.161809][T15734] [ 400.172197][T15734] [ 400.172197][T15734] the existing dependency chain (in reverse order) is: [ 400.181202][T15734] [ 400.181202][T15734] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 400.189189][T15734] down_write+0x96/0x200 [ 400.193973][T15734] kernfs_add_one+0x41/0x6f0 [ 400.199086][T15734] kernfs_create_dir_ns+0x1a1/0x230 [ 400.204815][T15734] internal_create_group+0x440/0x1180 [ 400.210714][T15734] cpuhp_invoke_callback+0x434/0x810 [ 400.216520][T15734] cpuhp_issue_call+0x3f0/0x750 [ 400.221895][T15734] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 400.228484][T15734] __cpuhp_setup_state+0x3f/0x60 [ 400.233955][T15734] do_one_initcall+0x250/0x870 [ 400.235006][ T31] audit: type=1800 audit(1790928592.890:9): pid=15735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2277" name=CB dev="tmpfs" ino=2457 res=0 errno=0 [ 400.259254][T15734] do_initcall_level+0x10a/0x1a0 [ 400.264715][T15734] do_initcalls+0x59/0xa0 [ 400.269553][T15734] kernel_init_freeable+0x29d/0x3e0 [ 400.275260][T15734] kernel_init+0x22/0x1d0 [ 400.280098][T15734] ret_from_fork+0x514/0xb70 [ 400.285202][T15734] ret_from_fork_asm+0x1a/0x30 [ 400.290478][T15734] [ 400.290478][T15734] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 400.298285][T15734] [ 400.298285][T15734] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 400.306000][T15734] cpus_read_lock+0x42/0x160 [ 400.311097][T15734] static_key_slow_inc+0x12/0x30 [ 400.316538][T15734] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 400.322765][T15734] nbd_genl_foreach_sock+0x265/0x450 [ 400.328554][T15734] nbd_genl_reconfigure+0xbbb/0x1040 [ 400.334344][T15734] genl_family_rcv_msg_doit+0x233/0x340 [ 400.340401][T15734] genl_rcv_msg+0x614/0x7a0 [ 400.345414][T15734] netlink_rcv_skb+0x226/0x4a0 [ 400.350690][T15734] genl_rcv+0x28/0x40 [ 400.355176][T15734] netlink_unicast+0x7bd/0x940 [ 400.360452][T15734] netlink_sendmsg+0x813/0xb40 [ 400.365721][T15734] sock_sendmsg_nosec+0x14e/0x190 [ 400.371257][T15734] ____sys_sendmsg+0x54e/0x850 [ 400.376531][T15734] ___sys_sendmsg+0x2a5/0x360 [ 400.381715][T15734] __x64_sys_sendmsg+0x1b1/0x290 [ 400.387159][T15734] do_syscall_64+0x166/0x520 [ 400.392261][T15734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.398657][T15734] [ 400.398657][T15734] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 400.406286][T15734] __mutex_lock+0x19d/0x1550 [ 400.411390][T15734] nbd_queue_rq+0x373/0xff0 [ 400.416398][T15734] blk_mq_dispatch_rq_list+0x499/0x1990 [ 400.422447][T15734] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 400.429283][T15734] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 400.435771][T15734] blk_mq_run_work_fn+0x16c/0x300 [ 400.441304][T15734] process_scheduled_works+0xc3d/0x1630 [ 400.447358][T15734] worker_thread+0xa47/0xfb0 [ 400.452459][T15734] kthread+0x38b/0x480 [ 400.457035][T15734] ret_from_fork+0x514/0xb70 [ 400.462136][T15734] ret_from_fork_asm+0x1a/0x30 [ 400.467407][T15734] [ 400.467407][T15734] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 400.474601][T15734] __mutex_lock+0x19d/0x1550 [ 400.479702][T15734] nbd_queue_rq+0xc1/0xff0 [ 400.484620][T15734] blk_mq_dispatch_rq_list+0x499/0x1990 [ 400.490672][T15734] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 400.497508][T15734] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 400.503995][T15734] blk_mq_run_work_fn+0x16c/0x300 [ 400.509526][T15734] process_scheduled_works+0xc3d/0x1630 [ 400.515577][T15734] worker_thread+0xa47/0xfb0 [ 400.520674][T15734] kthread+0x38b/0x480 [ 400.525246][T15734] ret_from_fork+0x514/0xb70 [ 400.530344][T15734] ret_from_fork_asm+0x1a/0x30 [ 400.535618][T15734] [ 400.535618][T15734] -> #4 (set->srcu){.+.+}-{0:0}: [ 400.542720][T15734] __synchronize_srcu+0xc9/0x2f0 [ 400.548159][T15734] elevator_switch+0x1e8/0x7b0 [ 400.553429][T15734] elevator_change+0x2fa/0x480 [ 400.558699][T15734] elevator_set_default+0x375/0x440 [ 400.564400][T15734] blk_register_queue+0x3f3/0x4e0 [ 400.569930][T15734] __add_disk+0x6b8/0xdb0 [ 400.574775][T15734] add_disk_fwnode+0x100/0x3a0 [ 400.580050][T15734] nbd_dev_add+0x733/0xb60 [ 400.584972][T15734] nbd_init+0x168/0x1f0 [ 400.589637][T15734] do_one_initcall+0x250/0x870 [ 400.594907][T15734] do_initcall_level+0x10a/0x1a0 [ 400.600353][T15734] do_initcalls+0x59/0xa0 [ 400.605189][T15734] kernel_init_freeable+0x29d/0x3e0 [ 400.610893][T15734] kernel_init+0x22/0x1d0 [ 400.615723][T15734] ret_from_fork+0x514/0xb70 [ 400.620821][T15734] ret_from_fork_asm+0x1a/0x30 [ 400.626095][T15734] [ 400.626095][T15734] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 400.633896][T15734] __mutex_lock+0x19d/0x1550 [ 400.638992][T15734] elevator_change+0x1af/0x480 [ 400.644256][T15734] elevator_set_none+0xb5/0x140 [ 400.649608][T15734] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 400.655922][T15734] nbd_start_device+0x189/0xb30 [ 400.661274][T15734] nbd_genl_connect+0x167d/0x1cd0 [ 400.666801][T15734] genl_family_rcv_msg_doit+0x233/0x340 [ 400.672852][T15734] genl_rcv_msg+0x614/0x7a0 [ 400.677857][T15734] netlink_rcv_skb+0x226/0x4a0 [ 400.683130][T15734] genl_rcv+0x28/0x40 [ 400.687615][T15734] netlink_unicast+0x7bd/0x940 [ 400.692886][T15734] netlink_sendmsg+0x813/0xb40 [ 400.698149][T15734] sock_sendmsg_nosec+0x14e/0x190 [ 400.703689][T15734] ____sys_sendmsg+0x54e/0x850 [ 400.708960][T15734] ___sys_sendmsg+0x2a5/0x360 [ 400.714144][T15734] __x64_sys_sendmsg+0x1b1/0x290 [ 400.719588][T15734] do_syscall_64+0x166/0x520 [ 400.724688][T15734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.731083][T15734] [ 400.731083][T15734] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 400.739668][T15734] blk_alloc_queue+0x544/0x690 [ 400.744939][T15734] __blk_mq_alloc_disk+0x194/0x390 [ 400.750560][T15734] nbd_dev_add+0x494/0xb60 [ 400.755479][T15734] nbd_init+0x168/0x1f0 [ 400.760138][T15734] do_one_initcall+0x250/0x870 [ 400.765412][T15734] do_initcall_level+0x10a/0x1a0 [ 400.770861][T15734] do_initcalls+0x59/0xa0 [ 400.775697][T15734] kernel_init_freeable+0x29d/0x3e0 [ 400.781402][T15734] kernel_init+0x22/0x1d0 [ 400.786245][T15734] ret_from_fork+0x514/0xb70 [ 400.791347][T15734] ret_from_fork_asm+0x1a/0x30 [ 400.796621][T15734] [ 400.796621][T15734] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 400.803821][T15734] fs_reclaim_acquire+0x71/0x100 [ 400.809265][T15734] kmem_cache_alloc_noprof+0x5f/0x600 [ 400.815148][T15734] __kernfs_iattrs+0xdd/0x380 [ 400.820333][T15734] kernfs_iop_setattr+0xe6/0x3f0 [ 400.825779][T15734] notify_change+0xbba/0xea0 [ 400.830874][T15734] do_truncate+0x1c2/0x250 [ 400.835798][T15734] path_openat+0x15b5/0x1d60 [ 400.840887][T15734] do_file_open+0x23e/0x4a0 [ 400.845895][T15734] do_sys_openat2+0x115/0x200 [ 400.851078][T15734] __x64_sys_openat+0x138/0x170 [ 400.856437][T15734] do_syscall_64+0x166/0x520 [ 400.861537][T15734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.867933][T15734] [ 400.867933][T15734] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 400.876438][T15734] __lock_acquire+0x164c/0x2de0 [ 400.881788][T15734] lock_acquire+0x115/0x350 [ 400.886803][T15734] down_write+0x96/0x200 [ 400.891559][T15734] kernfs_link_sibling+0x4c7/0x5a0 [ 400.897177][T15734] kernfs_add_one+0x2db/0x6f0 [ 400.902361][T15734] __kernfs_create_file+0x22b/0x2e0 [ 400.908064][T15734] sysfs_add_file_mode_ns+0x237/0x300 [ 400.913948][T15734] sysfs_create_file_ns+0x12b/0x1b0 [ 400.919651][T15734] idletimer_tg_checkentry+0x3f7/0x810 [ 400.925616][T15734] xt_check_target+0x619/0xca0 [ 400.930888][T15734] translate_table+0x1789/0x1f80 [ 400.936332][T15734] do_ipt_set_ctl+0xa53/0xe20 [ 400.941515][T15734] nf_setsockopt+0x26f/0x290 [ 400.946611][T15734] do_sock_setsockopt+0x17c/0x1b0 [ 400.952139][T15734] __x64_sys_setsockopt+0x13d/0x1b0 [ 400.957850][T15734] do_syscall_64+0x166/0x520 [ 400.962965][T15734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.969374][T15734] [ 400.969374][T15734] other info that might help us debug this: [ 400.969374][T15734] [ 400.979590][T15734] Chain exists of: [ 400.979590][T15734] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 400.979590][T15734] [ 400.994002][T15734] Possible unsafe locking scenario: [ 400.994002][T15734] [ 401.001520][T15734] CPU0 CPU1 [ 401.006866][T15734] ---- ---- [ 401.012216][T15734] lock(&root->kernfs_rwsem); [ 401.016969][T15734] lock(cpuhp_state_mutex); [ 401.024066][T15734] lock(&root->kernfs_rwsem); [ 401.031333][T15734] lock(&root->kernfs_iattr_rwsem); [ 401.036600][T15734] [ 401.036600][T15734] *** DEADLOCK *** [ 401.036600][T15734] [ 401.044722][T15734] locks held by syz.1.2274/15734: 2, last CPU#0: [ 401.051028][T15734] #0: ffffffff902f5560 (list_mutex){+.+.}-{4:4}, at: idletimer_tg_checkentry+0x63/0x810 [ 401.060848][T15734] #1: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 401.070666][T15734] [ 401.070666][T15734] stack backtrace: [ 401.076539][T15734] CPU: 0 UID: 0 PID: 15734 Comm: syz.1.2274 Not tainted syzkaller #0 PREEMPT(full) [ 401.085915][T15734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 401.095960][T15734] Call Trace: [ 401.099224][T15734] [ 401.102141][T15734] dump_stack_lvl+0xe8/0x150 [ 401.106725][T15734] print_circular_bug+0x2e2/0x300 [ 401.111741][T15734] check_noncircular+0x12f/0x150 [ 401.116665][T15734] __lock_acquire+0x164c/0x2de0 [ 401.121505][T15734] ? __lock_acquire+0x747/0x2de0 [ 401.126433][T15734] lock_acquire+0x115/0x350 [ 401.130919][T15734] ? kernfs_link_sibling+0x4c7/0x5a0 [ 401.136195][T15734] down_write+0x96/0x200 [ 401.140434][T15734] ? kernfs_link_sibling+0x4c7/0x5a0 [ 401.145704][T15734] ? __pfx_down_write+0x10/0x10 [ 401.150551][T15734] ? kernfs_root+0x1c/0x230 [ 401.155048][T15734] ? kernfs_root+0x1c/0x230 [ 401.159559][T15734] ? kernfs_root+0x1c/0x230 [ 401.164057][T15734] ? kernfs_root+0x1ea/0x230 [ 401.168651][T15734] kernfs_link_sibling+0x4c7/0x5a0 [ 401.173754][T15734] kernfs_add_one+0x2db/0x6f0 [ 401.178429][T15734] __kernfs_create_file+0x22b/0x2e0 [ 401.183616][T15734] sysfs_add_file_mode_ns+0x237/0x300 [ 401.188982][T15734] sysfs_create_file_ns+0x12b/0x1b0 [ 401.194167][T15734] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 401.200738][T15734] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 401.206445][T15734] ? kstrdup+0x81/0x100 [ 401.210592][T15734] idletimer_tg_checkentry+0x3f7/0x810 [ 401.216037][T15734] xt_check_target+0x619/0xca0 [ 401.220797][T15734] ? __pfx_xt_check_target+0x10/0x10 [ 401.226070][T15734] ? pcpu_alloc_noprof+0x1036/0x1900 [ 401.231352][T15734] ? xt_find_target+0x20f/0x260 [ 401.236193][T15734] translate_table+0x1789/0x1f80 [ 401.241126][T15734] ? __pfx_translate_table+0x10/0x10 [ 401.246400][T15734] ? lock_acquire+0x115/0x350 [ 401.251072][T15734] ? _copy_from_user+0x94/0xb0 [ 401.255829][T15734] do_ipt_set_ctl+0xa53/0xe20 [ 401.260497][T15734] ? rcu_is_watching+0x16/0xb0 [ 401.265246][T15734] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 401.270435][T15734] ? __mutex_unlock_slowpath+0x731/0x900 [ 401.276059][T15734] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 401.282040][T15734] nf_setsockopt+0x26f/0x290 [ 401.286625][T15734] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 401.292505][T15734] do_sock_setsockopt+0x17c/0x1b0 [ 401.297520][T15734] __x64_sys_setsockopt+0x13d/0x1b0 [ 401.302709][T15734] do_syscall_64+0x166/0x520 [ 401.307289][T15734] ? trace_irq_disable+0x3b/0x140 [ 401.312299][T15734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.318354][T15734] ? clear_bhb_loop+0x70/0xc0 [ 401.323016][T15734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.328891][T15734] RIP: 0033:0x7f42d0b9e159 [ 401.333294][T15734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.352879][T15734] RSP: 002b:00007f42d1ad9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 401.361279][T15734] RAX: ffffffffffffffda RBX: 00007f42d0e26090 RCX: 00007f42d0b9e159 [ 401.369234][T15734] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000c [ 401.377189][T15734] RBP: 00007f42d0c3506b R08: 00000000000002b8 R09: 0000000000000000 [ 401.385142][T15734] R10: 0000200000000c40 R11: 0000000000000246 R12: 0000000000000000 [ 401.393098][T15734] R13: 00007f42d0e26128 R14: 00007f42d0e26090 R15: 00007ffe46ae3bb8 [ 401.401070][T15734] [ 401.504487][T15743] IPVS: length: 77 != 792