last executing test programs: 3.762538197s ago: executing program 3 (id=4881): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000280)}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @local}) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)="2e9b3d0007e03dd65193dfb6c575963f86ddf0fd26d4eef23248000000f858dbb8a19052343f", 0x26}, {&(0x7f00000003c0)="051a00000e80006558f2878f0200200000000020", 0x14}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb0000008500000094000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x0, 0x0, 0xfffffffffffffe58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x5) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x20, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc8d1}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r2) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="230000000c00000002000000ffff0000"], 0x48) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000940)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14, &(0x7f0000000980)={&(0x7f00000009c0)="0c952bdd19b8d8f3723a0ae3f72dc3a71e3c866a4c5639f7d9a1ab045031fcd23e1e2d5e2a893fff1f852d41aac9b67ccb5b3ffaa0a242c967d0207f4fff06fb663fad53290e8feead5ec5d985ab85e04097d8904c736a2075f8200f8e5355ece76c3e148c57f53f735feaff3a637aa075fb3b6215d5531beeeeeaeb1e769a53264872799c853d6d8e527a2715d9dae7a985fdc56e967ccf5479c54e99", 0x9d}, 0x1, 0x0, 0x0, 0x404c014}, 0x15) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x4, 0xc, &(0x7f0000000b80)=ANY=[@ANYRES32=r5], &(0x7f0000000bc0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000c00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000000c40)=ANY=[@ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00']) 3.481572194s ago: executing program 3 (id=4884): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x9, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_EVENT(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040)={0x2, 0x800b}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r1, 0x166b}, &(0x7f0000000100)=0x8) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x80841, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x9, &(0x7f0000000180)=[{0x9ba3, 0x40, 0x0, 0xffffffff}, {0xa4, 0x0, 0xc, 0xffff}, {0x1, 0x2, 0x6, 0x7}, {0x9, 0x7, 0xfb, 0x1}, {0x2, 0x9, 0x3, 0x3}, {0x6, 0xfa}, {0x5c5, 0x91, 0xe9, 0x4}, {0xff, 0x7, 0xf, 0x9}, {0xff55, 0x6, 0x4, 0x1}]}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x1f, 0x4) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000001a00)=0x0, &(0x7f0000001a40)=0x4) sendmmsg$inet(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000280)="edd94441a122090c7c2b7e91ba5f52e753f139d4e720b50361e92d7d690b005a621c3283d45c1724edbbac2cc89a25bbc3fa010dc46279b5caa460d4f71afbfff09d691f973ace70ac0e3d296a4d55fffad8b36b36e091186d669c96307e03fd1554aa5d782156538779af48614440da928d83f2b153b8b5d011c26890026088c0e57e0bdd285fd3fac43bb68303552857853cd93ef6b4c758e01f66572caf7ce79d86f4f1d59dd6681b82673ca6abcb4cc77400afda596380e077c6cd144b318d6e9c6d1e936dce15443ea474bbb69feee9ec0afaa53049d9d0fc614383289f2db8e64bd5ebac19da42f3315cf7", 0xee}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="aee3a402020217aad8f918ecaf3d4cbbc8a51d", 0x13}, {&(0x7f00000013c0)="6bc85b8d57b4b66dca2b47f6181062a9c9c492642067b8fcb9372bf2df0da5e78b3a255d4ad1e62c66a29caeb8ed04740032200bbe123a1b445ca7ed7647b03942fb84ce86b0c4fc688788588f6c2c", 0x4f}, {&(0x7f0000001440)="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", 0xff}, {&(0x7f0000001540)="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", 0xfb}, {&(0x7f0000001640)="f3b3b8dcf4430c1d29272ac0dc96865634acb01046669357bed36a9d5c6dc5b71f3235bb4c491d9bbfc66226c2da5b67776c21495ebc356e64399bb5683d15d087be913b038f6ef7eb7dbafd165dc186e09d2cc3d091265e18ca5caec56dc48163f4c25abdca58fe8ce0e569fb9784c502cf6c37d80d7b8ab151712836693f9a328fa0e0", 0x84}], 0x7}}, {{&(0x7f0000001780)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f00000019c0)=[{&(0x7f00000017c0)="79e380da39737427cda35b8f02ff90ceca136a037792b35f3e0a053323c7cb10fdb22d8535e8f4960d85dc367956654a02e535efb5e1d67735d76a1579114a841cc9f6", 0x43}, {&(0x7f0000001840)="b09c46c7b3fe8a22429ce810d74caa1c3e6ef5345a0414fabb2b8443b20dad593e1980db5da40f9e6306c45ccbbb40bf376ad322a625032711dd5d87804a6525efab0634a1a628840590ea4cfece0862961445e18b253b97a9d9cb808d59eca9015b150cf6745ef9c882bb9578de1437af9cb575878c581378c55f0ae5bb120516813a76c82ce059e1b8547d00b0e929d64f664452402e973f530dbb338a3cb1a7156501c2caaac2fc376345ae0ae6e53f193277ebf2b54a6edfac7bf9591e88eaea0db1fa19b12e9f88c508d0442cbebd392943e6b19f8d", 0xd8}, {&(0x7f0000001940)="55b21a217bb4ddb9fc6f2cf04c189481957bc89257b2cdf69236aed98100eb518ac532a4d64f4113ec3d39cfc0ec8af001cf3615246b865b2d4575acb60726732761abaa923e5210e137b1b63ba4a551daee80925e9f22a27e2d1adbfd79eeb3c034", 0x62}], 0x3, &(0x7f0000001a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @empty}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@noop, @ssrr={0x89, 0xb, 0xda, [@multicast2, @multicast2]}, @timestamp_prespec={0x44, 0x14, 0x20, 0x3, 0x3, [{@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x1}]}]}}}], 0x98}}], 0x2, 0x4000) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000001c00)={0x7, &(0x7f0000001bc0)=[{0x7f, 0x0, 0x9, 0x9}, {0x3, 0x0, 0x8, 0x5}, {0xffff, 0x5, 0x6, 0x1}, {0x6e22, 0x3, 0x81, 0x4}, {0xcb0f, 0xc, 0x6}, {0x4, 0xf7, 0x59}, {0x32, 0x9, 0x2, 0x3a5}]}) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) close(r5) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0xfffffffffffffffc, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f0000001c40)={0x4, 0x4, 0x2}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f0000001c80)) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001cc0)={0x1b, 0x0, 0x0, 0x499, 0x0, r0, 0x401, '\x00', r4, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002000)={0x6, 0x17, &(0x7f0000001d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x76, 0x0, 0x0, 0x0, 0x250b}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x0, 0x1, 0x6, 0x5, 0x8, 0xffffffffffffffff}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @alu={0x4, 0x1, 0x4, 0x3, 0x1, 0xffffffffffffffe0, 0x1}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001e00)='syzkaller\x00', 0x7, 0x27, &(0x7f0000001e40)=""/39, 0x41100, 0x10, '\x00', r4, 0x25, r0, 0x8, &(0x7f0000001e80)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001ec0)={0x4, 0x4, 0x577a9c8c, 0x2800000}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001f00)=[r0], &(0x7f0000001f40)=[{0x0, 0x4, 0x6, 0xc}, {0x1, 0x2, 0x4, 0x5}, {0x1, 0x4, 0x8, 0x4}, {0x1, 0x5, 0x8, 0x3}, {0x1, 0x1, 0x3, 0x2}, {0x1, 0x3, 0x8}, {0x4, 0x3, 0x3, 0x3}, {0x1, 0x5, 0x0, 0x7}, {0x0, 0x5, 0xe, 0x1}], 0x10, 0x7e39}, 0x94) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000020c0), &(0x7f0000002100)=0x4) preadv(r5, &(0x7f0000002240)=[{&(0x7f0000002140)=""/146, 0x92}, {&(0x7f0000002200)=""/15, 0xf}], 0x2, 0xfffffff8, 0x5) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r7, 0x80089419, &(0x7f0000002280)) sendmsg$nl_route(r0, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)=@mpls_delroute={0x30, 0x19, 0x400, 0x70bd26, 0x25dfdbff, {0x1c, 0x0, 0x14, 0xf7, 0x0, 0x1, 0x0, 0x6, 0x1000}, [@RTA_VIA={0x14, 0x12, {0xb, "3fd295f2511f2a9bc0d7e8ea1fe1"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4890) close(r3) r8 = accept4$x25(r0, &(0x7f00000023c0)={0x9, @remote}, &(0x7f0000002400)=0x12, 0x800) connect$x25(r8, &(0x7f0000002440)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) close(r5) r9 = socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$smc(&(0x7f0000002480), r9) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000024c0)={r2, 0x9, 0x40, 0x7ff, 0x30000000, 0xfffffffa}, &(0x7f0000002500)=0x14) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000002540)=""/188, &(0x7f0000002600)=0xbc) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000002640)=0x22) 3.481022322s ago: executing program 2 (id=4885): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000010b703000005000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x2f, 0xe, 0x0, &(0x7f00000002c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x1, &(0x7f00000001c0)=@raw=[@alu={0x4, 0x1, 0xb, 0x0, 0x7, 0x20, 0xfffffffffffffffc}], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 3.372973002s ago: executing program 1 (id=4886): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000001d71184f000000000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x7) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) (async) bind$unix(r4, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) listen(r4, 0x12) ppoll(&(0x7f0000000200)=[{r4, 0x318}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) (async) ppoll(&(0x7f0000000200)=[{r4, 0x318}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000280)=0xb9ad) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@delchain={0x24, 0x66, 0xf31, 0xfffffff8, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x475200d4c00f40a5}, {0xf, 0xffff}, {0xd, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) accept4$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @empty}, &(0x7f0000000600)=0x10, 0x800) (async) accept4$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @empty}, &(0x7f0000000600)=0x10, 0x800) 3.333196532s ago: executing program 3 (id=4887): unshare(0x8000400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="180200000020000000000000000000008500000027000000180100002020702500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000007500000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r3, 0x2f, 0x2000, 0x0, &(0x7f00000008c0)="e0b9547ed387dbe9abc89b6f5b2e", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000010000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000e2ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0x10, 0x10, &(0x7f0000000640)="0000ffffffffa000", &(0x7f0000000680)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg(r6, &(0x7f0000000200)={&(0x7f00000002c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}, 0x3}}, 0x80, 0x0}, 0x20000081) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x202}, 0x1c) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0), 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x18, r9, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4000801) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x800, r8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x6c, r8}, 0x38) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf2502000080280001"], 0x3c}}, 0x40000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r10, 0x1, 0x27, &(0x7f0000000000), 0x4) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080003001400010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2408c080) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r12, &(0x7f00000009c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000010) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000b00)={0x0, 0x0, 0x7, 0x0, @vifc_lcl_ifindex, @rand_addr=0x64010102}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) 3.217056737s ago: executing program 0 (id=4889): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x14, 0x3, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0xc}}]}}]}, 0x48}}, 0xc840) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x10c0}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x5}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_TTL={0x5, 0x8, 0x8}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x2}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002dc0)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88f5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a00)=ANY=[@ANYRES16=r3, @ANYBLOB="0100037c9b12674bba9ea022a459bd361a70a5230413c6668a171a9390868e5a695a06076a885ef0f8550eae31feb2c595ab82445cdb639de0bf419f0ec618a0c3135bfdfb2ffb49d6e6ea26cdc17ce8be2e3b25d2c0ab2d391782fe94e61395c0cfe257c09acd5c94deb3f53e23cd43f62e277b35666f43e6f84bdc3953b137115bad66286530476215ae053f0300000000000000e6f2cf185e4c0a68391e4d541f6df8ecb3b4dd"], 0x30}}, 0x20000001) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f00000000c0)=0x3ff, 0x4) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000680)=0x7, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000700)=""/19, &(0x7f0000000740)=0x13) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)}, &(0x7f00000006c0)=0x10) socket(0x28, 0x80000, 0xdc5b) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1fb69, 0x51267}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008801}, 0x20040040) syz_genetlink_get_family_id$fou(&(0x7f00000007c0), r6) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x3fa, 0x800, 0x70bd27, 0x25dfdbff, {0x1, 0x1, 0x1, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x20}}, 0x4000040) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TUNSETLINK(r8, 0x400454cd, 0xfffe) 3.169252459s ago: executing program 2 (id=4890): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="280006000000010029bd7000fddbdf2500000000dcfd74dbb5e33e74f93c8fa126f9703029d1e612b6b273ebb007b0fbbb1344f6e6198c9b22c1cc5f57aeab0c6e1fcfcb41589d624c8564a92cd01edb81b1f354e4aaeabdc38adc81743ffbc01b0b39e618e131b7d4439083176d268bdc53", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r7, &(0x7f00000004c0)={0xa, 0x4e24, 0x2, @empty, 0x9}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000001840), 0x3b, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x60}, {0x1}, {0x300, 0xa}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x2c, r9, 0x1, 0x70bd2a, 0xfffffff9, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0xd7) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x1102080, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x14, r6, 0x37}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x7}}}, 0x24}}, 0x4c840) 3.068652664s ago: executing program 1 (id=4892): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="230900000000000000000100000005000700000000000800090040000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) socket$inet(0xa, 0x801, 0x84) (async) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0xfffffffd) (async) listen(r7, 0xfffffffd) unshare(0x28000600) ppoll(&(0x7f0000000200)=[{r7, 0x2140}], 0x1, &(0x7f0000000400), 0x0, 0x0) (async) ppoll(&(0x7f0000000200)=[{r7, 0x2140}], 0x1, &(0x7f0000000400), 0x0, 0x0) epoll_create1(0x80000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@deltaction={0x16c, 0x31, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x145d3511}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x24}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb2}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff147}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf5}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20045081}, 0x4880) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@deltaction={0x16c, 0x31, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x145d3511}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x24}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb2}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff147}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf5}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20045081}, 0x4880) bind$unix(0xffffffffffffffff, 0x0, 0x0) (async) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f00000005c0)=0x2, 0x4) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000600)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) openat$nci(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000680), 0x1a9380, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0xa020480) socket$inet_tcp(0x2, 0x1, 0x0) 2.880374839s ago: executing program 0 (id=4893): socket$kcm(0x21, 0x2, 0x2) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000000)="00008634", 0x4) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000140)=@ll={0x11, 0x1a, 0x0, 0x1, 0xf5, 0x6, @local}, 0x80, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000700)="14d5bab05ddd7050000046bfbb459f49a918bddc0d54372f41af591aedf242920fe4ea038c8c0add779fec290569ad02695705873fea8ca7664a23a6eabc5b1b9099c09049c25225b82fe2993dc7c87a28739829e3e22cd1ac201432c53ad08c44f53a1d4313b3f02a05c1d38282fbf68c4607718a975cbf9a34268062c1e6cf4f09387daca689945bea16eb4b99b85c13e9599ba9b658507f9589179100f90d9b4ce4de5751e022e253e9b132a4e3e417ec344318a278c95cc57a0e1fdceb146dc4d5e1fa9b41d1a78fcdc5559085659c752cd7b5d2857404f360021b810a467876d518e3495f75a488c7aef54718ea", 0xf0}], 0x2}, 0x44000) 2.85493149s ago: executing program 3 (id=4894): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x0) 2.529691997s ago: executing program 3 (id=4895): close(0xffffffffffffffff) ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x3, 0x0, 0x0, 0x0, {0x81, 0x0, 0x0, 0xd85, 0x8000}, {}, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x1, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0x1066, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x100c4041}, 0x0) socket(0x1d, 0x2, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001451cced3f65a52000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0100000003"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x6, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r7, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000900)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x24}, 0x94) listen(r5, 0xf5f) accept(r5, 0x0, 0x0) r8 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb8}}, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8922, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f00000004c0)={0x80}) 2.525456218s ago: executing program 0 (id=4896): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="0900000004000000040000000001"], 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000001880)={0x1, 0xf1}, &(0x7f00000018c0)=0x8) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000001900)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=ANY=[@ANYBLOB="180000005a00010029bd7000000000001c000000040001"], 0x18}, 0x1, 0x0, 0x0, 0x40040d1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=@base={0x1, 0x4, 0x8001, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000001a80)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xd9}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x40000) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000001d40)={'dummy0\x00'}) sendmsg$inet(r4, &(0x7f0000001d80)={0x0, 0xff00, &(0x7f0000001dc0)=[{&(0x7f0000001e00)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004) connect$inet(r2, &(0x7f0000001e80)={0x2, 0x4e21, @broadcast}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001f40)=@ipv6_delrule={0x1c, 0x18, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f80)={0x10, 0x4, &(0x7f0000002040)=ANY=[@ANYBLOB="1800000000009eb8cd4410f0972dbf121732210e5f0000000000000000000071"], &(0x7f0000002080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x2, 0xc, &(0x7f0000002180)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000002200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$tipc(0x1e, 0x5, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r11, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r11, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r11, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x10001, 0x1, 0x6, 0x8, 0x5, 0x2, 0x1ff, {0x0, @in6={{0xa, 0x4e21, 0x8001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80}}, 0x3, 0x4, 0xf7c, 0x3}}, &(0x7f0000000300)=0xb0) bind$tipc(r10, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) 2.486627366s ago: executing program 1 (id=4897): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r2 = epoll_create(0x1ff) vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)="2444e5af7392ec0841cee84779e12a71c7d72accd8e8e4236a5ba4b9b4ce938bb800380f30c1a69cb32dc01e41c390596ba60b8b5c75", 0x36}, {&(0x7f0000000340)="b2568a5c2fb70311469516d2f1d284648752c67171dad5ff23434134f367b58508d5009af16f4021074e8cd7d8c16db8a3638ca164c7cee124288a48e89f7cdd6f0e54e1fd41688904b833", 0x4b}], 0x2, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10}) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/111, 0x6f}], 0x1, &(0x7f0000000240)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010000, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xd, 0x2, 0x0, 0x8}}, @TCA_CT_ACTION={0x6, 0x3, 0x14}]}, {0x1f}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.073929875s ago: executing program 4 (id=4898): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(0xffffffffffffffff, 0x84, 0x25, &(0x7f00000002c0)={0x2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0xfff, 0x6}, &(0x7f00000003c0)=0x90) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0xfffffffd) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000480)=[{&(0x7f00000004c0)="480000001400190d09004beafd0d8c560a84476080ffe006fffe0000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000400)={r1, 0xfffffffb}, &(0x7f0000000440)=0x8) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fbdbdf25250000000e0001"], 0x64}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500"], 0x88}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 1.988831043s ago: executing program 0 (id=4899): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000001c0), 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="2e00000013000500000000000000000004010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a2aba398d397a9e0104534e504e622af55b3e019cfc8628a15499357417e5aa6a945735b67197152f972", 0x2a}], 0x1, 0x8001, 0x80) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x200000d5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) close(r3) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) sendfile(r4, r2, 0x0, 0x6f702173) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000280)={0x1d, r5}, 0x10, &(0x7f00000002c0)={&(0x7f0000000380)={0x3, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x1, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x80}}, 0x0) 1.841265818s ago: executing program 2 (id=4900): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x1, @multicast2=0xe0000001}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000780)="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", 0x275}, {&(0x7f00000015c0)="6b75b597d05d969a19", 0x9}, {&(0x7f0000001740)="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", 0x2d5}, {&(0x7f0000000580)="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", 0x1e0}, {&(0x7f0000000240)="7b2f715d821cac40000000009c21659933640903b20e148c601de31ce641cdca815b4d038767", 0x26}], 0x5, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x82, 0x1, 0x3}]}}}], 0x38}, 0x0) 1.830764079s ago: executing program 4 (id=4901): mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0xa2fac000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/51, 0x33}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2}, 0x7}], 0x1, 0x10022, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0x13, &(0x7f0000001d80)=ANY=[@ANYBLOB="18080000000000000000000010000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000200000006600020080ffffff18000000fffffffe00000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000001e40)='GPL\x00', 0x2, 0xff5c, &(0x7f0000001e80)=""/222}, 0x78) 1.717462926s ago: executing program 2 (id=4902): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x198}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x511000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x64, 0x0, 0x2, 0xfffff038}]}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfff1}, {0x8, 0xfff1}, {0x4, 0xd}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0xf442, 0x0, 0x1000}, {0xf, 0x2, 0x0, 0x0, 0x0, 0x1000}, 0x1100, 0x1000}}]}}]}, 0x60}}, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtclass={0x68, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfff1}, {0x1, 0xfff1}, {0x0, 0x9}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x11000}, {0x0, 0x0, 0x2, 0x205c, 0x0, 0x1000}, 0x1000, 0x1000}}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}]}, 0x68}}, 0x0) 1.557653755s ago: executing program 2 (id=4903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000006c000000060a010400000000000000000100fffd0900010073797a300000000008000b4000000000440004802c000180090001007866726d000000001c00028005000300010000000800014000000015080002400000000314000180090001006c617374"], 0xe0}, 0x1, 0x0, 0x0, 0x14}, 0x24000000) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) splice(r4, 0x0, r2, 0x0, 0xf3a, 0x0) (async) write(r2, &(0x7f0000000380)=' ', 0x1) tee(r1, r5, 0x8f5, 0x100000000000000) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x140d, 0x400, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x44090) (async) write(r3, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0x12}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000100)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), r8) sendmsg$SMC_PNETID_ADD(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000020000000900010012708cc1aac6f1ce9e73797a3000000000140002006c6f00"/55], 0x34}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x74, r9, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x24000800) (async) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, r9, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) 1.529722567s ago: executing program 3 (id=4904): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd42, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000b40)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2f}}], 0x20) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000740)={'syzkaller0\x00', 0xca02}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (rerun: 32) write(r6, &(0x7f0000000840)='connect 01', 0xa) preadv(r4, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/4, 0x4}], 0x3bc, 0x0, 0x0) (async, rerun: 64) splice(r5, &(0x7f00000008c0)=0x81, r4, &(0x7f0000000900)=0x100000000, 0x9696, 0x4) (rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000800)={'syzkaller0\x00', @link_local}) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (rerun: 32) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000ff7f000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000850000000f0000100000000000000000"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r7, 0x2000012, 0xe, 0x0, &(0x7f00000005c0)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) close(0x3) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async, rerun: 64) r8 = socket$rxrpc(0x21, 0x2, 0x2) (rerun: 64) bind$rxrpc(r8, &(0x7f0000000880)=@in4={0x21, 0x1, 0x2, 0x10, {0x2d, 0x4e20, @empty}}, 0x24) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r7, 0x4008941a, &(0x7f00000000c0)=0x2) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000940), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYRES64, @ANYBLOB="01a91a"], 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4008054) (async, rerun: 64) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r9, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) (rerun: 64) 1.422058001s ago: executing program 1 (id=4905): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f00000000c0), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x6c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c00028005000100000000000600034000010000080007"], 0x6c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="6800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000040006"], 0x68}}, 0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x68}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x104, 0x2f, 0x107, 0x70bd2c, 0x25dfdbff, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0xe8, 0x3, 0x0, 0x1, [@typed={0xe4, 0x9, 0x0, 0x0, @str='[\x00\x1a\x1d\xf1\xbcUx\xad\xec\x14\x11\x9cS\xecH\xe7\x1exVF\x00o\x8f\xbbQ\xdbJ\xf0;\xe6\x18\x03\x9b\x872\xf0\xdf\xf5:Z\x04\xb0\xf3\xe7=\x13<\xed\xbdu0\xb01\x12b\xeb\xf3\xb1\xf6,\xe4_\xd3\xc1:\x1d\xf5\xd9La\x90\r\xc4\x93\x9aJ\x01\xf46\xd9\x9f\xdf\x86\\\x9fQ!4\xf4Y\x9d\x89\b}m\x88\x1a\xa7\xea|\x97v\xf6N#\xf36\xf3\xc9o[g\x04\t\x1d\xde\x10\v\xab]\xff!\x90\xf6.T\x9b\xcc*\xe3\a\xbc\xd4\xa6\x90%\xb6\"\x06\x00\x00\x00\x00\x00\x00\xa5\xcc#\xbeI\xa4)[\x88r\xe9\n:\x81\xb3\xff\xff\xb0_\x97D\xe9#\xa0\xeb#\x9f\x11l\xec\x13\x16\x1bz\xbe\x80W-B\xd1\x81\xbd+\x12\x1b\x00\x8a\xb3\xcd\xd5|\x0e\xf7\xe4H\x8c\xf6WM];y\x85\f\x1a37\xae\xb9H\xf7\xba#\xa9kg\xdd\x8d'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x34000005}, 0x4008030) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1.297885408s ago: executing program 4 (id=4906): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001680)=""/254, 0xfe}, {&(0x7f0000000480)=""/4107, 0x100b}, {&(0x7f00000014c0)=""/43, 0x2b}, {&(0x7f0000001500)=""/101, 0x65}, {&(0x7f0000001580)=""/165, 0xa5}, {&(0x7f0000001640)=""/15, 0xf}], 0x6}, 0x20001008}], 0x1, 0x0, 0x0) 1.229870576s ago: executing program 4 (id=4907): socket$kcm(0x21, 0x2, 0x2) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000000)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000140)=@ll={0x11, 0x1a, r1, 0x1, 0xf5, 0x6, @local}, 0x80, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000700)="14d5bab05ddd7050000046bfbb459f49a918bddc0d54372f41af591aedf242920fe4ea038c8c0add779fec290569ad02695705873fea8ca7664a23a6eabc5b1b9099c09049c25225b82fe2993dc7c87a28739829e3e22cd1ac201432c53ad08c44f53a1d4313b3f02a05c1d38282fbf68c4607718a975cbf9a34268062c1e6cf4f09387daca689945bea16eb4b99b85c13e9599ba9b658507f9589179100f90d9b4ce4de5751e022e253e9b132a4e3e417ec344318a278c95cc57a0e1fdceb146dc4d5e1fa9b41d1a78fcdc5559085659c752cd7b5d2857404f360021b810a467876d518e3495f75a488c7aef54718ea", 0xf0}], 0x2}, 0x44000) 1.140606491s ago: executing program 4 (id=4908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="780000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414bb0c00028005000100000000000800074000000001"], 0x78}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000000010104000000000000000002000006240001801400018008000100e0000001081414000c00028005000100000000002c0002801400018008000100e000000108000200e00000010c0002800500010000000000060003400000000008000740000000000400064ef61af613e2048330027ae36de0dbda7c479d322be798fadcbb1fd278fc57b7ef7ba115af938d9e0100507419537bd13de960ec77664055c5b08a5dde48194ebcc767fe8154a7b27e78843e8221931c47bda8d858272e37"], 0x70}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xfff1}, {}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000340)=[{r4, 0x411}, {r4, 0x8004}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet_buf(r4, 0x0, 0x26, &(0x7f00000005c0)="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", 0x1000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000015c0)={{}, 0x0, &(0x7f0000001600)='%pB \x00'}, 0x20) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000010006912276b0900000008f28a9ae0cfba2ab5bd7000f1ffffff00000000", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c00028008000700b1090000"], 0x50}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001780), r8) r9 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write(r9, &(0x7f0000001800)='connect 11:aa:aa:aa:aa:aa 1', 0x1b) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000001840)) r10 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)={r10}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000400)={r5}) close(0x3) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002000)=ANY=[@ANYRES8=r5, @ANYRESOCT=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYBLOB="7594b7c218429ff103fe42a316e1e8954fc6d36a4b57fa7ef6fa27cca4ac82f6fd487192c9ce6a4ed3a2478e05166d1458b30b0bce5a9191b5392daa7a4063f79896a1b2860a0a965f0f4bb82b4c2abb125959de91adac4164c3b7a64af900abceb3432d17f6b186c5413d8cfe486cfac12cd23ac3eb98ba480b7ddf6543ec36c067803d245e90908e5f55b8cdc63c5448fa4265036805df8aecbb7634a1a070bcc52de80356b62f082f48edfa6e4afd6f896ee11c1ef4"], 0x1c}}, 0x400805c) write$nci(r6, &(0x7f0000001940)=ANY=[], 0xb6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001980)=@security={'security\x00', 0x44, 0x4, 0x5d0, 0xffffffff, 0x0, 0x0, 0x3f8, 0xffffffff, 0xffffffff, 0x500, 0x500, 0x500, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x200, 0x328, 0x8502, {}, [@common=@inet=@hashlimit3={{0x158}, {'ip6tnl0\x00', {0x7, 0x9, 0x42, 0x5, 0x7, 0xfd6, 0x5, 0x5, 0x18, 0x68}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffffff, 0xff000000, 0xff000000], 0x0, 0x4e21, 0x0, 0x4e23, 0x0, 0x8000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000001fc0)="5766b100", 0x10) listen(r4, 0x7866) 385.208551ms ago: executing program 0 (id=4909): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000180)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f80ffff"], 0x38}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r3, 0x1040, 0x22900}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x48}}, 0x4040000) 383.977916ms ago: executing program 1 (id=4910): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x12, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20}, {0x85, 0x0, 0x0, 0xd4}}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x8000001}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x12, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20}, {0x85, 0x0, 0x0, 0xd4}}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x8000001}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x1, 0xf7, 0xfffff00c}, {0x6, 0x6, 0x0, 0xfffffffd}]}, 0x10) 334.531204ms ago: executing program 2 (id=4911): r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x42400, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17c00}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x2, 0xff, 0x9}, 0x7f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x42) close(r7) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000680)={&(0x7f00000006c0)=@xdp={0x2c, 0x8, r9, 0x10042}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000780)='\'', 0x1}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000000180)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000240)=ANY=[@ANYBLOB="98000000", @ANYBLOB="eb0176a7a7b1f9edfe09f37d74fa06a9276e8cb3341210919c214a520a160f0313f21564a589cdc6757bcd7ecebc3683b08d5abe652d48fb6ecaf38298fe4f889bb4d46798d40dd427b6d59297f3a256e7f1da7035464c7e9844c9ee4f2a611a69bbd8160fcfa215dde1ea5d15db85523e34e8c501362351e498641f9abac8c4cd7825fe05c501d414032a4737796a72d5d112db0cff682b5cc18ef45e061388bd1805b6c353052118636e93058c2ac2c79cba81fda4c4758fba6ea36763a3ef883d881719141fb1b719f1e7b470106ab1cb81ab1f292979e312163ac0", @ANYBLOB="050424b97000fedbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="7c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040009000000fa00000000000000"], 0x98}, 0x1, 0x0, 0x0, 0x4040df5}, 0x20040094) socket$nl_generic(0x10, 0x3, 0x10) 238.878578ms ago: executing program 0 (id=4912): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000040)={{}, "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"}) connect$inet(r1, &(0x7f0000001040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001080)={'vxcan0\x00', 0x0}) connect(r0, &(0x7f00000010c0)=@pptp={0x18, 0x2, {0x1, @remote}}, 0x80) r3 = getpid() r4 = gettid() sendmsg$nl_route(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=@RTM_NEWNSID={0x3c, 0x58, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NETNSA_PID={0x8, 0x2, r3}, @NETNSA_PID={0x8, 0x2, r4}, @NETNSA_FD={0x8, 0x3, r0}, @NETNSA_NSID={0x8}, @NETNSA_FD={0x8, 0x3, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r5 = openat$cgroup_ro(r1, &(0x7f0000001240)='memory.swap.current\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r5, 0x0, 0x63, 0x99, &(0x7f0000001280)="2fa508a428de00bc0e467cdff1777cea1f3dd5cfc71c71c1669be2e23bd34190076ff490187873fa02b5b4930fa415b95f1b1baaf4d879eb146e21f25ff71209a02f95089e15e73a2b712fdb2e19cebd61c06b19fcef8e1fa10db9a0e031c31858de44", &(0x7f0000001300)=""/153, 0xa, 0x0, 0xd2, 0x54, &(0x7f00000013c0)="2d47c1e712d9170fa9d6d208121abbd4191c568d53d96e0338ce068bc72a3df03091120f8ab1801605e146004a4b144d810a9a4d611d6caa516d539e28af7ebb81bc58bfaca58edc8e48b8406521f423e24278d159533695e3517aca634e09122ef07dea65047546d96e610ceea155afece54917faf415c761574a043e5074b1f7be5eb6d97d302495c91e4cbfa592b9b1c04a9427ab236b73f69df945d6df5fd7abc5ed96154b711031b0cb6bcbd90cfe519dd921eb3b8af51549e1b89c451dca3863f6954eeed01ce8a83c09db5ca4d692", &(0x7f00000014c0)="fcdd8b7f0185891ce9da63d099f0c7254843146c33feefa2a4b5bc0d6fc5f88175ac2e6baee096e7a4a0cf2acee7a651b019388b56163fdf590c3862171b69913c96d390cb579df36d2c51ed6bbb24de6a6e1f3d", 0x4}, 0x50) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000015c0)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000016c0)=0xe8) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001700)={r3, r8, 0xee00}, 0xc) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001740)='syz0\x00', 0x1ff) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f00000017c0)={0x1, 0x20, '\x00', 0x1, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0]}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a00)={&(0x7f00000018c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@fwd={0x1}, @restrict={0x9, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x2e, 0x0, 0x61, 0x30, 0x30, 0x5f, 0x61, 0x5f, 0x2e]}}, &(0x7f0000001900)=""/195, 0x3b, 0xc3, 0x1, 0x1ff, 0x14bf3987670321c6, @value=r5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x11, 0x3, &(0x7f0000001800)=@raw=[@ldst={0x1, 0x0, 0x2, 0x1, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffc}, @ldst={0x3, 0x1, 0x2, 0xb, 0x1, 0x0, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0xa, 0x6, 0x6, 0xfffffffffffffff4, 0x8}], &(0x7f0000001840)='syzkaller\x00', 0xa84, 0xa, &(0x7f0000001880)=""/10, 0x41000, 0x24, '\x00', r2, 0x0, r9, 0x8, &(0x7f0000001a40)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001a80)={0x5, 0x3, 0xfffffffd, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001ac0)=[r0, r1, r0, r5, r0], &(0x7f0000001b00)=[{0x2, 0x4, 0xc, 0xb}, {0x2, 0x2, 0x10, 0x2}], 0x10, 0x6505}, 0x94) unshare(0x200) bind(r0, &(0x7f0000001c00)=@x25, 0x80) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000001c80)={0x3d17, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e21, @remote}}}, 0x108) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001e80)={'tunl0\x00', &(0x7f0000001dc0)={'gretap0\x00', r7, 0x80, 0x7f00, 0xffffff8f, 0x23c0, {{0x1c, 0x4, 0x1, 0x1, 0x70, 0x66, 0x0, 0x6, 0x29, 0x0, @remote, @empty, {[@cipso={0x86, 0x4e, 0x2, [{0x1, 0x10, "73d2c5f65c96b4633ada7e564142"}, {0x5, 0xa, "2d6c9738cb3f2cea"}, {0x6, 0xd, "965be84c1da2bf72235cfe"}, {0x1, 0xf, "d440be2971c538fbd205df2af3"}, {0x0, 0x12, "361beae9c9be36bd16d1f8066c8529f6"}]}, @ssrr={0x89, 0xb, 0xf2, [@empty, @multicast2]}]}}}}}) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x28, 0x3f7, 0x8, 0x70bd2c, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) sendto$inet6(r0, &(0x7f0000001fc0)="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", 0x1000, 0x20040010, 0x0, 0x0) ioctl$int_out(r6, 0x0, &(0x7f0000002fc0)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f0000003000)) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000003100)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x10, 0x3f5, 0x300, 0x70bd2a, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x4080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000031c0)={'syztnl1\x00', &(0x7f0000003140)={'ip6gre0\x00', r7, 0x4, 0x4, 0x4, 0x9, 0x12, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x10, 0x3, 0x3}}) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000003200)={0x80, 0xfe, 0x0, 0x5, 0xbb, 0x1, 0xa, 0x8, 0x1, 0x3, 0x4, 0xab, 0xc1, 0x5e}, 0xe) writev(0xffffffffffffffff, &(0x7f0000004700)=[{&(0x7f0000003240)="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", 0xfd}, {&(0x7f0000003340)="7772c7111c39a2ea72020481dc1de8469a2587882168fbfd109d08843b1ed8a01bc06b9cbf70ace5c1bd17158a9a54ca", 0x30}, {&(0x7f0000003380)="148259ebfa2af5750f08b49d6f43fdd2c14466e4c652da8f58e4f4ee8f4884aed4b90d5c0354882ea4df0539d76408925474db61666971654e20d458211d94c2db59ab5f5f7aaaa80f1808f874f0a196aad1cb751bd2959e28c1faa9ad8ddbc0532324cedb26ea23415d60cbb89df31ee87bf404e397467727e08fd6dd22e0c5eb836d3b7e7f5a58101616125877aac7064125006f153dc74d812856866445c9f431eda81898d96825c6", 0xaa}, {&(0x7f0000003440)="fd2c41b4f94570aaaa3e99c743935aa529cf2fcf652d310581fbd53703a4bc7d1d57c6785fd4cc1fcdab56a2dc1c42d026cdb28aafb884291450ba9655499bb7753517b273b1d79f01d9de5d4c55a51b152e66d6f5173ee4253aacf912ea1aff26e7ebcba7582e1eb95d42de3efbb78d1b8ce76b8a704d0c4fba99e6ec2ef128a44c4889ecc24bb76f1e811fa61f9df58e1cc677c463e78cedad51b39f6db90020a4887384a25d8f22762cf364a442421c54d23bdd071582b0615f30b0dcf2edcbdcc74ef037", 0xc6}, {&(0x7f0000003540)="d9940641558a9789a8d04fe0faac7ce36c2c84544f9c1398e1f4e309dbf69e0cd04fd80d5f2d199647a2047700a39b2818fe0128870b1a53492fa630e32db4f1f41dd78bb167df71843442a800cbe883d9b9ca3d73a7c1dc6a7ccb31114379fb70871a267a92ca8444a5c54c9817e13d0d38a32c2c46e09e4d67353172e063d1788f84b60844b6daeaae0f5f14e7d87e8b960104d220ef28a6cb7493e8558ca13292e7f1a084d0fee8c3762209a5fa2887842fecf92c2effe29e03a52d5bc00f533b7503d4748c4e2bd56af1e8bf5c5477a2", 0xd2}, {&(0x7f0000003640)="c0b9b6fab985e87048a84a05c3db4df338f5f9cbb90bcc709c8884988534a801148540ee1516a2c1cd675c40ba44259e6c3a7179b0805c4d3bb916017d740c7b2defa01cfc442b416115ed48ba4c59ac71b9a85bbc4e8e693a7048b5e068e005d41dba2df173d0ec1c7631c740c0fbd13498f6149d53cafebe549f15357b38576905d2906db037ace4632ffa0199591450c9a1a25500386d8fc2d354809e3138d20a754b4ae6ea4c082d1e045bbacc82b3ab2567419823d98b783d3a9d56fa82ce41e31b9fa854d0bf91171852da955f784abe587531a2c5edd787776a958cae1da128c561224aee2872a67f29604b2fca52fcb26c4ebc29566f10caea91bf9f8beac265de481cc987c13533d5ef12e399d5e71cd1ae9d27546de3f6fed5c668f35edce5976163fb8e56e6c776c4305f8f2f12275a9f87efce1d21f626a67217c71187ba039c43a705aad798202393aa71bb0b6694c1a812cd4ec33efc59ba12ad925e31ce41f0ecf95de674a9440c2348f0728d69cf7be56fccd791f8f09dedbe0075bd628d8a308c912d331c77d0c2eff3aea3e04daae328c7cf5b7f55e9f528e9aa96855edc2f0b9c93232c8efd5e5269521850c2e68ee830451d068341d79c07f4550d727c518e7d6c5a122808626240c5175e47a920b8426bd0e2904d3c2055b43b23a642e63fe9470f9190101f79a1e5cd8badbb61cf6580df23558d920f68a063e89dc09c8d28e79f4fa099035566d471753d5d03a1054dcc34d9c233d3c27bb3916497f2b3f6a075ddf0764a38f247a05bb96a09f6b7dd6af663be5c8e8f11b12affcde2b0de715d6c297be7a4163d5c24f584030359227a565ea2536327b5c4ec7c32f1bb1754861a4a4df308a75d183c9bb28d747ef56ca9514621a888df88a40c91494dcc0c92d51d8f0928307a263ebedbc6e9a392aba728f2fdb1900fabe70b8e0cf916108aa7d8025aafd04467e413c816a05352748b0d93d27c0d97438b20af02041af786dd01557670921b92a8d7703aa52d92a2d64a80716735d132c796f48d84e73d6c6a3ca49d06c2f7093b5c14d2a9123ec8adc2c9e329eeed30b375fac38eee6adc99efd8403d35d0e2fc0b774c14ca6384f64a22674439827319c90d1c95b91ea0a6ca393a7d911af0e4342a84c93b6d0a0b699e94eb61b7a9c2a6a7927b9d3607cb429288af8b427effe7292352c0a95bee2bc907d1667c1ba540be0bc5398cf86a69423c284a44877289a3875f9e0e525ce0b24051e48cf579a09741e35a456c31d9b1d550bbaf39282bfc5f666ec233384735571bafea7dc38165e070c13cb3cf3ad263b9bdf6a36d8f1e5c5bbc550ce462eaafec0d0113a9d4ffc17487c8fbb89830dcc2ee9a001206051fcfdcabf0767aef1376e5507d1f3308fdccd361ae19a70d6f6516d8b180727a1d555442bcc25431cc86b0587c68178b1f6e3c366b57ab211c4c7b063df39a04e2f3d40b705fdbc67448328add54785d06c9812575adfeac84a80a50e0bbc2eac55f008a0030f307599031cc3d97261a696e114aff9b1b881736d12e43567d0777f8fc7c595d58d5a2f14fee2a1cc083b64c3960f8fb872f1e6da5d7f158034360111205c1d12c9c15fea4fed5eb097b577eff13eb42d32beb329985e8aee4a98df8c1c43ccfef353f64626cda38f50eac3ed7cc2e5cb32ed96d580c0e724784693a933c9211728e368a6f81e2209f80d974af436f563155f3564a253eae5b62733f6af3714cfeb9d964a2763e0ca35052ebdc6f800d06841844f10b8e3cfbf9f1a15e7f08d70ba4bf0074c1bfbc0f7f743365dfea95c4aee19dcb183c8f302e2b73c0b1c178ea7d9d29e4bf925ea29d09fdeb5ae972b451370763c432b5c5b302345b23fbbf2e7014b9793d1877b0506ead9d6df53cd5910d1c873b0899abf8c37cacdaf7c264feb2062302e2b95140966562d81649359913d7c131eb36930c9881afbe56421eef7358ef19f1bb651fd9192fb3ac8c0b6719a71994e209168e4593eb091f55e167164cea42478e5677252b2fc88f7f6178e5cba6e06bc26219606ce732bb5a25bb003fea74b14f315349a2c68ba6fc54aeb780cff6f46cc327df788201a0500972a7d8e23f9fde469c45cd85d6254afdd4099414db9e6a0903b6c1ad0fa8c8435da0c82e6ece0fa2db6ab3dd124e43aa6f5e7cf6182e4fda6bda318872c34c7f739bee9fdec1118ff2a2b23bbc6959a9c6408cc4e4d29963c16de6a8dbd16462c8c81c57e1e465bdc27fd6950a3ca2cd9dd52a922bbd8af1cda5c3ef5930496ea218be7403a31f24cb6700b21831a2e3814b2e0d61f57dbd34346a71d338f210aae146629e8663939ad519a6256b54efa2987ea8d0d5b4a52b7fd9a430e4a09364f74b73562c09247ffd57ddeba43adef99de87a2e99c595ce6f21a88825e854036935bad1fc2b4518659acce02d42894428a617dbccb49291655ca8885dd3986aad5b7ea5e2fee71ba5df8b6e44737bf4a5405dcbee8388d3950692c1a514803d386b01ef149379b5428d8edc6c5bf71ccbf9d43de116940c15fdef7024c0d1e0facefed938ced0b4e08974f8c9f5a273cae614dd8d1d7302310da6ad086813822be20303f176e9b6ad495529e9d7e87a0cb928e61ddf5faf64de559de147478c9e4aec51e7cc0a65000ba2daeef4f84f3fe3d6b193d34e4f3e28b174901c2081aa2fed9fbf981ac63120c55a45ec4447b2450b94544b1796ce313ca1e59ac5035c12bbc147850414d91c47996db932a0807f867bf0d802e7fcaa32d5ad093990ffc1ea5de7ea062c33d2fabfd25b8167db2a66a5089037de99155823224b32fd9c17bf089632d46cab950f5514683bb211c6ef61aff98d2dae91e8abc326da92409082a45945faadfec4cf2140068c6508df4c6db176acda2129bf49369217f75cb56d868d136addaedc89966d786f8961c9c5f245fcf5b02c638b1448d268494bad25b3bbd3bab9d0b7e3cbf7063c1c1740bea16efa799f775b58fdf12c3589423b28f7f5c0bbc96242f0a4e18cb6a60894621aa1c238e497897d65266e68933edec298c322c5f1027ae41bcd39e3600e6f14bf39235a87add9fc96bea8b50c630a26effa120e966d633b7944b2389a2eee3d784c3953aad7c87677e2db5c4a5ff582299b15a36ae8aec26478918a84be0c23e0daa41e3a97a5a532b1e20663ad3dc9ed099c2b0df7403ac47712eecb7b45e795bc3c5e53454fc5f3f5a8cd33fe841d1c6bd3788a858c7d8de5a21f787abbbe1c6aef136acfa64df509950af59ac2b14998f78f1274ee09ed8cbfd63f9d7391393b1fa4d0395765e66a06e21ce4e06ea8f02d179b8fb8d1d087c3c60d89a878143743a74fc0627888df784475881930d235e7b0bc2d0637c459e849018217790a0d89ccd0c752b31465b36cb174066e9ae87177196e0b81465bc8e1337952bc50b53725f7fea827ed83e0bc0f421172063522d907d10203e66ea723c2c68cf044cf5ac17275c3011dc18b3ed6e41a402545569f53b57aa3656cda2b9b2e35a616fde965e19299225381981335b4acace278f46b4f5b5cffeb1ff529b8a8b8d21d382033f93e34e11f5e3d164bdd37062f1bc15137708de832ad27494db284000df46dbb7534b8612a971f321e3a6418a506701b473cc9651f508bfce5200168badad0d52828cd112c39bfbd73575d7c286c108c4f6549ac7a4fa5b8f3e3d3411da17d5bc52c786395f76255079e0c4cd25932f1a6138f84b98f6cdd4d55d586e149e2c2d1e5ed4f6e5670e0a5b7ef9d061d78677bad50e9208dd43ccd7a3af9b496dd22a37cfa20c918c3122ce09f0677246ff0f6afe1731ff4c0fdd44f00b3e001afc2516329fff513a33066feef83e6048a2424b46667e2a97832476b4635e1e87e3a36dd33e0c9d3d46e697af1cd6a39c3da675c77b5f08c64f821a4c96be505d37c182957f3bd93d4028dc2cfa8cd2f46b7a05d7aad26d296d744391bb052686e6b2800e605cb0e0972a84335ae9b2397d7a323f71cdabc21a4f12b5d45f24a24aab3ece2fc170156efaa22e9ee715605decd686291893f288a38b93ff23964cb64d19f2a3da2221cd9b77800f0acf01a08e052a906493716dbd0c35d28b6c16c9cc04c60858e4e99627810061e1fd9d8f536c0efdadb2e2daf7d194829d926c248a1d3123753266ff120ade8e2eae2ad79b15b4ecaa78ddfd19bd559b43ebbcbbfb15927695297393586ed7fd3e9c8b16bef579aee59dd5ca5b27d78f99070d15beb77677acd951529a64ed9e11d535f97a8415e793b92b507e8bc364183a15fbbd80f836539d149743b3217d0a108dedb4d1b2d3d6164b696c919b3137827f1b92c635e976eb2116cbc5f7a40f5a907c221a3a34b71a539a5a0ddea4cac8488796a3d464a9e72cf57589dd73fbee7b674060febce1b0d2b0f9763f406269189fe1c024a82f0c65573676fc06e0dfab502d45f875deaca6b6a8c3c780de41aac8f3d99b3d49d686a351535db032f27ddb3d98ab280d6194b7e827978c0f9efaf011d04d11c149aeba107da957096e9b212aeea808c86f9df63d4f4ef0583673e73a52abfe3c10ae3e770a8222b0d70ac71d240dde1f8bf75868a5b74611ccb8a8351dca70944c9be025ca11b7e1709d84c093c608708a2d2e3a3e1488e77fb750213a2612792ffa4e2e888c3ae65f391556ab982a35af9cf1ec33be5f8d151ca303e771b225005951c95b99c9917034b156d93cb4140e6e458d702945b2873e33d9f54836d1f4614a22092ab5485705eefd5e2f337d7036bf1fc2209bd459164ce9e5d03a961f010b8d2660cc2366d492a5b97af7155879e9aad821f13d67c66de02ba64536bf43c14adc2ea13317cf24fb334b58d90bf0d5c60727ace4d53d2909fbc86c9822d08f6a16b68e917fece7d6a80955b5b3c25245a46cdcfd5614d84b1d82822aea3d296dbd4e49cf69e701fc64f30081bd8e5b3aacdd0d8ed790d6dbe33c66b309121ee97917a933bf4c1c14441b7823772793b1ba5cbf4a5d952791f1b74b4ae7793f2918bc332712574275e616d09b572d140b7413c016930b242af9223d53a942f550c430ecec083bcba88d9657400adaa479a0db32d0ae85e378cd50d99d6560f8ba7b1e4b2af880b8c7ffecebe00d54efc5f56d32ef5e52b37ff59482c082077a62313f2aac5246db2eacb9a640d1887d9d2857a84e92726758eba2e1e2366f45afa27c315bcde3e8881a605d6f8a599ddf2970e9798b9f55c8df97e5300601666f938b238b603c8d8a08b8aa2d7ad3ca05996718f7ba0fdea7fb5028621b0b08c941bb4dbca8a6321e4393612ed1a0d5ed253e2c9b6a22dadb87924cd71860dfbe886d0ff00ca2de7f770b49c857b10a3670f527383eaf6dec5155dcb1d23138016b11561dd58eb00649fa8faad8dda68e68091479aaf991a511d452f14985941e8d96d497116a285838c741c94b01abab180a42a9a4b070e972fe2aa3dbeaf06e9b58cca37e2356873ed5d163ba939b36cef405bad248b1e2fe12561bea4b8368422053922873a96f082fca226d73f3be2090bc4fb9054ab2905edeb69a2351c936f1f9187343c94085afb6f0507bfcc5d8e83ec89a01bdedd0413251c0d47b96f9eec9407f7a9cb3f803155566c51128802f5f8c91ad26635a334ec92e7660e076558a7fdc4cb58812f26580dbf4b5d0fb42e8b57316966dc488ca206292fbb20bd671345a9f2e1e16d07b58c7ee26e6d62541e53d25bcda37e3a36c98d71b10fd0", 0x1000}, {&(0x7f0000004640)="5168605e5b70b90842476ec7e380ebc22bdd9dd98cc2569e7f23b63ccb1d88e50ace5f6a81266007f94b040fb9b25ac37f8360b84af8a4adb69eb14b2b14e01f5c0d4b4f4eb1191cb7f9caabb4aa31a4895c5583e7a10b8dce9bcb3f3021b181214be9809cebdbd390e57077c0236f6ad4ca", 0x72}, {&(0x7f00000046c0)="583737552c4b7ef0d8cc48b84adc858e79ed9813", 0x14}], 0x8) 162.15409ms ago: executing program 1 (id=4913): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b40000000000000079109000000000000700000000200000"], &(0x7f0000000340)='GPL\x00', 0x5, 0xc3, &(0x7f0000000380)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e21, 0x101, @dev={0xfe, 0x80, '\x00', 0x1c}}}, 0x7, 0x7}, &(0x7f00000005c0)=0x90) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4f67a6733fac6c5c}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000700)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f0000000740)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000780)=0x2, 0x4) connect$inet(r6, &(0x7f00000007c0)={0x2, 0x4e21, @loopback}, 0x10) shutdown(r6, 0x1) recvmmsg(r6, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x6) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000840)={'syzkaller1\x00', @link_local}) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x24, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x1c, r1, 0x1, 0x123, 0x234, {0x7}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xc, 0x10000000038c6) 0s ago: executing program 4 (id=4914): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82c03, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {}, {0x8, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18b09}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x5, 0xffffff00, 0x3}, 0x22}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000b0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000c0000000c0005"], 0xc0}}, 0x0) r12 = socket$kcm(0x11, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x22) r13 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r13, 0x0, 0x487, &(0x7f0000000740)={{0x84, @loopback, 0x4e20, 0x0, 'fo\x00', 0x20, 0x0, 0x13}, {@loopback, 0x4e24, 0x10000, 0x1, 0x3}}, 0x44) r14 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r14, &(0x7f00000007c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000500), 0x56) sendmsg$kcm(r12, &(0x7f0000000540)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)="27030200dc0f14000e0003004024c1020000ff8807c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x50}}, 0x4850) write(0xca, &(0x7f0000000040)="03000000e9", 0x5) kernel console output (not intermixed with test programs): 046] netlink: 'syz.3.3658': attribute type 11 has an invalid length. [ 526.813106][T20046] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3658'. [ 527.158850][T20061] bond1: Removing last ns target with arp_interval on [ 527.255050][T20067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3665'. [ 527.335855][T20069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3667'. [ 527.358656][T20071] netlink: 'syz.2.3666': attribute type 1 has an invalid length. [ 527.358684][T20071] nbd: illegal input index 393236 [ 527.389484][T20074] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 527.394790][T20071] IPVS: stopping backup sync thread 20074 ... [ 527.733758][T20091] syzkaller1: entered promiscuous mode [ 527.733787][T20091] syzkaller1: entered allmulticast mode [ 528.416878][ T5642] Bluetooth: hci2: command 0x0405 tx timeout [ 528.699876][T20147] syzkaller1: entered promiscuous mode [ 528.699902][T20147] syzkaller1: entered allmulticast mode [ 528.704114][T20141] FAULT_INJECTION: forcing a failure. [ 528.704114][T20141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.704148][T20141] CPU: 1 UID: 0 PID: 20141 Comm: syz.4.3688 Not tainted syzkaller #0 PREEMPT(full) [ 528.704184][T20141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 528.704198][T20141] Call Trace: [ 528.704207][T20141] [ 528.704217][T20141] dump_stack_lvl+0xe8/0x150 [ 528.704257][T20141] should_fail_ex+0x410/0x560 [ 528.704296][T20141] _copy_from_iter+0x1d3/0x1660 [ 528.704336][T20141] ? __lock_acquire+0x747/0x2de0 [ 528.704363][T20141] ? __pfx__copy_from_iter+0x10/0x10 [ 528.704411][T20141] tun_get_user+0x265/0x4470 [ 528.704452][T20141] ? aa_file_perm+0x18b/0x15f0 [ 528.704489][T20141] ? aa_file_perm+0x4ed/0x15f0 [ 528.704518][T20141] ? __pfx_tun_get_user+0x10/0x10 [ 528.704556][T20141] ? __lock_acquire+0x747/0x2de0 [ 528.704584][T20141] ? kstrtoull+0x137/0x1d0 [ 528.704618][T20141] ? ref_tracker_alloc+0x172/0x530 [ 528.704729][T20141] ? lock_acquire+0x115/0x350 [ 528.704754][T20141] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 528.704790][T20141] ? lock_acquire+0x115/0x350 [ 528.704815][T20141] ? tun_get+0x1c/0x2f0 [ 528.704856][T20141] ? tun_get+0x1c/0x2f0 [ 528.704893][T20141] ? tun_get+0x1c/0x2f0 [ 528.704930][T20141] tun_chr_write_iter+0x113/0x200 [ 528.704968][T20141] vfs_write+0x612/0xba0 [ 528.705005][T20141] ? __pfx_vfs_write+0x10/0x10 [ 528.705035][T20141] ? __fget_files+0x3a2/0x420 [ 528.705058][T20141] ? __fget_files+0x2a/0x420 [ 528.705087][T20141] ? fdget+0x1ac/0x250 [ 528.705118][T20141] ksys_write+0x150/0x270 [ 528.705148][T20141] ? __pfx_ksys_write+0x10/0x10 [ 528.705195][T20141] do_syscall_64+0x166/0x520 [ 528.705217][T20141] ? trace_irq_disable+0x3b/0x140 [ 528.705244][T20141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.705267][T20141] ? clear_bhb_loop+0x70/0xc0 [ 528.705295][T20141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.705317][T20141] RIP: 0033:0x7f128cb9f559 [ 528.705338][T20141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.705358][T20141] RSP: 002b:00007f128db3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 528.705382][T20141] RAX: ffffffffffffffda RBX: 00007f128ce25fa0 RCX: 00007f128cb9f559 [ 528.705399][T20141] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000003 [ 528.705413][T20141] RBP: 00007f128db3d090 R08: 0000000000000000 R09: 0000000000000000 [ 528.705427][T20141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.705441][T20141] R13: 00007f128ce26038 R14: 00007f128ce25fa0 R15: 00007ffd250637d8 [ 528.705477][T20141] [ 529.142676][T20142] syzkaller1: entered promiscuous mode [ 529.142705][T20142] syzkaller1: entered allmulticast mode [ 529.688150][T20184] syzkaller1: entered promiscuous mode [ 529.688175][T20184] syzkaller1: entered allmulticast mode [ 529.691484][T20184] FAULT_INJECTION: forcing a failure. [ 529.691484][T20184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.691532][T20184] CPU: 1 UID: 0 PID: 20184 Comm: syz.0.3702 Not tainted syzkaller #0 PREEMPT(full) [ 529.691557][T20184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 529.691571][T20184] Call Trace: [ 529.691580][T20184] [ 529.691589][T20184] dump_stack_lvl+0xe8/0x150 [ 529.691629][T20184] should_fail_ex+0x410/0x560 [ 529.691668][T20184] _copy_from_iter+0x1d3/0x1660 [ 529.691708][T20184] ? __lock_acquire+0x747/0x2de0 [ 529.691734][T20184] ? __pfx__copy_from_iter+0x10/0x10 [ 529.691783][T20184] tun_get_user+0x51a/0x4470 [ 529.691823][T20184] ? aa_file_perm+0x18b/0x15f0 [ 529.691859][T20184] ? aa_file_perm+0x4ed/0x15f0 [ 529.691889][T20184] ? __pfx_tun_get_user+0x10/0x10 [ 529.691927][T20184] ? __lock_acquire+0x747/0x2de0 [ 529.691954][T20184] ? kstrtoull+0x137/0x1d0 [ 529.691989][T20184] ? ref_tracker_alloc+0x172/0x530 [ 529.692023][T20184] ? lock_acquire+0x115/0x350 [ 529.692048][T20184] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 529.692086][T20184] ? lock_acquire+0x115/0x350 [ 529.692111][T20184] ? tun_get+0x1c/0x2f0 [ 529.692151][T20184] ? tun_get+0x1c/0x2f0 [ 529.692184][T20184] ? tun_get+0x1c/0x2f0 [ 529.692223][T20184] tun_chr_write_iter+0x113/0x200 [ 529.692267][T20184] vfs_write+0x612/0xba0 [ 529.692303][T20184] ? __pfx_vfs_write+0x10/0x10 [ 529.692334][T20184] ? __fget_files+0x3a2/0x420 [ 529.692357][T20184] ? __fget_files+0x2a/0x420 [ 529.692385][T20184] ? fdget+0x1ac/0x250 [ 529.692418][T20184] ksys_write+0x150/0x270 [ 529.692448][T20184] ? __pfx_ksys_write+0x10/0x10 [ 529.692488][T20184] do_syscall_64+0x166/0x520 [ 529.692510][T20184] ? trace_irq_disable+0x3b/0x140 [ 529.692541][T20184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.692563][T20184] ? clear_bhb_loop+0x70/0xc0 [ 529.692591][T20184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.692613][T20184] RIP: 0033:0x7f5e0339f559 [ 529.692634][T20184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.692654][T20184] RSP: 002b:00007f5e041aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 529.692678][T20184] RAX: ffffffffffffffda RBX: 00007f5e03625fa0 RCX: 00007f5e0339f559 [ 529.692696][T20184] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000003 [ 529.692711][T20184] RBP: 00007f5e041aa090 R08: 0000000000000000 R09: 0000000000000000 [ 529.692725][T20184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.692739][T20184] R13: 00007f5e03626038 R14: 00007f5e03625fa0 R15: 00007ffd16a5d498 [ 529.692775][T20184] [ 530.159374][T20190] __nla_validate_parse: 9 callbacks suppressed [ 530.159395][T20190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3703'. [ 530.204688][T20190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3703'. [ 530.258285][T20188] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 531.124640][T20235] netlink: 'syz.0.3710': attribute type 18 has an invalid length. [ 531.125197][T20233] netlink: 'syz.0.3710': attribute type 18 has an invalid length. [ 531.203164][T20238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3713'. [ 531.279304][T20238] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3713'. [ 531.279332][T20238] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3713'. [ 531.432396][T20255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3715'. [ 532.374781][T20283] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3720'. [ 532.483489][T20287] syzkaller1: entered promiscuous mode [ 532.483509][T20287] syzkaller1: entered allmulticast mode [ 532.687655][T20295] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 533.961210][T20224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 534.570417][T20319] batman_adv: batadv0: Adding interface: syzkaller0 [ 534.570438][T20319] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.570474][T20319] batman_adv: batadv0: Interface activated: syzkaller0 [ 534.765728][T20332] syzkaller1: entered promiscuous mode [ 534.765752][T20332] syzkaller1: entered allmulticast mode [ 534.995422][T20317] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 535.049848][T20317] batman_adv: batadv0: Removing interface: syzkaller0 [ 535.182665][T20348] ip_tables: iptables: counters copy to user failed while replacing table [ 535.461368][T20366] syzkaller1: entered promiscuous mode [ 535.461394][T20366] syzkaller1: entered allmulticast mode [ 535.663990][T20378] FAULT_INJECTION: forcing a failure. [ 535.663990][T20378] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 535.665706][T20378] CPU: 0 UID: 0 PID: 20378 Comm: syz.3.3749 Not tainted syzkaller #0 PREEMPT(full) [ 535.665734][T20378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 535.665749][T20378] Call Trace: [ 535.665757][T20378] [ 535.665765][T20378] dump_stack_lvl+0xe8/0x150 [ 535.665800][T20378] should_fail_ex+0x410/0x560 [ 535.665838][T20378] prepare_alloc_pages+0x21e/0x5f0 [ 535.665877][T20378] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 535.665913][T20378] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 535.665950][T20378] ? __pfx_policy_nodemask+0x10/0x10 [ 535.665990][T20378] ? __lock_acquire+0x747/0x2de0 [ 535.666018][T20378] alloc_pages_mpol+0x21e/0x390 [ 535.666060][T20378] folio_alloc_mpol_noprof+0x39/0x160 [ 535.666097][T20378] vma_alloc_folio_noprof+0xe1/0x1e0 [ 535.666137][T20378] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 535.666173][T20378] ? lock_acquire+0x115/0x350 [ 535.666206][T20378] do_pte_missing+0x173a/0x34b0 [ 535.666264][T20378] handle_mm_fault+0x1a53/0x3750 [ 535.666302][T20378] ? handle_mm_fault+0xf1/0x3750 [ 535.666338][T20378] ? __pfx_handle_mm_fault+0x10/0x10 [ 535.666364][T20378] ? follow_page_pte+0x748/0xf10 [ 535.666398][T20378] ? __pfx_follow_page_pte+0x10/0x10 [ 535.666435][T20378] __get_user_pages+0x1670/0x2750 [ 535.666509][T20378] __gup_longterm_locked+0x3e2/0x16f0 [ 535.666537][T20378] ? lock_acquire+0x115/0x350 [ 535.666586][T20378] pin_user_pages+0x9d/0xd0 [ 535.666613][T20378] xdp_umem_pin_pages+0x11b/0x340 [ 535.666656][T20378] xdp_umem_create+0x63d/0x8b0 [ 535.666701][T20378] xsk_setsockopt+0x82f/0x960 [ 535.666737][T20378] ? __pfx_xsk_setsockopt+0x10/0x10 [ 535.666776][T20378] ? aa_sock_opt_perm+0x142/0x1e0 [ 535.666809][T20378] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 535.666831][T20378] ? __pfx_xsk_setsockopt+0x10/0x10 [ 535.666864][T20378] do_sock_setsockopt+0x17c/0x1b0 [ 535.666905][T20378] __x64_sys_setsockopt+0x13d/0x1b0 [ 535.666944][T20378] do_syscall_64+0x166/0x520 [ 535.666966][T20378] ? trace_irq_disable+0x3b/0x140 [ 535.666993][T20378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.667016][T20378] ? clear_bhb_loop+0x70/0xc0 [ 535.667044][T20378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.667066][T20378] RIP: 0033:0x7efc5e39f559 [ 535.667087][T20378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.667106][T20378] RSP: 002b:00007efc5f18f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 535.667131][T20378] RAX: ffffffffffffffda RBX: 00007efc5e625fa0 RCX: 00007efc5e39f559 [ 535.667147][T20378] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 535.667161][T20378] RBP: 00007efc5f18f090 R08: 0000000000000020 R09: 0000000000000000 [ 535.667175][T20378] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 535.667190][T20378] R13: 00007efc5e626038 R14: 00007efc5e625fa0 R15: 00007fff458de388 [ 535.667228][T20378] [ 536.085818][T20387] netlink: 'syz.4.3752': attribute type 2 has an invalid length. [ 536.110931][T20379] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3749'. [ 536.532821][T20387] : renamed from bond0 (while UP) [ 536.723754][T20409] ip_tables: iptables: counters copy to user failed while replacing table [ 536.960819][T20420] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3757'. [ 536.960858][T20420] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3757'. [ 537.050042][T20423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3757'. [ 537.050069][T20423] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3757'. [ 537.115366][T20420] geneve2: entered promiscuous mode [ 537.440427][T20439] FAULT_INJECTION: forcing a failure. [ 537.440427][T20439] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 537.440468][T20439] CPU: 1 UID: 0 PID: 20439 Comm: syz.1.3763 Not tainted syzkaller #0 PREEMPT(full) [ 537.440494][T20439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 537.440508][T20439] Call Trace: [ 537.440517][T20439] [ 537.440527][T20439] dump_stack_lvl+0xe8/0x150 [ 537.440567][T20439] should_fail_ex+0x410/0x560 [ 537.440607][T20439] prepare_alloc_pages+0x21e/0x5f0 [ 537.440647][T20439] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 537.440685][T20439] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 537.440723][T20439] ? __pfx_policy_nodemask+0x10/0x10 [ 537.440764][T20439] ? __lock_acquire+0x747/0x2de0 [ 537.440793][T20439] alloc_pages_mpol+0x21e/0x390 [ 537.440836][T20439] folio_alloc_mpol_noprof+0x39/0x160 [ 537.440875][T20439] vma_alloc_folio_noprof+0xe1/0x1e0 [ 537.440915][T20439] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 537.440954][T20439] ? lock_acquire+0x115/0x350 [ 537.440988][T20439] do_pte_missing+0x173a/0x34b0 [ 537.441040][T20439] handle_mm_fault+0x1a53/0x3750 [ 537.441096][T20439] ? handle_mm_fault+0xf1/0x3750 [ 537.441134][T20439] ? __pfx_handle_mm_fault+0x10/0x10 [ 537.441160][T20439] ? follow_page_pte+0x748/0xf10 [ 537.441195][T20439] ? __pfx_follow_page_pte+0x10/0x10 [ 537.441236][T20439] __get_user_pages+0x1670/0x2750 [ 537.441309][T20439] __gup_longterm_locked+0x3e2/0x16f0 [ 537.441336][T20439] ? lock_acquire+0x115/0x350 [ 537.441380][T20439] pin_user_pages+0x9d/0xd0 [ 537.441407][T20439] xdp_umem_pin_pages+0x11b/0x340 [ 537.441450][T20439] xdp_umem_create+0x63d/0x8b0 [ 537.441496][T20439] xsk_setsockopt+0x82f/0x960 [ 537.441533][T20439] ? __pfx_xsk_setsockopt+0x10/0x10 [ 537.441574][T20439] ? aa_sock_opt_perm+0x142/0x1e0 [ 537.441608][T20439] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 537.441630][T20439] ? __pfx_xsk_setsockopt+0x10/0x10 [ 537.441663][T20439] do_sock_setsockopt+0x17c/0x1b0 [ 537.441703][T20439] __x64_sys_setsockopt+0x13d/0x1b0 [ 537.441745][T20439] do_syscall_64+0x166/0x520 [ 537.441767][T20439] ? trace_irq_disable+0x3b/0x140 [ 537.441794][T20439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.441817][T20439] ? clear_bhb_loop+0x70/0xc0 [ 537.441846][T20439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.441869][T20439] RIP: 0033:0x7f7e23f9f559 [ 537.441890][T20439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.441910][T20439] RSP: 002b:00007f7e24f50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 537.441934][T20439] RAX: ffffffffffffffda RBX: 00007f7e24225fa0 RCX: 00007f7e23f9f559 [ 537.441951][T20439] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 537.441965][T20439] RBP: 00007f7e24f50090 R08: 0000000000000020 R09: 0000000000000000 [ 537.441980][T20439] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 537.441994][T20439] R13: 00007f7e24226038 R14: 00007f7e24225fa0 R15: 00007ffcd2ea8198 [ 537.442033][T20439] [ 537.795347][T20445] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3763'. [ 538.041637][T20451] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 538.041853][ T7099] IPVS: starting estimator thread 0... [ 538.042629][ T7099] IPVS: starting estimator thread 0... [ 538.126912][T20454] IPVS: using max 26 ests per chain, 62400 per kthread [ 538.127004][T20455] IPVS: using max 26 ests per chain, 62400 per kthread [ 538.242671][T20457] syzkaller0: entered promiscuous mode [ 538.244088][T20457] syzkaller0: entered allmulticast mode [ 538.469703][T20467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3771'. [ 538.478498][T20465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 538.512250][T20463] TC_ACT_REPEAT abuse ? [ 538.514863][T20463] netlink: 75 bytes leftover after parsing attributes in process `syz.3.3769'. [ 538.661342][T20485] netlink: 'syz.1.3776': attribute type 1 has an invalid length. [ 538.691410][T20463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.695317][T20463] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.719127][T20463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.791466][T20463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.803251][T20463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.819803][T20463] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 538.819834][T20463] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 538.825675][T20463] veth1_vlan: left promiscuous mode [ 538.857461][T20463] veth0_vlan: left promiscuous mode [ 538.859400][T20463] veth0_vlan: entered promiscuous mode [ 538.862014][T20463] veth1_vlan: entered promiscuous mode [ 538.885007][T20463] veth1_macvtap: left promiscuous mode [ 538.892783][T20463] veth0_macvtap: left promiscuous mode [ 538.894116][T20463] veth0_macvtap: entered promiscuous mode [ 538.895400][T20463] veth1_macvtap: entered promiscuous mode [ 538.920670][T20463] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 538.921910][T20463] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 538.923625][T20463] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 538.925511][T20463] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 538.999548][T20463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 539.013473][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.071927][T20485] 8021q: adding VLAN 0 to HW filter on device bond4 [ 539.073571][ T7715] s`z1: Port: 1 Link ACTIVE [ 539.100572][ T7092] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.100686][ T7092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.103474][ T7092] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.103583][ T7092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.237330][ T7086] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.239468][ T7099] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.240589][ T7099] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.290747][T20500] FAULT_INJECTION: forcing a failure. [ 539.290747][T20500] name failslab, interval 1, probability 0, space 0, times 0 [ 539.290783][T20500] CPU: 1 UID: 0 PID: 20500 Comm: syz.1.3780 Not tainted syzkaller #0 PREEMPT(full) [ 539.290809][T20500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 539.290823][T20500] Call Trace: [ 539.290832][T20500] [ 539.290842][T20500] dump_stack_lvl+0xe8/0x150 [ 539.290883][T20500] should_fail_ex+0x410/0x560 [ 539.290930][T20500] should_failslab+0xa8/0x100 [ 539.290967][T20500] __kmalloc_cache_noprof+0x9e/0x600 [ 539.290999][T20500] ? sctp_auth_set_key+0x1b9/0x950 [ 539.291103][T20500] ? sctp_auth_set_key+0x1b9/0x950 [ 539.291136][T20500] sctp_auth_set_key+0x1b9/0x950 [ 539.291159][T20500] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 539.291208][T20500] sctp_setsockopt_auth_key+0x3b7/0x630 [ 539.291277][T20500] sctp_setsockopt+0x52d/0x12c0 [ 539.291304][T20500] ? sock_common_setsockopt+0x36/0xc0 [ 539.291335][T20500] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 539.291369][T20500] do_sock_setsockopt+0x17c/0x1b0 [ 539.291409][T20500] __x64_sys_setsockopt+0x13d/0x1b0 [ 539.291450][T20500] do_syscall_64+0x166/0x520 [ 539.291472][T20500] ? trace_irq_disable+0x3b/0x140 [ 539.291499][T20500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.291523][T20500] ? clear_bhb_loop+0x70/0xc0 [ 539.291553][T20500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.291577][T20500] RIP: 0033:0x7f7e23f9f559 [ 539.291598][T20500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.291619][T20500] RSP: 002b:00007f7e24f2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 539.291644][T20500] RAX: ffffffffffffffda RBX: 00007f7e24226090 RCX: 00007f7e23f9f559 [ 539.291692][T20500] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 0000000000000003 [ 539.291707][T20500] RBP: 00007f7e24f2f090 R08: 000000000000006d R09: 0000000000000000 [ 539.291723][T20500] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000001 [ 539.291738][T20500] R13: 00007f7e24226128 R14: 00007f7e24226090 R15: 00007ffcd2ea8198 [ 539.291778][T20500] [ 539.682605][T20508] ip_tables: iptables: counters copy to user failed while replacing table [ 539.798272][T20514] netlink: 'syz.2.3788': attribute type 1 has an invalid length. [ 539.834969][T20512] syzkaller0: entered promiscuous mode [ 539.834995][T20512] syzkaller0: entered allmulticast mode [ 539.895778][T20517] netlink: 964 bytes leftover after parsing attributes in process `syz.0.3786'. [ 539.895836][T20517] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 540.055217][T20521] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 540.128899][T20521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.286084][T20528] ip6tnl1: entered promiscuous mode [ 540.286118][T20528] ip6tnl1: entered allmulticast mode [ 540.308326][T20530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3790'. [ 540.383733][T20530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.433532][T20530] bond0: (slave batadv1): Opening slave failed [ 540.499851][T20536] bond0: (slave gretap0): Opening slave failed [ 540.701359][T20538] batadv_slave_1: entered promiscuous mode [ 540.785389][T20537] batadv_slave_1: left promiscuous mode [ 541.000578][T20548] ip_tables: iptables: counters copy to user failed while replacing table [ 542.967664][T20599] ip_tables: iptables: counters copy to user failed while replacing table [ 543.087486][T20601] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 543.098148][T20601] syzkaller0: entered promiscuous mode [ 543.098180][T20601] syzkaller0: entered allmulticast mode [ 543.274753][T20617] syzkaller0: entered promiscuous mode [ 543.274788][T20617] syzkaller0: entered allmulticast mode [ 543.275705][ T7715] syzkaller0 speed is unknown, defaulting to 1000 [ 543.444235][T20623] syzkaller1: entered promiscuous mode [ 543.444260][T20623] syzkaller1: entered allmulticast mode [ 543.491089][T20624] __nla_validate_parse: 1 callbacks suppressed [ 543.491109][T20624] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3822'. [ 543.525270][T20629] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3822'. [ 543.991399][T20656] ip_tables: iptables: counters copy to user failed while replacing table [ 544.310552][T20666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3832'. [ 544.404944][T20670] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 544.455925][T20678] x_tables: duplicate underflow at hook 1 [ 546.445824][T20630] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 546.702207][ T30] audit: type=1804 audit(1792836464.231:13): pid=20696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3838" name="/newroot/143/cgroup.controllers" dev="tmpfs" ino=744 res=1 errno=0 [ 546.702370][ T30] audit: type=1800 audit(1792836464.231:14): pid=20696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3838" name="cgroup.controllers" dev="tmpfs" ino=744 res=0 errno=-22 [ 546.708880][ T30] audit: type=1804 audit(1792836464.241:15): pid=20695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3838" name="/newroot/143/cgroup.controllers" dev="tmpfs" ino=744 res=1 errno=0 [ 546.852804][T20692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3840'. [ 547.002125][T20710] FAULT_INJECTION: forcing a failure. [ 547.002125][T20710] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 547.002206][T20710] CPU: 1 UID: 0 PID: 20710 Comm: syz.3.3843 Not tainted syzkaller #0 PREEMPT(full) [ 547.002233][T20710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 547.002248][T20710] Call Trace: [ 547.002259][T20710] [ 547.002269][T20710] dump_stack_lvl+0xe8/0x150 [ 547.002326][T20710] should_fail_ex+0x410/0x560 [ 547.002392][T20710] prepare_alloc_pages+0x21e/0x5f0 [ 547.002462][T20710] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 547.002500][T20710] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 547.002537][T20710] ? __pfx_policy_nodemask+0x10/0x10 [ 547.002578][T20710] ? __lock_acquire+0x747/0x2de0 [ 547.002608][T20710] alloc_pages_mpol+0x21e/0x390 [ 547.002660][T20710] folio_alloc_mpol_noprof+0x39/0x160 [ 547.002700][T20710] vma_alloc_folio_noprof+0xe1/0x1e0 [ 547.002757][T20710] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 547.002797][T20710] ? lock_acquire+0x115/0x350 [ 547.002831][T20710] do_pte_missing+0x173a/0x34b0 [ 547.002885][T20710] handle_mm_fault+0x1a53/0x3750 [ 547.002922][T20710] ? handle_mm_fault+0xf1/0x3750 [ 547.002960][T20710] ? __pfx_handle_mm_fault+0x10/0x10 [ 547.002986][T20710] ? follow_page_pte+0x748/0xf10 [ 547.003022][T20710] ? __pfx_follow_page_pte+0x10/0x10 [ 547.003077][T20710] __get_user_pages+0x1670/0x2750 [ 547.003153][T20710] __gup_longterm_locked+0x3e2/0x16f0 [ 547.003181][T20710] ? lock_acquire+0x115/0x350 [ 547.003227][T20710] pin_user_pages+0x9d/0xd0 [ 547.003254][T20710] xdp_umem_pin_pages+0x11b/0x340 [ 547.003298][T20710] xdp_umem_create+0x63d/0x8b0 [ 547.003344][T20710] xsk_setsockopt+0x82f/0x960 [ 547.003382][T20710] ? __pfx_xsk_setsockopt+0x10/0x10 [ 547.003424][T20710] ? aa_sock_opt_perm+0x142/0x1e0 [ 547.003460][T20710] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 547.003482][T20710] ? __pfx_xsk_setsockopt+0x10/0x10 [ 547.003525][T20710] do_sock_setsockopt+0x17c/0x1b0 [ 547.003566][T20710] __x64_sys_setsockopt+0x13d/0x1b0 [ 547.003609][T20710] do_syscall_64+0x166/0x520 [ 547.003639][T20710] ? trace_irq_disable+0x3b/0x140 [ 547.003667][T20710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.003692][T20710] ? clear_bhb_loop+0x70/0xc0 [ 547.003721][T20710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.003745][T20710] RIP: 0033:0x7efc5e39f559 [ 547.003767][T20710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.003788][T20710] RSP: 002b:00007efc5f18f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 547.003813][T20710] RAX: ffffffffffffffda RBX: 00007efc5e625fa0 RCX: 00007efc5e39f559 [ 547.003831][T20710] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 547.003846][T20710] RBP: 00007efc5f18f090 R08: 0000000000000020 R09: 0000000000000000 [ 547.003861][T20710] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 547.003876][T20710] R13: 00007efc5e626038 R14: 00007efc5e625fa0 R15: 00007fff458de388 [ 547.003916][T20710] [ 547.290495][T20722] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3843'. [ 548.376330][T20777] FAULT_INJECTION: forcing a failure. [ 548.376330][T20777] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 548.376370][T20777] CPU: 0 UID: 0 PID: 20777 Comm: syz.2.3858 Not tainted syzkaller #0 PREEMPT(full) [ 548.376396][T20777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 548.376412][T20777] Call Trace: [ 548.376421][T20777] [ 548.376432][T20777] dump_stack_lvl+0xe8/0x150 [ 548.376473][T20777] should_fail_ex+0x410/0x560 [ 548.376514][T20777] prepare_alloc_pages+0x21e/0x5f0 [ 548.376553][T20777] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 548.376597][T20777] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 548.376635][T20777] ? __pfx_policy_nodemask+0x10/0x10 [ 548.376676][T20777] ? __lock_acquire+0x747/0x2de0 [ 548.376705][T20777] alloc_pages_mpol+0x21e/0x390 [ 548.376746][T20777] folio_alloc_mpol_noprof+0x39/0x160 [ 548.376783][T20777] vma_alloc_folio_noprof+0xe1/0x1e0 [ 548.376824][T20777] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 548.376862][T20777] ? lock_acquire+0x115/0x350 [ 548.376904][T20777] do_pte_missing+0x173a/0x34b0 [ 548.376957][T20777] handle_mm_fault+0x1a53/0x3750 [ 548.376996][T20777] ? handle_mm_fault+0xf1/0x3750 [ 548.377033][T20777] ? __pfx_handle_mm_fault+0x10/0x10 [ 548.377059][T20777] ? follow_page_pte+0x748/0xf10 [ 548.377095][T20777] ? __pfx_follow_page_pte+0x10/0x10 [ 548.377133][T20777] __get_user_pages+0x1670/0x2750 [ 548.377209][T20777] __gup_longterm_locked+0x3e2/0x16f0 [ 548.377237][T20777] ? lock_acquire+0x115/0x350 [ 548.377284][T20777] pin_user_pages+0x9d/0xd0 [ 548.377311][T20777] xdp_umem_pin_pages+0x11b/0x340 [ 548.377353][T20777] xdp_umem_create+0x63d/0x8b0 [ 548.377399][T20777] xsk_setsockopt+0x82f/0x960 [ 548.377435][T20777] ? __pfx_xsk_setsockopt+0x10/0x10 [ 548.377476][T20777] ? aa_sock_opt_perm+0x142/0x1e0 [ 548.377512][T20777] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 548.377533][T20777] ? __pfx_xsk_setsockopt+0x10/0x10 [ 548.377568][T20777] do_sock_setsockopt+0x17c/0x1b0 [ 548.377609][T20777] __x64_sys_setsockopt+0x13d/0x1b0 [ 548.377651][T20777] do_syscall_64+0x166/0x520 [ 548.377673][T20777] ? trace_irq_disable+0x3b/0x140 [ 548.377700][T20777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.377724][T20777] ? clear_bhb_loop+0x70/0xc0 [ 548.377753][T20777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.377777][T20777] RIP: 0033:0x7f06aef9f559 [ 548.377798][T20777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.377819][T20777] RSP: 002b:00007f06afe02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 548.377844][T20777] RAX: ffffffffffffffda RBX: 00007f06af225fa0 RCX: 00007f06aef9f559 [ 548.377862][T20777] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 548.377876][T20777] RBP: 00007f06afe02090 R08: 0000000000000020 R09: 0000000000000000 [ 548.377892][T20777] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 548.377915][T20777] R13: 00007f06af226038 R14: 00007f06af225fa0 R15: 00007ffd97d65b48 [ 548.377954][T20777] [ 548.788442][T20785] ipt_rpfilter: unknown options [ 548.865641][T20789] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3858'. [ 549.239254][T20801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3862'. [ 549.373471][T20810] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3863'. [ 549.380998][T20810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3863'. [ 549.694900][T20820] ip_tables: iptables: counters copy to user failed while replacing table [ 549.779410][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 549.858449][T20820] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.859121][T20820] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.974582][T20820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.993124][T20820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.221783][ T7712] syzkaller0 speed is unknown, defaulting to 1000 [ 550.221815][ T7712] syz2: Port: 1 Link DOWN [ 550.228526][ T7071] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.228709][ T7071] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.228816][ T7071] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.228897][ T7071] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.391079][T20840] FAULT_INJECTION: forcing a failure. [ 550.391079][T20840] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 550.391121][T20840] CPU: 1 UID: 0 PID: 20840 Comm: syz.1.3875 Not tainted syzkaller #0 PREEMPT(full) [ 550.391148][T20840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 550.391163][T20840] Call Trace: [ 550.391173][T20840] [ 550.391183][T20840] dump_stack_lvl+0xe8/0x150 [ 550.391224][T20840] should_fail_ex+0x410/0x560 [ 550.391265][T20840] prepare_alloc_pages+0x21e/0x5f0 [ 550.391304][T20840] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 550.391341][T20840] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 550.391377][T20840] ? __pfx_policy_nodemask+0x10/0x10 [ 550.391418][T20840] ? __lock_acquire+0x747/0x2de0 [ 550.391448][T20840] alloc_pages_mpol+0x21e/0x390 [ 550.391490][T20840] folio_alloc_mpol_noprof+0x39/0x160 [ 550.391528][T20840] vma_alloc_folio_noprof+0xe1/0x1e0 [ 550.391569][T20840] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 550.391606][T20840] ? lock_acquire+0x115/0x350 [ 550.391640][T20840] do_pte_missing+0x173a/0x34b0 [ 550.391692][T20840] handle_mm_fault+0x1a53/0x3750 [ 550.391730][T20840] ? handle_mm_fault+0xf1/0x3750 [ 550.391767][T20840] ? __pfx_handle_mm_fault+0x10/0x10 [ 550.391793][T20840] ? follow_page_pte+0x748/0xf10 [ 550.391836][T20840] ? __pfx_follow_page_pte+0x10/0x10 [ 550.391874][T20840] __get_user_pages+0x1670/0x2750 [ 550.391949][T20840] __gup_longterm_locked+0x3e2/0x16f0 [ 550.391977][T20840] ? lock_acquire+0x115/0x350 [ 550.392024][T20840] pin_user_pages+0x9d/0xd0 [ 550.392051][T20840] xdp_umem_pin_pages+0x11b/0x340 [ 550.392093][T20840] xdp_umem_create+0x63d/0x8b0 [ 550.392139][T20840] xsk_setsockopt+0x82f/0x960 [ 550.392176][T20840] ? __pfx_xsk_setsockopt+0x10/0x10 [ 550.392217][T20840] ? aa_sock_opt_perm+0x142/0x1e0 [ 550.392252][T20840] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 550.392274][T20840] ? __pfx_xsk_setsockopt+0x10/0x10 [ 550.392312][T20840] do_sock_setsockopt+0x17c/0x1b0 [ 550.392353][T20840] __x64_sys_setsockopt+0x13d/0x1b0 [ 550.392394][T20840] do_syscall_64+0x166/0x520 [ 550.392416][T20840] ? trace_irq_disable+0x3b/0x140 [ 550.392444][T20840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.392468][T20840] ? clear_bhb_loop+0x70/0xc0 [ 550.392496][T20840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.392520][T20840] RIP: 0033:0x7f7e23f9f559 [ 550.392541][T20840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.392561][T20840] RSP: 002b:00007f7e24f50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 550.392586][T20840] RAX: ffffffffffffffda RBX: 00007f7e24225fa0 RCX: 00007f7e23f9f559 [ 550.392603][T20840] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 550.392618][T20840] RBP: 00007f7e24f50090 R08: 0000000000000020 R09: 0000000000000000 [ 550.392634][T20840] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 550.392649][T20840] R13: 00007f7e24226038 R14: 00007f7e24225fa0 R15: 00007ffcd2ea8198 [ 550.392688][T20840] [ 550.754489][T20846] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3875'. [ 551.028432][T20854] rxe_eth0 speed is unknown, defaulting to 1000 [ 551.201160][T20868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3879'. [ 551.251324][T20868] gretap0: entered promiscuous mode [ 551.251599][T20868] macvlan2: entered promiscuous mode [ 551.273957][T20868] gretap0: left promiscuous mode [ 551.492581][T20854] syzkaller0 speed is unknown, defaulting to 1000 [ 551.663028][T20886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3883'. [ 552.119897][T20898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3888'. [ 552.119982][T20898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3888'. [ 552.255660][T20898] tipc: Enabling of bearer rejected, failed to enable media [ 552.411172][T20910] ip_tables: iptables: counters copy to user failed while replacing table [ 552.507939][T20903] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 552.805296][T20928] netlink: 'syz.2.3899': attribute type 3 has an invalid length. [ 552.942334][T20934] netlink: 'syz.2.3899': attribute type 3 has an invalid length. [ 554.729922][T20925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 554.731170][T20931] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 554.733158][T20931] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 554.975216][T20955] FAULT_INJECTION: forcing a failure. [ 554.975216][T20955] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 554.975256][T20955] CPU: 1 UID: 0 PID: 20955 Comm: syz.1.3906 Not tainted syzkaller #0 PREEMPT(full) [ 554.975283][T20955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 554.975298][T20955] Call Trace: [ 554.975309][T20955] [ 554.975320][T20955] dump_stack_lvl+0xe8/0x150 [ 554.975365][T20955] should_fail_ex+0x410/0x560 [ 554.975407][T20955] prepare_alloc_pages+0x21e/0x5f0 [ 554.975447][T20955] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 554.975484][T20955] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 554.975522][T20955] ? __pfx_policy_nodemask+0x10/0x10 [ 554.975564][T20955] ? __lock_acquire+0x747/0x2de0 [ 554.975602][T20955] alloc_pages_mpol+0x21e/0x390 [ 554.975646][T20955] folio_alloc_mpol_noprof+0x39/0x160 [ 554.975685][T20955] vma_alloc_folio_noprof+0xe1/0x1e0 [ 554.975725][T20955] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 554.975763][T20955] ? lock_acquire+0x115/0x350 [ 554.975796][T20955] do_pte_missing+0x173a/0x34b0 [ 554.975848][T20955] handle_mm_fault+0x1a53/0x3750 [ 554.975886][T20955] ? handle_mm_fault+0xf1/0x3750 [ 554.975924][T20955] ? __pfx_handle_mm_fault+0x10/0x10 [ 554.975951][T20955] ? follow_page_pte+0x748/0xf10 [ 554.975986][T20955] ? __pfx_follow_page_pte+0x10/0x10 [ 554.976024][T20955] __get_user_pages+0x1670/0x2750 [ 554.976100][T20955] __gup_longterm_locked+0x3e2/0x16f0 [ 554.976129][T20955] ? lock_acquire+0x115/0x350 [ 554.976176][T20955] pin_user_pages+0x9d/0xd0 [ 554.976204][T20955] xdp_umem_pin_pages+0x11b/0x340 [ 554.976247][T20955] xdp_umem_create+0x63d/0x8b0 [ 554.976293][T20955] xsk_setsockopt+0x82f/0x960 [ 554.976329][T20955] ? __pfx_xsk_setsockopt+0x10/0x10 [ 554.976370][T20955] ? aa_sock_opt_perm+0x142/0x1e0 [ 554.976406][T20955] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 554.976427][T20955] ? __pfx_xsk_setsockopt+0x10/0x10 [ 554.976462][T20955] do_sock_setsockopt+0x17c/0x1b0 [ 554.976503][T20955] __x64_sys_setsockopt+0x13d/0x1b0 [ 554.976544][T20955] do_syscall_64+0x166/0x520 [ 554.976566][T20955] ? trace_irq_disable+0x3b/0x140 [ 554.976603][T20955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.976627][T20955] ? clear_bhb_loop+0x70/0xc0 [ 554.976657][T20955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.976680][T20955] RIP: 0033:0x7f7e23f9f559 [ 554.976702][T20955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.976724][T20955] RSP: 002b:00007f7e24f50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 554.976748][T20955] RAX: ffffffffffffffda RBX: 00007f7e24225fa0 RCX: 00007f7e23f9f559 [ 554.976765][T20955] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 554.976780][T20955] RBP: 00007f7e24f50090 R08: 0000000000000020 R09: 0000000000000000 [ 554.976795][T20955] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 554.976823][T20955] R13: 00007f7e24226038 R14: 00007f7e24225fa0 R15: 00007ffcd2ea8198 [ 554.976861][T20955] [ 554.989111][T20954] ip_tables: iptables: counters copy to user failed while replacing table [ 554.989680][T20947] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3901'. [ 554.989760][T20947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3901'. [ 555.380205][T20958] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3906'. [ 555.433669][T20953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3905'. [ 555.541333][T20953] ipvlan2: entered allmulticast mode [ 555.541360][T20953] syz_tun: entered allmulticast mode [ 556.198733][T20965] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3907'. [ 556.503762][T20987] vlan2: entered promiscuous mode [ 556.503801][T20987] bond0: entered promiscuous mode [ 556.503819][T20987] bond_slave_0: entered promiscuous mode [ 556.506564][T20987] bond_slave_1: entered promiscuous mode [ 556.744968][T20997] netlink: 'syz.1.3913': attribute type 10 has an invalid length. [ 556.744993][T20997] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3913'. [ 556.745392][T20997] netlink: 'syz.1.3913': attribute type 10 has an invalid length. [ 556.745412][T20997] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3913'. [ 556.745769][T20997] netlink: 'syz.1.3913': attribute type 10 has an invalid length. [ 556.745787][T20997] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3913'. [ 556.746100][T20997] netlink: 'syz.1.3913': attribute type 10 has an invalid length. [ 556.746117][T20997] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3913'. [ 556.830279][T20997] netlink: 'syz.1.3913': attribute type 10 has an invalid length. [ 556.830302][T20997] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3913'. [ 556.830673][T20997] netlink: 'syz.1.3913': attribute type 10 has an invalid length. [ 556.831010][T20997] netlink: 'syz.1.3913': attribute type 10 has an invalid length. [ 556.831329][T20997] netlink: 'syz.1.3913': attribute type 10 has an invalid length. [ 557.000859][T21008] syzkaller1: entered promiscuous mode [ 557.000884][T21008] syzkaller1: entered allmulticast mode [ 557.416306][T21031] FAULT_INJECTION: forcing a failure. [ 557.416306][T21031] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 557.416356][T21031] CPU: 0 UID: 0 PID: 21031 Comm: syz.3.3920 Not tainted syzkaller #0 PREEMPT(full) [ 557.416382][T21031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 557.416401][T21031] Call Trace: [ 557.416410][T21031] [ 557.416421][T21031] dump_stack_lvl+0xe8/0x150 [ 557.416461][T21031] should_fail_ex+0x410/0x560 [ 557.416502][T21031] prepare_alloc_pages+0x21e/0x5f0 [ 557.416541][T21031] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 557.416580][T21031] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 557.416617][T21031] ? __pfx_policy_nodemask+0x10/0x10 [ 557.416658][T21031] ? __lock_acquire+0x747/0x2de0 [ 557.416689][T21031] alloc_pages_mpol+0x21e/0x390 [ 557.416732][T21031] folio_alloc_mpol_noprof+0x39/0x160 [ 557.416770][T21031] vma_alloc_folio_noprof+0xe1/0x1e0 [ 557.416809][T21031] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 557.416846][T21031] ? lock_acquire+0x115/0x350 [ 557.416880][T21031] do_pte_missing+0x173a/0x34b0 [ 557.416928][T21031] handle_mm_fault+0x1a53/0x3750 [ 557.416967][T21031] ? handle_mm_fault+0xf1/0x3750 [ 557.417004][T21031] ? __pfx_handle_mm_fault+0x10/0x10 [ 557.417029][T21031] ? follow_page_pte+0x748/0xf10 [ 557.417065][T21031] ? __pfx_follow_page_pte+0x10/0x10 [ 557.417102][T21031] __get_user_pages+0x1670/0x2750 [ 557.417178][T21031] __gup_longterm_locked+0x3e2/0x16f0 [ 557.417206][T21031] ? lock_acquire+0x115/0x350 [ 557.417252][T21031] pin_user_pages+0x9d/0xd0 [ 557.417280][T21031] xdp_umem_pin_pages+0x11b/0x340 [ 557.417332][T21031] xdp_umem_create+0x63d/0x8b0 [ 557.417379][T21031] xsk_setsockopt+0x82f/0x960 [ 557.417416][T21031] ? __pfx_xsk_setsockopt+0x10/0x10 [ 557.417457][T21031] ? aa_sock_opt_perm+0x142/0x1e0 [ 557.417491][T21031] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 557.417513][T21031] ? __pfx_xsk_setsockopt+0x10/0x10 [ 557.417557][T21031] do_sock_setsockopt+0x17c/0x1b0 [ 557.417598][T21031] __x64_sys_setsockopt+0x13d/0x1b0 [ 557.417640][T21031] do_syscall_64+0x166/0x520 [ 557.417662][T21031] ? trace_irq_disable+0x3b/0x140 [ 557.417690][T21031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.417714][T21031] ? clear_bhb_loop+0x70/0xc0 [ 557.417743][T21031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.417767][T21031] RIP: 0033:0x7efc5e39f559 [ 557.417789][T21031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.417808][T21031] RSP: 002b:00007efc5f18f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 557.417834][T21031] RAX: ffffffffffffffda RBX: 00007efc5e625fa0 RCX: 00007efc5e39f559 [ 557.417852][T21031] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 557.417866][T21031] RBP: 00007efc5f18f090 R08: 0000000000000020 R09: 0000000000000000 [ 557.417881][T21031] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 557.417902][T21031] R13: 00007efc5e626038 R14: 00007efc5e625fa0 R15: 00007fff458de388 [ 557.417941][T21031] [ 557.891366][T21039] syzkaller1: entered promiscuous mode [ 557.891394][T21039] syzkaller1: entered allmulticast mode [ 558.002989][T21039] ip_tables: iptables: counters copy to user failed while replacing table [ 558.710184][T21089] FAULT_INJECTION: forcing a failure. [ 558.710184][T21089] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 558.710223][T21089] CPU: 0 UID: 0 PID: 21089 Comm: syz.3.3936 Not tainted syzkaller #0 PREEMPT(full) [ 558.710251][T21089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 558.710266][T21089] Call Trace: [ 558.710275][T21089] [ 558.710286][T21089] dump_stack_lvl+0xe8/0x150 [ 558.710327][T21089] should_fail_ex+0x410/0x560 [ 558.710368][T21089] prepare_alloc_pages+0x21e/0x5f0 [ 558.710417][T21089] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 558.710455][T21089] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 558.710494][T21089] ? __pfx_policy_nodemask+0x10/0x10 [ 558.710536][T21089] ? __lock_acquire+0x747/0x2de0 [ 558.710568][T21089] alloc_pages_mpol+0x21e/0x390 [ 558.710612][T21089] folio_alloc_mpol_noprof+0x39/0x160 [ 558.710651][T21089] vma_alloc_folio_noprof+0xe1/0x1e0 [ 558.710690][T21089] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 558.710728][T21089] ? lock_acquire+0x115/0x350 [ 558.710762][T21089] do_pte_missing+0x173a/0x34b0 [ 558.710816][T21089] handle_mm_fault+0x1a53/0x3750 [ 558.710855][T21089] ? handle_mm_fault+0xf1/0x3750 [ 558.710892][T21089] ? __pfx_handle_mm_fault+0x10/0x10 [ 558.710918][T21089] ? follow_page_pte+0x748/0xf10 [ 558.710953][T21089] ? __pfx_follow_page_pte+0x10/0x10 [ 558.710991][T21089] __get_user_pages+0x1670/0x2750 [ 558.711067][T21089] __gup_longterm_locked+0x3e2/0x16f0 [ 558.711095][T21089] ? lock_acquire+0x115/0x350 [ 558.711139][T21089] pin_user_pages+0x9d/0xd0 [ 558.711167][T21089] xdp_umem_pin_pages+0x11b/0x340 [ 558.711210][T21089] xdp_umem_create+0x63d/0x8b0 [ 558.711255][T21089] xsk_setsockopt+0x82f/0x960 [ 558.711292][T21089] ? __pfx_xsk_setsockopt+0x10/0x10 [ 558.711334][T21089] ? aa_sock_opt_perm+0x142/0x1e0 [ 558.711369][T21089] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 558.711400][T21089] ? __pfx_xsk_setsockopt+0x10/0x10 [ 558.711435][T21089] do_sock_setsockopt+0x17c/0x1b0 [ 558.711476][T21089] __x64_sys_setsockopt+0x13d/0x1b0 [ 558.711518][T21089] do_syscall_64+0x166/0x520 [ 558.711541][T21089] ? trace_irq_disable+0x3b/0x140 [ 558.711569][T21089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.711593][T21089] ? clear_bhb_loop+0x70/0xc0 [ 558.711623][T21089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.711646][T21089] RIP: 0033:0x7efc5e39f559 [ 558.711668][T21089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.711688][T21089] RSP: 002b:00007efc5f18f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 558.711714][T21089] RAX: ffffffffffffffda RBX: 00007efc5e625fa0 RCX: 00007efc5e39f559 [ 558.711731][T21089] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 558.711746][T21089] RBP: 00007efc5f18f090 R08: 0000000000000020 R09: 0000000000000000 [ 558.711761][T21089] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 558.711777][T21089] R13: 00007efc5e626038 R14: 00007efc5e625fa0 R15: 00007fff458de388 [ 558.711816][T21089] [ 560.081497][T21137] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 560.105960][T21135] __nla_validate_parse: 10 callbacks suppressed [ 560.105985][T21135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3949'. [ 560.158983][T21139] FAULT_INJECTION: forcing a failure. [ 560.158983][T21139] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 560.159023][T21139] CPU: 1 UID: 0 PID: 21139 Comm: syz.4.3953 Not tainted syzkaller #0 PREEMPT(full) [ 560.159049][T21139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 560.159064][T21139] Call Trace: [ 560.159073][T21139] [ 560.159084][T21139] dump_stack_lvl+0xe8/0x150 [ 560.159125][T21139] should_fail_ex+0x410/0x560 [ 560.159165][T21139] prepare_alloc_pages+0x21e/0x5f0 [ 560.159213][T21139] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 560.159250][T21139] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 560.159288][T21139] ? __pfx_policy_nodemask+0x10/0x10 [ 560.159328][T21139] ? __lock_acquire+0x747/0x2de0 [ 560.159358][T21139] alloc_pages_mpol+0x21e/0x390 [ 560.159400][T21139] folio_alloc_mpol_noprof+0x39/0x160 [ 560.159439][T21139] vma_alloc_folio_noprof+0xe1/0x1e0 [ 560.159479][T21139] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 560.159517][T21139] ? lock_acquire+0x115/0x350 [ 560.159557][T21139] do_pte_missing+0x173a/0x34b0 [ 560.159609][T21139] handle_mm_fault+0x1a53/0x3750 [ 560.159647][T21139] ? handle_mm_fault+0xf1/0x3750 [ 560.159685][T21139] ? __pfx_handle_mm_fault+0x10/0x10 [ 560.159711][T21139] ? follow_page_pte+0x748/0xf10 [ 560.159746][T21139] ? __pfx_follow_page_pte+0x10/0x10 [ 560.159783][T21139] __get_user_pages+0x1670/0x2750 [ 560.159858][T21139] __gup_longterm_locked+0x3e2/0x16f0 [ 560.159890][T21139] ? lock_acquire+0x115/0x350 [ 560.159936][T21139] pin_user_pages+0x9d/0xd0 [ 560.159964][T21139] xdp_umem_pin_pages+0x11b/0x340 [ 560.160007][T21139] xdp_umem_create+0x63d/0x8b0 [ 560.160052][T21139] xsk_setsockopt+0x82f/0x960 [ 560.160088][T21139] ? __pfx_xsk_setsockopt+0x10/0x10 [ 560.160128][T21139] ? aa_sock_opt_perm+0x142/0x1e0 [ 560.160163][T21139] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 560.160193][T21139] ? __pfx_xsk_setsockopt+0x10/0x10 [ 560.160227][T21139] do_sock_setsockopt+0x17c/0x1b0 [ 560.160268][T21139] __x64_sys_setsockopt+0x13d/0x1b0 [ 560.160310][T21139] do_syscall_64+0x166/0x520 [ 560.160332][T21139] ? trace_irq_disable+0x3b/0x140 [ 560.160359][T21139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.160383][T21139] ? clear_bhb_loop+0x70/0xc0 [ 560.160413][T21139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.160436][T21139] RIP: 0033:0x7f128cb9f559 [ 560.160458][T21139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.160479][T21139] RSP: 002b:00007f128db3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 560.160504][T21139] RAX: ffffffffffffffda RBX: 00007f128ce25fa0 RCX: 00007f128cb9f559 [ 560.160521][T21139] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 560.160536][T21139] RBP: 00007f128db3d090 R08: 0000000000000020 R09: 0000000000000000 [ 560.160551][T21139] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 560.160565][T21139] R13: 00007f128ce26038 R14: 00007f128ce25fa0 R15: 00007ffd250637d8 [ 560.160605][T21139] [ 560.327345][T21145] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3953'. [ 560.974751][T21167] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3957'. [ 560.975000][T21167] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 560.975063][T21164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3959'. [ 560.988494][T21169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3957'. [ 561.065608][T21166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3956'. [ 561.221565][T21180] validate_nla: 1 callbacks suppressed [ 561.221590][T21180] netlink: 'syz.0.3962': attribute type 1 has an invalid length. [ 561.309183][T21180] 8021q: adding VLAN 0 to HW filter on device bond2 [ 561.452533][T21180] bond2: (slave geneve2): making interface the new active one [ 561.454543][T21181] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3963'. [ 561.467386][T21181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3963'. [ 561.488862][T21180] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 561.529400][T21188] pim6reg: entered allmulticast mode [ 561.529639][T21188] pim6reg: left allmulticast mode [ 562.100306][T21207] siw: device registration error -23 [ 562.129161][T21207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3967'. [ 562.295514][T21211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3969'. [ 563.727480][T21292] ip_tables: iptables: counters copy to user failed while replacing table [ 563.948665][T21305] batman_adv: batadv0: Interface deactivated: veth0 [ 563.948691][T21305] batman_adv: batadv0: Removing interface: veth0 [ 564.014488][T21305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 564.348347][T21327] ip_tables: iptables: counters copy to user failed while replacing table [ 564.521142][T21334] netlink: 'syz.3.4008': attribute type 1 has an invalid length. [ 564.623250][ T30] audit: type=1800 audit(1792836482.151:16): pid=21341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4010" name="blkio.bfq.time_recursive" dev="tmpfs" ino=715 res=0 errno=-22 [ 565.038355][T21373] netlink: 'syz.2.4016': attribute type 1 has an invalid length. [ 565.128888][T21373] bond2: entered promiscuous mode [ 565.131477][T21373] 8021q: adding VLAN 0 to HW filter on device bond2 [ 565.163528][T21373] syzkaller0: left promiscuous mode [ 565.163553][T21373] syzkaller0: left allmulticast mode [ 565.165950][ T5936] syzkaller0 speed is unknown, defaulting to 1000 [ 565.165974][ T5936] syz2: Port: 1 Link ACTIVE [ 565.213822][T21383] FAULT_INJECTION: forcing a failure. [ 565.213822][T21383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.213859][T21383] CPU: 1 UID: 0 PID: 21383 Comm: syz.4.4020 Not tainted syzkaller #0 PREEMPT(full) [ 565.213886][T21383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 565.213901][T21383] Call Trace: [ 565.213910][T21383] [ 565.213921][T21383] dump_stack_lvl+0xe8/0x150 [ 565.213961][T21383] should_fail_ex+0x410/0x560 [ 565.214005][T21383] _copy_to_user+0x31/0xb0 [ 565.214043][T21383] simple_read_from_buffer+0xe1/0x170 [ 565.214076][T21383] proc_fail_nth_read+0x1bb/0x230 [ 565.214113][T21383] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 565.214152][T21383] ? rw_verify_area+0x24a/0x4c0 [ 565.214180][T21383] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 565.214213][T21383] vfs_read+0x213/0xa80 [ 565.214246][T21383] ? __pfx___mutex_lock+0x10/0x10 [ 565.214272][T21383] ? __pfx_vfs_read+0x10/0x10 [ 565.214301][T21383] ? __fget_files+0x2a/0x420 [ 565.214325][T21383] ? __fget_files+0x3a2/0x420 [ 565.214348][T21383] ? __fget_files+0x2a/0x420 [ 565.214378][T21383] ? fdget+0x1ac/0x250 [ 565.214412][T21383] ksys_read+0x150/0x270 [ 565.214455][T21383] ? __pfx_ksys_read+0x10/0x10 [ 565.214498][T21383] do_syscall_64+0x166/0x520 [ 565.214521][T21383] ? trace_irq_disable+0x3b/0x140 [ 565.214550][T21383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.214574][T21383] ? clear_bhb_loop+0x70/0xc0 [ 565.214604][T21383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.214628][T21383] RIP: 0033:0x7f128cb5fd8e [ 565.214650][T21383] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 565.214670][T21383] RSP: 002b:00007f128db3cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 565.214695][T21383] RAX: ffffffffffffffda RBX: 00007f128db3d6c0 RCX: 00007f128cb5fd8e [ 565.214713][T21383] RDX: 000000000000000f RSI: 00007f128db3d0a0 RDI: 0000000000000004 [ 565.214728][T21383] RBP: 00007f128db3d090 R08: 0000000000000000 R09: 0000000000000000 [ 565.214743][T21383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.214757][T21383] R13: 00007f128ce26038 R14: 00007f128ce25fa0 R15: 00007ffd250637d8 [ 565.214796][T21383] [ 565.556043][T21395] sctp: [Deprecated]: syz.4.4021 (pid 21395) Use of struct sctp_assoc_value in delayed_ack socket option. [ 565.556043][T21395] Use struct sctp_sack_info instead [ 565.764500][T21405] __nla_validate_parse: 172 callbacks suppressed [ 565.764524][T21405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4023'. [ 565.764768][T21405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4023'. [ 565.767018][T21405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4023'. [ 565.767256][T21405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4023'. [ 565.767478][T21405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4023'. [ 565.767717][T21405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4023'. [ 565.767941][T21405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4023'. [ 565.768179][T21405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4023'. [ 565.851670][T21405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4023'. [ 565.851912][T21405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4023'. [ 568.198234][T21384] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 568.347329][T21432] ip_tables: iptables: counters copy to user failed while replacing table [ 568.442084][T21436] xt_IDLETIMER: label is empty or not nul-terminated [ 568.471335][T21442] xt_IDLETIMER: label is empty or not nul-terminated [ 568.586459][T21450] syzkaller1: entered promiscuous mode [ 568.586484][T21450] syzkaller1: entered allmulticast mode [ 569.457981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 569.678854][T21516] netlink: 'syz.1.4053': attribute type 1 has an invalid length. [ 570.024601][T21540] veth1_to_bond: entered promiscuous mode [ 570.050957][T21540] veth1_to_bond (unregistering): left promiscuous mode [ 570.075706][T21540] bond0: (slave bond_slave_1): Releasing backup interface [ 570.084334][T21540] bond_slave_1 (unregistering): left promiscuous mode [ 571.235651][T21575] __nla_validate_parse: 27 callbacks suppressed [ 571.235676][T21575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4067'. [ 571.482486][T21589] atomic_op ffff88802bf359e0 conn xmit_atomic 0000000000000000 [ 571.569604][T21595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4072'. [ 571.570039][T21595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4072'. [ 571.692847][T21595] netlink: 'syz.0.4072': attribute type 4 has an invalid length. [ 571.906200][T21607] netlink: 'syz.1.4075': attribute type 11 has an invalid length. [ 572.031778][T21611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4076'. [ 572.031809][T21611] block nbd5: Unsupported socket: should be TCP or UNIX. [ 572.196152][T21618] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 572.505955][T21627] FAULT_INJECTION: forcing a failure. [ 572.505955][T21627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.505996][T21627] CPU: 0 UID: 0 PID: 21627 Comm: syz.4.4080 Not tainted syzkaller #0 PREEMPT(full) [ 572.506023][T21627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 572.506039][T21627] Call Trace: [ 572.506049][T21627] [ 572.506059][T21627] dump_stack_lvl+0xe8/0x150 [ 572.506100][T21627] should_fail_ex+0x410/0x560 [ 572.506143][T21627] _copy_from_user+0x2d/0xb0 [ 572.506180][T21627] core_sys_select+0x509/0xb40 [ 572.506216][T21627] ? get_pid_task+0x20/0x1f0 [ 572.506257][T21627] ? __pfx_core_sys_select+0x10/0x10 [ 572.506324][T21627] ? __pfx_set_user_sigmask+0x10/0x10 [ 572.506352][T21627] ? kmem_cache_free+0x182/0x650 [ 572.506397][T21627] __se_sys_pselect6+0x267/0x320 [ 572.506449][T21627] ? __pfx___se_sys_pselect6+0x10/0x10 [ 572.506497][T21627] ? __pfx_ksys_write+0x10/0x10 [ 572.506533][T21627] ? __x64_sys_pselect6+0x21/0xf0 [ 572.506573][T21627] do_syscall_64+0x166/0x520 [ 572.506598][T21627] ? trace_irq_disable+0x3b/0x140 [ 572.506627][T21627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.506652][T21627] ? clear_bhb_loop+0x70/0xc0 [ 572.506682][T21627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.506707][T21627] RIP: 0033:0x7f128cb9f559 [ 572.506731][T21627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.506751][T21627] RSP: 002b:00007f128db3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 572.506778][T21627] RAX: ffffffffffffffda RBX: 00007f128ce25fa0 RCX: 00007f128cb9f559 [ 572.506796][T21627] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 572.506812][T21627] RBP: 00007f128db3d090 R08: 0000000000000000 R09: 0000000000000000 [ 572.506828][T21627] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 572.506844][T21627] R13: 00007f128ce26038 R14: 00007f128ce25fa0 R15: 00007ffd250637d8 [ 572.506885][T21627] [ 572.800020][T21629] ip_tables: iptables: counters copy to user failed while replacing table [ 574.604310][T21645] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4082'. [ 575.277837][T21673] ip_tables: iptables: counters copy to user failed while replacing table [ 575.510950][T21685] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4099'. [ 575.528209][T21685] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4099'. [ 575.816640][T21703] batman_adv: batadv0: Adding interface: syzkaller0 [ 575.816662][T21703] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.816696][T21703] batman_adv: batadv0: Interface activated: syzkaller0 [ 576.022822][T21698] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 576.077917][T21698] batman_adv: batadv0: Removing interface: syzkaller0 [ 576.168964][T21708] bond3 (unregistering): Released all slaves [ 576.224049][T21717] ip_tables: iptables: counters copy to user failed while replacing table [ 576.295054][T21711] tc_dump_action: action bad kind [ 576.329980][T21723] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4110'. [ 576.779283][T21742] netlink: 'syz.0.4118': attribute type 4 has an invalid length. [ 576.779504][T21742] netlink: 'syz.0.4118': attribute type 4 has an invalid length. [ 577.032732][T21759] ip_tables: iptables: counters copy to user failed while replacing table [ 577.048360][T21760] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4120'. [ 577.050455][T21760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4120'. [ 577.091348][ T30] audit: type=1800 audit(1792836494.621:17): pid=21761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4121" name="blkio.bfq.time" dev="tmpfs" ino=1236 res=0 errno=-22 [ 577.128239][T21761] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4121'. [ 577.232695][T21765] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 577.356188][T21731] FAULT_INJECTION: forcing a failure. [ 577.356188][T21731] name fail_futex, interval 1, probability 0, space 0, times 1 [ 577.356230][T21731] CPU: 0 UID: 0 PID: 21731 Comm: syz.4.4113 Not tainted syzkaller #0 PREEMPT(full) [ 577.356255][T21731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 577.356269][T21731] Call Trace: [ 577.356278][T21731] [ 577.356289][T21731] dump_stack_lvl+0xe8/0x150 [ 577.356329][T21731] should_fail_ex+0x410/0x560 [ 577.356369][T21731] get_futex_key+0x1ab/0x1410 [ 577.356414][T21731] ? __pfx_get_futex_key+0x10/0x10 [ 577.356457][T21731] futex_wake+0x119/0x5f0 [ 577.356488][T21731] ? __pfx_futex_wake+0x10/0x10 [ 577.356524][T21731] ? mm_exit_exec_release+0x20/0x290 [ 577.356558][T21731] do_futex+0x458/0x4e0 [ 577.356598][T21731] ? __pfx_do_futex+0x10/0x10 [ 577.356637][T21731] ? __might_fault+0xaf/0x130 [ 577.356674][T21731] mm_exit_exec_release+0x10d/0x290 [ 577.356707][T21731] exit_mm+0x50/0x240 [ 577.356746][T21731] do_exit+0x6a8/0x2360 [ 577.356788][T21731] ? __pfx_do_exit+0x10/0x10 [ 577.356826][T21731] ? do_raw_spin_lock+0x12b/0x2f0 [ 577.356872][T21731] do_group_exit+0x22d/0x2f0 [ 577.356892][T21731] ? _raw_spin_unlock_irq+0x23/0x50 [ 577.357008][T21731] get_signal+0x1216/0x12c0 [ 577.357061][T21731] arch_do_signal_or_restart+0xbb/0x860 [ 577.357101][T21731] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 577.357167][T21731] exit_to_user_mode_loop+0x10e/0x770 [ 577.357205][T21731] ? rcu_is_watching+0x16/0xb0 [ 577.357240][T21731] do_syscall_64+0x328/0x520 [ 577.357262][T21731] ? trace_irq_disable+0x3b/0x140 [ 577.357290][T21731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.357314][T21731] ? clear_bhb_loop+0x70/0xc0 [ 577.357342][T21731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.357365][T21731] RIP: 0033:0x7f128cb9f559 [ 577.357387][T21731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.357407][T21731] RSP: 002b:00007f128db3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 577.357432][T21731] RAX: fffffffffffffdfe RBX: 00007f128ce25fa0 RCX: 00007f128cb9f559 [ 577.357449][T21731] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 577.357465][T21731] RBP: 00007f128db3d090 R08: 0000000000000000 R09: 0000000000000000 [ 577.357479][T21731] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 577.357494][T21731] R13: 00007f128ce26038 R14: 00007f128ce25fa0 R15: 00007ffd250637d8 [ 577.357533][T21731] [ 577.738981][T21774] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4125'. [ 577.739133][T21774] macvlan0: entered promiscuous mode [ 577.739596][T21774] netlink: 'syz.0.4125': attribute type 1 has an invalid length. [ 577.739630][T21774] netlink: 'syz.0.4125': attribute type 2 has an invalid length. [ 577.793764][T21774] bond3 (unregistering): Released all slaves [ 578.056441][T21785] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4129'. [ 578.158182][T21780] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 578.162623][T21780] bond4 (unregistering): Released all slaves [ 578.222355][T21787] syzkaller0: entered promiscuous mode [ 578.222384][T21787] syzkaller0: entered allmulticast mode [ 578.225767][T21787] tipc: Enabled bearer , priority 0 [ 578.362450][T21793] tipc: Resetting bearer [ 578.489645][T21796] ip_tables: iptables: counters copy to user failed while replacing table [ 578.530351][T21786] tipc: Resetting bearer [ 578.579116][T21786] tipc: Disabling bearer [ 578.724985][T21801] xt_hashlimit: size too large, truncated to 1048576 [ 578.905662][T21809] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 578.927371][T21809] bond3: (slave lo): Enslaving as an active interface with an up link [ 578.929676][T21809] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 579.310413][T21820] syzkaller1: entered allmulticast mode [ 580.464900][T21847] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 580.485099][T21850] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4147'. [ 580.487583][T21850] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4147'. [ 580.514324][ T53] Bluetooth: hci1: command 0x0c24 tx timeout [ 580.533550][T21853] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 580.659180][T21858] netlink: 'syz.1.4149': attribute type 29 has an invalid length. [ 581.221574][T21879] syzkaller0: entered promiscuous mode [ 581.221613][T21879] syzkaller0: entered allmulticast mode [ 581.291374][T21888] Bluetooth: ISO socket layer initialized [ 581.620218][T21904] gretap1: entered promiscuous mode [ 581.726386][T21908] netlink: 'syz.4.4164': attribute type 1 has an invalid length. [ 581.735341][T21908] netlink: 'syz.4.4164': attribute type 3 has an invalid length. [ 582.602642][T21931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 582.853110][T21959] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4177'. [ 582.890792][T21963] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4178'. [ 582.921884][T21964] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 582.926312][T21964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4177'. [ 582.926343][T21964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4177'. [ 582.973668][T21964] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4177'. [ 582.973702][T21964] nbd: device at index 64 is going down [ 583.108674][T21856] udevd[21856]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 583.116232][T21969] netlink: 'syz.3.4179': attribute type 1 has an invalid length. [ 583.140078][T21863] udevd[21863]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 583.202921][T21969] bond2: entered promiscuous mode [ 583.205059][T21969] 8021q: adding VLAN 0 to HW filter on device bond2 [ 583.265363][T21973] syzkaller1: entered promiscuous mode [ 583.265388][T21973] syzkaller1: entered allmulticast mode [ 583.305558][T21969] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 584.172631][ T5642] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 584.242042][T22000] tipc: Started in network mode [ 584.242081][T22000] tipc: Node identity ac14140f, cluster identity 4711 [ 584.242443][T22000] tipc: New replicast peer: 255.255.255.255 [ 584.245687][T22000] tipc: Enabled bearer , priority 10 [ 584.772154][T22031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4197'. [ 585.194536][T22051] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4205'. [ 585.213656][T22051] netlink: 'syz.0.4205': attribute type 1 has an invalid length. [ 585.213682][T22051] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4205'. [ 585.356887][ T5936] tipc: Node number set to 2886997007 [ 585.363261][ T30] audit: type=1800 audit(1792836502.891:18): pid=22061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4207" name="blkio.bfq.time_recursive" dev="tmpfs" ino=920 res=0 errno=-22 [ 585.404842][T22061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4207'. [ 585.467109][T22065] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4209'. [ 585.467134][T22065] tipc: Invalid UDP bearer configuration [ 585.467177][T22065] tipc: Enabling of bearer rejected, failed to enable media [ 585.470762][T22065] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 585.673791][ T5642] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 586.859154][T22146] syzkaller1: entered promiscuous mode [ 586.859180][T22146] syzkaller1: entered allmulticast mode [ 587.602694][T22183] netlink: 'syz.3.4248': attribute type 6 has an invalid length. [ 587.602724][T22183] IPv6: NLM_F_CREATE should be specified when creating new route [ 587.689181][T22191] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 588.348327][ T53] Bluetooth: hci2: command 0x0405 tx timeout [ 589.505118][T22201] __nla_validate_parse: 5 callbacks suppressed [ 589.505136][T22201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4251'. [ 590.173349][T22154] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 590.330419][T22204] netlink: 'syz.4.4252': attribute type 4 has an invalid length. [ 590.330855][T22205] netlink: 'syz.4.4252': attribute type 4 has an invalid length. [ 590.548678][T22217] netlink: 'syz.2.4256': attribute type 1 has an invalid length. [ 590.739650][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 590.961319][T22247] syzkaller1: entered promiscuous mode [ 590.961346][T22247] syzkaller1: entered allmulticast mode [ 591.464254][T22255] netlink: 'syz.1.4266': attribute type 1 has an invalid length. [ 591.513134][T22255] 8021q: adding VLAN 0 to HW filter on device bond5 [ 591.524526][T22261] netlink: 'syz.0.4268': attribute type 1 has an invalid length. [ 591.575832][T22261] 8021q: adding VLAN 0 to HW filter on device bond4 [ 591.673687][T22265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4264'. [ 591.692041][T22250] virtio_blk virtio6: 1/0/0 default/read/poll queues [ 591.696011][T22250] virtio_blk virtio6: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 591.753478][T22255] bond5: (slave ip6erspan0): making interface the new active one [ 591.780545][T22255] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 591.796183][T22263] bond4: entered promiscuous mode [ 591.796209][T22263] bond4: entered allmulticast mode [ 592.160283][T22281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.160312][T22281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.188887][T22281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.188911][T22281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.417977][T22294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4277'. [ 592.513695][T22298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4276'. [ 592.513722][T22298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4276'. [ 592.564668][T22294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4277'. [ 592.564711][T22294] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4277'. [ 592.564730][T22294] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4277'. [ 592.703817][T22294] ip6tnl1: entered allmulticast mode [ 592.722580][ T63] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 592.722882][ T63] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 592.747774][ T5936] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 592.886940][T22305] netlink: 'syz.1.4281': attribute type 1 has an invalid length. [ 592.886966][T22305] netlink: 'syz.1.4281': attribute type 1 has an invalid length. [ 592.886982][T22305] netlink: 'syz.1.4281': attribute type 1 has an invalid length. [ 592.886999][T22305] netlink: 272 bytes leftover after parsing attributes in process `syz.1.4281'. [ 592.887136][T22305] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4281'. [ 592.943933][ T5936] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 593.078098][ T7715] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 593.299140][T22332] netlink: 'syz.2.4291': attribute type 10 has an invalid length. [ 593.448691][T22332] team0 (unregistering): Port device team_slave_0 removed [ 593.478856][T22332] team0 (unregistering): Port device team_slave_1 removed [ 594.344377][T22362] sctp: [Deprecated]: syz.0.4300 (pid 22362) Use of int in max_burst socket option. [ 594.344377][T22362] Use struct sctp_assoc_value instead [ 594.469139][T22368] xt_IDLETIMER: label is empty or not nul-terminated [ 595.035513][T22382] syzkaller1: entered promiscuous mode [ 595.035540][T22382] syzkaller1: entered allmulticast mode [ 595.152417][T22413] __nla_validate_parse: 6 callbacks suppressed [ 595.152443][T22413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4310'. [ 595.414031][T22426] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4314'. [ 595.414058][T22426] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4314'. [ 595.435661][T22425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4315'. [ 595.666532][T22437] syzkaller0: entered promiscuous mode [ 595.666550][T22437] syzkaller0: entered allmulticast mode [ 595.805467][T22442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4321'. [ 596.001679][T22453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4322'. [ 596.771229][T22485] netlink: 868 bytes leftover after parsing attributes in process `syz.0.4325'. [ 596.798050][T22468] bridge0: port 3(syz_tun) entered blocking state [ 596.798147][T22468] bridge0: port 3(syz_tun) entered disabled state [ 596.823019][T22468] syz_tun: entered promiscuous mode [ 596.910120][T22468] bridge0: port 4(ip6gretap0) entered blocking state [ 596.910217][T22468] bridge0: port 4(ip6gretap0) entered disabled state [ 596.910398][T22468] ip6gretap0: entered allmulticast mode [ 596.979136][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 596.981497][T22468] ip6gretap0: entered promiscuous mode [ 597.471756][T22569] team0 (unregistering): Port device team_slave_0 removed [ 597.503429][T22569] team0 (unregistering): Port device team_slave_1 removed [ 597.564558][T22548] syzkaller0: left promiscuous mode [ 597.564584][T22548] syzkaller0: left allmulticast mode [ 597.612064][T22548] netlink: 'syz.2.4332': attribute type 21 has an invalid length. [ 597.612092][T22548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4332'. [ 597.612169][T22548] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4332'. [ 597.826913][T22614] Bluetooth: hci0: unsupported parameter 5135 [ 597.826939][T22614] Bluetooth: hci0: unsupported parameter 8192 [ 597.826955][T22614] Bluetooth: hci0: unsupported parameter 5135 [ 597.826969][T22614] Bluetooth: hci0: unsupported parameter 8192 [ 598.631394][T22692] netlink: 1700 bytes leftover after parsing attributes in process `syz.1.4340'. [ 598.899611][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 599.044463][T22472] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 600.184732][T22759] xt_NFQUEUE: number of total queues is 0 [ 600.436084][T22765] __nla_validate_parse: 2 callbacks suppressed [ 600.436109][T22765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4356'. [ 601.159546][T22786] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4363'. [ 602.156391][T22817] ip_tables: iptables: counters copy to user failed while replacing table [ 602.376158][T22737] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 602.619100][T22827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4374'. [ 602.760228][T22835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 602.770967][T22839] netlink: 'syz.0.4378': attribute type 34 has an invalid length. [ 602.770990][T22839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4378'. [ 602.771734][T22840] netlink: 'syz.0.4378': attribute type 34 has an invalid length. [ 602.771753][T22840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4378'. [ 602.888815][T22839] bond5: option lacp_strict: invalid value (16) [ 602.893032][T22839] bond5 (unregistering): Released all slaves [ 603.097931][T22840] bond5: option lacp_strict: invalid value (16) [ 603.100348][T22840] bond5 (unregistering): Released all slaves [ 603.165114][T22854] ip_tables: iptables: counters copy to user failed while replacing table [ 603.434710][T22863] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.435287][T22863] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.435623][ T7098] IPVS: starting estimator thread 0... [ 603.515501][T22880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.583204][T22872] IPVS: using max 25 ests per chain, 60000 per kthread [ 603.746627][T22862] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4384'. [ 604.089299][T22897] FAULT_INJECTION: forcing a failure. [ 604.089299][T22897] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 604.089341][T22897] CPU: 0 UID: 0 PID: 22897 Comm: syz.4.4390 Not tainted syzkaller #0 PREEMPT(full) [ 604.089368][T22897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 604.089383][T22897] Call Trace: [ 604.089393][T22897] [ 604.089404][T22897] dump_stack_lvl+0xe8/0x150 [ 604.089445][T22897] should_fail_ex+0x410/0x560 [ 604.089485][T22897] prepare_alloc_pages+0x21e/0x5f0 [ 604.089525][T22897] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 604.089563][T22897] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 604.089604][T22897] ? __pfx_policy_nodemask+0x10/0x10 [ 604.089645][T22897] ? __lock_acquire+0x747/0x2de0 [ 604.089675][T22897] alloc_pages_mpol+0x21e/0x390 [ 604.089718][T22897] folio_alloc_mpol_noprof+0x39/0x160 [ 604.089757][T22897] vma_alloc_folio_noprof+0xe1/0x1e0 [ 604.089797][T22897] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 604.089834][T22897] ? lock_acquire+0x115/0x350 [ 604.089869][T22897] do_pte_missing+0x173a/0x34b0 [ 604.089922][T22897] handle_mm_fault+0x1a53/0x3750 [ 604.089967][T22897] ? handle_mm_fault+0xf1/0x3750 [ 604.090006][T22897] ? __pfx_handle_mm_fault+0x10/0x10 [ 604.090032][T22897] ? follow_page_pte+0x748/0xf10 [ 604.090069][T22897] ? __pfx_follow_page_pte+0x10/0x10 [ 604.090107][T22897] __get_user_pages+0x1670/0x2750 [ 604.090185][T22897] __gup_longterm_locked+0x3e2/0x16f0 [ 604.090216][T22897] ? lock_acquire+0x115/0x350 [ 604.090264][T22897] pin_user_pages+0x9d/0xd0 [ 604.090292][T22897] xdp_umem_pin_pages+0x11b/0x340 [ 604.090336][T22897] xdp_umem_create+0x63d/0x8b0 [ 604.090383][T22897] xsk_setsockopt+0x82f/0x960 [ 604.090441][T22897] ? __pfx_xsk_setsockopt+0x10/0x10 [ 604.090484][T22897] ? aa_sock_opt_perm+0x142/0x1e0 [ 604.090519][T22897] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 604.090540][T22897] ? __pfx_xsk_setsockopt+0x10/0x10 [ 604.090574][T22897] do_sock_setsockopt+0x17c/0x1b0 [ 604.090617][T22897] __x64_sys_setsockopt+0x13d/0x1b0 [ 604.090660][T22897] do_syscall_64+0x166/0x520 [ 604.090682][T22897] ? trace_irq_disable+0x3b/0x140 [ 604.090729][T22897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.090754][T22897] ? clear_bhb_loop+0x70/0xc0 [ 604.090784][T22897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.090807][T22897] RIP: 0033:0x7f128cb9f559 [ 604.090829][T22897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.090850][T22897] RSP: 002b:00007f128db3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 604.090876][T22897] RAX: ffffffffffffffda RBX: 00007f128ce25fa0 RCX: 00007f128cb9f559 [ 604.090894][T22897] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 604.090908][T22897] RBP: 00007f128db3d090 R08: 0000000000000020 R09: 0000000000000000 [ 604.090923][T22897] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 604.090938][T22897] R13: 00007f128ce26038 R14: 00007f128ce25fa0 R15: 00007ffd250637d8 [ 604.090986][T22897] [ 604.464070][T22903] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4390'. [ 604.680450][T22910] netlink: 'syz.2.4394': attribute type 23 has an invalid length. [ 604.693861][T22910] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4394'. [ 604.725646][T22911] netlink: 83 bytes leftover after parsing attributes in process `syz.3.4393'. [ 605.060757][T22926] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4397'. [ 605.296971][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 605.706607][T22952] FAULT_INJECTION: forcing a failure. [ 605.706607][T22952] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 605.706666][T22952] CPU: 1 UID: 0 PID: 22952 Comm: syz.1.4409 Not tainted syzkaller #0 PREEMPT(full) [ 605.706697][T22952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 605.706713][T22952] Call Trace: [ 605.706723][T22952] [ 605.706735][T22952] dump_stack_lvl+0xe8/0x150 [ 605.706778][T22952] should_fail_ex+0x410/0x560 [ 605.706821][T22952] prepare_alloc_pages+0x21e/0x5f0 [ 605.706872][T22952] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 605.706912][T22952] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 605.706952][T22952] ? __pfx_policy_nodemask+0x10/0x10 [ 605.706994][T22952] ? __lock_acquire+0x747/0x2de0 [ 605.707025][T22952] alloc_pages_mpol+0x21e/0x390 [ 605.707070][T22952] folio_alloc_mpol_noprof+0x39/0x160 [ 605.707111][T22952] vma_alloc_folio_noprof+0xe1/0x1e0 [ 605.707153][T22952] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 605.707193][T22952] ? lock_acquire+0x115/0x350 [ 605.707229][T22952] do_pte_missing+0x173a/0x34b0 [ 605.707286][T22952] handle_mm_fault+0x1a53/0x3750 [ 605.707327][T22952] ? handle_mm_fault+0xf1/0x3750 [ 605.707369][T22952] ? __pfx_handle_mm_fault+0x10/0x10 [ 605.707397][T22952] ? follow_page_pte+0x748/0xf10 [ 605.707434][T22952] ? __pfx_follow_page_pte+0x10/0x10 [ 605.707474][T22952] __get_user_pages+0x1670/0x2750 [ 605.707556][T22952] __gup_longterm_locked+0x3e2/0x16f0 [ 605.707585][T22952] ? lock_acquire+0x115/0x350 [ 605.707635][T22952] pin_user_pages+0x9d/0xd0 [ 605.707664][T22952] xdp_umem_pin_pages+0x11b/0x340 [ 605.707710][T22952] xdp_umem_create+0x63d/0x8b0 [ 605.707758][T22952] xsk_setsockopt+0x82f/0x960 [ 605.707798][T22952] ? __pfx_xsk_setsockopt+0x10/0x10 [ 605.707851][T22952] ? aa_sock_opt_perm+0x142/0x1e0 [ 605.707889][T22952] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 605.707912][T22952] ? __pfx_xsk_setsockopt+0x10/0x10 [ 605.707949][T22952] do_sock_setsockopt+0x17c/0x1b0 [ 605.707993][T22952] __x64_sys_setsockopt+0x13d/0x1b0 [ 605.708037][T22952] do_syscall_64+0x166/0x520 [ 605.708061][T22952] ? trace_irq_disable+0x3b/0x140 [ 605.708089][T22952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.708113][T22952] ? clear_bhb_loop+0x70/0xc0 [ 605.708143][T22952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.708168][T22952] RIP: 0033:0x7f7e23f9f559 [ 605.708191][T22952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.708212][T22952] RSP: 002b:00007f7e24f50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 605.708238][T22952] RAX: ffffffffffffffda RBX: 00007f7e24225fa0 RCX: 00007f7e23f9f559 [ 605.708257][T22952] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 605.708272][T22952] RBP: 00007f7e24f50090 R08: 0000000000000020 R09: 0000000000000000 [ 605.708288][T22952] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 605.708304][T22952] R13: 00007f7e24226038 R14: 00007f7e24225fa0 R15: 00007ffcd2ea8198 [ 605.708346][T22952] [ 606.146230][T22952] __nla_validate_parse: 1 callbacks suppressed [ 606.146254][T22952] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4409'. [ 606.327138][T22960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4410'. [ 606.413179][T22958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4411'. [ 606.426374][T22958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.444105][T22967] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4413'. [ 606.478594][T22965] sctp: [Deprecated]: syz.0.4412 (pid 22965) Use of int in max_burst socket option. [ 606.478594][T22965] Use struct sctp_assoc_value instead [ 606.500743][T22967] bond3: option lacp_rate: invalid value (128) [ 606.515599][T22967] bond3 (unregistering): Released all slaves [ 606.543256][T22972] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4414'. [ 606.739321][T22984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4416'. [ 606.873527][T22989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4416'. [ 606.952427][T22993] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4420'. [ 606.982421][T22989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.098871][T22989] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 607.182368][T22988] bond6: entered allmulticast mode [ 607.212813][T22994] macvlan2: entered promiscuous mode [ 607.212841][T22994] macvlan2: entered allmulticast mode [ 607.214671][T22994] bond6: entered promiscuous mode [ 607.215749][T22994] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 607.250699][T22994] bond6: left promiscuous mode [ 607.574780][T23016] FAULT_INJECTION: forcing a failure. [ 607.574780][T23016] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 607.574821][T23016] CPU: 1 UID: 0 PID: 23016 Comm: syz.1.4426 Not tainted syzkaller #0 PREEMPT(full) [ 607.574856][T23016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 607.574869][T23016] Call Trace: [ 607.574879][T23016] [ 607.574888][T23016] dump_stack_lvl+0xe8/0x150 [ 607.574926][T23016] should_fail_ex+0x410/0x560 [ 607.574963][T23016] prepare_alloc_pages+0x21e/0x5f0 [ 607.574999][T23016] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 607.575032][T23016] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 607.575065][T23016] ? __pfx_policy_nodemask+0x10/0x10 [ 607.575102][T23016] ? __lock_acquire+0x747/0x2de0 [ 607.575132][T23016] alloc_pages_mpol+0x21e/0x390 [ 607.575175][T23016] folio_alloc_mpol_noprof+0x39/0x160 [ 607.575212][T23016] vma_alloc_folio_noprof+0xe1/0x1e0 [ 607.575246][T23016] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 607.575279][T23016] ? lock_acquire+0x115/0x350 [ 607.575309][T23016] do_pte_missing+0x173a/0x34b0 [ 607.575355][T23016] handle_mm_fault+0x1a53/0x3750 [ 607.575388][T23016] ? handle_mm_fault+0xf1/0x3750 [ 607.575421][T23016] ? __pfx_handle_mm_fault+0x10/0x10 [ 607.575443][T23016] ? follow_page_pte+0x748/0xf10 [ 607.575474][T23016] ? __pfx_follow_page_pte+0x10/0x10 [ 607.575507][T23016] __get_user_pages+0x1670/0x2750 [ 607.575573][T23016] __gup_longterm_locked+0x3e2/0x16f0 [ 607.575598][T23016] ? lock_acquire+0x115/0x350 [ 607.575638][T23016] pin_user_pages+0x9d/0xd0 [ 607.575662][T23016] xdp_umem_pin_pages+0x11b/0x340 [ 607.575700][T23016] xdp_umem_create+0x63d/0x8b0 [ 607.575740][T23016] xsk_setsockopt+0x82f/0x960 [ 607.575771][T23016] ? __pfx_xsk_setsockopt+0x10/0x10 [ 607.575806][T23016] ? aa_sock_opt_perm+0x142/0x1e0 [ 607.575844][T23016] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 607.575863][T23016] ? __pfx_xsk_setsockopt+0x10/0x10 [ 607.575894][T23016] do_sock_setsockopt+0x17c/0x1b0 [ 607.575929][T23016] __x64_sys_setsockopt+0x13d/0x1b0 [ 607.575965][T23016] do_syscall_64+0x166/0x520 [ 607.575987][T23016] ? trace_irq_disable+0x3b/0x140 [ 607.576014][T23016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.576037][T23016] ? clear_bhb_loop+0x70/0xc0 [ 607.576066][T23016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.576088][T23016] RIP: 0033:0x7f7e23f9f559 [ 607.576110][T23016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.576128][T23016] RSP: 002b:00007f7e24f50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 607.576157][T23016] RAX: ffffffffffffffda RBX: 00007f7e24225fa0 RCX: 00007f7e23f9f559 [ 607.576174][T23016] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 607.576189][T23016] RBP: 00007f7e24f50090 R08: 0000000000000020 R09: 0000000000000000 [ 607.576203][T23016] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 607.576218][T23016] R13: 00007f7e24226038 R14: 00007f7e24225fa0 R15: 00007ffcd2ea8198 [ 607.576257][T23016] [ 608.024629][T23022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4427'. [ 608.039660][T23017] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4426'. [ 608.366981][T23030] syzkaller1: entered promiscuous mode [ 608.367008][T23030] syzkaller1: entered allmulticast mode [ 608.794615][T23040] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 608.829511][T23045] ip_tables: iptables: counters copy to user failed while replacing table [ 608.937085][T23047] Bluetooth: MGMT ver 1.23 [ 609.368152][T23056] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 610.037610][T23084] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 610.976960][ T53] Bluetooth: hci2: command 0x0405 tx timeout [ 610.977007][ T5642] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 611.912399][T23152] bond5: invalid NS target :: specified for addition [ 611.912433][T23152] bond5: option ns_ip6_target: invalid value (18446744073709551615) [ 611.914481][T23152] bond5 (unregistering): Released all slaves [ 612.625963][T23177] virt_wifi0 speed is unknown, defaulting to 1000 [ 612.626032][T23177] virt_wifi0 speed is unknown, defaulting to 1000 [ 612.640799][T23177] virt_wifi0 speed is unknown, defaulting to 1000 [ 612.641896][T23177] smbdirect: ib_dev[ÿ]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 612.641932][T23177] smbdirect: ib_dev[ÿ]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 612.641973][T23177] smbdirect: ib_dev[ÿ]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 612.745696][T23177] virt_wifi0 speed is unknown, defaulting to 1000 [ 612.768187][T23177] virt_wifi0 speed is unknown, defaulting to 1000 [ 612.784524][T23177] virt_wifi0 speed is unknown, defaulting to 1000 [ 612.798212][T23177] virt_wifi0 speed is unknown, defaulting to 1000 [ 612.824291][T23177] virt_wifi0 speed is unknown, defaulting to 1000 [ 612.846484][T23177] virt_wifi0 speed is unknown, defaulting to 1000 [ 612.858061][T23177] virt_wifi0 speed is unknown, defaulting to 1000 [ 612.864174][T23177] virt_wifi0 speed is unknown, defaulting to 1000 [ 613.339735][T23190] ip_tables: iptables: counters copy to user failed while replacing table [ 613.680941][T23199] __nla_validate_parse: 7 callbacks suppressed [ 613.680966][T23199] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4481'. [ 613.978761][T23212] netlink: 'syz.4.4485': attribute type 1 has an invalid length. [ 614.035241][T23212] 8021q: adding VLAN 0 to HW filter on device bond4 [ 614.049100][T23217] bond4: option tlb_dynamic_lb: unable to set because the bond device is up [ 614.186281][T23220] sctp: [Deprecated]: syz.4.4487 (pid 23220) Use of int in max_burst socket option. [ 614.186281][T23220] Use struct sctp_assoc_value instead [ 614.804476][T23233] ip_tables: iptables: counters copy to user failed while replacing table [ 615.053275][T23237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4493'. [ 615.141240][T23238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.271702][T23249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4497'. [ 615.723700][T23259] IPv6: addrconf: prefix option has invalid lifetime [ 615.941180][T23266] netlink: 'syz.0.4502': attribute type 12 has an invalid length. [ 615.941435][T23263] netlink: 'syz.0.4502': attribute type 12 has an invalid length. [ 616.092667][T23269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4504'. [ 616.335679][T23272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4505'. [ 616.335705][T23272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4505'. [ 616.383189][T23276] bond3: entered promiscuous mode [ 616.383215][T23276] bond3: entered allmulticast mode [ 616.574791][T23270] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 617.640707][T23342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4526'. [ 618.393777][T23367] bridge5: entered promiscuous mode [ 618.393800][T23367] bridge5: entered allmulticast mode [ 618.421183][T23367] team0: Port device bridge5 added [ 618.476168][T23374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4540'. [ 618.602630][T23379] netlink: 'syz.1.4538': attribute type 1 has an invalid length. [ 618.639659][T23379] 8021q: adding VLAN 0 to HW filter on device bond7 [ 618.672992][T23379] bond7: (slave gretap2): making interface the new active one [ 618.675682][T23379] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 618.896340][T23388] syzkaller0: entered promiscuous mode [ 618.896367][T23388] syzkaller0: entered allmulticast mode [ 619.011779][T23400] erspan2: entered allmulticast mode [ 619.239818][T23413] FAULT_INJECTION: forcing a failure. [ 619.239818][T23413] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 619.243051][T23413] CPU: 1 UID: 0 PID: 23413 Comm: syz.1.4552 Not tainted syzkaller #0 PREEMPT(full) [ 619.243083][T23413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 619.243098][T23413] Call Trace: [ 619.243109][T23413] [ 619.243127][T23413] dump_stack_lvl+0xe8/0x150 [ 619.243168][T23413] should_fail_ex+0x410/0x560 [ 619.243209][T23413] prepare_alloc_pages+0x21e/0x5f0 [ 619.243249][T23413] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 619.243284][T23413] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 619.243321][T23413] ? __pfx_policy_nodemask+0x10/0x10 [ 619.243364][T23413] ? __lock_acquire+0x747/0x2de0 [ 619.243393][T23413] alloc_pages_mpol+0x21e/0x390 [ 619.243436][T23413] folio_alloc_mpol_noprof+0x39/0x160 [ 619.243476][T23413] vma_alloc_folio_noprof+0xe1/0x1e0 [ 619.243518][T23413] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 619.243558][T23413] ? lock_acquire+0x115/0x350 [ 619.243592][T23413] do_pte_missing+0x173a/0x34b0 [ 619.243643][T23413] handle_mm_fault+0x1a53/0x3750 [ 619.243681][T23413] ? handle_mm_fault+0xf1/0x3750 [ 619.243721][T23413] ? __pfx_handle_mm_fault+0x10/0x10 [ 619.243748][T23413] ? follow_page_pte+0x748/0xf10 [ 619.243784][T23413] ? __pfx_follow_page_pte+0x10/0x10 [ 619.243818][T23413] __get_user_pages+0x1670/0x2750 [ 619.243888][T23413] __gup_longterm_locked+0x3e2/0x16f0 [ 619.243916][T23413] ? lock_acquire+0x115/0x350 [ 619.243963][T23413] pin_user_pages+0x9d/0xd0 [ 619.243992][T23413] xdp_umem_pin_pages+0x11b/0x340 [ 619.244036][T23413] xdp_umem_create+0x63d/0x8b0 [ 619.244082][T23413] xsk_setsockopt+0x82f/0x960 [ 619.244127][T23413] ? __pfx_xsk_setsockopt+0x10/0x10 [ 619.244169][T23413] ? aa_sock_opt_perm+0x142/0x1e0 [ 619.244205][T23413] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 619.244227][T23413] ? __pfx_xsk_setsockopt+0x10/0x10 [ 619.244261][T23413] do_sock_setsockopt+0x17c/0x1b0 [ 619.244303][T23413] __x64_sys_setsockopt+0x13d/0x1b0 [ 619.244346][T23413] do_syscall_64+0x166/0x520 [ 619.244369][T23413] ? trace_irq_disable+0x3b/0x140 [ 619.244396][T23413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.244420][T23413] ? clear_bhb_loop+0x70/0xc0 [ 619.244450][T23413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.244473][T23413] RIP: 0033:0x7f7e23f9f559 [ 619.244496][T23413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.244521][T23413] RSP: 002b:00007f7e24f50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 619.244547][T23413] RAX: ffffffffffffffda RBX: 00007f7e24225fa0 RCX: 00007f7e23f9f559 [ 619.244564][T23413] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 619.244579][T23413] RBP: 00007f7e24f50090 R08: 0000000000000020 R09: 0000000000000000 [ 619.244594][T23413] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 619.244609][T23413] R13: 00007f7e24226038 R14: 00007f7e24225fa0 R15: 00007ffcd2ea8198 [ 619.244649][T23413] [ 619.648263][T23415] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4552'. [ 619.705628][T23422] netlink: 'syz.3.4554': attribute type 6 has an invalid length. [ 619.814690][T23427] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4553'. [ 620.145287][T23442] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4557'. [ 620.245259][T23420] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 620.275928][T23420] bond5 (unregistering): Released all slaves [ 620.298077][T23444] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4561'. [ 620.405464][T23447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.432577][T23448] vxcan2: entered allmulticast mode [ 620.495421][T23454] ip_tables: iptables: counters copy to user failed while replacing table [ 620.813337][T23462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4566'. [ 620.884753][T23465] ip6gretap0: left allmulticast mode [ 620.884784][T23465] ip6gretap0: left promiscuous mode [ 620.885205][T23465] bridge0: port 4(ip6gretap0) entered disabled state [ 620.918363][T23470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4569'. [ 620.974153][T23462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4566'. [ 621.029890][T23470] erspan0: entered promiscuous mode [ 621.030205][T23470] macvtap1: entered promiscuous mode [ 621.030421][T23470] macvtap1: entered allmulticast mode [ 621.030438][T23470] erspan0: entered allmulticast mode [ 621.066055][T23472] erspan0: left allmulticast mode [ 621.066212][T23472] erspan0: left promiscuous mode [ 621.078699][T23472] macvtap1: left promiscuous mode [ 621.078727][T23472] macvtap1: left allmulticast mode [ 621.203749][T23467] syzkaller0: entered promiscuous mode [ 621.203775][T23467] syzkaller0: entered allmulticast mode [ 621.375786][T23488] syzkaller0: entered promiscuous mode [ 621.375816][T23488] syzkaller0: entered allmulticast mode [ 621.401518][T23494] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4574'. [ 621.512007][T23499] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4577'. [ 621.554011][T23503] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4574'. [ 622.066547][T23524] bridge3: entered promiscuous mode [ 622.500412][T23541] ip_tables: iptables: counters copy to user failed while replacing table [ 622.578057][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 623.199245][T23563] bridge0: port 3(macsec1) entered blocking state [ 623.200471][T23563] bridge0: port 3(macsec1) entered disabled state [ 623.202798][T23563] macsec1: entered allmulticast mode [ 623.202820][T23563] bridge0: entered allmulticast mode [ 623.202862][T23563] bridge0: entered promiscuous mode [ 623.281490][T23563] macsec1: left allmulticast mode [ 623.281519][T23563] bridge0: left allmulticast mode [ 623.369207][ T24] bridge0: left promiscuous mode [ 623.400691][T23573] xt_hl: Unknown Hop Limit match mode: 4 [ 623.677210][T23584] ip_tables: iptables: counters copy to user failed while replacing table [ 623.917760][T23587] veth10: entered allmulticast mode [ 624.015825][T23587] veth12: entered allmulticast mode [ 624.126614][T23587] veth14: entered allmulticast mode [ 624.183940][T23612] FAULT_INJECTION: forcing a failure. [ 624.183940][T23612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.183975][T23612] CPU: 0 UID: 0 PID: 23612 Comm: syz.1.4602 Not tainted syzkaller #0 PREEMPT(full) [ 624.183998][T23612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 624.184011][T23612] Call Trace: [ 624.184020][T23612] [ 624.184030][T23612] dump_stack_lvl+0xe8/0x150 [ 624.184069][T23612] should_fail_ex+0x410/0x560 [ 624.184109][T23612] _copy_from_user+0x2d/0xb0 [ 624.184144][T23612] ___sys_sendmsg+0x1c6/0x360 [ 624.184178][T23612] ? __lock_acquire+0x747/0x2de0 [ 624.184210][T23612] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.184289][T23612] ? __fget_files+0x3a2/0x420 [ 624.184314][T23612] ? __fget_files+0x2a/0x420 [ 624.184350][T23612] __x64_sys_sendmsg+0x1b1/0x290 [ 624.184377][T23612] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 624.184439][T23612] do_syscall_64+0x166/0x520 [ 624.184462][T23612] ? trace_irq_disable+0x3b/0x140 [ 624.184489][T23612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.184512][T23612] ? clear_bhb_loop+0x70/0xc0 [ 624.184541][T23612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.184564][T23612] RIP: 0033:0x7f7e23f9f559 [ 624.184586][T23612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.184605][T23612] RSP: 002b:00007f7e24f50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.184630][T23612] RAX: ffffffffffffffda RBX: 00007f7e24225fa0 RCX: 00007f7e23f9f559 [ 624.184648][T23612] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 624.184663][T23612] RBP: 00007f7e24f50090 R08: 0000000000000000 R09: 0000000000000000 [ 624.184678][T23612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.184692][T23612] R13: 00007f7e24226038 R14: 00007f7e24225fa0 R15: 00007ffcd2ea8198 [ 624.184735][T23612] [ 624.408196][T23587] veth16: entered allmulticast mode [ 624.699540][T23627] __nla_validate_parse: 7 callbacks suppressed [ 624.699564][T23627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4603'. [ 624.823889][T23630] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4604'. [ 625.273742][T23647] ip_tables: iptables: counters copy to user failed while replacing table [ 625.351914][T23649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4610'. [ 625.777297][ T53] Bluetooth: hci2: command 0x0405 tx timeout [ 625.865661][T23662] FAULT_INJECTION: forcing a failure. [ 625.865661][T23662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.865699][T23662] CPU: 0 UID: 0 PID: 23662 Comm: syz.4.4613 Not tainted syzkaller #0 PREEMPT(full) [ 625.865725][T23662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 625.865739][T23662] Call Trace: [ 625.865749][T23662] [ 625.865759][T23662] dump_stack_lvl+0xe8/0x150 [ 625.865800][T23662] should_fail_ex+0x410/0x560 [ 625.865845][T23662] _copy_from_user+0x2d/0xb0 [ 625.865880][T23662] __copy_msghdr+0x390/0x590 [ 625.865923][T23662] ___sys_sendmsg+0x213/0x360 [ 625.865956][T23662] ? __lock_acquire+0x747/0x2de0 [ 625.865989][T23662] ? __pfx____sys_sendmsg+0x10/0x10 [ 625.866068][T23662] ? __fget_files+0x3a2/0x420 [ 625.866099][T23662] ? __fget_files+0x2a/0x420 [ 625.866136][T23662] __x64_sys_sendmsg+0x1b1/0x290 [ 625.866162][T23662] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 625.866224][T23662] do_syscall_64+0x166/0x520 [ 625.866247][T23662] ? trace_irq_disable+0x3b/0x140 [ 625.866274][T23662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.866297][T23662] ? clear_bhb_loop+0x70/0xc0 [ 625.866326][T23662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.866349][T23662] RIP: 0033:0x7f128cb9f559 [ 625.866371][T23662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.866392][T23662] RSP: 002b:00007f128db1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 625.866416][T23662] RAX: ffffffffffffffda RBX: 00007f128ce26090 RCX: 00007f128cb9f559 [ 625.866433][T23662] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 625.866447][T23662] RBP: 00007f128db1c090 R08: 0000000000000000 R09: 0000000000000000 [ 625.866462][T23662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.866476][T23662] R13: 00007f128ce26128 R14: 00007f128ce26090 R15: 00007ffd250637d8 [ 625.866514][T23662] [ 626.090656][T23667] SET target dimension over the limit! [ 626.208577][T23671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4618'. [ 626.656044][T23678] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4619'. [ 627.885925][T23742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4636'. [ 627.930454][T23742] 8021q: adding VLAN 0 to HW filter on device bond5 [ 628.251352][T23756] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4639'. [ 628.349424][T23771] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4639'. [ 628.714671][T23785] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4643'. [ 628.715734][T23785] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4643'. [ 629.935932][T23801] batadv_slave_1: entered promiscuous mode [ 629.936439][T23801] batadv_slave_1: left promiscuous mode [ 630.289467][T23716] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 630.501706][T23822] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4654'. [ 630.512853][T23822] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4654'. [ 631.999206][T23870] syzkaller1: entered promiscuous mode [ 631.999233][T23870] syzkaller1: entered allmulticast mode [ 632.064758][T23880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4669'. [ 632.121295][T23882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4670'. [ 632.221056][T23893] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4671'. [ 632.224248][T23893] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4671'. [ 632.295599][T23894] xt_CT: You must specify a L4 protocol and not use inversions on it [ 632.476335][T23900] netlink: 'syz.1.4675': attribute type 4 has an invalid length. [ 632.619716][T23902] wg1: entered promiscuous mode [ 632.619743][T23902] wg1: entered allmulticast mode [ 632.916583][T23916] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4678'. [ 632.916609][T23916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4678'. [ 632.972670][T23918] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4679'. [ 632.972699][T23918] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4679'. [ 632.974193][T23918] netlink: 'syz.3.4679': attribute type 1 has an invalid length. [ 633.510966][T23936] pimreg0: tun_chr_ioctl cmd 1074025677 [ 633.511041][T23936] pimreg0: linktype set to 776 [ 633.609143][ T6807] hid-generic 0005:0008:0007.0001: item fetching failed at offset 5/6 [ 633.610750][ T6807] hid-generic 0005:0008:0007.0001: probe with driver hid-generic failed with error -22 [ 633.780681][T23944] ip_tables: iptables: counters copy to user failed while replacing table [ 634.868756][T23870] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 635.152556][T23970] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 635.230528][T23966] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 636.535419][T24034] ip_tables: iptables: counters copy to user failed while replacing table [ 636.629358][T24037] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 636.667735][T24036] syzkaller0: entered promiscuous mode [ 636.667759][T24036] syzkaller0: entered allmulticast mode [ 636.881606][T24050] dvmrp8: entered allmulticast mode [ 639.058042][T24009] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 639.203513][T24061] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 639.247146][T24063] ip_tables: iptables: counters copy to user failed while replacing table [ 639.363438][T24073] __nla_validate_parse: 5 callbacks suppressed [ 639.363462][T24073] netlink: 276 bytes leftover after parsing attributes in process `syz.4.4717'. [ 639.958054][T24090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4722'. [ 640.106509][T24092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4723'. [ 640.594382][T24109] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4729'. [ 640.691583][T24117] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4729'. [ 640.785707][T24122] Unsupported ieee802154 address type: 0 [ 640.786522][T24122] sctp: [Deprecated]: syz.3.4731 (pid 24122) Use of int in max_burst socket option. [ 640.786522][T24122] Use struct sctp_assoc_value instead [ 640.856012][T24122] 8021q: adding VLAN 0 to HW filter on device bond4 [ 640.864675][T24122] bridge0: port 3(bond4) entered blocking state [ 640.865312][T24122] bridge0: port 3(bond4) entered disabled state [ 640.865481][T24122] bond4: entered allmulticast mode [ 640.874077][T24122] bond4: entered promiscuous mode [ 640.892923][T24125] ip_vti0: entered promiscuous mode [ 640.905923][T24125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4732'. [ 641.114527][T24134] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 641.129048][T24134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4735'. [ 641.185490][T24137] ip6erspan0: entered allmulticast mode [ 641.409464][T24139] syzkaller0: MTU not usable for tipc bearer [ 641.409506][T24139] tipc: Enabling of bearer rejected, failed to enable media [ 641.487428][T24149] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4738'. [ 641.706323][T24155] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 641.734699][T24155] block nbd0: reconnected socket [ 641.737137][ T5642] block nbd0: Receive control failed (result -32) [ 642.251116][T24176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4751'. [ 642.276402][T24177] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4751'. [ 642.374895][T24183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.766239][T24234] syzkaller0: left allmulticast mode [ 644.994450][T24301] __nla_validate_parse: 4 callbacks suppressed [ 644.994477][T24301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4782'. [ 645.535021][T24326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4787'. [ 645.726466][T24323] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4787'. [ 646.164319][T24357] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 646.857182][T24377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4800'. [ 647.193212][T24364] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4796'. [ 647.257333][T24377] ipvlan2: entered allmulticast mode [ 647.257361][T24377] syz_tun: entered allmulticast mode [ 647.589601][T24384] tipc: Enabled bearer , priority 0 [ 647.658826][ T5642] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 647.659347][ T5642] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 647.679154][ T5642] Bluetooth: hci2: unexpected cc 0x2060 length: 3 < 7 [ 647.679191][ T5642] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 647.705584][T24383] tipc: Disabling bearer [ 648.015735][T24403] can: request_module (can-proto-0) failed. [ 648.214473][T24412] ip_tables: iptables: counters copy to user failed while replacing table [ 648.344330][T24419] tipc: Enabled bearer , priority 20 [ 648.974480][T24434] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 649.132894][T24443] netlink: 200 bytes leftover after parsing attributes in process `syz.4.4818'. [ 649.294691][T24449] –: renamed from virt_wifi0 [ 649.306647][T24449] netlink: 'syz.0.4820': attribute type 4 has an invalid length. [ 649.306673][T24449] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4820'. [ 649.466277][ T24] tipc: Node number set to 569290823 [ 649.502660][T24458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4823'. [ 649.502702][T24458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4823'. [ 649.532810][T24458] gretap2: entered allmulticast mode [ 649.716263][T24464] syzkaller0: entered promiscuous mode [ 649.716293][T24464] syzkaller0: entered allmulticast mode [ 650.178927][ T5642] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 650.619511][T24497] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4836'. [ 650.629467][T24482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4832'. [ 650.672918][T24497] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4836'. [ 650.792017][T24509] ip_tables: iptables: counters copy to user failed while replacing table [ 650.898372][T24508] syzkaller0: entered promiscuous mode [ 650.898401][T24508] syzkaller0: entered allmulticast mode [ 650.913002][T24506] tipc: Started in network mode [ 650.913035][T24506] tipc: Node identity b668113fce56, cluster identity 4711 [ 650.913310][T24506] tipc: Enabled bearer , priority 0 [ 650.966291][T24508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4837'. [ 651.125912][T24506] tipc: Resetting bearer [ 651.165831][T24499] tipc: Resetting bearer [ 651.234444][T24499] tipc: Disabling bearer [ 651.370249][T24531] netlink: 'syz.2.4846': attribute type 3 has an invalid length. [ 651.370278][T24531] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4846'. [ 651.564359][T24543] ip_tables: iptables: counters copy to user failed while replacing table [ 651.608953][T24542] sctp: [Deprecated]: syz.0.4847 (pid 24542) Use of int in max_burst socket option deprecated. [ 651.608953][T24542] Use struct sctp_assoc_value instead [ 651.902732][T24559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4853'. [ 652.058396][T24562] ip6gretap1: entered allmulticast mode [ 652.064061][T24562] batman_adv: batadv0: Adding interface: ip6gretap1 [ 652.064082][T24562] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.064115][T24562] batman_adv: batadv0: Interface activated: ip6gretap1 [ 652.262707][T24553] virtio_blk virtio6: 1/0/0 default/read/poll queues [ 652.275968][T24553] virtio_blk virtio6: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 653.223958][T24604] ip_tables: iptables: counters copy to user failed while replacing table [ 653.294683][T24609] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4868'. [ 653.451602][T24617] ip_tables: iptables: counters copy to user failed while replacing table [ 653.479517][T24597] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4863'. [ 653.811422][T24628] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4874'. [ 653.919998][T24636] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4876'. [ 654.363037][T24659] syzkaller1: entered promiscuous mode [ 654.363063][T24659] syzkaller1: entered allmulticast mode [ 654.822771][T24687] Bluetooth: MGMT ver 1.23 [ 655.013217][T24692] ip6gre1: entered allmulticast mode [ 655.284947][T24703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.587865][T24725] netlink: 'syz.0.4896': attribute type 1 has an invalid length. [ 655.623864][T24725] batman_adv: batadv0: Adding interface: dummy0 [ 655.623885][T24725] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.623919][T24725] batman_adv: batadv0: Interface activated: dummy0 [ 655.680743][T24728] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 655.685283][T24725] batadv0: mtu less than device minimum [ 655.686995][T24725] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 655.689966][T24725] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 655.694326][T24725] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 655.698320][T24725] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 655.702057][T24725] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 655.705568][T24725] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 655.709589][T24725] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 655.785912][T24732] netlink: 'syz.0.4896': attribute type 10 has an invalid length. [ 655.785937][T24732] __nla_validate_parse: 5 callbacks suppressed [ 655.785951][T24732] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4896'. [ 655.786157][T24732] batadv0: entered promiscuous mode [ 655.786174][T24732] batadv0: entered allmulticast mode [ 655.815566][T24732] bridge0: port 3(batadv0) entered blocking state [ 655.818976][T24732] bridge0: port 3(batadv0) entered disabled state [ 655.841338][T24725] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 655.841353][T24725] IPv6: NLM_F_CREATE should be set when creating new route [ 655.841391][T24725] IPv6: NLM_F_CREATE should be set when creating new route [ 655.841705][T24732] batadv0: failed to initialize vlan filtering on this port [ 655.889445][T24731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4897'. [ 655.889467][T24731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4897'. [ 655.952906][ T53] Bluetooth: hci2: link tx timeout [ 655.952928][ T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 656.074073][T24736] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4898'. [ 656.175437][T24733] Bluetooth: hci2: link tx timeout [ 656.175463][T24733] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 656.200068][T24733] Bluetooth: hci2: link tx timeout [ 656.200088][T24733] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 656.368910][T24745] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4902'. [ 656.369026][T24745] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4902'. [ 656.505988][T24733] Bluetooth: hci2: link tx timeout [ 656.506011][T24733] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 656.533381][T24747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4903'. [ 656.533468][T24747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4903'. [ 656.550731][T24747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4903'. [ 656.550944][T24747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4903'. [ 656.898818][T24733] Bluetooth: hci4: command 0x0406 tx timeout [ 656.901309][ T5642] Bluetooth: hci2: link tx timeout [ 656.901328][ T5642] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 656.969533][T24771] netlink: 'syz.4.4908': attribute type 3 has an invalid length. [ 657.777438][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 657.913504][T24797] syzkaller0: entered promiscuous mode [ 657.913532][T24797] syzkaller0: entered allmulticast mode [ 657.940864][T24733] Bluetooth: hci2: link tx timeout [ 657.940887][T24733] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 658.016973][T24733] Bluetooth: hci2: command 0x0405 tx timeout [ 658.041779][ T53] [ 658.044173][ T53] ====================================================== [ 658.051230][ T53] WARNING: possible circular locking dependency detected [ 658.058327][ T53] syzkaller #0 Not tainted [ 658.062777][ T53] ------------------------------------------------------ [ 658.069829][ T53] kworker/u9:0/53 is trying to acquire lock: [ 658.075862][ T53] ffff88801d2dc980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 658.086187][ T53] [ 658.086187][ T53] but task is already holding lock: [ 658.093628][ T53] ffff88801d2dcaa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 658.104669][ T53] [ 658.104669][ T53] which lock already depends on the new lock. [ 658.104669][ T53] [ 658.115116][ T53] [ 658.115116][ T53] the existing dependency chain (in reverse order) is: [ 658.124165][ T53] [ 658.124165][ T53] -> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 658.132914][ T53] down_read+0x45/0x320 [ 658.137638][ T53] kernfs_remove_by_name_ns+0x3f/0x140 [ 658.143659][ T53] internal_create_group+0x58e/0x1180 [ 658.149611][ T53] sysfs_update_groups+0x60/0x130 [ 658.155212][ T53] pmu_dev_alloc+0x29b/0x300 [ 658.160379][ T53] perf_event_sysfs_init+0x76/0x100 [ 658.166142][ T53] do_one_initcall+0x250/0x870 [ 658.171481][ T53] do_initcall_level+0x10a/0x1a0 [ 658.176988][ T53] do_initcalls+0x59/0xa0 [ 658.181889][ T53] kernel_init_freeable+0x29d/0x3e0 [ 658.187682][ T53] kernel_init+0x22/0x1d0 [ 658.192592][ T53] ret_from_fork+0x514/0xb70 [ 658.197758][ T53] ret_from_fork_asm+0x1a/0x30 [ 658.203089][ T53] [ 658.203089][ T53] -> #9 (pmus_lock){+.+.}-{4:4}: [ 658.210269][ T53] __mutex_lock+0x197/0x15a0 [ 658.215435][ T53] perf_event_init_cpu+0x1d1/0x7a0 [ 658.221112][ T53] cpuhp_invoke_callback+0x434/0x810 [ 658.226965][ T53] cpuhp_thread_fun+0x362/0x780 [ 658.232401][ T53] smpboot_thread_fn+0x5f8/0xb30 [ 658.237906][ T53] kthread+0x38b/0x480 [ 658.242528][ T53] ret_from_fork+0x514/0xb70 [ 658.247657][ T53] ret_from_fork_asm+0x1a/0x30 [ 658.253003][ T53] [ 658.253003][ T53] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 658.260585][ T53] cpuhp_thread_fun+0x127/0x780 [ 658.266071][ T53] smpboot_thread_fn+0x5f8/0xb30 [ 658.271559][ T53] kthread+0x38b/0x480 [ 658.276168][ T53] ret_from_fork+0x514/0xb70 [ 658.281294][ T53] ret_from_fork_asm+0x1a/0x30 [ 658.286597][ T53] [ 658.286597][ T53] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 658.294505][ T53] cpus_read_lock+0x3d/0x160 [ 658.299639][ T53] static_key_slow_inc+0x12/0x30 [ 658.305161][ T53] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 658.311508][ T53] nbd_genl_foreach_sock+0x265/0x450 [ 658.317392][ T53] nbd_genl_reconfigure+0xbbb/0x1040 [ 658.323227][ T53] genl_family_rcv_msg_doit+0x233/0x340 [ 658.329343][ T53] genl_rcv_msg+0x614/0x7a0 [ 658.334398][ T53] netlink_rcv_skb+0x226/0x4a0 [ 658.339703][ T53] genl_rcv+0x28/0x40 [ 658.344356][ T53] netlink_unicast+0x8ef/0xa80 [ 658.349680][ T53] netlink_sendmsg+0x7f0/0xb20 [ 658.355007][ T53] sock_sendmsg_nosec+0x14e/0x190 [ 658.360673][ T53] ____sys_sendmsg+0x54e/0x850 [ 658.365987][ T53] ___sys_sendmsg+0x2a5/0x360 [ 658.371213][ T53] __x64_sys_sendmsg+0x1b1/0x290 [ 658.376699][ T53] do_syscall_64+0x166/0x520 [ 658.381854][ T53] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.388288][ T53] [ 658.388288][ T53] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 658.395977][ T53] __mutex_lock+0x197/0x15a0 [ 658.401133][ T53] nbd_queue_rq+0x373/0xff0 [ 658.406191][ T53] blk_mq_dispatch_rq_list+0x499/0x1990 [ 658.412398][ T53] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 658.419325][ T53] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 658.425855][ T53] blk_mq_run_work_fn+0x167/0x2f0 [ 658.431451][ T53] process_scheduled_works+0xc3d/0x1630 [ 658.437579][ T53] worker_thread+0xa47/0xfb0 [ 658.442745][ T53] kthread+0x38b/0x480 [ 658.447369][ T53] ret_from_fork+0x514/0xb70 [ 658.452532][ T53] ret_from_fork_asm+0x1a/0x30 [ 658.457843][ T53] [ 658.457843][ T53] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 658.465121][ T53] __mutex_lock+0x197/0x15a0 [ 658.470257][ T53] nbd_queue_rq+0xc1/0xff0 [ 658.475221][ T53] blk_mq_dispatch_rq_list+0x499/0x1990 [ 658.481310][ T53] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 658.488214][ T53] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 658.494743][ T53] blk_mq_run_work_fn+0x167/0x2f0 [ 658.500410][ T53] process_scheduled_works+0xc3d/0x1630 [ 658.506526][ T53] worker_thread+0xa47/0xfb0 [ 658.511756][ T53] kthread+0x38b/0x480 [ 658.516379][ T53] ret_from_fork+0x514/0xb70 [ 658.521525][ T53] ret_from_fork_asm+0x1a/0x30 [ 658.526923][ T53] [ 658.526923][ T53] -> #4 (set->srcu){.+.+}-{0:0}: [ 658.534072][ T53] __synchronize_srcu+0xca/0x2f0 [ 658.539556][ T53] elevator_switch+0x1e8/0x7b0 [ 658.544951][ T53] elevator_change+0x2fa/0x480 [ 658.550258][ T53] elevator_set_default+0x375/0x440 [ 658.556000][ T53] blk_register_queue+0x404/0x4f0 [ 658.561671][ T53] __add_disk+0x6b8/0xdb0 [ 658.566548][ T53] add_disk_fwnode+0x100/0x3a0 [ 658.571858][ T53] nbd_dev_add+0x733/0xb60 [ 658.576827][ T53] nbd_init+0x168/0x1f0 [ 658.581539][ T53] do_one_initcall+0x250/0x870 [ 658.586857][ T53] do_initcall_level+0x10a/0x1a0 [ 658.592354][ T53] do_initcalls+0x59/0xa0 [ 658.597228][ T53] kernel_init_freeable+0x29d/0x3e0 [ 658.602985][ T53] kernel_init+0x22/0x1d0 [ 658.607867][ T53] ret_from_fork+0x514/0xb70 [ 658.613025][ T53] ret_from_fork_asm+0x1a/0x30 [ 658.618333][ T53] [ 658.618333][ T53] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 658.626180][ T53] __mutex_lock+0x197/0x15a0 [ 658.631310][ T53] elevator_change+0x1af/0x480 [ 658.636619][ T53] elevator_set_none+0xb5/0x140 [ 658.642021][ T53] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 658.648377][ T53] nbd_start_device+0x189/0xb30 [ 658.653785][ T53] nbd_genl_connect+0x167d/0x1cd0 [ 658.659377][ T53] genl_family_rcv_msg_doit+0x233/0x340 [ 658.665479][ T53] genl_rcv_msg+0x614/0x7a0 [ 658.670536][ T53] netlink_rcv_skb+0x226/0x4a0 [ 658.675847][ T53] genl_rcv+0x28/0x40 [ 658.680377][ T53] netlink_unicast+0x8ef/0xa80 [ 658.685698][ T53] netlink_sendmsg+0x7f0/0xb20 [ 658.691008][ T53] sock_sendmsg_nosec+0x14e/0x190 [ 658.696578][ T53] ____sys_sendmsg+0x54e/0x850 [ 658.701899][ T53] ___sys_sendmsg+0x2a5/0x360 [ 658.707163][ T53] __x64_sys_sendmsg+0x1b1/0x290 [ 658.712651][ T53] do_syscall_64+0x166/0x520 [ 658.717809][ T53] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.724249][ T53] [ 658.724249][ T53] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 658.732877][ T53] blk_alloc_queue+0x544/0x690 [ 658.738186][ T53] __blk_mq_alloc_disk+0x194/0x390 [ 658.743846][ T53] nbd_dev_add+0x494/0xb60 [ 658.748808][ T53] nbd_init+0x168/0x1f0 [ 658.753510][ T53] do_one_initcall+0x250/0x870 [ 658.758826][ T53] do_initcall_level+0x10a/0x1a0 [ 658.764303][ T53] do_initcalls+0x59/0xa0 [ 658.769173][ T53] kernel_init_freeable+0x29d/0x3e0 [ 658.774917][ T53] kernel_init+0x22/0x1d0 [ 658.779787][ T53] ret_from_fork+0x514/0xb70 [ 658.784939][ T53] ret_from_fork_asm+0x1a/0x30 [ 658.790246][ T53] [ 658.790246][ T53] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 658.797480][ T53] fs_reclaim_acquire+0x71/0x100 [ 658.802970][ T53] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 658.809236][ T53] alloc_inode+0xb8/0x1b0 [ 658.814104][ T53] iget_locked+0x12c/0x690 [ 658.819066][ T53] kernfs_get_inode+0x4f/0x770 [ 658.824376][ T53] kernfs_get_tree+0x5cd/0x980 [ 658.829704][ T53] vfs_get_tree+0x92/0x2a0 [ 658.834681][ T53] do_new_mount+0x325/0xb00 [ 658.839727][ T53] __se_sys_mount+0x31d/0x420 [ 658.844944][ T53] do_syscall_64+0x166/0x520 [ 658.850077][ T53] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.856510][ T53] [ 658.856510][ T53] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 658.864546][ T53] __lock_acquire+0x164c/0x2de0 [ 658.869943][ T53] lock_acquire+0x115/0x350 [ 658.874988][ T53] down_write+0x91/0x200 [ 658.879794][ T53] kernfs_remove_by_name_ns+0x4e/0x140 [ 658.885796][ T53] sysfs_unmerge_group+0xd3/0x140 [ 658.891370][ T53] dpm_sysfs_remove+0x5f/0xd0 [ 658.896689][ T53] device_del+0x250/0x8f0 [ 658.901586][ T53] device_unregister+0x21/0xf0 [ 658.906972][ T53] hci_conn_del+0xc98/0x1290 [ 658.912206][ T53] hci_abort_conn_sync+0xda7/0x1170 [ 658.918197][ T53] hci_cmd_sync_work+0x280/0x430 [ 658.923672][ T53] process_scheduled_works+0xc3d/0x1630 [ 658.929765][ T53] worker_thread+0xa47/0xfb0 [ 658.934907][ T53] kthread+0x38b/0x480 [ 658.939516][ T53] ret_from_fork+0x514/0xb70 [ 658.944666][ T53] ret_from_fork_asm+0x1a/0x30 [ 658.949973][ T53] [ 658.949973][ T53] other info that might help us debug this: [ 658.949973][ T53] [ 658.960215][ T53] Chain exists of: [ 658.960215][ T53] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 658.960215][ T53] [ 658.974055][ T53] Possible unsafe locking scenario: [ 658.974055][ T53] [ 658.981607][ T53] CPU0 CPU1 [ 658.986989][ T53] ---- ---- [ 658.992385][ T53] rlock(&root->kernfs_supers_rwsem); [ 658.997865][ T53] lock(pmus_lock); [ 659.004300][ T53] lock(&root->kernfs_supers_rwsem); [ 659.012208][ T53] lock(&root->kernfs_rwsem); [ 659.017012][ T53] [ 659.017012][ T53] *** DEADLOCK *** [ 659.017012][ T53] [ 659.025173][ T53] locks held by kworker/u9:0/53: 5, last CPU#1: [ 659.031428][ T53] #0: ffff88804c0d8148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 659.042271][ T53] #1: ffffc90000bd7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 659.054831][ T53] #2: ffff888035ca8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 659.064704][ T53] #3: ffff888035ca80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170 [ 659.074492][ T53] #4: ffff88801d2dcaa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 659.085825][ T53] [ 659.085825][ T53] stack backtrace: [ 659.091729][ T53] CPU: 1 UID: 0 PID: 53 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 659.101037][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 659.111137][ T53] Workqueue: hci2 hci_cmd_sync_work [ 659.116364][ T53] Call Trace: [ 659.119658][ T53] [ 659.122632][ T53] dump_stack_lvl+0xe8/0x150 [ 659.127264][ T53] print_circular_bug+0x2e2/0x300 [ 659.132320][ T53] check_noncircular+0x12f/0x150 [ 659.137313][ T53] __lock_acquire+0x164c/0x2de0 [ 659.142191][ T53] ? __lock_acquire+0x1511/0x2de0 [ 659.147249][ T53] lock_acquire+0x115/0x350 [ 659.151785][ T53] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 659.157457][ T53] down_write+0x91/0x200 [ 659.161729][ T53] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 659.167385][ T53] ? __pfx_down_write+0x10/0x10 [ 659.172267][ T53] kernfs_remove_by_name_ns+0x4e/0x140 [ 659.177772][ T53] sysfs_unmerge_group+0xd3/0x140 [ 659.182828][ T53] dpm_sysfs_remove+0x5f/0xd0 [ 659.187523][ T53] device_del+0x250/0x8f0 [ 659.191882][ T53] ? klist_iter_exit+0xc1/0x100 [ 659.196758][ T53] ? work_grab_pending+0x3d1/0x930 [ 659.201943][ T53] ? __pfx_device_del+0x10/0x10 [ 659.206925][ T53] ? lockdep_hardirqs_on+0x7b/0x110 [ 659.212149][ T53] device_unregister+0x21/0xf0 [ 659.216928][ T53] hci_conn_del+0xc98/0x1290 [ 659.221540][ T53] ? hci_abort_conn_sync+0xa42/0x1170 [ 659.226938][ T53] hci_abort_conn_sync+0xda7/0x1170 [ 659.232178][ T53] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 659.237842][ T53] ? abort_conn_sync+0x26/0x210 [ 659.242791][ T53] ? abort_conn_sync+0x26/0x210 [ 659.247669][ T53] ? abort_conn_sync+0x19c/0x210 [ 659.252645][ T53] ? __pfx_abort_conn_sync+0x10/0x10 [ 659.257967][ T53] hci_cmd_sync_work+0x280/0x430 [ 659.262929][ T53] ? process_scheduled_works+0x97a/0x1630 [ 659.268677][ T53] process_scheduled_works+0xc3d/0x1630 [ 659.274274][ T53] ? __pfx_process_scheduled_works+0x10/0x10 [ 659.280283][ T53] ? assign_work+0x3cf/0x5d0 [ 659.284922][ T53] worker_thread+0xa47/0xfb0 [ 659.289577][ T53] kthread+0x38b/0x480 [ 659.293667][ T53] ? __pfx_worker_thread+0x10/0x10 [ 659.298807][ T53] ? __pfx_kthread+0x10/0x10 [ 659.303419][ T53] ret_from_fork+0x514/0xb70 [ 659.308042][ T53] ? __pfx_ret_from_fork+0x10/0x10 [ 659.313180][ T53] ? __switch_to+0xc78/0x1410 [ 659.317887][ T53] ? __pfx_kthread+0x10/0x10 [ 659.322500][ T53] ret_from_fork_asm+0x1a/0x30 [ 659.327290][ T53] [ 659.424787][T24812] syzkaller0: entered allmulticast mode