last executing test programs: 5.162957765s ago: executing program 3 (id=4952): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000300)="ab", 0xfffd, 0x2000c8d4, &(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000380)={0x6, 0xf7, 0x6, 0x6, 0x1, 0xff, 0x0, 0x3, 0x5c, 0x5, 0x8, 0x61, 0x1, 0x7}, 0xe) close(0x3) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000013000500010000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000034001a80080000000200000028000480240001800800010001000000040002"], 0x54}}, 0x0) r3 = socket(0x1e, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x20b, @loopback, 0x7fff}]}, &(0x7f0000000280)=0x10) getpeername$inet6(r4, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001ac0)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000000)=@vsock={0x1e}, 0x80, 0x0}}], 0x2, 0x4004000) 4.858577829s ago: executing program 2 (id=4956): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10}, 0x94) 4.808093254s ago: executing program 2 (id=4958): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040010080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000012000000850000001500000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x1, 0x0}, 0x8) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=r1, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x28, &(0x7f0000000440)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0xb, 0x1e8, &(0x7f00000004c0)=""/154, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0x0, 0x1, 0x0, &(0x7f0000000580)=[{0x0, 0x2, 0xd, 0xb}], 0x10, 0xfffffffb}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000080)=@raw=[@alu={0x7, 0x1, 0x0, 0x1, 0xb, 0x18, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x10, 0x8a7, 0x101}, 0x10, r1, 0x0, 0x6, &(0x7f00000005c0)=[r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000600)=[{0x4, 0x1, 0xb, 0x6}, {0x0, 0x5, 0x4, 0xc}, {0x5, 0x5, 0x2, 0xa}, {0x3, 0x2, 0xa, 0x8}, {0x0, 0x4, 0xb, 0x6}, {0x0, 0x4, 0x0, 0x5}], 0x10, 0x5}, 0x94) 4.722177034s ago: executing program 1 (id=4961): write(0xffffffffffffffff, &(0x7f0000000100)='file ', 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000400)=""/222, 0x0, 0x8}, 0x78) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x14, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = socket(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)={0x24, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xe, 0x1, 0x0, 0x0, @str='\\,$!*(,,&\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x45080}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, 0x0, 0x0) bind$netlink(r6, &(0x7f0000000780)={0x10, 0x0, 0x25dfdbfb}, 0xc) bind$netlink(r6, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfb}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400, 0x4100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x4006, 0x42}}}}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x50}}, 0x4000000) 4.696819827s ago: executing program 2 (id=4962): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@un=@abs, &(0x7f00000001c0)=0x80, 0x0) sendmsg$sock(r0, &(0x7f0000000040)={0x0, 0xfdaf, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000013000500000000000000000005010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x40800) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000001140)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000003140)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000003180)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000031c0)=0x10, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003240)={'veth0_to_bond\x00', 0x0}) bind$xdp(r1, &(0x7f0000003280)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000032c0)={r3, @dev={0xac, 0x14, 0x14, 0x30}, @multicast1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x10, &(0x7f00000010c0)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000000efff85000000630000001500faff00000000bf010000000000008500000056000000b70000000200100095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.566990742s ago: executing program 2 (id=4964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064000000746573745f6c6162656c0000000000000000000000000000000000006f"], 0x104}}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e4198000900ac0006fc11edffff03000500014002000000035c3b61c17174cf6ebb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360d5fae3787b9241ad8b798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000007000dd6e4edef3d12def932b3ba2c59ab726cd0a41606c893452a09", 0xd8}], 0x1}, 0x20004080) 4.501136546s ago: executing program 2 (id=4965): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0xfff8}, {0x1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x6, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x8001}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="000008004500001c000100004011"], 0xfdef) sendmmsg$inet_sctp(r4, 0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x5, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000002a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002a80), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002ac0)={r10, 0x0, 0xfe6d, 0xfffffe6d, &(0x7f0000002b40)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000002b80)='\x00', 0x0}, 0x48) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r13}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r15, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r15], 0x4c}}, 0x884) 4.455337118s ago: executing program 4 (id=4966): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c626f6a4590bee341bffffd93021237fcc83f55b7189b86a28c5caf46dd4f10dd3c5a9f00130f0246dd90c34a07e21de96c0da110bec6f334b4c735c6e8bcbd9da72bc32fcbad25b9ecbbe3700b53ff1e64412b4b3becbaf37f56e54c761ea8e3bc8c9e0f1cd6a671e7e747c8b0c50d179d4b62fcfa630794b4f25db999fe386462f12ba9fef9abdf387cbaeefa2687a2561b6c5accbbcc7a86e5a451006976561c12858062a9b9f8098d02ef475104feb2dc5ad697ba1794f349a8c", @ANYRES64], 0x40) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt(0xffffffffffffffff, 0x27e6, 0x8, &(0x7f0000000400)=""/78, &(0x7f0000000480)=0x4e) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000000a05000000000000000000050000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a32000000005c00000081fd06422f060a010400000000000000000500000008000b40000000002c0004802800018007000100637400001c000280080001400000000a080002400000000d05000300010000000900010073797a300000000008000b4000000004140000001100010000000000000000000300000a"], 0xc4}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ee, &(0x7f00000001c0)=0x12) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 4.391234309s ago: executing program 1 (id=4967): r0 = socket(0x18, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$MRT(r1, 0x0, 0xce, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtaction={0x78, 0x12, 0xbf68af9d17701211, 0x70bd2c, 0x0, {0x7}, [{0x4}, {0x60, 0x1, [@m_ct={0x2c, 0x1d, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x1d, {0x3, 0x2}}}}, @m_police={0x30, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x240000d0}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x1c1b41, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbffe}, 0x94) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000100)={0x2017be01}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 4.221085071s ago: executing program 3 (id=4968): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000780)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000780)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000740)='hugetlb.1GB.usage_in_bytes\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(r0, &(0x7f0000000740)='hugetlb.1GB.usage_in_bytes\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f00000008c0)={@private=0xa010101, @rand_addr=0x64010101}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x3c}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x40) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="04010100010a0000140003007866726d30000000000000000000000008000a00", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYRES16=r7], 0x34}}, 0x20042000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(r1, &(0x7f00000005c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x10, 0x140e, 0x529, 0x70bd29, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4044801}, 0x20000000) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x10, 0x140e, 0x529, 0x70bd29, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4044801}, 0x20000000) 3.724920726s ago: executing program 4 (id=4970): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x183) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000f80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000000)={0x1, 0x5b, "78682e0e0b58546c14a0cd0f31db88e6cfe5b367b59c0b444142ceefc4b2acb5a565f719f09c16034dc5af70fea335546636d3f32f8f55b14bd2f22388acd440e7304d489c8a20f3e73a26e8515a9bf5317311906eff4812421d0c"}, &(0x7f0000000080)=0x63) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000fc0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000012c0)=0x4, 0x4) (async, rerun: 32) connect$inet(r0, &(0x7f0000001300)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 3.542503937s ago: executing program 0 (id=4971): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async, rerun: 32) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000000c0)=0x1) socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, 0x0, &(0x7f0000000240)) 3.361012501s ago: executing program 0 (id=4972): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x20, 0x140e, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x2800}, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @local}, 0x1c, 0x0}}], 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) write(r4, &(0x7f0000000140)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400070080000f00", 0x33a) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "1b8100", 0x18, 0x11, 0x0, @empty, @mcast2, {[], {0x4e25, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x9}}}}}}}, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0xfbd221ec78a0fb2f) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) pipe(&(0x7f0000000580)={0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f00000005c0)=0xfffffffffffffffd) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x14) sendmsg$nl_route(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r9, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r9], 0x38}}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f0000000a40)={0x1, 'vlan0\x00', {}, 0x4}) sendmsg$nl_route(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="40000000100039040000000000000000000003e4", @ANYRES32=r9, @ANYBLOB="0000000000000200200012800800010073697400140002800800010059c471f3a4834b0c43045b27a5756624362a96e5fc043ae0952ba8b4ac51cca2", @ANYRES32=r9, @ANYBLOB="06000e00f7ff0000"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x4c, &(0x7f0000000380)=""/76, 0x41100, 0x64, '\x00', r5, 0x17, r6, 0x8, &(0x7f0000000600)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x0, 0xe81, 0xfff}, 0x10, 0x559d, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000680)=[{0x5, 0x1, 0x2, 0x7}, {0x5, 0x1, 0xa, 0x9}, {0x2, 0x4, 0x6, 0x3}, {0x3, 0x2, 0x9, 0xb}, {0x0, 0x3, 0x10, 0x7}, {0x4, 0x5, 0xd, 0xb}, {0x4, 0x5, 0xb, 0xc}, {0x2, 0x3, 0x8}], 0x10, 0xa}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r10}, 0x4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000b40)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000000b80)=0x1, 0x4) 3.249317509s ago: executing program 4 (id=4973): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x6, &(0x7f00000000c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000100)='GPL\x00', 0x5, 0x29e, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000000) 3.134254077s ago: executing program 4 (id=4974): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000fdffffff00000000dfffffff840000000500000095"], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x70, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x70}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffeff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x613}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) sendto$inet(r3, &(0x7f0000000400)='INVITE sip:x SIP/2.0\r\nCall-Id: test1234@local\r\n\r\n', 0x31, 0x0, &(0x7f0000000800)={0x2, 0x4e20, @loopback}, 0x10) 3.12523669s ago: executing program 4 (id=4975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0x470, 0x0, 0x268, 0x33a, 0x268, 0x268, 0x3a0, 0x460, 0x460, 0x3a0, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0x2000000000, 0x8, 0x0, 0x1, 0x10000000, 0x5, 0xd}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010102, 'dvmrp1\x00', {0xfffffffffffff000}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtfilter={0x210, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x1e0, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x108, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1af}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x400}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xfffffffffffffc7c, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xcc}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xa44a}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x0, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x58, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe147}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x9c, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x0, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x0, 0x2, 0xda}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0x40}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x9b}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x6a}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4a}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}]}]}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x80}]}}]}, 0x210}, 0x1, 0x0, 0x0, 0x80}, 0x0) 829.622698ms ago: executing program 3 (id=4976): r0 = socket$inet(0x2, 0x3, 0x33) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'team_slave_0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xd}, {0x0, 0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x517a}]}, 0x2c}}, 0x20000000) (async) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0x3}, {0xffff, 0xfff2}, {0xc, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0xc004) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async, rerun: 64) r3 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000ac0)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0008000600000003600e1208000c0002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC=r4]) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000009c0)={0x0, 0xfffffffffffffcd6, &(0x7f0000000a80)={&(0x7f0000000280)=@newchain={0x24, 0x64, 0x20, 0x703d2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xffe7, 0x23f6e3d0a6d0a313}, {0xb, 0x7}, {0xffc9, 0xfff2}}}, 0x24}}, 0x0) (async, rerun: 64) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (rerun: 64) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r7 = socket$unix(0x1, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000540)=@abs={0x1, 0x0, 0x4e24}, 0xfffffffffffffd70) (async) sendmmsg$unix(r8, &(0x7f0000000280), 0x2d, 0x20040040) (async, rerun: 64) connect$unix(r7, &(0x7f0000000880)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 64) r9 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000900)={0x40000006}) (async) r10 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000a00)=@assoc_value={0x0}, &(0x7f0000000a40)=0x4) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f0000000bc0)={r12, 0x6, 0x10}, 0xc) (async, rerun: 32) connect$unix(r7, &(0x7f0000000940)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (rerun: 32) 678.648944ms ago: executing program 4 (id=4977): socket$inet6(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@datasec={0x8, 0x1, 0x0, 0xf, 0x2, [{0x1, 0x0, 0x60000}], 'Iw'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "1760"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000cc0)=""/4, 0x4a, 0x4, 0x1}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a010400000000000000000200ffff540004803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a320000000008000180fffffffd140001800c0001006e6f747261636b00040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000000) select(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f00000008c0)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000009c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x2, 0x3, 0xff) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x811, &(0x7f0000000a00)={0xa, 0x1234, 0x0, @loopback={0xff00000000000000}, 0x3}, 0x1c) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt(r6, 0x1, 0x9, &(0x7f0000000d00)=""/35, &(0x7f0000000d40)=0x23) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xc, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) unshare(0x40400) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x3e8, 0xe80, 0x0, &(0x7f0000000c00)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 676.853639ms ago: executing program 0 (id=4978): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/mnt\x00') (async) r1 = socket(0x29, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x453, 0x1f, 0xffffffff, 0x0, {0x5}}, [], {0x14, 0x3f9}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x48040) ioctl$BTRFS_IOC_ENCODED_READ(r1, 0x80809440, &(0x7f0000000440)={&(0x7f0000000400)=[{&(0x7f00000001c0)="97db2c68ba290d22ae9622f265398bb679a620effd2b4c5309bb551fbb98910b92ea9c40b47dc2fc647546a2daca519e7459aeaa21d2b652f393c484be7b1d7eb2e6cdc8734f04f6700f411bae7321b189bc7ef7856a46229501033d45e3e6730fc391acc562a2144c10adcfa4e3bbc5a21480a761b29916882385f530b3383e649a9053a3ffe2eb682725297b9b72824e531c50761daa8124e874fe70699414f3d537cd8ae9311435313292a6753c85f9279ac5e410e362258ebc4cc0e02ee4ddec66513f384bbff848813ae0dd41b206bc1cdb70d7f380b2e8446abb659b905fcf400aef443e63b35fdc718f181246dfe8", 0xf2}, {&(0x7f00000002c0)="84132708ff6f7cb60f2adebbac6055a5cc0a67b6606ace0de2", 0x19}, {&(0x7f0000000300)="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", 0xfa}], 0x3, 0x5, 0x0, 0x7, 0x9, 0xe, 0x5, 0x2}) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="96010010", @ANYRES16=r3, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000002000000000000000b00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550901000000000095000000000000005f09010000000000bf91000000000000b7020000000000008500000084000000b7000000000000049500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x2f}, 0x94) (async) ioctl$NS_GET_OWNER_UID(r0, 0x8008b705, 0x0) 661.156773ms ago: executing program 2 (id=4979): r0 = socket$inet6(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x690, 0x460, 0x368, 0x240, 0x460, 0x460, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, &(0x7f00000000c0), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x38}, @remote, [0x0, 0xffffff00, 0x807fffff, 0xff000000], [0xff000000, 0xff, 0xffffffff, 0xff], 'caif0\x00', 'vcan0\x00', {0xff}, {}, 0x2c, 0xf5, 0x1, 0x1}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x23}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x27, 0x32f}}}, {{@ipv6={@private2, @dev={0xfe, 0x80, '\x00', 0x30}, [0xff000000, 0x0, 0xffffff00], [0x0, 0xff, 0x0, 0xff000000], 'rose0\x00', 'veth0\x00', {}, {}, 0x3c, 0x1, 0x4}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x88, 0x8, 0x40, 0x3, 0x100, 0x304}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x4}}}, {{@ipv6={@local, @private1, [0x0, 0xff0000ff, 0xffffff00, 0xff000000], [0xff, 0xffffffff, 0xffffffff, 0xff000000], 'pim6reg1\x00', 'geneve0\x00', {0xff}, {}, 0x0, 0x9, 0x4}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@frag={{0x30}, {[0x9, 0x4], 0x2, 0x0, 0x3}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x17}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0x0, 0xffffff00, 0xff], [0xffffff00, 0xffffffff, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'team0\x00', {}, {0x1fe}, 0x32, 0x2, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x4}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@hbh={{0x48}, {0x2, 0x1, 0x0, [0x0, 0x0, 0x4, 0x4, 0x101, 0x5, 0x3, 0xfffe, 0x3, 0x2, 0x7f, 0x8, 0x7, 0x0, 0x8, 0xa], 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@mcast2, 0x30, 0xd, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/73, 0xb50}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 544.192375ms ago: executing program 3 (id=4980): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000000880)=[{0x6, 0x8, 0xfd, 0x7}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000001800)='syzkaller\x00', 0x6ad7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000019c0)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000001a40)="b9ff03316844268cb89e14f0080047e0ffff00124000638477fbac141716e000030a44070403fe80000000000002845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000001b40), &(0x7f0000001b80), 0x0, 0x700}, 0x2c) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x1, &(0x7f0000000880)=[{0x6, 0x8, 0xfd, 0x7}]}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000001800)='syzkaller\x00', 0x6ad7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000019c0)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000001a40)="b9ff03316844268cb89e14f0080047e0ffff00124000638477fbac141716e000030a44070403fe80000000000002845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000001b40), &(0x7f0000001b80), 0x0, 0x700}, 0x2c) (async) 490.50804ms ago: executing program 1 (id=4981): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xe, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000004580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000045c0), 0xfffffedf, 0x10, &(0x7f0000004600)}, 0x48) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)={@fallback=r1, r0, 0x2f}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'macvlan0\x00'}) epoll_create1(0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000500)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f00000005c0)=0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) 489.9695ms ago: executing program 0 (id=4982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket(0x2, 0x80805, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x60, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x60}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000500)=0x2172, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000540)=[{{&(0x7f0000000580)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, 0x0}}], 0x1, 0x24044015) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x8, 0x3000000000002}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000680)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f00000006c0)=0x2, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000fcffffff0000000080000000850000002f0006001801000020786c2500000000002020207b1bf8fd00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000002850000003000000095"], &(0x7f0000000840)='GPL\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000880)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4) pipe(0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[], 0x60}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000c80), 0x4000000000001f2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x2062) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{&(0x7f0000000d80)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000e00)="e1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000e80)="a7", 0x1}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000ec0), &(0x7f0000000f00)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001a7f3ef990b395364d56ccd87569026bf7a9d8bcd4d7c20787221275717e390c07f30e4871eb686bd3bab62492adbc8354a5ac1355985e6a37ec38d7e1cbbc8c"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x10, 0xd, &(0x7f0000001080)=ANY=[], &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r7, 0x5, 0xe, 0x0, &(0x7f0000001180)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) 320.425032ms ago: executing program 1 (id=4983): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e0a, 0xb, @mcast2, 0x9}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000004c0)=@fragment={0x2f, 0x0, 0x5, 0x1, 0x0, 0x9, 0x66}, 0x8) sendmmsg$inet6(r1, &(0x7f0000000500), 0x0, 0x404c805) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)="b7f2288d3aaea2bc0000def1260a00000000000000000000000000000000df417f1f51693bc1", 0x26) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="2501000100000008003e0002000000080003000100000008003e00020000000800030000000000000000000000000000a8943097ad951227f0bef2fe6d46e60b0afdc04cd93e8791a525a1b8a2e575b91e14a246369a9102f6925fa4b5e7f8352a"], 0x40}, 0x1, 0x0, 0x0, 0x4000041}, 0x24020800) close(r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x18, 0x42, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x2fc}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_FSGEOMETRY(r3, 0x8100587e, &(0x7f0000000680)) sendmsg$OSF_MSG_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0815000000051104060000000000000001000005540201"], 0x1508}}, 0x24000880) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000080)={'wlan1\x00', @random="020000000100"}) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(0x3) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0200060000000000300012800b0069703667726500002000028014000700fc00000000000010000000000000000006000e00020000002ef288fd7e8872ce7e801266320e42"], 0x50}}, 0x0) 157.90432ms ago: executing program 3 (id=4984): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000080)=']-\x00', 0x133000, &(0x7f00000000c0)={@_ha_fsid={[0x5, 0x7]}, {0x0, 0x0, 0x107, 0x2}}, 0x400, &(0x7f0000000100), &(0x7f0000000140)=0x3ff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) write$cgroup_freezer_state(r0, &(0x7f0000000480)='FROZEN\x00', 0x7) (async) write$cgroup_freezer_state(r0, &(0x7f0000000480)='FROZEN\x00', 0x7) syz_emit_ethernet(0x7e, &(0x7f0000000400)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="10007d80", @ANYRES32=r1, @ANYRESOCT=r3], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)={0x2, 0x16, 0xc, 0x3, 0x37, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x4, 0x8, 0x9, 0x100, 0x1}, @sadb_key={0x10, 0x8, 0x390, 0x0, "df9049ed01486d4263b761548632a6d9bc088b034e55a30d4f56001891a45ee8624b27bc994e56269fce66e00888f9e94898ec7300066344b4387efcbbb6db49a509fe70f8ae1bb3bd498f9dc512598faacc8f10a73fb44fe653ede9ed82f3c6a98dc25125f002f51c9d9eafe86c20e399d3"}, @sadb_x_filter={0x5, 0x1a, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@local, 0x1d, 0x10, 0x14}, @sadb_x_sec_ctx={0x17, 0x18, 0x80, 0xf, 0xaa, "49cdb7d0d4670fdd424cb3029453251bb78474530ad6712a770e5cb970bdc56feaeff59d1042ef30b0dc0a02e5d59323b47a370291fc139933c8505977ab25f01a91041e5404a86d4d3b259ae6c3d8aea7e4f868df81361a3f94ef29949812918d976ed38115ca360e276ad4c84fbb53c45e03ee5b2600547bee5558390a759d4c53539657de09312efa2fec63a4848a22a1ae2bfe466921932fc7da58324360fe1c2080d7ce91b8be88"}, @sadb_address={0x3, 0x5, 0x2b, 0x80, 0x0, @in={0x2, 0x4e21, @rand_addr=0x64010101}}, @sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x1b8}}, 0x891) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) getsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r5, 0x0, 0x0) 74.823731ms ago: executing program 1 (id=4985): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x4403, 0x215, 0x1, 0x7, 0x7, 0x0, 0x40}, 0xc) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) listen(r1, 0x0) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) 66.778127ms ago: executing program 0 (id=4986): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000004, 0x11, r1, 0xdee85000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000046002000000000000000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001d4af5ff00000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x1001, &(0x7f00000007c0)=""/4097, 0x41100, 0xc, '\x00', 0x0, 0x0, r0}, 0x94) 65.908134ms ago: executing program 3 (id=4987): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000200)=0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x1000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) (async) close(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000002f0007012bbd7000fedbdf25067c00000c000180080063007f00000108000380040003"], 0x28}}, 0x4008030) (async) write(r2, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 1.344961ms ago: executing program 0 (id=4988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002600090122bd7008faffffff02000000080002802f0009800800030047"], 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x600c800) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103000008000340000000012c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3100"], 0x4ec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000008c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0x57, 0x7, 0x1, 0x0, "776f5b550e61c8a083a62aad46a1911194ae3dd211164f698219a322ceff72e452d65b0ef7e90e509609a139fcbd0843b72d6071a4d8c486d9eacac6e9e0a201854adc06b0459a84385de8dd520ed26a1bee5f"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0xf0, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x12}, @NFTA_REJECT_TYPE={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x30, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0xec, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x83, 0x8, "a40520c5dc4937806b5dc8da504262dfe20f0c90cb85277e382afd5cb2ebfe8b005a77b921ac18ba7fa1a005d699eac2f315ebba4303287ec371088b7c70b7abee155d5628887af07ce5b9b19c2f1c354ea7267620bd9fcb079c06eee1dddae451f9eb7ee2f707e8f3d368ec8af2473d7656aedfc82d963b7b7de30597b8ea"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x27, 0x8, "8be4dea64b7af1b9fa49e31d96ef6e1dc26103d64d6a82a303bbd8c65bc92381dc4a0a"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0xa0, 0x5, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_USERDATA={0x29, 0xc, "c6a6b849ceb35195554bba4915a61f5ebe6b9a456b30c207f257548b1ff58e6517c5288671"}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x39c}}, 0x20000081) 0s ago: executing program 1 (id=4989): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="140004006e696376663000000000000000000000080005000600000014001780040007"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x37}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000500), &(0x7f0000000540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0xc, &(0x7f00000007c0)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000008c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(0x3) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16=r7], 0x8) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x5813, 0x10001, 0x4000000}, 0x10) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d, 0xffff, 0x25dfdbfd, {0xa, 0x0, 0x80}}, 0x1c}}, 0x20000800) socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r7, &(0x7f0000001d40)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r7, &(0x7f0000002580)='X<', 0x2, 0x47b00, 0x0, 0x0) kernel console output (not intermixed with test programs): 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.500723][T24134] RSP: 002b:00007f5fe224e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 615.500744][T24134] RAX: ffffffffffffffda RBX: 00007f5fe1625fa0 RCX: 00007f5fe139f559 [ 615.500758][T24134] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 0000000000000018 [ 615.500771][T24134] RBP: 00007f5fe224e090 R08: 0000000000000000 R09: 0000000000000000 [ 615.500784][T24134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 615.500797][T24134] R13: 00007f5fe1626038 R14: 00007f5fe1625fa0 R15: 00007fff5ee6c838 [ 615.500830][T24134] [ 615.500988][ T8505] bond7: (slave bridge2): failed to get link speed/duplex [ 615.617047][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 615.618056][T24138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4216'. [ 615.618392][T24138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4216'. [ 615.618583][T24138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4216'. [ 615.618747][T24138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4216'. [ 615.618886][T24138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4216'. [ 615.619036][T24138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4216'. [ 615.619179][T24138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4216'. [ 615.619324][T24138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4216'. [ 615.751301][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 615.859705][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 615.967532][ T166] bond7: (slave bridge2): failed to get link speed/duplex [ 616.081051][ T8504] bond7: (slave bridge2): failed to get link speed/duplex [ 616.189382][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 616.358324][T22103] bond7: (slave bridge2): failed to get link speed/duplex [ 616.467522][ T13] bond7: (slave bridge2): failed to get link speed/duplex [ 616.474608][T24169] netlink: 'syz.2.4223': attribute type 34 has an invalid length. [ 616.474630][T24169] __nla_validate_parse: 58 callbacks suppressed [ 616.474643][T24169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4223'. [ 616.626653][T24179] xt_recent: Unsupported userspace flags (000000c5) [ 616.736528][T24169] bond4: option lacp_strict: invalid value (16) [ 616.782524][T24186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4224'. [ 616.895206][T24169] bond4 (unregistering): Released all slaves [ 617.438555][T24209] FAULT_INJECTION: forcing a failure. [ 617.438555][T24209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.438871][T24209] CPU: 0 UID: 0 PID: 24209 Comm: syz.2.4229 Not tainted syzkaller #0 PREEMPT(full) [ 617.438895][T24209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 617.438907][T24209] Call Trace: [ 617.438916][T24209] [ 617.438924][T24209] dump_stack_lvl+0xe8/0x150 [ 617.438974][T24209] should_fail_ex+0x3eb/0x540 [ 617.439004][T24209] _copy_to_user+0x31/0xb0 [ 617.439031][T24209] generic_map_lookup_batch+0xc07/0xf20 [ 617.439075][T24209] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 617.439100][T24209] ? __fget_files+0x3a2/0x420 [ 617.439123][T24209] ? __fget_files+0x2a/0x420 [ 617.439151][T24209] ? fdget+0x1ac/0x250 [ 617.439171][T24209] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 617.439199][T24209] bpf_map_do_batch+0x27f/0x630 [ 617.439218][T24209] ? bpf_lsm_bpf+0x9/0x20 [ 617.439245][T24209] ? security_bpf+0x7e/0x2d0 [ 617.439276][T24209] __sys_bpf+0x690/0xe00 [ 617.439302][T24209] ? __pfx___sys_bpf+0x10/0x10 [ 617.439332][T24209] ? __fget_files+0x2a/0x420 [ 617.439373][T24209] ? ksys_write+0x242/0x270 [ 617.439402][T24209] ? __pfx_ksys_write+0x10/0x10 [ 617.439434][T24209] __x64_sys_bpf+0xba/0xd0 [ 617.439466][T24209] do_syscall_64+0x166/0x520 [ 617.439486][T24209] ? trace_irq_disable+0x3b/0x140 [ 617.439512][T24209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.439534][T24209] ? clear_bhb_loop+0x70/0xc0 [ 617.439560][T24209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.439581][T24209] RIP: 0033:0x7f32c7d9f559 [ 617.439600][T24209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.439619][T24209] RSP: 002b:00007f32c8d47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 617.439644][T24209] RAX: ffffffffffffffda RBX: 00007f32c8025fa0 RCX: 00007f32c7d9f559 [ 617.439660][T24209] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 0000000000000018 [ 617.439674][T24209] RBP: 00007f32c8d47090 R08: 0000000000000000 R09: 0000000000000000 [ 617.439688][T24209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 617.439700][T24209] R13: 00007f32c8026038 R14: 00007f32c8025fa0 R15: 00007ffe0fe20558 [ 617.439733][T24209] [ 617.645208][T24214] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 617.903693][T24222] sctp: [Deprecated]: syz.3.4232 (pid 24222) Use of int in maxseg socket option. [ 617.903693][T24222] Use struct sctp_assoc_value instead [ 618.129518][T24234] netlink: 'syz.0.4234': attribute type 10 has an invalid length. [ 618.129543][T24234] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4234'. [ 618.718245][T24268] FAULT_INJECTION: forcing a failure. [ 618.718245][T24268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.718276][T24268] CPU: 1 UID: 0 PID: 24268 Comm: syz.1.4241 Not tainted syzkaller #0 PREEMPT(full) [ 618.718299][T24268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 618.718312][T24268] Call Trace: [ 618.718320][T24268] [ 618.718329][T24268] dump_stack_lvl+0xe8/0x150 [ 618.718367][T24268] should_fail_ex+0x3eb/0x540 [ 618.718397][T24268] _copy_to_user+0x31/0xb0 [ 618.718426][T24268] generic_map_lookup_batch+0xc8f/0xf20 [ 618.718471][T24268] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 618.718496][T24268] ? __fget_files+0x3a2/0x420 [ 618.718520][T24268] ? __fget_files+0x2a/0x420 [ 618.718548][T24268] ? fdget+0x1ac/0x250 [ 618.718570][T24268] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 618.718600][T24268] bpf_map_do_batch+0x27f/0x630 [ 618.718621][T24268] ? bpf_lsm_bpf+0x9/0x20 [ 618.718649][T24268] ? security_bpf+0x7e/0x2d0 [ 618.718680][T24268] __sys_bpf+0x690/0xe00 [ 618.718708][T24268] ? __pfx___sys_bpf+0x10/0x10 [ 618.718739][T24268] ? __fget_files+0x2a/0x420 [ 618.718781][T24268] ? ksys_write+0x242/0x270 [ 618.718809][T24268] ? __pfx_ksys_write+0x10/0x10 [ 618.718841][T24268] __x64_sys_bpf+0xba/0xd0 [ 618.718873][T24268] do_syscall_64+0x166/0x520 [ 618.718896][T24268] ? trace_irq_disable+0x3b/0x140 [ 618.718923][T24268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.718944][T24268] ? clear_bhb_loop+0x70/0xc0 [ 618.718969][T24268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.718989][T24268] RIP: 0033:0x7f5fe139f559 [ 618.719009][T24268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.719026][T24268] RSP: 002b:00007f5fe224e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 618.719048][T24268] RAX: ffffffffffffffda RBX: 00007f5fe1625fa0 RCX: 00007f5fe139f559 [ 618.719063][T24268] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 0000000000000018 [ 618.719076][T24268] RBP: 00007f5fe224e090 R08: 0000000000000000 R09: 0000000000000000 [ 618.719092][T24268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 618.719104][T24268] R13: 00007f5fe1626038 R14: 00007f5fe1625fa0 R15: 00007fff5ee6c838 [ 618.719138][T24268] [ 619.231452][T24283] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4244'. [ 619.251422][T24280] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4243'. [ 619.706704][T24311] netlink: 'syz.2.4251': attribute type 1 has an invalid length. [ 619.706987][T24311] netlink: 'syz.2.4251': attribute type 4 has an invalid length. [ 619.707003][T24311] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4251'. [ 619.707200][T24311] netlink: 'syz.2.4251': attribute type 1 has an invalid length. [ 619.707214][T24311] netlink: 'syz.2.4251': attribute type 4 has an invalid length. [ 619.707225][T24311] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4251'. [ 619.707410][T24311] netlink: 'syz.2.4251': attribute type 1 has an invalid length. [ 619.707424][T24311] netlink: 'syz.2.4251': attribute type 4 has an invalid length. [ 619.707435][T24311] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4251'. [ 619.709130][T24311] netlink: 'syz.2.4251': attribute type 1 has an invalid length. [ 619.709147][T24311] netlink: 'syz.2.4251': attribute type 4 has an invalid length. [ 619.709159][T24311] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4251'. [ 619.709333][T24311] netlink: 'syz.2.4251': attribute type 1 has an invalid length. [ 619.709347][T24311] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4251'. [ 620.332668][T24333] FAULT_INJECTION: forcing a failure. [ 620.332668][T24333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.332698][T24333] CPU: 1 UID: 0 PID: 24333 Comm: syz.2.4252 Not tainted syzkaller #0 PREEMPT(full) [ 620.332721][T24333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 620.332733][T24333] Call Trace: [ 620.332741][T24333] [ 620.332750][T24333] dump_stack_lvl+0xe8/0x150 [ 620.332788][T24333] should_fail_ex+0x3eb/0x540 [ 620.332818][T24333] _copy_to_user+0x31/0xb0 [ 620.332847][T24333] simple_read_from_buffer+0xe1/0x170 [ 620.332878][T24333] proc_fail_nth_read+0x1bb/0x230 [ 620.332913][T24333] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 620.332948][T24333] ? rw_verify_area+0x24a/0x4c0 [ 620.332976][T24333] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 620.333007][T24333] vfs_read+0x213/0xa80 [ 620.333037][T24333] ? __pfx___mutex_lock+0x10/0x10 [ 620.333069][T24333] ? __pfx_vfs_read+0x10/0x10 [ 620.333096][T24333] ? __fget_files+0x2a/0x420 [ 620.333119][T24333] ? __fget_files+0x3a2/0x420 [ 620.333142][T24333] ? __fget_files+0x2a/0x420 [ 620.333171][T24333] ? fdget+0x1ac/0x250 [ 620.333202][T24333] ksys_read+0x150/0x270 [ 620.333232][T24333] ? __pfx_ksys_read+0x10/0x10 [ 620.333272][T24333] do_syscall_64+0x166/0x520 [ 620.333294][T24333] ? trace_irq_disable+0x3b/0x140 [ 620.333322][T24333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.333344][T24333] ? clear_bhb_loop+0x70/0xc0 [ 620.333369][T24333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.333389][T24333] RIP: 0033:0x7f32c7d5fd8e [ 620.333408][T24333] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 620.333429][T24333] RSP: 002b:00007f32c8d46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 620.333451][T24333] RAX: ffffffffffffffda RBX: 00007f32c8d476c0 RCX: 00007f32c7d5fd8e [ 620.333466][T24333] RDX: 000000000000000f RSI: 00007f32c8d470a0 RDI: 0000000000000004 [ 620.333480][T24333] RBP: 00007f32c8d47090 R08: 0000000000000000 R09: 0000000000000000 [ 620.333493][T24333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 620.333505][T24333] R13: 00007f32c8026038 R14: 00007f32c8025fa0 R15: 00007ffe0fe20558 [ 620.333541][T24333] [ 620.419807][ T12] net_ratelimit: 25 callbacks suppressed [ 620.419827][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 620.541280][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 620.659769][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 620.787774][ T8505] bond7: (slave bridge2): failed to get link speed/duplex [ 623.495192][T24353] vxlan1: entered promiscuous mode [ 623.495216][T24353] vxlan1: entered allmulticast mode [ 623.526516][T24357] vxlan2: entered promiscuous mode [ 623.526540][T24357] vxlan2: entered allmulticast mode [ 623.610387][T24365] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.666355][T24365] bridge_slave_1: left allmulticast mode [ 623.666381][T24365] bridge_slave_1: left promiscuous mode [ 623.666593][T24365] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.770163][T24365] bond0: (slave bond_slave_0): Releasing backup interface [ 623.822339][T24365] bond0: (slave bond_slave_1): Releasing backup interface [ 623.893068][T24365] team0: Port device team_slave_0 removed [ 623.932730][T24365] team0: Port device team_slave_1 removed [ 623.933628][T24365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.933650][T24365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.966640][T24365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.966665][T24365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.992791][T24365] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 624.002188][T24379] validate_nla: 124 callbacks suppressed [ 624.002210][T24379] netlink: 'syz.2.4265': attribute type 13 has an invalid length. [ 624.035941][T24403] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 624.104561][T24394] team0: Mode changed to "loadbalance" [ 624.337590][ T50] bond7: (slave bridge2): failed to get link speed/duplex [ 624.337832][ T3353] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.337876][ T3353] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.337911][ T3353] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.337945][ T3353] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.448718][ T8505] bond7: (slave bridge2): failed to get link speed/duplex [ 624.686714][ T50] batman_adv: batadv0: Interface deactivated: ip6gretap0 [ 624.834213][T24432] ip_tables: iptables: counters copy to user failed while replacing table [ 624.939447][ T50] batman_adv: batadv0: Removing interface: ip6gretap0 [ 624.980409][ T50] bond5 (unregistering): (slave ip6gre1): Releasing backup interface [ 625.150978][T24439] __nla_validate_parse: 65 callbacks suppressed [ 625.150999][T24439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4278'. [ 625.304335][ T50] bond7 (unregistering): (slave gretap1): Releasing active interface [ 625.392676][ T50] bond14 (unregistering): (slave geneve4): Releasing active interface [ 626.611408][ T50] bond12 (unregistering): (slave bridge0): Releasing backup interface [ 626.649542][ T50] bond1 (unregistering): Released all slaves [ 626.658071][ T50] bond2 (unregistering): Released all slaves [ 626.671500][ T50] bond3 (unregistering): Released all slaves [ 626.683445][ T50] bond4 (unregistering): Released all slaves [ 626.694801][ T50] bond5 (unregistering): Released all slaves [ 626.717704][ T50] bond6 (unregistering): Released all slaves [ 626.725727][ T50] bond7 (unregistering): Released all slaves [ 626.744357][ T50] bond8 (unregistering): Released all slaves [ 626.755498][ T50] bond9 (unregistering): Released all slaves [ 626.771765][ T50] bond10 (unregistering): Released all slaves [ 626.785692][ T50] bond11 (unregistering): Released all slaves [ 626.796461][ T50] bond12 (unregistering): Released all slaves [ 626.810851][ T50] bond13 (unregistering): Released all slaves [ 626.826479][ T50] bond14 (unregistering): Released all slaves [ 626.850951][ T50] bond15 (unregistering): Released all slaves [ 626.859990][ T50] bond16 (unregistering): Released all slaves [ 626.886088][ T50] bond17 (unregistering): Released all slaves [ 626.901992][ T50] bond18 (unregistering): Released all slaves [ 626.915513][T24424] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 626.937310][ T3353] bond7: (slave bridge2): failed to get link speed/duplex [ 627.026992][T24449] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4279'. [ 627.049976][T22103] bond7: (slave bridge2): failed to get link speed/duplex [ 627.050738][T24449] syzkaller0: entered promiscuous mode [ 627.050758][T24449] syzkaller0: entered allmulticast mode [ 627.101744][T24451] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4280'. [ 627.217701][T22103] bond7: (slave bridge2): failed to get link speed/duplex [ 627.233533][T24455] IPVS: length: 231 != 8 [ 627.245284][T24458] syzkaller0: left promiscuous mode [ 627.245305][T24458] syzkaller0: left allmulticast mode [ 627.269084][ T50] tipc: Disabling bearer [ 627.271311][ T50] tipc: Left network mode [ 627.279702][T24451] netlink: 'syz.0.4280': attribute type 3 has an invalid length. [ 627.327182][ T13] bond7: (slave bridge2): failed to get link speed/duplex [ 627.623279][T24487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4290'. [ 627.623316][T24487] netlink: 'syz.0.4290': attribute type 1 has an invalid length. [ 627.727994][T24487] geneve2: entered promiscuous mode [ 627.879781][T24496] atomic_op ffff8880542631e0 conn xmit_atomic 0000000000000000 [ 627.945404][T24502] netlink: 'syz.0.4293': attribute type 1 has an invalid length. [ 628.064132][T24508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4295'. [ 628.112916][T24502] 8021q: adding VLAN 0 to HW filter on device bond7 [ 628.119139][ T13] bond7: (slave bridge2): failed to get link speed/duplex [ 628.142096][T24502] netlink: 'syz.0.4293': attribute type 10 has an invalid length. [ 628.142118][T24502] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4293'. [ 628.142284][T24502] dummy0: entered promiscuous mode [ 628.282650][T24506] bond7: (slave veth7): Enslaving as a backup interface with a down link [ 628.285385][T24513] dummy0: left promiscuous mode [ 628.328665][ T166] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 628.334266][T24513] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 628.348053][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 628.466022][T24527] netlink: 'syz.0.4299': attribute type 4 has an invalid length. [ 628.467153][ T8505] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 628.470553][T24525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4297'. [ 628.503557][T24527] netlink: 'syz.0.4299': attribute type 4 has an invalid length. [ 628.528635][T24527] netlink: 'syz.0.4299': attribute type 4 has an invalid length. [ 628.537199][ T8505] bond7: (slave bridge2): failed to get link speed/duplex [ 629.144390][ T50] hsr_slave_0: left promiscuous mode [ 629.176443][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.184853][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.194581][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.194602][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.238045][ T50] veth0_to_bridge: left promiscuous mode [ 629.239444][ T50] veth1_macvtap: left promiscuous mode [ 629.239475][ T50] veth0_macvtap: left promiscuous mode [ 629.855206][ T12] smbdirect: ib_dev[!!0] removed [ 629.880464][T24542] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 629.884031][T24552] netlink: 15672 bytes leftover after parsing attributes in process `syz.4.4304'. [ 629.884055][T24552] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4304'. [ 629.884073][T24552] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4304'. [ 629.886155][T24573] syzkaller0: left promiscuous mode [ 629.886176][T24573] syzkaller0: left allmulticast mode [ 629.941114][ T9938] infiniband !!0: ib_query_port failed (-19) [ 629.953664][T24577] pimreg0: tun_chr_ioctl cmd 1074025677 [ 629.953811][T24577] pimreg0: linktype set to 774 [ 630.334632][ T50] IPVS: stop unused estimator thread 0... [ 630.449994][T24587] __nla_validate_parse: 9 callbacks suppressed [ 630.450016][T24587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4309'. [ 630.450045][T24587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4309'. [ 630.582112][T24594] FAULT_INJECTION: forcing a failure. [ 630.582112][T24594] name failslab, interval 1, probability 0, space 0, times 0 [ 630.582142][T24594] CPU: 1 UID: 0 PID: 24594 Comm: syz.3.4312 Not tainted syzkaller #0 PREEMPT(full) [ 630.582164][T24594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 630.582177][T24594] Call Trace: [ 630.582185][T24594] [ 630.582195][T24594] dump_stack_lvl+0xe8/0x150 [ 630.582232][T24594] should_fail_ex+0x3eb/0x540 [ 630.582260][T24594] ? __alloc_skb+0x1db/0x7a0 [ 630.582290][T24594] should_failslab+0xa8/0x100 [ 630.582320][T24594] ? __alloc_skb+0x1db/0x7a0 [ 630.582347][T24594] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 630.582371][T24594] ? __alloc_skb+0x18d/0x7a0 [ 630.582401][T24594] ? __alloc_skb+0x1db/0x7a0 [ 630.582437][T24594] __alloc_skb+0x1db/0x7a0 [ 630.582471][T24594] netlink_ack+0x136/0xb30 [ 630.582497][T24594] ? __lock_acquire+0x747/0x2de0 [ 630.582527][T24594] ? hook_capable+0x1c3/0x5e0 [ 630.582559][T24594] netlink_rcv_skb+0x2a4/0x4a0 [ 630.582594][T24594] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 630.582624][T24594] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 630.582664][T24594] ? bpf_lsm_capable+0x9/0x20 [ 630.582682][T24594] ? security_capable+0x7e/0x2c0 [ 630.582719][T24594] nfnetlink_rcv+0x2b9/0x28c0 [ 630.582746][T24594] ? is_bpf_text_address+0x292/0x2b0 [ 630.582767][T24594] ? is_bpf_text_address+0x26/0x2b0 [ 630.582791][T24594] ? kernel_text_address+0xa5/0xe0 [ 630.582817][T24594] ? __kernel_text_address+0xd/0x30 [ 630.582841][T24594] ? unwind_get_return_address+0x4d/0x90 [ 630.582869][T24594] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 630.582895][T24594] ? arch_stack_walk+0xfb/0x150 [ 630.582935][T24594] ? __lock_acquire+0x747/0x2de0 [ 630.582960][T24594] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 630.582990][T24594] ? __lock_acquire+0x747/0x2de0 [ 630.583030][T24594] ? __lock_acquire+0x747/0x2de0 [ 630.583066][T24594] ? __netlink_lookup+0xe6/0x8f0 [ 630.583106][T24594] ? lock_acquire+0x115/0x350 [ 630.583131][T24594] ? netlink_deliver_tap+0x2e/0x1b0 [ 630.583165][T24594] ? netlink_deliver_tap+0x2e/0x1b0 [ 630.583192][T24594] ? netlink_deliver_tap+0x2e/0x1b0 [ 630.583225][T24594] netlink_unicast+0x8ef/0xa80 [ 630.583269][T24594] netlink_sendmsg+0x7f0/0xb20 [ 630.583303][T24594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.583335][T24594] ? aa_sock_msg_perm+0x144/0x210 [ 630.583360][T24594] ? apparmor_socket_sendmsg+0x18b/0x360 [ 630.583392][T24594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.583419][T24594] sock_sendmsg_nosec+0x14e/0x190 [ 630.583449][T24594] ____sys_sendmsg+0x54e/0x850 [ 630.583477][T24594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 630.583509][T24594] ? import_iovec+0x73/0xa0 [ 630.583538][T24594] ___sys_sendmsg+0x2a5/0x360 [ 630.583557][T24594] ? __lock_acquire+0x747/0x2de0 [ 630.583593][T24594] ? __pfx____sys_sendmsg+0x10/0x10 [ 630.583654][T24594] ? __fget_files+0x3a2/0x420 [ 630.583677][T24594] ? __fget_files+0x2a/0x420 [ 630.583712][T24594] __x64_sys_sendmsg+0x1b1/0x290 [ 630.583736][T24594] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 630.583781][T24594] do_syscall_64+0x166/0x520 [ 630.583801][T24594] ? trace_irq_disable+0x3b/0x140 [ 630.583828][T24594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.583849][T24594] ? clear_bhb_loop+0x70/0xc0 [ 630.583874][T24594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.583893][T24594] RIP: 0033:0x7f052599f559 [ 630.583913][T24594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.583931][T24594] RSP: 002b:00007f0523bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.583953][T24594] RAX: ffffffffffffffda RBX: 00007f0525c25fa0 RCX: 00007f052599f559 [ 630.583968][T24594] RDX: 0000000020004000 RSI: 0000200000000000 RDI: 000000000000000c [ 630.583980][T24594] RBP: 00007f0523bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 630.583992][T24594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.584003][T24594] R13: 00007f0525c26038 R14: 00007f0525c25fa0 R15: 00007fff44a04168 [ 630.584034][T24594] [ 630.613020][T24594] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4312'. [ 631.274042][T24633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4321'. [ 631.274229][T24633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4321'. [ 631.342385][ T5637] block nbd1: Receive control failed (result -32) [ 631.342488][T17630] block nbd1: Receive control failed (result -32) [ 631.413980][T24618] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 631.557797][T24642] 8021q: adding VLAN 0 to HW filter on device bond8 [ 631.780814][T24676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4329'. [ 631.932026][T24681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4328'. [ 632.187000][T22103] net_ratelimit: 18 callbacks suppressed [ 632.187021][T22103] bond7: (slave bridge2): failed to get link speed/duplex [ 632.297456][T24656] bond7: (slave bridge2): failed to get link speed/duplex [ 632.390868][T24661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.406937][T22103] bond7: (slave bridge2): failed to get link speed/duplex [ 632.516956][T22103] bond7: (slave bridge2): failed to get link speed/duplex [ 632.626930][T22103] bond7: (slave bridge2): failed to get link speed/duplex [ 632.799004][T24649] bond7: (slave bridge2): failed to get link speed/duplex [ 632.909537][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 633.016913][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 633.078559][T24727] netlink: 'syz.1.4340': attribute type 21 has an invalid length. [ 633.078587][T24727] IPv6: NLM_F_CREATE should be specified when creating new route [ 633.078680][T24727] netlink: 'syz.1.4340': attribute type 1 has an invalid length. [ 633.131992][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 633.237872][T24649] bond7: (slave bridge2): failed to get link speed/duplex [ 633.325294][T24735] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4342'. [ 633.588664][T24744] netlink: 'syz.0.4343': attribute type 1 has an invalid length. [ 633.675403][T24749] sctp: [Deprecated]: syz.0.4343 (pid 24749) Use of int in max_burst socket option. [ 633.675403][T24749] Use struct sctp_assoc_value instead [ 633.700520][T24744] 8021q: adding VLAN 0 to HW filter on device bond8 [ 634.363206][T24779] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4346'. [ 634.363237][T24779] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4346'. [ 634.547840][T24795] netlink: 'syz.2.4351': attribute type 1 has an invalid length. [ 634.819048][T17630] Bluetooth: hci5: unexpected cc 0x0403 length: 44 > 1 [ 634.819085][T17630] Bluetooth: hci5: unexpected event for opcode 0x0403 [ 635.172184][T24795] 8021q: adding VLAN 0 to HW filter on device bond4 [ 635.208832][T24797] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 635.235524][T24800] bond4: entered promiscuous mode [ 635.235550][T24800] bond4: entered allmulticast mode [ 635.304116][T24801] macvlan5: entered promiscuous mode [ 635.304142][T24801] macvlan5: entered allmulticast mode [ 635.324256][T24801] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 635.457699][T24821] __nla_validate_parse: 1 callbacks suppressed [ 635.457721][T24821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4348'. [ 636.199987][T24825] netlink: 'syz.0.4355': attribute type 7 has an invalid length. [ 636.200007][T24825] netlink: 'syz.0.4355': attribute type 8 has an invalid length. [ 636.329189][T24832] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4357'. [ 636.391203][T24834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4358'. [ 637.107148][T24868] netlink: 'syz.1.4368': attribute type 1 has an invalid length. [ 637.219313][T24868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4368'. [ 637.240826][T24868] 8021q: adding VLAN 0 to HW filter on device bond9 [ 637.253814][ T62] net_ratelimit: 20 callbacks suppressed [ 637.253835][ T62] bond7: (slave bridge2): failed to get link speed/duplex [ 637.356946][ T42] bond7: (slave bridge2): failed to get link speed/duplex [ 637.468412][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 637.577049][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 637.687297][T24650] bond7: (slave bridge2): failed to get link speed/duplex [ 637.797288][ T42] bond7: (slave bridge2): failed to get link speed/duplex [ 637.906956][ T42] bond7: (slave bridge2): failed to get link speed/duplex [ 638.023346][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 638.063526][T24891] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4374'. [ 638.140012][T24649] bond7: (slave bridge2): failed to get link speed/duplex [ 638.250655][ T42] bond7: (slave bridge2): failed to get link speed/duplex [ 638.496481][T24911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4377'. [ 638.504544][T24911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4377'. [ 638.656072][T24918] xt_HMARK: proto mask must be zero with L3 mode [ 638.822182][T24924] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4380'. [ 638.975252][T24934] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4383'. [ 639.048416][T24937] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4385'. [ 639.784148][T24981] geneve2: entered promiscuous mode [ 640.034486][T25002] batadv2: entered promiscuous mode [ 640.034510][T25002] batadv2: entered allmulticast mode [ 640.346882][ T5637] Bluetooth: hci1: command 0x0406 tx timeout [ 641.433962][T25045] __nla_validate_parse: 9 callbacks suppressed [ 641.433985][T25045] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4419'. [ 642.978312][T24649] net_ratelimit: 20 callbacks suppressed [ 642.978341][T24649] bond7: (slave bridge2): failed to get link speed/duplex [ 643.086881][ T42] bond7: (slave bridge2): failed to get link speed/duplex [ 643.131422][T25051] openvswitch: netlink: Multiple metadata blocks provided [ 643.197793][ T42] bond7: (slave bridge2): failed to get link speed/duplex [ 643.258343][T25049] netlink: 'syz.3.4420': attribute type 1 has an invalid length. [ 643.316163][T25049] bond6: entered promiscuous mode [ 643.316663][T25049] 8021q: adding VLAN 0 to HW filter on device bond6 [ 643.327776][T25059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4420'. [ 643.347160][T24649] bond7: (slave bridge2): failed to get link speed/duplex [ 643.458488][ T42] bond7: (slave bridge2): failed to get link speed/duplex [ 643.567259][ T42] bond7: (slave bridge2): failed to get link speed/duplex [ 643.572534][T25077] syz.1.4425 (25077) used obsolete PPPIOCDETACH ioctl [ 643.676880][T24649] bond7: (slave bridge2): failed to get link speed/duplex [ 643.788533][ T62] bond7: (slave bridge2): failed to get link speed/duplex [ 643.896969][ T62] bond7: (slave bridge2): failed to get link speed/duplex [ 644.152864][T25108] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4430'. [ 644.263480][T25116] IPv6: NLM_F_CREATE should be specified when creating new route [ 644.263571][T25116] IPv6: NLM_F_REPLACE set, but no existing node found! [ 644.334718][T25123] IPv6: NLM_F_REPLACE set, but no existing node found! [ 644.536554][T25135] xt_hashlimit: size too large, truncated to 1048576 [ 644.645119][T25137] veth0_to_bridge: entered promiscuous mode [ 644.645733][T25137] macvtap1: entered allmulticast mode [ 644.645750][T25137] veth0_to_bridge: entered allmulticast mode [ 644.663632][T25137] veth0_to_bridge: left allmulticast mode [ 644.663656][T25137] veth0_to_bridge: left promiscuous mode [ 645.071832][T25154] veth9: entered allmulticast mode [ 645.076252][T25159] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 645.172813][T25167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4441'. [ 645.342234][T25167] netlink: 'syz.1.4441': attribute type 1 has an invalid length. [ 645.418956][T25176] sctp: [Deprecated]: syz.3.4443 (pid 25176) Use of struct sctp_assoc_value in delayed_ack socket option. [ 645.418956][T25176] Use struct sctp_sack_info instead [ 645.513602][T25183] netlink: 'syz.0.4445': attribute type 4 has an invalid length. [ 645.513626][T25183] netlink: 5620 bytes leftover after parsing attributes in process `syz.0.4445'. [ 645.843902][T25203] netlink: 'syz.4.4449': attribute type 4 has an invalid length. [ 645.844614][T25205] netlink: 'syz.0.4451': attribute type 6 has an invalid length. [ 645.844636][T25205] IPv6: NLM_F_CREATE should be specified when creating new route [ 645.885387][T25206] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4452'. [ 645.892082][T25203] netlink: 'syz.4.4449': attribute type 1 has an invalid length. [ 646.021862][T25215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4453'. [ 646.252252][T25227] netlink: 'syz.4.4456': attribute type 1 has an invalid length. [ 646.425582][T25229] 8021q: adding VLAN 0 to HW filter on device bond10 [ 646.444193][T25229] bond9: (slave bond10): making interface the new active one [ 646.455980][T25229] bond9: (slave bond10): Enslaving as an active interface with an up link [ 646.473263][T17630] Bluetooth: hci5: connection err: -111 [ 646.487299][T25241] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 646.487884][T25241] team0: Device ipvlan2 is already an upper device of the team interface [ 647.161592][T25269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4465'. [ 647.165692][T25271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4467'. [ 647.200497][T25274] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4466'. [ 647.229424][T17630] Bluetooth: hci4: unexpected cc 0x1005 length: 10 > 8 [ 647.229460][T17630] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 647.335973][T25269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4465'. [ 647.336016][T25269] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4465'. [ 647.387589][T25288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4469'. [ 647.402523][T25288] netlink: 'syz.2.4469': attribute type 1 has an invalid length. [ 647.447697][T25288] bond5: entered promiscuous mode [ 647.448798][T25288] 8021q: adding VLAN 0 to HW filter on device bond5 [ 647.502978][T25288] tipc: Started in network mode [ 647.503004][T25288] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 647.503063][T25288] tipc: Enabling of bearer rejected, failed to enable media [ 647.512942][T25288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4469'. [ 647.553901][T25298] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4471'. [ 647.572026][T25290] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4469'. [ 647.572729][T25290] bond5: entered allmulticast mode [ 647.741779][T25306] netlink: 'syz.2.4474': attribute type 1 has an invalid length. [ 647.773562][T25308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4473'. [ 648.057822][ T62] net_ratelimit: 24 callbacks suppressed [ 648.057844][ T62] bond7: (slave bridge2): failed to get link speed/duplex [ 648.168513][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 648.278446][ T62] bond7: (slave bridge2): failed to get link speed/duplex [ 648.387164][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 648.453749][T25353] syzkaller0: entered promiscuous mode [ 648.453774][T25353] syzkaller0: entered allmulticast mode [ 648.492568][T25353] tun0: tun_chr_ioctl cmd 1074025680 [ 648.498264][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 648.688716][ T62] bond7: (slave bridge2): failed to get link speed/duplex [ 648.818962][ T62] bond7: (slave bridge2): failed to get link speed/duplex [ 648.874470][T25378] netlink: 'syz.2.4491': attribute type 21 has an invalid length. [ 648.874495][T25378] IPv6: NLM_F_CREATE should be specified when creating new route [ 648.932681][ T42] bond7: (slave bridge2): failed to get link speed/duplex [ 648.938090][T25385] team0: entered promiscuous mode [ 648.938112][T25385] team0: entered allmulticast mode [ 648.939141][T25385] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.037845][ T42] bond7: (slave bridge2): failed to get link speed/duplex [ 649.147631][ T42] bond7: (slave bridge2): failed to get link speed/duplex [ 650.072422][T25449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.256249][T25457] netlink: 'syz.2.4514': attribute type 1 has an invalid length. [ 650.256273][T25457] netlink: 'syz.2.4514': attribute type 2 has an invalid length. [ 650.282427][T25457] netlink: 'syz.2.4514': attribute type 11 has an invalid length. [ 650.297220][T17630] Bluetooth: hci5: unexpected event for opcode 0x0c12 [ 651.143157][T25504] netlink: 'syz.4.4527': attribute type 4 has an invalid length. [ 651.149752][T25504] netlink: 'syz.4.4527': attribute type 1 has an invalid length. [ 651.347333][T25513] IPVS: set_ctl: invalid protocol: 18 224.0.0.2:20000 [ 651.512508][T25528] netlink: 'syz.1.4532': attribute type 21 has an invalid length. [ 651.618985][T25535] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode [ 651.619013][T25535] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode [ 651.715577][T25538] ip6tnl0: entered promiscuous mode [ 651.812676][T25548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.943426][T25559] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 651.943454][T25559] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 652.016538][T25561] xt_recent: Unsupported userspace flags (000000c5) [ 652.174438][T25572] __nla_validate_parse: 84 callbacks suppressed [ 652.174461][T25572] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4546'. [ 652.174481][T25572] netlink: 'syz.0.4546': attribute type 1 has an invalid length. [ 652.274798][T25578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4548'. [ 652.274814][T25578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4548'. [ 652.762672][T25598] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4556'. [ 652.794299][T25602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4557'. [ 652.989235][T25615] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 652.989480][T25615] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 652.989652][T25615] veth1_virt_wifi: entered allmulticast mode [ 652.991990][T25615] veth1_virt_wifi: left allmulticast mode [ 653.069700][T22103] net_ratelimit: 34 callbacks suppressed [ 653.069721][T22103] bond7: (slave bridge2): failed to get link speed/duplex [ 653.177137][ T62] bond7: (slave bridge2): failed to get link speed/duplex [ 653.309514][ T62] bond7: (slave bridge2): failed to get link speed/duplex [ 653.418564][ T42] bond7: (slave bridge2): failed to get link speed/duplex [ 653.531964][T25644] bond11: option miimon: invalid value (18446744073709551614) [ 653.531991][T25644] bond11: option miimon: allowed values 0 - 2147483647 [ 653.585856][T25644] bond11 (unregistering): Released all slaves [ 653.810889][T25666] netlink: 'syz.2.4570': attribute type 4 has an invalid length. [ 653.814043][T25645] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.814076][T25645] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.908524][T22103] bond7: (slave bridge2): failed to get link speed/duplex [ 654.017746][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 654.091115][T25645] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.091149][T25645] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.147274][T22103] bond7: (slave bridge2): failed to get link speed/duplex [ 654.200912][T25645] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.200947][T25645] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.257087][T22103] bond7: (slave bridge2): failed to get link speed/duplex [ 654.282272][T25690] netlink: 'syz.0.4575': attribute type 1 has an invalid length. [ 654.282295][T25690] nbd: illegal input index 397316 [ 654.348877][T25697] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 654.350575][T25690] IPVS: stopping backup sync thread 25697 ... [ 654.389242][ T62] bond7: (slave bridge2): failed to get link speed/duplex [ 654.530484][ T42] bond7: (slave bridge2): failed to get link speed/duplex [ 654.530933][ T42] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.530962][ T42] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.618255][ T42] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.618290][ T42] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.696934][T22103] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.696969][T22103] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.776964][T22103] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.776998][T22103] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.891008][T25716] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4582'. [ 654.915104][T25714] bond2: entered allmulticast mode [ 654.932437][T25713] bond2: left allmulticast mode [ 655.050078][T25718] netlink: 'syz.4.4581': attribute type 1 has an invalid length. [ 655.205349][T25734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4587'. [ 655.250414][T25734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4587'. [ 655.250792][T25734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4587'. [ 655.252602][T25734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4587'. [ 655.855749][T25758] x_tables: duplicate underflow at hook 1 [ 656.535452][T25796] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 657.226153][T25825] batadv0: entered promiscuous mode [ 657.243036][T25825] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 657.300477][T25832] bridge0: port 1(batadv0) entered blocking state [ 657.300580][T25832] bridge0: port 1(batadv0) entered disabled state [ 657.300679][T25832] batadv0: entered allmulticast mode [ 657.301730][T25832] batadv0: entered promiscuous mode [ 657.344284][T25835] bridge0: port 2(batadv1) entered blocking state [ 657.344398][T25835] bridge0: port 2(batadv1) entered disabled state [ 657.344538][T25835] batadv1: entered allmulticast mode [ 657.347099][T25835] batadv1: entered promiscuous mode [ 657.644027][T25853] __nla_validate_parse: 15 callbacks suppressed [ 657.644047][T25853] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4618'. [ 657.711614][T25856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4621'. [ 657.712123][T25857] netlink: 'syz.0.4619': attribute type 4 has an invalid length. [ 657.712133][T25857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4619'. [ 657.797591][ T62] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 657.797611][ T62] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 657.838653][T24653] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 657.838674][T24653] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 657.861729][T25856] ip6tnl2: entered allmulticast mode [ 657.865425][ T62] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 657.865454][ T62] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.865488][ T62] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 657.865520][ T62] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.865563][ T62] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 657.865586][ T62] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.870398][ T62] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 657.870429][ T62] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.083539][T25865] net_ratelimit: 31 callbacks suppressed [ 658.083561][T25865] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 658.087224][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 658.144401][T25864] bridge5: entered promiscuous mode [ 658.144423][T25864] bridge5: entered allmulticast mode [ 658.151933][T25864] team0: Port device bridge5 added [ 658.153062][T25862] bridge0: port 3(team0) entered blocking state [ 658.153144][T25862] bridge0: port 3(team0) entered disabled state [ 658.153262][T25862] team0: entered allmulticast mode [ 658.153278][T25862] team_slave_0: entered allmulticast mode [ 658.153295][T25862] team_slave_1: entered allmulticast mode [ 658.162120][T25862] team0: entered promiscuous mode [ 658.162139][T25862] team_slave_0: entered promiscuous mode [ 658.162315][T25862] team_slave_1: entered promiscuous mode [ 658.165757][T25862] bridge0: port 3(team0) entered blocking state [ 658.165849][T25862] bridge0: port 3(team0) entered forwarding state [ 658.197114][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 658.256595][T25879] lo: left promiscuous mode [ 658.257767][T25879] ip6gre1: left promiscuous mode [ 658.258049][T25879] geneve2: left promiscuous mode [ 658.263731][T25879] bond2: left promiscuous mode [ 658.266346][T25879] vxlan1: left promiscuous mode [ 658.279605][T25879] vxlan2: left promiscuous mode [ 658.280165][T25879] bond4: left promiscuous mode [ 658.300907][T25879] bond5: left promiscuous mode [ 658.312286][T25878] tipc: Invalid UDP bearer configuration [ 658.312330][T25878] tipc: Enabling of bearer rejected, failed to enable media [ 658.334337][ T42] bond7: (slave bridge2): failed to get link speed/duplex [ 658.334855][T25884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4628'. [ 658.353246][T25888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4628'. [ 658.450077][T25879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.544184][T25899] 8021q: VLANs not supported on wg1 [ 658.544287][T25899] 8021q: VLANs not supported on wg1 [ 658.544411][T25899] 8021q: VLANs not supported on wg1 [ 658.544491][T25899] 8021q: VLANs not supported on wg1 [ 658.544567][T25899] 8021q: VLANs not supported on wg1 [ 658.544644][T25899] 8021q: VLANs not supported on wg1 [ 658.544748][T25899] 8021q: VLANs not supported on wg1 [ 658.544824][T25899] 8021q: VLANs not supported on wg1 [ 658.544899][T25899] 8021q: VLANs not supported on wg1 [ 658.544974][T25899] 8021q: VLANs not supported on wg1 [ 658.545087][T25899] 8021q: VLANs not supported on wg1 [ 658.545160][T25899] 8021q: VLANs not supported on wg1 [ 658.545236][T25899] 8021q: VLANs not supported on wg1 [ 658.545311][T25899] 8021q: VLANs not supported on wg1 [ 658.545420][T25899] 8021q: VLANs not supported on wg1 [ 658.545493][T25899] 8021q: VLANs not supported on wg1 [ 658.545567][T25899] 8021q: VLANs not supported on wg1 [ 658.545644][T25899] 8021q: VLANs not supported on wg1 [ 658.601382][T25899] 8021q: VLANs not supported on wg1 [ 658.601473][T25899] 8021q: VLANs not supported on wg1 [ 658.601554][T25899] 8021q: VLANs not supported on wg1 [ 658.601655][T25899] 8021q: VLANs not supported on wg1 [ 658.601749][T25899] 8021q: VLANs not supported on wg1 [ 658.601824][T25899] 8021q: VLANs not supported on wg1 [ 658.601896][T25899] 8021q: VLANs not supported on wg1 [ 658.601994][T25899] 8021q: VLANs not supported on wg1 [ 658.603379][T25899] 8021q: VLANs not supported on wg1 [ 658.603463][T25899] 8021q: VLANs not supported on wg1 [ 658.603543][T25899] 8021q: VLANs not supported on wg1 [ 658.603616][T25899] 8021q: VLANs not supported on wg1 [ 658.603714][T25899] 8021q: VLANs not supported on wg1 [ 658.603807][T25899] 8021q: VLANs not supported on wg1 [ 658.603880][T25899] 8021q: VLANs not supported on wg1 [ 658.760468][T24649] bond7: (slave bridge2): failed to get link speed/duplex [ 658.777453][T25901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4629'. [ 658.795026][T25901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4629'. [ 658.795581][T25901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4629'. [ 658.813011][T25901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4629'. [ 658.836658][T25901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4629'. [ 659.017374][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 659.130255][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 659.267124][T22103] bond7: (slave bridge2): failed to get link speed/duplex [ 659.381063][ T62] bond7: (slave bridge2): failed to get link speed/duplex [ 659.486983][ T62] bond7: (slave bridge2): failed to get link speed/duplex [ 659.809767][T26002] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode [ 659.809795][T26002] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode [ 659.812897][T26002] tipc: Resetting bearer [ 659.964922][ T62] tipc: Resetting bearer [ 660.093334][T26012] netlink: 'syz.3.4642': attribute type 1 has an invalid length. [ 660.193800][T26012] bond8: entered promiscuous mode [ 660.204596][T26012] 8021q: adding VLAN 0 to HW filter on device bond8 [ 660.307057][T26014] 8021q: adding VLAN 0 to HW filter on device bond8 [ 660.307446][T26014] bond8: (slave gre2): The slave device specified does not support setting the MAC address [ 660.307467][T26014] bond8: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 660.308271][T26014] bond8: (slave gre2): Opening slave failed [ 660.444340][T26020] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 660.504937][T26022] netlink: 'syz.1.4644': attribute type 8 has an invalid length. [ 660.910301][T26043] netlink: 'syz.1.4649': attribute type 4 has an invalid length. [ 661.138303][T26058] x_tables: unsorted underflow at hook 4 [ 661.656544][T26071] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 661.673714][T26067] gretap0: entered promiscuous mode [ 661.716223][T26067] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.823586][T26067] bridge_slave_0: entered promiscuous mode [ 661.845197][T26082] netlink: 'syz.3.4661': attribute type 1 has an invalid length. [ 661.940473][T26067] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 661.940500][T26067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 661.945706][T26067] veth1_vlan: left promiscuous mode [ 661.958382][T26067] veth0_vlan: left promiscuous mode [ 661.965711][T26067] veth0_vlan: entered promiscuous mode [ 661.975482][T26067] veth1_vlan: entered promiscuous mode [ 661.998968][T26067] veth1_macvtap: left promiscuous mode [ 662.000159][T26067] veth0_macvtap: left promiscuous mode [ 662.001332][T26067] veth0_macvtap: entered promiscuous mode [ 662.009479][T26067] veth1_macvtap: entered promiscuous mode [ 662.237408][T26082] bond9: entered promiscuous mode [ 662.238457][T26082] 8021q: adding VLAN 0 to HW filter on device bond9 [ 662.239704][T26086] bond9: entered allmulticast mode [ 662.249894][ T62] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.249946][ T62] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.249985][ T62] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.250023][ T62] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.944884][T26100] __nla_validate_parse: 65 callbacks suppressed [ 662.944907][T26100] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4665'. [ 663.228660][T26122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4672'. [ 663.329584][T26117] syzkaller0: entered promiscuous mode [ 663.329609][T26117] syzkaller0: entered allmulticast mode [ 663.330026][T24656] net_ratelimit: 17 callbacks suppressed [ 663.330043][T24656] bond7: (slave bridge2): failed to get link speed/duplex [ 663.330399][T26121] tipc: Started in network mode [ 663.330425][T26121] tipc: Node identity c2f607c7149e, cluster identity 4711 [ 663.330702][T26121] tipc: Enabled bearer , priority 0 [ 663.356468][T26117] tipc: Resetting bearer [ 663.437242][T24656] bond7: (slave bridge2): failed to get link speed/duplex [ 663.548584][T22103] bond7: (slave bridge2): failed to get link speed/duplex [ 663.565362][T26145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4677'. [ 663.570244][T26146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4677'. [ 663.628687][T26132] xt_l2tp: v2 tid > 0xffff: 4294901760 [ 663.629068][T26152] netlink: 'syz.3.4674': attribute type 10 has an invalid length. [ 663.659967][ T62] bond7: (slave bridge2): failed to get link speed/duplex [ 663.683342][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.683461][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.683499][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.683538][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.683576][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.683615][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.683653][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.683688][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.683724][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.683782][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.683819][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.683864][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.683899][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.683940][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.683975][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.684011][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.684049][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.684087][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.684126][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.684165][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.684201][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.684237][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.684273][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.684308][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.684343][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.684380][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.684420][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.729221][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.729276][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.729316][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.729355][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.729400][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.729439][ T62] nci: nci_ntf_packet: unknown ntf opcode 0x32f [ 663.806991][T24656] bond7: (slave bridge2): failed to get link speed/duplex [ 663.919974][ T42] bond7: (slave bridge2): failed to get link speed/duplex [ 664.003194][T26164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4684'. [ 664.003230][T26164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4684'. [ 664.024439][T26168] FAULT_INJECTION: forcing a failure. [ 664.024439][T26168] name failslab, interval 1, probability 0, space 0, times 0 [ 664.024470][T26168] CPU: 1 UID: 0 PID: 26168 Comm: syz.0.4683 Not tainted syzkaller #0 PREEMPT(full) [ 664.024493][T26168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 664.024505][T26168] Call Trace: [ 664.024513][T26168] [ 664.024521][T26168] dump_stack_lvl+0xe8/0x150 [ 664.024559][T26168] should_fail_ex+0x3eb/0x540 [ 664.024589][T26168] should_failslab+0xa8/0x100 [ 664.024619][T26168] __kmalloc_cache_noprof+0x9e/0x600 [ 664.024644][T26168] ? bpf_prog_alloc_no_stats+0xd8/0x550 [ 664.024663][T26168] ? bpf_prog_alloc_no_stats+0xd8/0x550 [ 664.024690][T26168] bpf_prog_alloc_no_stats+0xd8/0x550 [ 664.024707][T26168] ? bpf_prog_alloc+0x2a/0x1a0 [ 664.024728][T26168] bpf_prog_alloc+0x3c/0x1a0 [ 664.024750][T26168] bpf_prog_load+0x7f8/0x1c60 [ 664.024782][T26168] ? __pfx_bpf_prog_load+0x10/0x10 [ 664.024817][T26168] ? __might_fault+0xaf/0x130 [ 664.024845][T26168] __sys_bpf+0xd86/0xe00 [ 664.024869][T26168] ? __pfx___sys_bpf+0x10/0x10 [ 664.024896][T26168] ? __fget_files+0x2a/0x420 [ 664.024940][T26168] ? ksys_write+0x242/0x270 [ 664.024966][T26168] ? __pfx_ksys_write+0x10/0x10 [ 664.024994][T26168] __x64_sys_bpf+0xba/0xd0 [ 664.025024][T26168] do_syscall_64+0x166/0x520 [ 664.025046][T26168] ? trace_irq_disable+0x3b/0x140 [ 664.025074][T26168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.025094][T26168] ? clear_bhb_loop+0x70/0xc0 [ 664.025121][T26168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.025141][T26168] RIP: 0033:0x7f92cf59f559 [ 664.025160][T26168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.025179][T26168] RSP: 002b:00007f92d0437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 664.025200][T26168] RAX: ffffffffffffffda RBX: 00007f92cf825fa0 RCX: 00007f92cf59f559 [ 664.025216][T26168] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 664.025230][T26168] RBP: 00007f92d0437090 R08: 0000000000000000 R09: 0000000000000000 [ 664.025243][T26168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.025256][T26168] R13: 00007f92cf826038 R14: 00007f92cf825fa0 R15: 00007ffed8733158 [ 664.025294][T26168] [ 664.330961][T26177] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 664.349060][T16321] tipc: Node number set to 3597141959 [ 664.350391][T22103] bond7: (slave bridge2): failed to get link speed/duplex [ 664.454271][T26195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4688'. [ 664.498508][T22103] bond7: (slave bridge2): failed to get link speed/duplex [ 664.607472][T22103] bond7: (slave bridge2): failed to get link speed/duplex [ 664.649839][T26210] x_tables: unsorted entry at hook 3 [ 665.595722][T26215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4693'. [ 665.596556][T26215] netlink: 13 bytes leftover after parsing attributes in process `syz.1.4693'. [ 666.504688][T26139] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 666.662394][T26225] FAULT_INJECTION: forcing a failure. [ 666.662394][T26225] name failslab, interval 1, probability 0, space 0, times 0 [ 666.662424][T26225] CPU: 0 UID: 0 PID: 26225 Comm: syz.3.4696 Not tainted syzkaller #0 PREEMPT(full) [ 666.662447][T26225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 666.662460][T26225] Call Trace: [ 666.662468][T26225] [ 666.662477][T26225] dump_stack_lvl+0xe8/0x150 [ 666.662514][T26225] should_fail_ex+0x3eb/0x540 [ 666.662545][T26225] should_failslab+0xa8/0x100 [ 666.662576][T26225] __kmalloc_cache_noprof+0x9e/0x600 [ 666.662602][T26225] ? bpf_prog_alloc_no_stats+0xd8/0x550 [ 666.662622][T26225] ? bpf_prog_alloc_no_stats+0xd8/0x550 [ 666.662650][T26225] bpf_prog_alloc_no_stats+0xd8/0x550 [ 666.662669][T26225] ? bpf_prog_alloc+0x2a/0x1a0 [ 666.662691][T26225] bpf_prog_alloc+0x3c/0x1a0 [ 666.662714][T26225] bpf_prog_load+0x7f8/0x1c60 [ 666.662752][T26225] ? __pfx_bpf_prog_load+0x10/0x10 [ 666.662789][T26225] ? __might_fault+0xaf/0x130 [ 666.662816][T26225] __sys_bpf+0xd86/0xe00 [ 666.662845][T26225] ? __pfx___sys_bpf+0x10/0x10 [ 666.662877][T26225] ? __fget_files+0x2a/0x420 [ 666.662921][T26225] ? ksys_write+0x242/0x270 [ 666.662950][T26225] ? __pfx_ksys_write+0x10/0x10 [ 666.662982][T26225] __x64_sys_bpf+0xba/0xd0 [ 666.663014][T26225] do_syscall_64+0x166/0x520 [ 666.663036][T26225] ? trace_irq_disable+0x3b/0x140 [ 666.663063][T26225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.663091][T26225] ? clear_bhb_loop+0x70/0xc0 [ 666.663116][T26225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.663136][T26225] RIP: 0033:0x7f052599f559 [ 666.663155][T26225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.663173][T26225] RSP: 002b:00007f0523bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 666.663195][T26225] RAX: ffffffffffffffda RBX: 00007f0525c25fa0 RCX: 00007f052599f559 [ 666.663210][T26225] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 666.663224][T26225] RBP: 00007f0523bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 666.663238][T26225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.663251][T26225] R13: 00007f0525c26038 R14: 00007f0525c25fa0 R15: 00007fff44a04168 [ 666.663285][T26225] [ 666.778369][T26233] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4697'. [ 667.892254][T26283] netlink: 'syz.0.4711': attribute type 1 has an invalid length. [ 668.105199][T26286] __nla_validate_parse: 2 callbacks suppressed [ 668.105218][T26286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4711'. [ 669.754506][T26263] sch_tbf: burst 7 is lower than device bridge0 mtu (1294) ! [ 669.772439][T26271] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 669.773365][T26271] bond10 (unregistering): Released all slaves [ 669.804993][T26283] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 669.812115][T26281] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 669.821962][T26284] netlink: 'syz.0.4711': attribute type 29 has an invalid length. [ 669.821986][T26284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4711'. [ 669.840864][T24653] net_ratelimit: 23 callbacks suppressed [ 669.840884][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 669.949022][ T62] bond7: (slave bridge2): failed to get link speed/duplex [ 669.966304][T26295] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4713'. [ 669.966329][T26295] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4713'. [ 669.966349][T26295] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4713'. [ 670.057344][ T62] bond7: (slave bridge2): failed to get link speed/duplex [ 670.134003][T26305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4718'. [ 670.144234][T26303] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4715'. [ 670.166877][ T42] bond7: (slave bridge2): failed to get link speed/duplex [ 670.174600][T26303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4715'. [ 670.276917][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 670.386877][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 670.403242][T26312] netlink: 'syz.2.4720': attribute type 1 has an invalid length. [ 670.406271][T26312] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4720'. [ 670.497338][T24650] bond7: (slave bridge2): failed to get link speed/duplex [ 670.524152][T26323] syzkaller0: entered promiscuous mode [ 670.524177][T26323] syzkaller0: entered allmulticast mode [ 670.626906][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 670.651803][T26331] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4727'. [ 670.744311][T26333] ovs-dp0: entered promiscuous mode [ 670.757036][ T42] bond7: (slave bridge2): failed to get link speed/duplex [ 670.919591][T26347] netlink: 'syz.2.4732': attribute type 4 has an invalid length. [ 670.961089][T26343] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 670.961157][T26343] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 670.961475][T26343] tipc: Resetting bearer [ 670.968507][T26345] netlink: 'syz.2.4732': attribute type 4 has an invalid length. [ 671.008702][ T62] bond7: (slave bridge2): failed to get link speed/duplex [ 671.024882][T26345] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 671.028138][T26347] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 671.090559][T26358] netlink: 'syz.3.4734': attribute type 1 has an invalid length. [ 671.411692][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056252c00: rx timeout, send abort [ 671.820289][T26409] bond6: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 671.828765][T26409] bond6 (unregistering): Released all slaves [ 671.913036][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056252c00: abort rx timeout. Force session deactivation [ 672.154112][T26433] syzkaller0: entered promiscuous mode [ 672.154136][T26433] syzkaller0: entered allmulticast mode [ 672.305224][T26438] wg1: entered promiscuous mode [ 672.715244][T26440] vlan2: entered allmulticast mode [ 672.726573][T26440] bond3: (slave vlan2): Enslaving as a backup interface with an up link [ 672.976028][T26430] bond3: (slave vlan2): Removing an active aggregator [ 672.984661][T26430] bond3: (slave vlan2): Releasing backup interface [ 672.997517][T26430] vlan2 (unregistering): left allmulticast mode [ 673.159371][T26459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.190099][T26470] __nla_validate_parse: 70 callbacks suppressed [ 673.190120][T26470] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4761'. [ 673.251794][T26459] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 673.251821][T26459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 673.252367][T26459] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 673.260732][T26459] veth1_vlan: left promiscuous mode [ 673.263500][T26459] veth0_vlan: left promiscuous mode [ 673.266686][T26459] veth0_vlan: entered promiscuous mode [ 673.272821][T26459] veth1_vlan: entered promiscuous mode [ 673.285524][T26459] veth1_macvtap: left promiscuous mode [ 673.289658][T26459] veth0_macvtap: left promiscuous mode [ 673.291513][T26459] veth0_macvtap: entered promiscuous mode [ 673.293317][T26459] veth1_macvtap: entered promiscuous mode [ 673.313164][T26459] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 673.314344][T26459] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 673.319095][T26459] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 673.322728][T26459] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 673.333066][T26459] macvtap1: left promiscuous mode [ 673.335296][T26459] syzkaller0: left promiscuous mode [ 673.336957][T22103] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.337001][T22103] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.337035][T22103] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.347138][T22103] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.378443][T26474] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4763'. [ 673.770217][T26486] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 673.859254][T26489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4767'. [ 674.213490][T26504] tipc: Enabling of bearer rejected, already enabled [ 674.567868][T26515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4772'. [ 674.588995][T26517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4772'. [ 674.589021][T26517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4772'. [ 674.887410][T24653] net_ratelimit: 51 callbacks suppressed [ 674.887431][T24653] bond7: (slave dummy0): failed to get link speed/duplex [ 674.887464][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 674.925170][T26528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4775'. [ 674.999094][ T42] bond7: (slave bridge2): failed to get link speed/duplex [ 674.999143][ T42] bond7: (slave dummy0): failed to get link speed/duplex [ 675.207306][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 675.207353][T24653] bond7: (slave dummy0): failed to get link speed/duplex [ 675.477312][T24650] bond7: (slave dummy0): failed to get link speed/duplex [ 675.477357][T24650] bond7: (slave bridge2): failed to get link speed/duplex [ 675.587096][T22103] bond7: (slave bridge2): failed to get link speed/duplex [ 675.587140][T22103] bond7: (slave dummy0): failed to get link speed/duplex [ 676.110576][T26552] xt_hashlimit: size too large, truncated to 1048576 [ 676.270239][T26559] netlink: 'syz.0.4780': attribute type 1 has an invalid length. [ 676.372541][T26562] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4781'. [ 676.405517][T26559] 8021q: adding VLAN 0 to HW filter on device bond9 [ 676.456645][T26563] bond9: (slave geneve4): making interface the new active one [ 676.465146][T26563] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 676.742472][T26572] FAULT_INJECTION: forcing a failure. [ 676.742472][T26572] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 676.742494][T26572] CPU: 0 UID: 0 PID: 26572 Comm: syz.3.4783 Not tainted syzkaller #0 PREEMPT(full) [ 676.742516][T26572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 676.742528][T26572] Call Trace: [ 676.742536][T26572] [ 676.742545][T26572] dump_stack_lvl+0xe8/0x150 [ 676.742583][T26572] should_fail_ex+0x3eb/0x540 [ 676.742613][T26572] prepare_alloc_pages+0x21e/0x5f0 [ 676.742647][T26572] __alloc_frozen_pages_noprof+0x17c/0x410 [ 676.742663][T26572] ? __lock_acquire+0x747/0x2de0 [ 676.742678][T26572] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 676.742694][T26572] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 676.742707][T26572] ? __get_vm_area_node+0x155/0x2f0 [ 676.742716][T26572] ? __vmalloc_node_range_noprof+0x36e/0x16f0 [ 676.742732][T26572] ? policy_nodemask+0x31b/0x980 [ 676.742746][T26572] ? do_syscall_64+0x166/0x520 [ 676.742759][T26572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.742773][T26572] alloc_pages_mpol+0x21e/0x390 [ 676.742792][T26572] alloc_pages_noprof+0xb1/0x2b0 [ 676.742809][T26572] get_free_pages_noprof+0xf/0x80 [ 676.742823][T26572] __kasan_populate_vmalloc+0x38/0x1c0 [ 676.742836][T26572] ? do_raw_spin_unlock+0xf5/0x200 [ 676.742850][T26572] alloc_vmap_area+0xd10/0x1410 [ 676.742869][T26572] ? __pfx_alloc_vmap_area+0x10/0x10 [ 676.742878][T26572] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 676.742892][T26572] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 676.742904][T26572] ? __get_vm_area_node+0x155/0x2f0 [ 676.742918][T26572] __get_vm_area_node+0x200/0x2f0 [ 676.742933][T26572] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 676.742944][T26572] ? bpf_check+0x14ae/0x34e0 [ 676.742960][T26572] ? lock_acquire+0x115/0x350 [ 676.742975][T26572] ? hook_capable+0x1c3/0x5e0 [ 676.742989][T26572] ? __pfx_hook_capable+0x10/0x10 [ 676.743007][T26572] ? rcu_is_watching+0x16/0xb0 [ 676.743025][T26572] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 676.743038][T26572] ? apparmor_capable+0x126/0x170 [ 676.743052][T26572] ? bpf_lsm_capable+0x9/0x20 [ 676.743062][T26572] ? security_capable+0x7e/0x2c0 [ 676.743079][T26572] ? bpf_check+0x14ae/0x34e0 [ 676.743089][T26572] __vmalloc_noprof+0xd2/0x120 [ 676.743100][T26572] ? bpf_check+0x14ae/0x34e0 [ 676.743112][T26572] bpf_check+0x14ae/0x34e0 [ 676.743129][T26572] ? ktime_get_with_offset+0x93/0x2d0 [ 676.743152][T26572] ? ktime_get_with_offset+0x93/0x2d0 [ 676.743167][T26572] ? __pfx_bpf_check+0x10/0x10 [ 676.743179][T26572] ? bpf_obj_name_cpy+0x194/0x1e0 [ 676.743195][T26572] bpf_prog_load+0x14da/0x1c60 [ 676.743213][T26572] ? __pfx_bpf_prog_load+0x10/0x10 [ 676.743232][T26572] ? __might_fault+0xaf/0x130 [ 676.743247][T26572] __sys_bpf+0xd86/0xe00 [ 676.743262][T26572] ? __pfx___sys_bpf+0x10/0x10 [ 676.743278][T26572] ? __fget_files+0x2a/0x420 [ 676.743301][T26572] ? ksys_write+0x242/0x270 [ 676.743320][T26572] ? __pfx_ksys_write+0x10/0x10 [ 676.743349][T26572] __x64_sys_bpf+0xba/0xd0 [ 676.743379][T26572] do_syscall_64+0x166/0x520 [ 676.743397][T26572] ? trace_irq_disable+0x3b/0x140 [ 676.743412][T26572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.743422][T26572] ? clear_bhb_loop+0x70/0xc0 [ 676.743436][T26572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.743446][T26572] RIP: 0033:0x7f052599f559 [ 676.743458][T26572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.743470][T26572] RSP: 002b:00007f0523bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 676.743491][T26572] RAX: ffffffffffffffda RBX: 00007f0525c25fa0 RCX: 00007f052599f559 [ 676.743506][T26572] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 676.743518][T26572] RBP: 00007f0523bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 676.743532][T26572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 676.743544][T26572] R13: 00007f0525c26038 R14: 00007f0525c25fa0 R15: 00007fff44a04168 [ 676.743562][T26572] [ 676.743607][T26572] warn_alloc: 1 callbacks suppressed [ 676.743613][T26572] syz.3.4783: vmalloc error: size 2400, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 676.743652][T26572] CPU: 0 UID: 0 PID: 26572 Comm: syz.3.4783 Not tainted syzkaller #0 PREEMPT(full) [ 676.743664][T26572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 676.743671][T26572] Call Trace: [ 676.743675][T26572] [ 676.743680][T26572] dump_stack_lvl+0xe8/0x150 [ 676.743698][T26572] warn_alloc+0x24d/0x270 [ 676.743712][T26572] ? lockdep_hardirqs_on+0x7b/0x110 [ 676.743729][T26572] ? __pfx_warn_alloc+0x10/0x10 [ 676.743741][T26572] ? kfree+0x1c5/0x650 [ 676.743756][T26572] ? __get_vm_area_node+0x219/0x2f0 [ 676.743771][T26572] __vmalloc_node_range_noprof+0x396/0x16f0 [ 676.743786][T26572] ? lock_acquire+0x115/0x350 [ 676.743802][T26572] ? hook_capable+0x1c3/0x5e0 [ 676.743816][T26572] ? __pfx_hook_capable+0x10/0x10 [ 676.743828][T26572] ? rcu_is_watching+0x16/0xb0 [ 676.743847][T26572] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 676.743859][T26572] ? apparmor_capable+0x126/0x170 [ 676.743874][T26572] ? bpf_lsm_capable+0x9/0x20 [ 676.743883][T26572] ? security_capable+0x7e/0x2c0 [ 676.743900][T26572] ? bpf_check+0x14ae/0x34e0 [ 676.743909][T26572] __vmalloc_noprof+0xd2/0x120 [ 676.743921][T26572] ? bpf_check+0x14ae/0x34e0 [ 676.743933][T26572] bpf_check+0x14ae/0x34e0 [ 676.743950][T26572] ? ktime_get_with_offset+0x93/0x2d0 [ 676.743965][T26572] ? ktime_get_with_offset+0x93/0x2d0 [ 676.743979][T26572] ? __pfx_bpf_check+0x10/0x10 [ 676.743992][T26572] ? bpf_obj_name_cpy+0x194/0x1e0 [ 676.744007][T26572] bpf_prog_load+0x14da/0x1c60 [ 676.744024][T26572] ? __pfx_bpf_prog_load+0x10/0x10 [ 676.744043][T26572] ? __might_fault+0xaf/0x130 [ 676.744058][T26572] __sys_bpf+0xd86/0xe00 [ 676.744073][T26572] ? __pfx___sys_bpf+0x10/0x10 [ 676.744089][T26572] ? __fget_files+0x2a/0x420 [ 676.744111][T26572] ? ksys_write+0x242/0x270 [ 676.744126][T26572] ? __pfx_ksys_write+0x10/0x10 [ 676.744142][T26572] __x64_sys_bpf+0xba/0xd0 [ 676.744164][T26572] do_syscall_64+0x166/0x520 [ 676.744175][T26572] ? trace_irq_disable+0x3b/0x140 [ 676.744189][T26572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.744200][T26572] ? clear_bhb_loop+0x70/0xc0 [ 676.744213][T26572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.744223][T26572] RIP: 0033:0x7f052599f559 [ 676.744233][T26572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.744242][T26572] RSP: 002b:00007f0523bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 676.744253][T26572] RAX: ffffffffffffffda RBX: 00007f0525c25fa0 RCX: 00007f052599f559 [ 676.744261][T26572] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 676.744268][T26572] RBP: 00007f0523bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 676.744275][T26572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 676.744281][T26572] R13: 00007f0525c26038 R14: 00007f0525c25fa0 R15: 00007fff44a04168 [ 676.744298][T26572] [ 676.744315][T26572] Mem-Info: [ 676.744321][T26572] active_anon:5670 inactive_anon:0 isolated_anon:0 [ 676.744321][T26572] active_file:17 inactive_file:43811 isolated_file:0 [ 676.744321][T26572] unevictable:0 dirty:165 writeback:0 [ 676.744321][T26572] slab_reclaimable:12903 slab_unreclaimable:121525 [ 676.744321][T26572] mapped:30661 shmem:530 pagetables:3581 [ 676.744321][T26572] sec_pagetables:0 bounce:0 [ 676.744321][T26572] kernel_misc_reclaimable:0 [ 676.744321][T26572] free:1276370 free_pcp:13793 free_cma:0 [ 676.744350][T26572] Node 0 active_anon:22680kB inactive_anon:0kB active_file:68kB inactive_file:175036kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122644kB dirty:660kB writeback:0kB shmem:2120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17592kB pagetables:14156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 676.744377][T26572] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 676.744404][T26572] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 676.744445][T26572] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 676.744480][T26572] Node 0 DMA32 free:1165576kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22680kB inactive_anon:0kB active_file:68kB inactive_file:175036kB unevictable:0kB writepending:660kB zspages:0kB present:3129332kB managed:2523120kB mlocked:0kB bounce:0kB free_pcp:55168kB local_pcp:30700kB free_cma:0kB [ 676.744519][T26572] lowmem_reserve[]: 0 0 1 1 1 [ 676.744537][T26572] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 676.744568][T26572] lowmem_reserve[]: 0 0 0 0 0 [ 676.744599][T26572] Node 1 Normal free:3924544kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 676.744652][T26572] lowmem_reserve[]: 0 0 0 0 0 [ 676.744670][T26572] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 676.744744][T26572] Node 0 DMA32: 1968*4kB (UME) 1955*8kB (UME) 863*16kB (UM) 8*32kB (ME) 455*64kB (UME) 509*128kB (UME) 404*256kB (UME) 219*512kB (UME) 133*1024kB (UME) 9*2048kB (UME) 162*4096kB (UM) = 1165576kB [ 676.744826][T26572] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 676.744875][T26572] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 8*16kB (UM) 5*32kB (UM) 8*64kB (UM) 6*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 956*4096kB (UM) = 3924544kB [ 676.744954][T26572] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 676.744963][T26572] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 676.744972][T26572] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 676.744980][T26572] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 676.744988][T26572] 44354 total pagecache pages [ 676.744993][T26572] 0 pages in swap cache [ 676.744997][T26572] Free swap = 124996kB [ 676.745001][T26572] Total swap = 124996kB [ 676.745005][T26572] 2097051 pages RAM [ 676.745009][T26572] 0 pages HighMem/MovableOnly [ 676.745013][T26572] 434240 pages reserved [ 676.745017][T26572] 0 pages cma reserved [ 677.854300][T26527] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 678.081304][T26590] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4791'. [ 678.104250][T26599] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4790'. [ 678.521723][T26586] bridge0: port 3(team0) entered disabled state [ 678.521921][T26586] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.522181][T26586] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.551456][T26612] FAULT_INJECTION: forcing a failure. [ 678.551456][T26612] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 678.551486][T26612] CPU: 1 UID: 0 PID: 26612 Comm: syz.3.4794 Not tainted syzkaller #0 PREEMPT(full) [ 678.551509][T26612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 678.551522][T26612] Call Trace: [ 678.551530][T26612] [ 678.551539][T26612] dump_stack_lvl+0xe8/0x150 [ 678.551576][T26612] should_fail_ex+0x3eb/0x540 [ 678.551606][T26612] prepare_alloc_pages+0x21e/0x5f0 [ 678.551639][T26612] __alloc_frozen_pages_noprof+0x17c/0x410 [ 678.551666][T26612] ? __lock_acquire+0x747/0x2de0 [ 678.551694][T26612] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 678.551725][T26612] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 678.551749][T26612] ? __get_vm_area_node+0x155/0x2f0 [ 678.551767][T26612] ? __vmalloc_node_range_noprof+0x36e/0x16f0 [ 678.551791][T26612] ? policy_nodemask+0x31b/0x980 [ 678.551817][T26612] ? do_syscall_64+0x166/0x520 [ 678.551838][T26612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.551866][T26612] alloc_pages_mpol+0x21e/0x390 [ 678.551900][T26612] alloc_pages_noprof+0xb1/0x2b0 [ 678.551932][T26612] get_free_pages_noprof+0xf/0x80 [ 678.551966][T26612] __kasan_populate_vmalloc+0x38/0x1c0 [ 678.551993][T26612] ? do_raw_spin_unlock+0xf5/0x200 [ 678.552019][T26612] alloc_vmap_area+0xd10/0x1410 [ 678.552056][T26612] ? __pfx_alloc_vmap_area+0x10/0x10 [ 678.552074][T26612] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 678.552101][T26612] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 678.552125][T26612] ? __get_vm_area_node+0x155/0x2f0 [ 678.552149][T26612] __get_vm_area_node+0x200/0x2f0 [ 678.552175][T26612] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 678.552195][T26612] ? bpf_check+0x14ae/0x34e0 [ 678.552221][T26612] ? lock_acquire+0x115/0x350 [ 678.552249][T26612] ? hook_capable+0x1c3/0x5e0 [ 678.552276][T26612] ? __pfx_hook_capable+0x10/0x10 [ 678.552300][T26612] ? rcu_is_watching+0x16/0xb0 [ 678.552335][T26612] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 678.552359][T26612] ? apparmor_capable+0x126/0x170 [ 678.552386][T26612] ? bpf_lsm_capable+0x9/0x20 [ 678.552405][T26612] ? security_capable+0x7e/0x2c0 [ 678.552437][T26612] ? bpf_check+0x14ae/0x34e0 [ 678.552455][T26612] __vmalloc_noprof+0xd2/0x120 [ 678.552477][T26612] ? bpf_check+0x14ae/0x34e0 [ 678.552501][T26612] bpf_check+0x14ae/0x34e0 [ 678.552535][T26612] ? ktime_get_with_offset+0x93/0x2d0 [ 678.552563][T26612] ? ktime_get_with_offset+0x93/0x2d0 [ 678.552591][T26612] ? __pfx_bpf_check+0x10/0x10 [ 678.552616][T26612] ? bpf_obj_name_cpy+0x194/0x1e0 [ 678.552646][T26612] bpf_prog_load+0x14da/0x1c60 [ 678.552680][T26612] ? __pfx_bpf_prog_load+0x10/0x10 [ 678.552718][T26612] ? __might_fault+0xaf/0x130 [ 678.552746][T26612] __sys_bpf+0xd86/0xe00 [ 678.552775][T26612] ? __pfx___sys_bpf+0x10/0x10 [ 678.552808][T26612] ? __fget_files+0x2a/0x420 [ 678.552852][T26612] ? ksys_write+0x242/0x270 [ 678.552880][T26612] ? __pfx_ksys_write+0x10/0x10 [ 678.552912][T26612] __x64_sys_bpf+0xba/0xd0 [ 678.552950][T26612] do_syscall_64+0x166/0x520 [ 678.552973][T26612] ? trace_irq_disable+0x3b/0x140 [ 678.553000][T26612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.553021][T26612] ? clear_bhb_loop+0x70/0xc0 [ 678.553046][T26612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.553067][T26612] RIP: 0033:0x7f052599f559 [ 678.553087][T26612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.553105][T26612] RSP: 002b:00007f0523bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 678.553127][T26612] RAX: ffffffffffffffda RBX: 00007f0525c25fa0 RCX: 00007f052599f559 [ 678.553142][T26612] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 678.553156][T26612] RBP: 00007f0523bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 678.553170][T26612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 678.553182][T26612] R13: 00007f0525c26038 R14: 00007f0525c25fa0 R15: 00007fff44a04168 [ 678.553217][T26612] [ 678.614118][T26614] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.4795'. [ 678.677037][T26616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4795'. [ 678.912396][T26628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4797'. [ 679.002040][T26586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.055369][T26586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.312495][T26614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4795'. [ 679.358596][ T62] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.358631][ T62] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.358669][ T62] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.358690][ T62] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.358709][ T62] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.358722][ T62] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.413376][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.413398][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.529629][T26636] ip6gretap0: entered promiscuous mode [ 679.543129][T16320] wlan1 speed is unknown, defaulting to 1000 [ 679.543165][T16320] syz1: Port: 1 Link ACTIVE [ 679.543300][T26643] netlink: 616 bytes leftover after parsing attributes in process `syz.4.4801'. [ 679.579901][ T62] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.579937][ T62] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.854647][T26662] netlink: 'syz.1.4804': attribute type 2 has an invalid length. [ 679.902507][T26648] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4802'. [ 679.904386][T26651] syzkaller0: entered promiscuous mode [ 679.904408][T26651] syzkaller0: entered allmulticast mode [ 679.927543][T26653] pimreg1: tun_chr_ioctl cmd 1074025677 [ 679.927657][T26653] pimreg1: linktype set to 825 [ 679.937139][T24653] net_ratelimit: 46 callbacks suppressed [ 679.937157][T24653] bond7: (slave dummy0): failed to get link speed/duplex [ 679.937201][T24650] bond7: (slave bridge2): failed to get link speed/duplex [ 679.939919][T26663] openvswitch: netlink: ERSPAN option length err (len 417, max 255). [ 680.296640][T26672] netlink: 'syz.1.4807': attribute type 3 has an invalid length. [ 680.296667][T26672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4807'. [ 680.472876][T26648] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 680.597403][T26681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4809'. [ 680.826977][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 682.466008][T26681] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 682.468232][T24650] bond7: (slave dummy0): failed to get link speed/duplex [ 682.468272][T24650] bond7: (slave bridge2): failed to get link speed/duplex [ 682.577247][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 682.577290][T24653] bond7: (slave dummy0): failed to get link speed/duplex [ 682.612087][ T29] audit: type=1800 audit(1793376582.541:13): pid=26690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4812" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1867 res=0 errno=-22 [ 682.683409][T26691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4811'. [ 682.719817][T26692] block nbd0: reconnected socket [ 682.719845][T26692] block nbd0: Unsupported socket: should be TCP or UNIX. [ 682.726419][T26694] openvswitch: netlink: Actions may not be safe on all matching packets [ 682.786710][T26691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4811'. [ 682.961529][T26702] bond11: entered promiscuous mode [ 682.962121][T26702] 8021q: adding VLAN 0 to HW filter on device bond11 [ 682.966993][ T62] bond7: (slave bridge2): failed to get link speed/duplex [ 682.967036][ T62] bond7: (slave dummy0): failed to get link speed/duplex [ 683.059437][T26709] bond12 (unregistering): Released all slaves [ 683.116377][T26711] bond12 (unregistering): Released all slaves [ 683.200247][ T5637] block nbd0: Receive control failed (result -32) [ 683.216685][T26713] batman_adv: batadv0: Adding interface: macsec1 [ 683.216702][T26713] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.221305][T26713] batman_adv: batadv0: Interface activated: macsec1 [ 683.621739][T26728] 8021q: adding VLAN 0 to HW filter on device bond12 [ 683.622371][T26728] bridge0: port 4(bond12) entered blocking state [ 683.625022][T26728] bridge0: port 4(bond12) entered disabled state [ 683.625232][T26728] bond12: entered allmulticast mode [ 683.661207][T26733] __nla_validate_parse: 1 callbacks suppressed [ 683.661225][T26733] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4822'. [ 683.661239][T26733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4822'. [ 683.661256][T26733] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4822'. [ 683.661269][T26733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4822'. [ 683.661282][T26733] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4822'. [ 683.661939][T26728] bond12: entered promiscuous mode [ 683.674764][T26733] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4822'. [ 683.674783][T26733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4822'. [ 683.674800][T26733] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4822'. [ 683.674813][T26733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4822'. [ 683.674828][T26733] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4822'. [ 683.707142][T26730] can: request_module (can-proto-3) failed. [ 684.977139][T24653] net_ratelimit: 26 callbacks suppressed [ 684.977160][T24653] bond7: (slave dummy0): failed to get link speed/duplex [ 684.981404][T26779] netlink: 'syz.3.4835': attribute type 4 has an invalid length. [ 685.011152][T26779] netlink: 'syz.3.4835': attribute type 4 has an invalid length. [ 685.030430][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 685.039569][T26784] netlink: 'syz.0.4837': attribute type 26 has an invalid length. [ 685.040292][T26784] netlink: 'syz.0.4837': attribute type 26 has an invalid length. [ 685.140879][T26787] netlink: 'syz.1.4836': attribute type 8 has an invalid length. [ 685.219520][T26787] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 685.219545][T26787] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 685.331382][T26782] TC_ACT_REPEAT abuse ? [ 685.379848][T26787] syzkaller0: entered promiscuous mode [ 685.379874][T26787] syzkaller0: entered allmulticast mode [ 685.950523][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 687.958396][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 687.958442][T24653] bond7: (slave dummy0): failed to get link speed/duplex [ 688.067104][T24653] bond7: (slave dummy0): failed to get link speed/duplex [ 688.067150][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 688.176924][ T62] bond7: (slave dummy0): failed to get link speed/duplex [ 688.177045][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 688.287016][ T62] bond7: (slave bridge2): failed to get link speed/duplex [ 688.358886][T26841] netlink: 'syz.4.4853': attribute type 34 has an invalid length. [ 688.402195][T26841] bond13: option lacp_strict: invalid value (16) [ 688.406439][T26841] bond13 (unregistering): Released all slaves [ 688.492842][T26837] syzkaller0: entered promiscuous mode [ 688.492866][T26837] syzkaller0: entered allmulticast mode [ 688.538056][T26845] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 688.541104][T26845] 0ªX¹¦Dö»: entered allmulticast mode [ 689.107308][T26865] __nla_validate_parse: 172 callbacks suppressed [ 689.107329][T26865] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4855'. [ 689.148791][T26865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4855'. [ 689.189850][T26865] netlink: 'syz.2.4855': attribute type 3 has an invalid length. [ 689.200026][T26865] netlink: 'syz.2.4855': attribute type 5 has an invalid length. [ 689.228640][T26867] netlink: 'syz.3.4857': attribute type 1 has an invalid length. [ 689.228663][T26867] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4857'. [ 689.347876][T26867] netlink: 3576 bytes leftover after parsing attributes in process `syz.3.4857'. [ 689.443982][T26886] netlink: 'syz.2.4861': attribute type 10 has an invalid length. [ 689.465264][T26886] ipvlan0: entered allmulticast mode [ 689.465288][T26886] veth0_vlan: entered allmulticast mode [ 689.477489][T26886] team0: Device ipvlan0 failed to register rx_handler [ 689.500589][T26881] syzkaller1: entered promiscuous mode [ 689.500612][T26881] syzkaller1: entered allmulticast mode [ 689.604944][T26891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4858'. [ 689.605209][T26891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4858'. [ 689.763234][T26903] sch_tbf: burst 7 is lower than device bridge0 mtu (1294) ! [ 689.916069][T26910] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20000 [ 689.987184][ T13] net_ratelimit: 57 callbacks suppressed [ 689.987205][ T13] bond7: (slave dummy0): failed to get link speed/duplex [ 689.987241][ T13] bond7: (slave bridge2): failed to get link speed/duplex [ 690.097933][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 690.097973][T24653] bond7: (slave dummy0): failed to get link speed/duplex [ 690.105895][T26922] FAULT_INJECTION: forcing a failure. [ 690.105895][T26922] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 690.105925][T26922] CPU: 1 UID: 0 PID: 26922 Comm: syz.0.4869 Not tainted syzkaller #0 PREEMPT(full) [ 690.105948][T26922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 690.105960][T26922] Call Trace: [ 690.105969][T26922] [ 690.105977][T26922] dump_stack_lvl+0xe8/0x150 [ 690.106018][T26922] should_fail_ex+0x3eb/0x540 [ 690.106048][T26922] prepare_alloc_pages+0x21e/0x5f0 [ 690.106080][T26922] __alloc_frozen_pages_noprof+0x17c/0x410 [ 690.106106][T26922] ? __lock_acquire+0x747/0x2de0 [ 690.106134][T26922] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 690.106166][T26922] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 690.106191][T26922] ? __get_vm_area_node+0x155/0x2f0 [ 690.106209][T26922] ? __vmalloc_node_range_noprof+0x36e/0x16f0 [ 690.106234][T26922] ? policy_nodemask+0x31b/0x980 [ 690.106261][T26922] ? __sys_bpf+0xd86/0xe00 [ 690.106279][T26922] ? __x64_sys_bpf+0xba/0xd0 [ 690.106313][T26922] ? do_syscall_64+0x166/0x520 [ 690.106336][T26922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.106362][T26922] alloc_pages_mpol+0x21e/0x390 [ 690.106398][T26922] alloc_pages_noprof+0xb1/0x2b0 [ 690.106431][T26922] get_free_pages_noprof+0xf/0x80 [ 690.106458][T26922] __kasan_populate_vmalloc+0x38/0x1c0 [ 690.106484][T26922] ? do_raw_spin_unlock+0xf5/0x200 [ 690.106510][T26922] alloc_vmap_area+0xd10/0x1410 [ 690.106547][T26922] ? __pfx_alloc_vmap_area+0x10/0x10 [ 690.106565][T26922] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 690.106592][T26922] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 690.106617][T26922] ? __get_vm_area_node+0x155/0x2f0 [ 690.106643][T26922] __get_vm_area_node+0x200/0x2f0 [ 690.106672][T26922] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 690.106696][T26922] ? bpf_prog_calc_tag+0x51/0x370 [ 690.106722][T26922] ? __sys_bpf+0xd81/0xe00 [ 690.106738][T26922] ? __x64_sys_bpf+0xba/0xd0 [ 690.106760][T26922] ? do_syscall_64+0x166/0x520 [ 690.106791][T26922] ? kasan_save_track+0x4f/0x80 [ 690.106816][T26922] ? kasan_save_track+0x3e/0x80 [ 690.106840][T26922] ? __kvmalloc_node_noprof+0x50a/0x820 [ 690.106868][T26922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.106900][T26922] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 690.106934][T26922] ? bpf_prog_calc_tag+0x51/0x370 [ 690.106951][T26922] __vmalloc_noprof+0xd2/0x120 [ 690.106972][T26922] ? bpf_prog_calc_tag+0x51/0x370 [ 690.106994][T26922] bpf_prog_calc_tag+0x51/0x370 [ 690.107019][T26922] check_and_resolve_insns+0xc0/0x28e0 [ 690.107043][T26922] ? __asan_memset+0x22/0x50 [ 690.107066][T26922] ? add_subprog+0x40b/0x550 [ 690.107090][T26922] ? bpf_check+0x1934/0x34e0 [ 690.107112][T26922] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 690.107134][T26922] ? check_subprogs+0x413/0x540 [ 690.107166][T26922] bpf_check+0x1c12/0x34e0 [ 690.107199][T26922] ? ktime_get_with_offset+0x93/0x2d0 [ 690.107227][T26922] ? ktime_get_with_offset+0x93/0x2d0 [ 690.107255][T26922] ? __pfx_bpf_check+0x10/0x10 [ 690.107279][T26922] ? bpf_obj_name_cpy+0x194/0x1e0 [ 690.107316][T26922] bpf_prog_load+0x14da/0x1c60 [ 690.107350][T26922] ? __pfx_bpf_prog_load+0x10/0x10 [ 690.107386][T26922] ? __might_fault+0xaf/0x130 [ 690.107413][T26922] __sys_bpf+0xd86/0xe00 [ 690.107442][T26922] ? __pfx___sys_bpf+0x10/0x10 [ 690.107474][T26922] ? __fget_files+0x2a/0x420 [ 690.107517][T26922] ? ksys_write+0x242/0x270 [ 690.107545][T26922] ? __pfx_ksys_write+0x10/0x10 [ 690.107577][T26922] __x64_sys_bpf+0xba/0xd0 [ 690.107610][T26922] do_syscall_64+0x166/0x520 [ 690.107630][T26922] ? trace_irq_disable+0x3b/0x140 [ 690.107656][T26922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.107677][T26922] ? clear_bhb_loop+0x70/0xc0 [ 690.107702][T26922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.107723][T26922] RIP: 0033:0x7f92cf59f559 [ 690.107741][T26922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.107759][T26922] RSP: 002b:00007f92d0437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 690.107781][T26922] RAX: ffffffffffffffda RBX: 00007f92cf825fa0 RCX: 00007f92cf59f559 [ 690.107795][T26922] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 690.107809][T26922] RBP: 00007f92d0437090 R08: 0000000000000000 R09: 0000000000000000 [ 690.107822][T26922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 690.107835][T26922] R13: 00007f92cf826038 R14: 00007f92cf825fa0 R15: 00007ffed8733158 [ 690.107868][T26922] [ 690.208065][ T62] bond7: (slave dummy0): failed to get link speed/duplex [ 690.208107][ T62] bond7: (slave bridge2): failed to get link speed/duplex [ 690.451561][T26922] warn_alloc: 1 callbacks suppressed [ 690.451578][T26922] syz.0.4869: vmalloc error: size 96, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 690.451639][T26922] CPU: 0 UID: 0 PID: 26922 Comm: syz.0.4869 Not tainted syzkaller #0 PREEMPT(full) [ 690.451661][T26922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 690.451672][T26922] Call Trace: [ 690.451680][T26922] [ 690.451689][T26922] dump_stack_lvl+0xe8/0x150 [ 690.451725][T26922] warn_alloc+0x24d/0x270 [ 690.451760][T26922] ? lockdep_hardirqs_on+0x7b/0x110 [ 690.451785][T26922] ? __pfx_warn_alloc+0x10/0x10 [ 690.451808][T26922] ? kfree+0x1c5/0x650 [ 690.451834][T26922] ? __get_vm_area_node+0x219/0x2f0 [ 690.451862][T26922] __vmalloc_node_range_noprof+0x396/0x16f0 [ 690.451891][T26922] ? __sys_bpf+0xd81/0xe00 [ 690.451908][T26922] ? __x64_sys_bpf+0xba/0xd0 [ 690.451933][T26922] ? do_syscall_64+0x166/0x520 [ 690.451959][T26922] ? kasan_save_track+0x4f/0x80 [ 690.451982][T26922] ? kasan_save_track+0x3e/0x80 [ 690.452006][T26922] ? __kvmalloc_node_noprof+0x50a/0x820 [ 690.452034][T26922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.452066][T26922] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 690.452099][T26922] ? bpf_prog_calc_tag+0x51/0x370 [ 690.452117][T26922] __vmalloc_noprof+0xd2/0x120 [ 690.452138][T26922] ? bpf_prog_calc_tag+0x51/0x370 [ 690.452159][T26922] bpf_prog_calc_tag+0x51/0x370 [ 690.452182][T26922] check_and_resolve_insns+0xc0/0x28e0 [ 690.452209][T26922] ? __asan_memset+0x22/0x50 [ 690.452231][T26922] ? add_subprog+0x40b/0x550 [ 690.452254][T26922] ? bpf_check+0x1934/0x34e0 [ 690.452275][T26922] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 690.452295][T26922] ? check_subprogs+0x413/0x540 [ 690.452325][T26922] bpf_check+0x1c12/0x34e0 [ 690.452357][T26922] ? ktime_get_with_offset+0x93/0x2d0 [ 690.452383][T26922] ? ktime_get_with_offset+0x93/0x2d0 [ 690.452410][T26922] ? __pfx_bpf_check+0x10/0x10 [ 690.452435][T26922] ? bpf_obj_name_cpy+0x194/0x1e0 [ 690.452462][T26922] bpf_prog_load+0x14da/0x1c60 [ 690.452494][T26922] ? __pfx_bpf_prog_load+0x10/0x10 [ 690.452530][T26922] ? __might_fault+0xaf/0x130 [ 690.452558][T26922] __sys_bpf+0xd86/0xe00 [ 690.452584][T26922] ? __pfx___sys_bpf+0x10/0x10 [ 690.452620][T26922] ? __fget_files+0x2a/0x420 [ 690.452661][T26922] ? ksys_write+0x242/0x270 [ 690.452688][T26922] ? __pfx_ksys_write+0x10/0x10 [ 690.452718][T26922] __x64_sys_bpf+0xba/0xd0 [ 690.452756][T26922] do_syscall_64+0x166/0x520 [ 690.452777][T26922] ? trace_irq_disable+0x3b/0x140 [ 690.452802][T26922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.452822][T26922] ? clear_bhb_loop+0x70/0xc0 [ 690.452846][T26922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.452866][T26922] RIP: 0033:0x7f92cf59f559 [ 690.452885][T26922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.452902][T26922] RSP: 002b:00007f92d0437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 690.452921][T26922] RAX: ffffffffffffffda RBX: 00007f92cf825fa0 RCX: 00007f92cf59f559 [ 690.452936][T26922] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 690.452949][T26922] RBP: 00007f92d0437090 R08: 0000000000000000 R09: 0000000000000000 [ 690.452961][T26922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 690.452973][T26922] R13: 00007f92cf826038 R14: 00007f92cf825fa0 R15: 00007ffed8733158 [ 690.453005][T26922] [ 690.475469][T26922] Mem-Info: [ 690.475488][T26922] active_anon:5605 inactive_anon:0 isolated_anon:0 [ 690.475488][T26922] active_file:17 inactive_file:43815 isolated_file:0 [ 690.475488][T26922] unevictable:0 dirty:266 writeback:0 [ 690.475488][T26922] slab_reclaimable:12839 slab_unreclaimable:122962 [ 690.475488][T26922] mapped:30662 shmem:530 pagetables:3598 [ 690.475488][T26922] sec_pagetables:0 bounce:0 [ 690.475488][T26922] kernel_misc_reclaimable:0 [ 690.475488][T26922] free:1283587 free_pcp:9378 free_cma:0 [ 690.475546][T26922] Node 0 active_anon:22420kB inactive_anon:0kB active_file:68kB inactive_file:175052kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122648kB dirty:1064kB writeback:0kB shmem:2120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17104kB pagetables:14224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 690.475600][T26922] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 690.475650][T26922] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 690.475707][T26922] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 690.475770][T26922] Node 0 DMA32 free:1194444kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22420kB inactive_anon:0kB active_file:68kB inactive_file:175052kB unevictable:0kB writepending:1064kB zspages:0kB present:3129332kB managed:2523120kB mlocked:0kB bounce:0kB free_pcp:37508kB local_pcp:21044kB free_cma:0kB [ 690.475829][T26922] lowmem_reserve[]: 0 0 1 1 1 [ 690.475860][T26922] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 690.475915][T26922] lowmem_reserve[]: 0 0 0 0 0 [ 690.475946][T26922] Node 1 Normal free:3924544kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 690.476003][T26922] lowmem_reserve[]: 0 0 0 0 0 [ 690.476034][T26922] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 690.476141][T26922] Node 0 DMA32: 2217*4kB (UME) 2019*8kB (UME) 1241*16kB (UME) 636*32kB (UME) 556*64kB (UME) 512*128kB (UME) 410*256kB (UM) 221*512kB (UM) 131*1024kB (UM) 6*2048kB (UM) 162*4096kB (UME) = 1194444kB [ 690.476307][T26922] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 690.476400][T26922] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 8*16kB (UM) 5*32kB (UM) 8*64kB (UM) 6*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 956*4096kB (UM) = 3924544kB [ 690.476546][T26922] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 690.476562][T26922] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 690.476578][T26922] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 690.476593][T26922] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 690.476609][T26922] 44358 total pagecache pages [ 690.476617][T26922] 0 pages in swap cache [ 690.476624][T26922] Free swap = 124996kB [ 690.476631][T26922] Total swap = 124996kB [ 690.476640][T26922] 2097051 pages RAM [ 690.476647][T26922] 0 pages HighMem/MovableOnly [ 690.476654][T26922] 434240 pages reserved [ 690.476661][T26922] 0 pages cma reserved [ 690.571903][T26926] netlink: 'syz.1.4870': attribute type 11 has an invalid length. [ 691.464586][T26938] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 691.517998][T24653] bond7: (slave bridge2): failed to get link speed/duplex [ 691.518047][T24653] bond7: (slave dummy0): failed to get link speed/duplex [ 691.635661][T26962] tipc: Enabling of bearer rejected, already enabled [ 691.646967][ T62] bond7: (slave bridge2): failed to get link speed/duplex [ 691.647019][ T62] bond7: (slave dummy0): failed to get link speed/duplex [ 691.812160][T26977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4877'. [ 691.902339][T26967] geneve1: entered promiscuous mode [ 691.902363][T26967] geneve1: entered allmulticast mode [ 692.018510][T26986] FAULT_INJECTION: forcing a failure. [ 692.018510][T26986] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 692.018590][T26986] CPU: 0 UID: 0 PID: 26986 Comm: syz.1.4883 Not tainted syzkaller #0 PREEMPT(full) [ 692.018612][T26986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 692.018624][T26986] Call Trace: [ 692.018633][T26986] [ 692.018642][T26986] dump_stack_lvl+0xe8/0x150 [ 692.018678][T26986] should_fail_ex+0x3eb/0x540 [ 692.018709][T26986] prepare_alloc_pages+0x21e/0x5f0 [ 692.018745][T26986] __alloc_frozen_pages_noprof+0x17c/0x410 [ 692.018777][T26986] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 692.018802][T26986] ? __alloc_frozen_pages_noprof+0x24c/0x410 [ 692.018833][T26986] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 692.018864][T26986] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 692.018888][T26986] ? __get_vm_area_node+0x155/0x2f0 [ 692.018911][T26986] __alloc_pages_noprof+0x10/0x100 [ 692.018938][T26986] alloc_pages_bulk_noprof+0x67a/0x8a0 [ 692.018975][T26986] ? alloc_pages_noprof+0x140/0x2b0 [ 692.019010][T26986] __kasan_populate_vmalloc+0xb7/0x1c0 [ 692.019042][T26986] alloc_vmap_area+0xd10/0x1410 [ 692.019080][T26986] ? __pfx_alloc_vmap_area+0x10/0x10 [ 692.019104][T26986] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 692.019131][T26986] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 692.019155][T26986] ? __get_vm_area_node+0x155/0x2f0 [ 692.019181][T26986] __get_vm_area_node+0x200/0x2f0 [ 692.019210][T26986] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 692.019234][T26986] ? bpf_prog_calc_tag+0x51/0x370 [ 692.019262][T26986] ? __sys_bpf+0xd81/0xe00 [ 692.019278][T26986] ? __x64_sys_bpf+0xba/0xd0 [ 692.019305][T26986] ? do_syscall_64+0x166/0x520 [ 692.019332][T26986] ? kasan_save_track+0x4f/0x80 [ 692.019356][T26986] ? kasan_save_track+0x3e/0x80 [ 692.019381][T26986] ? __kvmalloc_node_noprof+0x50a/0x820 [ 692.019410][T26986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.019442][T26986] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 692.019474][T26986] ? bpf_prog_calc_tag+0x51/0x370 [ 692.019493][T26986] __vmalloc_noprof+0xd2/0x120 [ 692.019515][T26986] ? bpf_prog_calc_tag+0x51/0x370 [ 692.019538][T26986] bpf_prog_calc_tag+0x51/0x370 [ 692.019563][T26986] check_and_resolve_insns+0xc0/0x28e0 [ 692.019587][T26986] ? __asan_memset+0x22/0x50 [ 692.019609][T26986] ? add_subprog+0x40b/0x550 [ 692.019633][T26986] ? bpf_check+0x1934/0x34e0 [ 692.019655][T26986] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 692.019676][T26986] ? check_subprogs+0x413/0x540 [ 692.019708][T26986] bpf_check+0x1c12/0x34e0 [ 692.019742][T26986] ? ktime_get_with_offset+0x93/0x2d0 [ 692.019770][T26986] ? ktime_get_with_offset+0x93/0x2d0 [ 692.019798][T26986] ? __pfx_bpf_check+0x10/0x10 [ 692.019823][T26986] ? bpf_obj_name_cpy+0x194/0x1e0 [ 692.019852][T26986] bpf_prog_load+0x14da/0x1c60 [ 692.019886][T26986] ? __pfx_bpf_prog_load+0x10/0x10 [ 692.019924][T26986] ? __might_fault+0xaf/0x130 [ 692.019952][T26986] __sys_bpf+0xd86/0xe00 [ 692.019981][T26986] ? __pfx___sys_bpf+0x10/0x10 [ 692.020013][T26986] ? __fget_files+0x2a/0x420 [ 692.020057][T26986] ? ksys_write+0x242/0x270 [ 692.020086][T26986] ? __pfx_ksys_write+0x10/0x10 [ 692.020125][T26986] __x64_sys_bpf+0xba/0xd0 [ 692.020157][T26986] do_syscall_64+0x166/0x520 [ 692.020179][T26986] ? trace_irq_disable+0x3b/0x140 [ 692.020206][T26986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.020227][T26986] ? clear_bhb_loop+0x70/0xc0 [ 692.020251][T26986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.020271][T26986] RIP: 0033:0x7f5fe139f559 [ 692.020288][T26986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.020301][T26986] RSP: 002b:00007f5fe224e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 692.020317][T26986] RAX: ffffffffffffffda RBX: 00007f5fe1625fa0 RCX: 00007f5fe139f559 [ 692.020328][T26986] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 692.020337][T26986] RBP: 00007f5fe224e090 R08: 0000000000000000 R09: 0000000000000000 [ 692.020346][T26986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 692.020355][T26986] R13: 00007f5fe1626038 R14: 00007f5fe1625fa0 R15: 00007fff5ee6c838 [ 692.020379][T26986] [ 692.797406][T27019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4888'. [ 692.797752][T27019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4888'. [ 692.818124][T27019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4888'. [ 692.953592][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 693.071155][T27028] IPVS: set_ctl: invalid protocol: 135 172.30.1.3:20000 [ 693.072173][T27028] netlink: 'syz.2.4891': attribute type 25 has an invalid length. [ 693.239809][T27028] netlink: 'syz.2.4891': attribute type 25 has an invalid length. [ 693.432525][T27041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.605629][T27052] syzkaller0: entered promiscuous mode [ 694.119648][T27079] ip6tnl1: entered allmulticast mode [ 694.181097][T27082] __nla_validate_parse: 68 callbacks suppressed [ 694.181121][T27082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4908'. [ 694.184165][T27082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4908'. [ 694.229842][T27086] IPv6: NLM_F_REPLACE set, but no existing node found! [ 694.287455][T27082] vlan2: entered allmulticast mode [ 694.287477][T27082] bridge4: entered allmulticast mode [ 694.686357][T27117] xt_hashlimit: size too large, truncated to 1048576 [ 694.745495][T27121] xt_hashlimit: size too large, truncated to 1048576 [ 694.776571][T27121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4917'. [ 694.877565][T27125] vlan0: left allmulticast mode [ 694.877590][T27125] bridge_slave_0: left allmulticast mode [ 694.878779][T27125] bridge0: port 3(vlan0) entered disabled state [ 694.890988][T27124] netlink: 'syz.2.4919': attribute type 1 has an invalid length. [ 694.993790][T27126] xt_hashlimit: size too large, truncated to 1048576 [ 694.994048][T27126] xt_hashlimit: max too large, truncated to 1048576 [ 695.068429][T27124] 8021q: adding VLAN 0 to HW filter on device bond6 [ 695.083727][ T3321] net_ratelimit: 52 callbacks suppressed [ 695.083746][ T3321] bond7: (slave dummy0): failed to get link speed/duplex [ 695.159405][T27124] bond6: (slave ip6erspan0): making interface the new active one [ 695.161228][T27124] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link [ 695.204193][T27135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4921'. [ 695.213023][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 695.214227][T24650] bond7: (slave dummy0): failed to get link speed/duplex [ 695.281467][T27135] 8021q: adding VLAN 0 to HW filter on device bond11 [ 695.318266][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 695.318328][ T12] bond7: (slave dummy0): failed to get link speed/duplex [ 695.365301][T27135] macvtap1: entered allmulticast mode [ 695.381371][T27135] bond11: (slave sit3): refused to change device type [ 695.406976][T27149] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 695.409806][T27147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4924'. [ 695.413387][T27149] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 695.437617][ T62] bond7: (slave bridge2): failed to get link speed/duplex [ 695.437951][ T12] bond7: (slave dummy0): failed to get link speed/duplex [ 695.538023][ T3321] bond7: (slave bridge2): failed to get link speed/duplex [ 695.538064][ T3321] bond7: (slave dummy0): failed to get link speed/duplex [ 695.674271][ T5637] Bluetooth: hci1: unexpected event 0x0e length: 257 > 255 [ 695.674308][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.674404][ T5637] Bluetooth: hci1: unexpected event 0x0e length: 257 > 255 [ 695.674426][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.674514][ T5637] Bluetooth: hci1: unexpected event 0x0e length: 257 > 255 [ 695.674535][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.674622][ T5637] Bluetooth: hci1: unexpected event 0x0e length: 257 > 255 [ 695.674643][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.674751][ T5637] Bluetooth: hci1: unexpected event 0x0e length: 257 > 255 [ 695.674773][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.674855][ T5637] Bluetooth: hci1: unexpected event 0x0e length: 257 > 255 [ 695.674876][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.674963][ T5637] Bluetooth: hci1: unexpected event 0x0e length: 257 > 255 [ 695.674984][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.675072][ T5637] Bluetooth: hci1: unexpected event 0x0e length: 257 > 255 [ 695.675092][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.675181][ T5637] Bluetooth: hci1: unexpected event 0x0e length: 257 > 255 [ 695.675202][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.675288][ T5637] Bluetooth: hci1: unexpected event 0x0e length: 257 > 255 [ 695.675308][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.675398][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.675481][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.675596][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.675691][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.675783][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.675865][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.675952][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.676045][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.676138][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.676231][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.676322][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.676412][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.676499][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.676592][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.676684][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.688333][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.688624][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.688720][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.688821][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.688909][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.688999][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.689084][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.689175][ T5637] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 695.998709][T27170] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4931'. [ 696.090004][T27178] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 696.129807][T27183] syzkaller0: entered promiscuous mode [ 696.129831][T27183] syzkaller0: entered allmulticast mode [ 696.224779][T27184] bridge_slave_0: left allmulticast mode [ 696.226145][T27184] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.255693][T27184] bridge_slave_1: left allmulticast mode [ 696.255730][T27184] bridge_slave_1: left promiscuous mode [ 696.255948][T27184] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.302888][T27184] bond0: (slave bond_slave_0): Releasing backup interface [ 696.334381][T27184] bond0: (slave bond_slave_1): Releasing backup interface [ 696.366909][T27184] team0: Port device team_slave_0 removed [ 696.385793][T27184] team0: Port device team_slave_1 removed [ 696.394987][T27184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.395012][T27184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.417039][T27184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.417065][T27184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.701484][T27198] netlink: 'syz.3.4937': attribute type 5 has an invalid length. [ 696.952166][T27208] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4941'. [ 697.082553][T27219] nbd: must specify a size in bytes for the device [ 697.387051][T27237] ip6t_frag: unknown flags 4 [ 697.488643][T27241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4948'. [ 697.489248][T27241] netlink: 'syz.2.4948': attribute type 2 has an invalid length. [ 698.585414][T27296] netlink: 'syz.2.4964': attribute type 5 has an invalid length. [ 698.585439][T27296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4964'. [ 698.734565][T27301] netlink: 'syz.1.4967': attribute type 29 has an invalid length. [ 698.739181][T27299] netlink: 'syz.2.4965': attribute type 1 has an invalid length. [ 699.805870][T27333] netlink: 'syz.0.4972': attribute type 15 has an invalid length. [ 699.805894][T27333] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4972'. [ 699.860027][T27334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4972'. [ 700.040132][T27341] xt_hashlimit: max too large, truncated to 1048576 [ 700.040485][T27341] xt_hashlimit: overflow, try lower: 137438953472/8 [ 702.175122][T27310] veth13: entered allmulticast mode [ 702.183383][T27310] bond7: (slave veth13): Enslaving as an active interface with a down link [ 702.184219][T27314] net_ratelimit: 84 callbacks suppressed [ 702.184235][T27314] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 702.224391][T27307] bond4: (slave veth0_to_bond): Releasing active interface [ 702.235196][T27307] bond7: (slave veth0_to_bond): making interface the new active one [ 702.236015][T27307] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 702.238593][T27315] xfrm0: entered promiscuous mode [ 702.238760][T27315] xfrm0: entered allmulticast mode [ 702.239832][T27315] team0: Port device xfrm0 added [ 702.246425][T27318] macvlan5: entered promiscuous mode [ 702.246445][T27318] macvlan5: entered allmulticast mode [ 702.248443][T27318] bond7: entered promiscuous mode [ 702.248462][T27318] veth0_to_bond: entered promiscuous mode [ 702.251014][T27318] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 702.251879][T27318] bond7: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 702.251978][T27318] bond7: left promiscuous mode [ 702.254592][T27318] veth0_to_bond: left promiscuous mode [ 702.367033][T24650] bond7: (slave dummy0): failed to get link speed/duplex [ 702.367935][T24650] bond7: (slave bridge2): failed to get link speed/duplex [ 702.441788][T27351] sctp: [Deprecated]: syz.3.4976 (pid 27351) Use of int in max_burst socket option. [ 702.441788][T27351] Use struct sctp_assoc_value instead [ 702.536993][ T8504] bond7: (slave bridge2): failed to get link speed/duplex [ 702.537158][ T62] bond7: (slave dummy0): failed to get link speed/duplex [ 702.581366][T27358] x_tables: duplicate underflow at hook 1 [ 702.647850][ T3321] bond7: (slave dummy0): failed to get link speed/duplex [ 702.647893][ T3321] bond7: (slave bridge2): failed to get link speed/duplex [ 702.756939][ T13] bond7: (slave bridge2): failed to get link speed/duplex [ 702.756984][ T13] bond7: (slave dummy0): failed to get link speed/duplex [ 702.846652][T27370] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.4983'. [ 702.925766][T27370] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4983'. [ 702.931350][ T3321] bond7: (slave bridge2): failed to get link speed/duplex [ 703.152372][T27386] netlink: 'syz.3.4987': attribute type 1 has an invalid length. [ 703.183717][T27390] [ 703.186181][T27390] ====================================================== [ 703.193206][T27390] WARNING: possible circular locking dependency detected [ 703.200259][T27390] syzkaller #0 Not tainted [ 703.204702][T27390] ------------------------------------------------------ [ 703.211727][T27390] syz.0.4988/27390 is trying to acquire lock: [ 703.217803][T27390] ffff88801cec4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x6d/0x240 [ 703.228388][T27390] [ 703.228388][T27390] but task is already holding lock: [ 703.235760][T27390] ffff88801cec4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0xb4/0x9e0 [ 703.245362][T27390] [ 703.245362][T27390] which lock already depends on the new lock. [ 703.245362][T27390] [ 703.255828][T27390] [ 703.255828][T27390] the existing dependency chain (in reverse order) is: [ 703.264873][T27390] [ 703.264873][T27390] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 703.272890][T27390] down_write+0x91/0x200 [ 703.277671][T27390] kernfs_add_one+0x41/0x510 [ 703.282784][T27390] kernfs_create_dir_ns+0x18c/0x220 [ 703.288509][T27390] internal_create_group+0x440/0x1180 [ 703.294425][T27390] cpuhp_invoke_callback+0x434/0x810 [ 703.300252][T27390] cpuhp_issue_call+0x3f0/0x750 [ 703.305621][T27390] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 703.312205][T27390] __cpuhp_setup_state+0x3f/0x60 [ 703.317802][T27390] do_one_initcall+0x250/0x870 [ 703.323080][T27390] do_initcall_level+0x10a/0x1a0 [ 703.328530][T27390] do_initcalls+0x59/0xa0 [ 703.333372][T27390] kernel_init_freeable+0x29d/0x3e0 [ 703.339086][T27390] kernel_init+0x22/0x1d0 [ 703.343958][T27390] ret_from_fork+0x514/0xb70 [ 703.349080][T27390] ret_from_fork_asm+0x1a/0x30 [ 703.354373][T27390] [ 703.354373][T27390] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 703.362191][T27390] [ 703.362191][T27390] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 703.369976][T27390] cpus_read_lock+0x3d/0x160 [ 703.375187][T27390] static_key_slow_inc+0x12/0x30 [ 703.380688][T27390] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 703.386932][T27390] nbd_genl_foreach_sock+0x265/0x450 [ 703.392750][T27390] nbd_genl_reconfigure+0xbbb/0x1040 [ 703.398567][T27390] genl_family_rcv_msg_doit+0x233/0x340 [ 703.404634][T27390] genl_rcv_msg+0x614/0x7a0 [ 703.409654][T27390] netlink_rcv_skb+0x226/0x4a0 [ 703.415030][T27390] genl_rcv+0x28/0x40 [ 703.419536][T27390] netlink_unicast+0x8ef/0xa80 [ 703.424839][T27390] netlink_sendmsg+0x7f0/0xb20 [ 703.430143][T27390] sock_sendmsg_nosec+0x14e/0x190 [ 703.435785][T27390] ____sys_sendmsg+0x54e/0x850 [ 703.441075][T27390] ___sys_sendmsg+0x2a5/0x360 [ 703.446278][T27390] __x64_sys_sendmsg+0x1b1/0x290 [ 703.451748][T27390] do_syscall_64+0x166/0x520 [ 703.456865][T27390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.463304][T27390] [ 703.463304][T27390] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 703.471034][T27390] __mutex_lock+0x197/0x15a0 [ 703.476143][T27390] nbd_queue_rq+0x373/0xff0 [ 703.481166][T27390] blk_mq_dispatch_rq_list+0x499/0x1990 [ 703.487261][T27390] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 703.494118][T27390] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 703.500621][T27390] blk_mq_run_work_fn+0x167/0x2f0 [ 703.506162][T27390] process_scheduled_works+0xc3d/0x1630 [ 703.512232][T27390] worker_thread+0xa47/0xfb0 [ 703.517341][T27390] kthread+0x38b/0x480 [ 703.521922][T27390] ret_from_fork+0x514/0xb70 [ 703.527025][T27390] ret_from_fork_asm+0x1a/0x30 [ 703.532302][T27390] [ 703.532302][T27390] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 703.539506][T27390] __mutex_lock+0x197/0x15a0 [ 703.544627][T27390] nbd_queue_rq+0xc1/0xff0 [ 703.549554][T27390] blk_mq_dispatch_rq_list+0x499/0x1990 [ 703.555616][T27390] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 703.562452][T27390] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 703.568941][T27390] blk_mq_run_work_fn+0x167/0x2f0 [ 703.574477][T27390] process_scheduled_works+0xc3d/0x1630 [ 703.580539][T27390] worker_thread+0xa47/0xfb0 [ 703.585645][T27390] kthread+0x38b/0x480 [ 703.590225][T27390] ret_from_fork+0x514/0xb70 [ 703.595327][T27390] ret_from_fork_asm+0x1a/0x30 [ 703.600600][T27390] [ 703.600600][T27390] -> #4 (set->srcu){.+.+}-{0:0}: [ 703.607713][T27390] __synchronize_srcu+0xca/0x2f0 [ 703.613168][T27390] elevator_switch+0x1e8/0x7b0 [ 703.618454][T27390] elevator_change+0x2fa/0x480 [ 703.623732][T27390] elevator_set_default+0x375/0x440 [ 703.629447][T27390] blk_register_queue+0x404/0x4f0 [ 703.634978][T27390] __add_disk+0x6b8/0xdb0 [ 703.639819][T27390] add_disk_fwnode+0x100/0x3a0 [ 703.645096][T27390] nbd_dev_add+0x733/0xb60 [ 703.650105][T27390] nbd_init+0x168/0x1f0 [ 703.654771][T27390] do_one_initcall+0x250/0x870 [ 703.660042][T27390] do_initcall_level+0x10a/0x1a0 [ 703.665493][T27390] do_initcalls+0x59/0xa0 [ 703.670330][T27390] kernel_init_freeable+0x29d/0x3e0 [ 703.676036][T27390] kernel_init+0x22/0x1d0 [ 703.680879][T27390] ret_from_fork+0x514/0xb70 [ 703.685980][T27390] ret_from_fork_asm+0x1a/0x30 [ 703.691253][T27390] [ 703.691253][T27390] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 703.699058][T27390] __mutex_lock+0x197/0x15a0 [ 703.704158][T27390] elevator_change+0x1af/0x480 [ 703.709447][T27390] elevator_set_none+0xb5/0x140 [ 703.714811][T27390] blk_mq_update_nr_hw_queues+0x5ef/0x19e0 [ 703.721125][T27390] nbd_start_device+0x189/0xb30 [ 703.726487][T27390] nbd_genl_connect+0x167d/0x1cd0 [ 703.732028][T27390] genl_family_rcv_msg_doit+0x233/0x340 [ 703.738088][T27390] genl_rcv_msg+0x614/0x7a0 [ 703.743100][T27390] netlink_rcv_skb+0x226/0x4a0 [ 703.748375][T27390] genl_rcv+0x28/0x40 [ 703.752866][T27390] netlink_unicast+0x8ef/0xa80 [ 703.758178][T27390] netlink_sendmsg+0x7f0/0xb20 [ 703.763459][T27390] sock_sendmsg_nosec+0x14e/0x190 [ 703.768996][T27390] ____sys_sendmsg+0x54e/0x850 [ 703.774269][T27390] ___sys_sendmsg+0x2a5/0x360 [ 703.779465][T27390] __x64_sys_sendmsg+0x1b1/0x290 [ 703.784917][T27390] do_syscall_64+0x166/0x520 [ 703.790022][T27390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.796427][T27390] [ 703.796427][T27390] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 703.805033][T27390] blk_alloc_queue+0x544/0x690 [ 703.810337][T27390] __blk_mq_alloc_disk+0x194/0x390 [ 703.816066][T27390] nbd_dev_add+0x494/0xb60 [ 703.821004][T27390] nbd_init+0x168/0x1f0 [ 703.825683][T27390] do_one_initcall+0x250/0x870 [ 703.830961][T27390] do_initcall_level+0x10a/0x1a0 [ 703.836415][T27390] do_initcalls+0x59/0xa0 [ 703.841267][T27390] kernel_init_freeable+0x29d/0x3e0 [ 703.846985][T27390] kernel_init+0x22/0x1d0 [ 703.851838][T27390] ret_from_fork+0x514/0xb70 [ 703.856946][T27390] ret_from_fork_asm+0x1a/0x30 [ 703.862222][T27390] [ 703.862222][T27390] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 703.869431][T27390] fs_reclaim_acquire+0x71/0x100 [ 703.874886][T27390] kmem_cache_alloc_noprof+0x5f/0x600 [ 703.880788][T27390] __kernfs_iattrs+0xdd/0x380 [ 703.885986][T27390] kernfs_iop_setattr+0xe6/0x3f0 [ 703.891449][T27390] notify_change+0xbba/0xea0 [ 703.896575][T27390] do_truncate+0x1c2/0x250 [ 703.901510][T27390] path_openat+0x18a6/0x20f0 [ 703.906617][T27390] do_file_open+0x23e/0x4a0 [ 703.911635][T27390] do_sys_openat2+0x115/0x200 [ 703.916826][T27390] __x64_sys_openat+0x138/0x170 [ 703.922198][T27390] do_syscall_64+0x166/0x520 [ 703.927301][T27390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.933857][T27390] [ 703.933857][T27390] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 703.942367][T27390] __lock_acquire+0x164c/0x2de0 [ 703.947739][T27390] lock_acquire+0x115/0x350 [ 703.952791][T27390] down_write+0x91/0x200 [ 703.957549][T27390] kernfs_unlink_sibling+0x6d/0x240 [ 703.963260][T27390] kernfs_rename_ns+0x575/0x9e0 [ 703.968623][T27390] sysfs_rename_link_ns+0x16e/0x1b0 [ 703.974340][T27390] device_rename+0x110/0x210 [ 703.979445][T27390] cfg80211_dev_rename+0x16f/0x250 [ 703.985071][T27390] nl80211_set_wiphy+0x63f/0x3430 [ 703.990610][T27390] genl_family_rcv_msg_doit+0x233/0x340 [ 703.996675][T27390] genl_rcv_msg+0x614/0x7a0 [ 704.001689][T27390] netlink_rcv_skb+0x226/0x4a0 [ 704.006973][T27390] genl_rcv+0x28/0x40 [ 704.011463][T27390] netlink_unicast+0x8ef/0xa80 [ 704.016745][T27390] netlink_sendmsg+0x7f0/0xb20 [ 704.022033][T27390] sock_sendmsg_nosec+0x14e/0x190 [ 704.027573][T27390] ____sys_sendmsg+0x54e/0x850 [ 704.033061][T27390] ___sys_sendmsg+0x2a5/0x360 [ 704.038251][T27390] __x64_sys_sendmsg+0x1b1/0x290 [ 704.043704][T27390] do_syscall_64+0x166/0x520 [ 704.048808][T27390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.055211][T27390] [ 704.055211][T27390] other info that might help us debug this: [ 704.055211][T27390] [ 704.065421][T27390] Chain exists of: [ 704.065421][T27390] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 704.065421][T27390] [ 704.079921][T27390] Possible unsafe locking scenario: [ 704.079921][T27390] [ 704.087356][T27390] CPU0 CPU1 [ 704.092710][T27390] ---- ---- [ 704.098060][T27390] lock(&root->kernfs_rwsem); [ 704.102812][T27390] lock(cpuhp_state_mutex); [ 704.109912][T27390] lock(&root->kernfs_rwsem); [ 704.117182][T27390] lock(&root->kernfs_iattr_rwsem); [ 704.122458][T27390] [ 704.122458][T27390] *** DEADLOCK *** [ 704.122458][T27390] [ 704.130586][T27390] locks held by syz.0.4988/27390: 4, last CPU#1: [ 704.136907][T27390] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 704.145184][T27390] #1: ffffffff916d4540 (cfg80211_mutex){+.+.}-{4:4}, at: nl80211_set_wiphy+0xaa/0x3430 [ 704.154931][T27390] #2: ffff888036c10800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_set_wiphy+0x4e8/0x3430 [ 704.164930][T27390] #3: ffff88801cec4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0xb4/0x9e0 [ 704.174931][T27390] [ 704.174931][T27390] stack backtrace: [ 704.180808][T27390] CPU: 1 UID: 0 PID: 27390 Comm: syz.0.4988 Not tainted syzkaller #0 PREEMPT(full) [ 704.190179][T27390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 704.200237][T27390] Call Trace: [ 704.203517][T27390] [ 704.206612][T27390] dump_stack_lvl+0xe8/0x150 [ 704.211207][T27390] print_circular_bug+0x2e2/0x300 [ 704.216236][T27390] check_noncircular+0x12f/0x150 [ 704.221176][T27390] __lock_acquire+0x164c/0x2de0 [ 704.226028][T27390] ? __lock_acquire+0x747/0x2de0 [ 704.230967][T27390] ? __lock_acquire+0x747/0x2de0 [ 704.235918][T27390] lock_acquire+0x115/0x350 [ 704.240417][T27390] ? kernfs_unlink_sibling+0x6d/0x240 [ 704.245799][T27390] down_write+0x91/0x200 [ 704.250037][T27390] ? kernfs_unlink_sibling+0x6d/0x240 [ 704.255405][T27390] ? __pfx_down_write+0x10/0x10 [ 704.260256][T27390] ? kernfs_root+0x1c/0x230 [ 704.264757][T27390] ? kernfs_root+0x1c/0x230 [ 704.269253][T27390] ? kernfs_root+0x1c/0x230 [ 704.273753][T27390] ? kernfs_root+0x1ea/0x230 [ 704.278339][T27390] kernfs_unlink_sibling+0x6d/0x240 [ 704.283527][T27390] kernfs_rename_ns+0x575/0x9e0 [ 704.288373][T27390] sysfs_rename_link_ns+0x16e/0x1b0 [ 704.293573][T27390] device_rename+0x110/0x210 [ 704.298155][T27390] cfg80211_dev_rename+0x16f/0x250 [ 704.303264][T27390] nl80211_set_wiphy+0x63f/0x3430 [ 704.308288][T27390] ? lock_acquire+0x115/0x350 [ 704.312958][T27390] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 704.318409][T27390] ? nl80211_pre_doit+0x543/0xfa0 [ 704.323424][T27390] ? nl80211_pre_doit+0x86e/0xfa0 [ 704.328435][T27390] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 704.334757][T27390] genl_family_rcv_msg_doit+0x233/0x340 [ 704.340307][T27390] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 704.346387][T27390] ? bpf_lsm_capable+0x9/0x20 [ 704.351070][T27390] ? security_capable+0x7e/0x2c0 [ 704.356006][T27390] genl_rcv_msg+0x614/0x7a0 [ 704.360507][T27390] ? __pfx_genl_rcv_msg+0x10/0x10 [ 704.365519][T27390] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 704.370880][T27390] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 704.376333][T27390] ? __pfx_nl80211_post_doit+0x10/0x10 [ 704.381785][T27390] netlink_rcv_skb+0x226/0x4a0 [ 704.386542][T27390] ? __pfx_genl_rcv_msg+0x10/0x10 [ 704.391565][T27390] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 704.396851][T27390] ? down_read+0x2b9/0x320 [ 704.401276][T27390] genl_rcv+0x28/0x40 [ 704.405249][T27390] netlink_unicast+0x8ef/0xa80 [ 704.410017][T27390] netlink_sendmsg+0x7f0/0xb20 [ 704.414783][T27390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 704.420156][T27390] ? aa_sock_msg_perm+0x144/0x210 [ 704.425169][T27390] ? apparmor_socket_sendmsg+0x98/0x360 [ 704.430712][T27390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 704.435995][T27390] sock_sendmsg_nosec+0x14e/0x190 [ 704.441083][T27390] ____sys_sendmsg+0x54e/0x850 [ 704.445842][T27390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 704.451127][T27390] ? import_iovec+0x73/0xa0 [ 704.455628][T27390] ___sys_sendmsg+0x2a5/0x360 [ 704.460296][T27390] ? __lock_acquire+0x747/0x2de0 [ 704.465227][T27390] ? __pfx____sys_sendmsg+0x10/0x10 [ 704.470417][T27390] ? futex_wait+0x2a2/0x390 [ 704.474929][T27390] ? __fget_files+0x3a2/0x420 [ 704.479599][T27390] ? __fget_files+0x2a/0x420 [ 704.484183][T27390] __x64_sys_sendmsg+0x1b1/0x290 [ 704.489118][T27390] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 704.494577][T27390] do_syscall_64+0x166/0x520 [ 704.499162][T27390] ? trace_irq_disable+0x3b/0x140 [ 704.504181][T27390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.510234][T27390] ? clear_bhb_loop+0x70/0xc0 [ 704.514903][T27390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.520783][T27390] RIP: 0033:0x7f92cf59f559 [ 704.525192][T27390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.544964][T27390] RSP: 002b:00007f92d0437028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 704.553376][T27390] RAX: ffffffffffffffda RBX: 00007f92cf825fa0 RCX: 00007f92cf59f559 [ 704.561341][T27390] RDX: 000000000600c800 RSI: 0000200000000000 RDI: 0000000000000004 [ 704.569306][T27390] RBP: 00007f92cf636b20 R08: 0000000000000000 R09: 0000000000000000 [ 704.577269][T27390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.585240][T27390] R13: 00007f92cf826038 R14: 00007f92cf825fa0 R15: 00007ffed8733158 [ 704.593212][T27390] [ 704.758798][T16325] wlan1 speed is unknown, defaulting to 1000 [ 704.758822][T16325] syz1: Port: 1 Link DOWN [ 707.216999][ T3353] net_ratelimit: 50 callbacks suppressed [ 707.217014][ T3353] bond7: (slave bridge2): failed to get link speed/duplex [ 707.287414][ T3353] bond7: (slave dummy0): failed to get link speed/duplex [ 707.326904][ T13] bond7: (slave bridge2): failed to get link speed/duplex [ 707.397056][ T3353] bond7: (slave dummy0): failed to get link speed/duplex [ 707.437331][ T3353] bond7: (slave bridge2): failed to get link speed/duplex [ 707.507457][ T3321] bond7: (slave dummy0): failed to get link speed/duplex [ 707.546919][ T3353] bond7: (slave bridge2): failed to get link speed/duplex [ 707.617352][ T13] bond7: (slave dummy0): failed to get link speed/duplex [ 707.656862][ T62] bond7: (slave bridge2): failed to get link speed/duplex [ 707.727420][ T3353] bond7: (slave dummy0): failed to get link speed/duplex [ 712.257373][ T3353] net_ratelimit: 80 callbacks suppressed [ 712.257396][ T3353] bond7: (slave bridge2): failed to get link speed/duplex [ 712.279801][T24650] bond7: (slave dummy0): failed to get link speed/duplex [ 712.366894][ T13] bond7: (slave bridge2): failed to get link speed/duplex [ 712.386873][ T13] bond7: (slave dummy0): failed to get link speed/duplex [ 712.476871][ T13] bond7: (slave bridge2): failed to get link speed/duplex [ 712.496984][ T3353] bond7: (slave dummy0): failed to get link speed/duplex [ 712.587193][ T3353] bond7: (slave bridge2): failed to get link speed/duplex [ 712.607227][T24650] bond7: (slave dummy0): failed to get link speed/duplex [ 712.696943][ T3353] bond7: (slave bridge2): failed to get link speed/duplex [ 712.717300][ T3353] bond7: (slave dummy0): failed to get link speed/duplex