last executing test programs: 7.750614288s ago: executing program 4 (id=1100): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x1a, 0xa01, 0xfffffffc, 0x25dfdbfd, {0x80}}, 0x14}}, 0x20008000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 7.183864662s ago: executing program 4 (id=1105): r0 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x6, &(0x7f0000000000)) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000003100090027fd70000000000004000000100018000cac0f0002990ff4baac0f00"], 0x24}, 0x1, 0x0, 0x0, 0x46854}, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b13000000000000000000000700000000000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000100"/28], 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000440)='GPL\x00'}, 0x80) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000600)='GPL\x00'}, 0x80) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000640)={r4}, 0x8) close(r5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000680)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000700)={r5, r4, 0x4, r3}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=r6, 0x4) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r5) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000cc0)={0x0}, &(0x7f0000000d00)=0xc) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000dc0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, r9, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}, @NL80211_ATTR_PID={0x8, 0x52, r10}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008810}, 0x40) socket$netlink(0x10, 0x3, 0x4) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0x1, 0xffffffffffffffff}, 0x4) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1d29, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) ioctl$NILFS_IOCTL_GET_CPINFO(r3, 0x80186e82, &(0x7f0000000fc0)={&(0x7f0000000e00)=[{0x0, 0x0, 0x1ff, 0x1, 0x1000000007, 0x100000000, 0x100000001, 0x1}, {0x1, 0x0, 0x7, 0x9e09, 0x5, 0x9, 0x3, 0x9}, {0x2, 0x0, 0x7ad, 0x647b, 0xffffffffffffffff, 0x74, 0x7, 0x3}, {0x2, 0x0, 0x7, 0x8, 0x46, 0x0, 0x2, 0xfffffffffffffffd}, {0x1, 0x0, 0xfb17, 0x2, 0x10001, 0x0, 0xe3f1, 0xfffffffffffffffa}, {0x0, 0x0, 0x5, 0x8, 0x800, 0x10001, 0xfffffffc}, {0x0, 0x0, 0x40000100, 0x8, 0x8, 0x7, 0x6, 0x6}, {0x1, 0x0, 0x6, 0x7, 0x7, 0x3, 0x4, 0x6}], 0x8, 0x38, 0x1, 0x4}) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x91}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @generic={0x6, 0x4, 0x5, 0xc, 0xf7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffff8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4cca, 0xf9, &(0x7f0000000200)=""/249, 0x41000, 0x20, '\x00', r2, @fallback=0xa, r5, 0x8, &(0x7f0000000740)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x4, 0x7fffffff, 0x6dd}, 0x10, r6, r8, 0x6, &(0x7f0000000b40)=[r11, r12, r13, r14], &(0x7f0000000b80)=[{0x4, 0x5, 0xf, 0x6}, {0x4, 0x2, 0x8, 0xb}, {0x5, 0x4, 0x6, 0xc}, {0x2, 0x4, 0x2, 0x4}, {0x2, 0x1, 0x9, 0x7}, {0x2, 0x5, 0xf, 0x2}], 0x10, 0x8}, 0x94) 6.724777726s ago: executing program 4 (id=1110): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xe) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x0, 0x4) sendmsg$nl_route(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100039042abe70000000000000000000656317a2e6c2d946394ffed2d6edc32bcf0999957811110b72345210ea52c142e6c093f9aa1c798609", @ANYRES32=0x0, @ANYBLOB="0118020003110000280012800b00010065727370616e0000180002800400120005001700000000000500160002000000"], 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) 6.52603263s ago: executing program 4 (id=1112): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, 0x0, &(0x7f0000000000)=0x98) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x854) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000400)=@generic={0xb, "f834daf9db72b2e1222ab9f0ab07e802258424988852ac677de5b8ef0ddfeacee5d35b7b4a693a5532aed8ebe926f9ddd058a42cb642c97a1a46900cfa1ce468a85ca7dde4614af30e5d173c7355bb56a4172bd8a3ceb4ebb5b2163b75a869edbd87136dfd1237e1f02f2a89033887e62a920c71bd917d26e0b53807da87"}, 0x80, &(0x7f0000000480)=[{&(0x7f00000004c0)="a0005bf8", 0x4}, {&(0x7f0000000500)="c5bfd7eb", 0x4}], 0x2, 0x0, 0x0, 0x900}, 0x4000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) 6.269911787s ago: executing program 4 (id=1115): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f00000000c0)=""/225, 0xe1, 0x0, &(0x7f00000001c0)=""/48, 0x30}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f00000000c0)=""/225, 0xe1, 0x0, &(0x7f00000001c0)=""/48, 0x30}}, 0x10) r0 = socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000500)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000580)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) write$tun(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x141) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000600)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x800007, r3}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x800007, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xa, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xe, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x6, 0xc, &(0x7f0000000c00)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x6, 0xc, &(0x7f0000000c00)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f0000000c80)=[{{&(0x7f0000000cc0)=@xdp, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000dc0)=""/138}, {&(0x7f0000000e80)=""/122}, {&(0x7f0000000f00)=""/60}, {&(0x7f0000000f40)=""/48}, {&(0x7f0000000f80)=""/4086}]}, 0x100}], 0xefac5e4abd76da, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f0000000c80)=[{{&(0x7f0000000cc0)=@xdp, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000dc0)=""/138}, {&(0x7f0000000e80)=""/122}, {&(0x7f0000000f00)=""/60}, {&(0x7f0000000f40)=""/48}, {&(0x7f0000000f80)=""/4086}]}, 0x100}], 0xefac5e4abd76da, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000001f80)="d0", 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000001fc0)=0xffff1884, 0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000002000)=0x2, 0x4) socket$packet(0x11, 0xa, 0x300) sendmsg$NFT_BATCH(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002080)={&(0x7f00000020c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002080)={&(0x7f00000020c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000002100)={0x0, 0xffffffffffffff0e, &(0x7f0000002140)={0x0}, 0x1, 0x0, 0x0, 0x24008084}, 0x24000000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000002100)={0x0, 0xffffffffffffff0e, &(0x7f0000002140)={0x0}, 0x1, 0x0, 0x0, 0x24008084}, 0x24000000) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000060000000000000700000000020000000000001201000000002e5f00000030dc30"], 0x0, 0x3a, 0x0, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES8=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f01, 0x30, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x8, 0x7}], 0x10, 0xfff}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES8=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f01, 0x30, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x8, 0x7}], 0x10, 0xfff}, 0x94) 5.310732436s ago: executing program 4 (id=1121): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010029fcdbdf2500000000000000", @ANYRES16, @ANYBLOB="00210400022400001400030062617461647630000000000000000000040014001c0016801800018014000b"], 0x54}, 0x1, 0x0, 0x0, 0x9}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000018c0), 0x3fffffffffffe83, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x7) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r1, 0x0, 0x0}, 0x20) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r0], 0x48}}, 0x2404c054) 3.173499886s ago: executing program 3 (id=1133): r0 = socket(0x10, 0x3, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000580)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}, 0x10000}], 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="180000000a14010328bd7000fddbdf250800010000000000e7e897028b5598eb67ec84b848eee96d9abb2b2103fd64e60e97f5d042c36b1d57fc3219f9d2a777a32f69b96bb782afbb19077b4c4b73c1a8d9"], 0x18}, 0x1, 0x0, 0x0, 0x40408c0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=ANY=[@ANYBLOB="540065efe505d190b93f0000000000000400ffff0c00078005001500080000000500010006000000050005000a00000005000400000000000d000300686173683a6e6574000000000900020073797a3000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001780)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf251700100054000680140003002d3973353a5f2d5d382ee5364c4323843c00040067636d286165732900e8feffff0000000000000000000000000000000000000014"], 0x68}, 0x1, 0x0, 0x0, 0x400c841}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=ANY=[@ANYBLOB="380000001214010029bd7000fddbdf25080001000100000008004f000000000008004b001300000008000300f20000000800150000000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000001a00)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) writev(r8, &(0x7f0000001a40)=[{&(0x7f0000001a80)="0e000000", 0x4}, {&(0x7f0000001ac0)="0000b1062ec916864f3674cbb7ba6a444530ef81a885a158d47aaec2a484d9ce2c1a31089da60c9745b4e7e288a91bc8e6738f9085a3ff1d68ab3b149b3bf90decdf0cb39d0224c383dc2ea5f92f1aaa6a92512389d823593e14c3e92c35f766876901efd861d3408e92", 0x2}], 0x37) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x25a5, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2000000000000027, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x64}}, 0x20000000) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b80)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x24000044}, 0x400d014) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000440)={0x2, @in6={{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffff00}}}, 0x84) r10 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r10, 0x114, 0xa, &(0x7f0000000500)=ANY=[], 0x4) sendmmsg(r0, &(0x7f0000000000), 0x0, 0x8812) 2.394992616s ago: executing program 0 (id=1139): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x2, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ad000000870000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x38}, 0x94) 2.249916659s ago: executing program 0 (id=1140): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x80) bind$packet(r2, &(0x7f00000002c0)={0x11, 0x2, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES32=r5, @ANYBLOB="200001", @ANYRES32, @ANYBLOB="00001000e000030000010001000000"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000880), 0x40000000000009f, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000140)=0x28, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00'}) syz_emit_ethernet(0x37f, &(0x7f00000004c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x349, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0xe, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0xe, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x1, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 2.07235884s ago: executing program 3 (id=1141): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = socket$netlink(0x10, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x10}, {0xffff}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0xf, 0x4, 0x4, 0x8, 0xd20b, 0x2, 0xe48c, 0xe16, 0xb, 0x102, 0x5, 0x7ad5785a, 0x80000000, 0x7, 0x4, 0x2, 0x7, 0x7f, 0x7, 0x3, 0x7, 0x9, 0x8, 0x9a6, 0x3518, 0x8, 0x0, 0x6, 0x0, 0x5, 0xfffffffd, 0x7, 0x1, 0xc, 0x200019, 0x6, 0x3, 0x4, 0x6, 0x3, 0x8, 0xb, 0xd5aa, 0xfff, 0x8, 0x4, 0xfffffffe, 0xfff, 0xffff, 0x3, 0xb, 0x1, 0x7, 0x101, 0x6, 0x75a, 0x0, 0x5, 0x3, 0x400, 0xfffffff7, 0x6, 0xfffffffd, 0xfffffe00, 0x6, 0x7fffffff, 0xd, 0x4, 0x1, 0x4a, 0x3, 0x5, 0x5, 0x2, 0x0, 0x4, 0x3, 0x8, 0x4, 0x2, 0x10, 0x2, 0x4, 0x10000000, 0x6, 0x80000001, 0x3b, 0x8, 0x2, 0x9, 0x800, 0x1, 0x8001, 0xa, 0x2a, 0xffffffff, 0x0, 0x401, 0x8, 0xfffffffe, 0x1, 0xa479, 0x7, 0x2, 0x6, 0x8a8, 0x7, 0x2, 0x8, 0x8, 0x4, 0x2, 0x40, 0xba5, 0x7, 0x74a3ae00, 0x9, 0x200, 0x7fec, 0x5, 0xffffffff, 0x478, 0x8001, 0x8000001, 0x2, 0x9, 0x8f69, 0xe, 0x4b4, 0x2, 0x2, 0x4, 0x8000, 0x5, 0x6, 0xe26, 0xffffffff, 0x4, 0x8, 0xea98f1e, 0x900000, 0x5, 0xd, 0x8, 0xdc3d, 0x8, 0x9, 0x5, 0x81, 0x9, 0x6, 0x1, 0x400, 0x1, 0xfffffffd, 0x13bd0de8, 0xae2, 0xb0e, 0x4, 0x5, 0x40, 0x5, 0x1, 0x8, 0x3, 0x9e1b, 0x7f, 0xe40e, 0xc4, 0xa, 0x152, 0x9d, 0x7ff, 0x0, 0x8, 0x8, 0xc0, 0x1, 0x52e9, 0x1ff, 0x83c, 0x8, 0x2, 0x6, 0x7bfe, 0x8, 0xd8a, 0x765, 0x6, 0xe247, 0x3, 0x801fe, 0x8, 0xe, 0x7, 0x5, 0x7, 0x7, 0x0, 0x9, 0x44, 0x7, 0x3, 0x54d, 0x6fd2, 0x6, 0x3, 0x7, 0x9, 0x1, 0xffffffff, 0x7fff, 0xfff, 0xd7, 0xb90, 0x6, 0xaec, 0x9, 0xfffffffb, 0xe, 0x407, 0xffff, 0x1, 0x1, 0x6, 0x2, 0xffffffff, 0x2, 0x0, 0x6, 0x1, 0x49f, 0x6, 0x0, 0x1000, 0x37cf0891, 0x4, 0x4, 0xfffffff8, 0x9, 0x3, 0x7, 0x1, 0x6, 0xdee, 0x3, 0x9, 0x6, 0xfffffffa, 0x8, 0x8, 0x3, 0x9, 0x5, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000c40), &(0x7f0000000c80)=0x8) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c080000090601020000000000000000010000050900020073797a3000000000080009400000000114000880100007800a0011000180c20000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x891b, &(0x7f00000001c0)={'lo\x00', {0x2, 0x4e23, @loopback}}) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000380)=0x1) bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x100000000003f}}], 0x48}, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) 1.91429161s ago: executing program 0 (id=1143): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18360c0debbf3e3d1c520000000800000000000000080000006b118200000000009500"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl(0xffffffffffffffff, 0x8b2c, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x1c001) (async) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000680)='GPL\x00'}, 0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000900)="0232e6", 0x3}], 0x1) (async) unshare(0x100000) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ac0)='./cgroup/syz0\x00', 0x1ff) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000700)=r0, 0x4) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000780)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) (async) writev(r1, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000a00)="a1168ba5eb49f24e59058d9c2152da356ada16b3b30b5dd653ba9c462ca44987a40928a9fbe8575333006598b64fa96da898793b586ae20a25abaf68885e7cdd01f3279c83d4bfd1582d9e66201a148800f0aed52a59ba5893d745fe29d69519a6da421d28e758b7cd7505bbd3d8a2de64ad49a519477f80dc82f12cbb3a764adb2c52bece116387e5d960e714b1", 0x8e}], 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000070000000000000006000000c39e9fbcec5c12adff0100000095000000000000004ec514bdaebe4d1a855b93b9d268fc9809cbccdb4a35f2630df4e7857bbdb80ee138b00e6ed6118bfa6ac9700eee8c5a7a752f33873ccd529a3f28ccb89b92c8ce2e23c9cc17bbf95633c5c116453319e6a88beec764df4073c70fe7d9754e7aa7d4a8a62ffb1047eebcd2d96794ee551c04a35e18fce9f970bb36051dd1f7b685a378dcc08c60"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x7, 0xc4, 0x5, 0x101}]}) 1.847229496s ago: executing program 1 (id=1144): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x17, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x20}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffff3a4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0xa, 0x1001, &(0x7f0000001000)=""/4097, 0x41100, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) 1.820440177s ago: executing program 2 (id=1145): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207a0af8ff000000002fa000000000000007010000f8ffffffb702000008000000b703000000000000850000000601030095"], &(0x7f0000000040)='syzkaller\x00', 0xa, 0xfda6, &(0x7f0000000300)=""/149, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffbf}, 0x94) 1.711946161s ago: executing program 1 (id=1146): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) r3 = socket(0x10, 0x803, 0x2) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x2ba) (async) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r4}) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.568150352s ago: executing program 2 (id=1147): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000880)=ANY=[@ANYBLOB="180000008d000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf0900000000000055090100ffffffff9500000000000000450006000400fff81801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ffffff1fb7030000080000005000000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000940)='GPL\x00', 0xf, 0x1001, &(0x7f0000000980)=""/4097, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 1.399125032s ago: executing program 2 (id=1148): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x50, 0x24, 0x605, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x24, 0x2, [@TCA_PIE_LIMIT={0x8}, @TCA_PIE_LIMIT={0x8, 0x2, 0x80000000}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_ALPHA={0x8, 0x4, 0x20}]}}]}, 0x50}}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x22020400) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000300)=""/185, &(0x7f00000003c0)=0xb9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000001000085000000550000001500020000000000bf010000000000008500000056000000b70000000200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 1.397557969s ago: executing program 1 (id=1149): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, 0x0, &(0x7f0000000000)=0x98) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x854) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20040000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000400)=@generic={0xb, "f834daf9db72b2e1222ab9f0ab07e802258424988852ac677de5b8ef0ddfeacee5d35b7b4a693a5532aed8ebe926f9ddd058a42cb642c97a1a46900cfa1ce468a85ca7dde4614af30e5d173c7355bb56a4172bd8a3ceb4ebb5b2163b75a869edbd87136dfd1237e1f02f2a89033887e62a920c71bd917d26e0b53807da87"}, 0x80, &(0x7f0000000480)=[{&(0x7f00000004c0)="a0005bf8", 0x4}, {&(0x7f0000000500)="c5bfd7eb", 0x4}], 0x2, 0x0, 0x0, 0x900}, 0x4000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) 1.363523004s ago: executing program 0 (id=1150): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x53c42da62da5ca58) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb018018"], 0x0, 0x26}, 0x28) (async) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000340), 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="0303f17f36df000000000000e282d495ffc14e097ec8b2c139ab3e87f65cfcb9000000000000"], 0x28) unshare(0x22020400) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0xe, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000040000000600000007"], 0x50) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f00000008c0)) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000980)={r4, &(0x7f00000009c0), &(0x7f0000000a80)=""/109}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xd, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x15, &(0x7f00000031c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000003280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000032c0)={r6, 0x0, 0x0}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)={@map, r2, 0x5}, 0x10) sendto$inet6(r1, &(0x7f00000003c0)='{', 0x1, 0x8000, 0x0, 0x0) (async, rerun: 32) r7 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) (async) sendto$inet6(r1, &(0x7f0000000400)="a03f", 0x2, 0x8000, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000440)="e100", 0x12, 0x8040, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) unshare(0x20040600) (async, rerun: 32) pwritev(r8, &(0x7f0000000240)=[{&(0x7f0000000280)="f7", 0x1}], 0x300, 0x0, 0x0) (rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.254413565s ago: executing program 2 (id=1151): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x4400}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xc4ea}, @IFLA_LINK={0x8}]}, 0x30}}, 0x20008001) (async) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0xbc, 0xe96b) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f0000000500)={0x11, 0x300, r5, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xab0, 0x72}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002e000100000092c937d03c676558e017", @ANYRES32=0x0, @ANYBLOB], 0x18}], 0x1, 0x0, 0x0, 0x20080c5}, 0x0) (async) syz_emit_ethernet(0xac, &(0x7f0000000400)={@remote, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\x00', 0x76, 0x6, 0xfe, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x0, 0x4e23, 0x41424344, r1, 0x0, 0x0, 0x5, 0x1}, {"3ba6919cdfdedd8c1f86820a4c18d5bea5b839c1b5f2716cf4d800000015da4cc43b5c9b38000000efa71ccc2f527781d08eb45170eaa03f731f5fb4f6e00feae495d75e29ad3152a7cbc0b3ff5a70d03f2a62dcb8179efaf6bf12bc506eda12cc92"}}}}}}}, 0x0) 1.181266112s ago: executing program 3 (id=1152): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r1 = socket$nl_audit(0x10, 0x3, 0x9) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000300)="a4c7db8fcdca7f860a2a6dfb9182d25062912e2c25a623490a5641c8dcd64932c1bce01082d9473e75a7bd222bc9ed20c68d7be4b24fed3af599ed525912d36ce1c5", 0x42}, {&(0x7f0000000380)}, {&(0x7f0000000480)="2a3134701d0ca41a833691f4ffbf8e45b169803920ef73b468e2b908d5b3b1b4cf1becc1610d775308ed5a7b31656b235e8a31c6a5a3b21bdf8a56f542d98c3fa84488", 0x43}, {0x0}, {0x0}], 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240), 0x6) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000200)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) r5 = gettid() r6 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r4, @ANYBLOB="089805000750050008001300", @ANYRES32=r5, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) 1.178888071s ago: executing program 1 (id=1153): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x80) bind$packet(r2, &(0x7f00000002c0)={0x11, 0x2, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES32=r5, @ANYBLOB="200001", @ANYRES32, @ANYBLOB="00001000e000030000010001000000"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000880), 0x40000000000009f, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000140)=0x28, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00'}) syz_emit_ethernet(0x37f, &(0x7f00000004c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x349, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0xe, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0xe, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x1, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 1.077088395s ago: executing program 1 (id=1154): r0 = socket$inet(0x10, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'virt_wifi0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f00)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x42, [0x9, 0x1, 0x0, 0x0, 0x0, 0x7, 0x10, 0x0, 0x0, 0xe, 0x1, 0x0, 0xff, 0x8, 0x0, 0x2], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x8, 0x6, 0x0, 0x0, 0x3934, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x41) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x24080, 0x0) (rerun: 32) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x6, 0xd}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x2404c005) (async, rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000000) (async, rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @empty}, 0x10) (async, rerun: 32) r9 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32) connect$pppl2tp(r9, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r9, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (async) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r8, 0x1, 0x3e, &(0x7f0000000180)=0x1, 0x4) (async) r10 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x4809, 0x4) (async) connect$can_bcm(r10, &(0x7f00000005c0), 0x10) recvmmsg(r10, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) (async) sendmsg$can_bcm(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000007f0045557e82b7ddf8f40000", @ANYRES64=0x0, @ANYRESOCT=r7], 0x48}, 0x1, 0x0, 0x0, 0x40000c4}, 0x240e0015) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ec072, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) socket(0x18, 0x1, 0x1) 618.16488ms ago: executing program 2 (id=1155): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x8044) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}, 0x9a) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x11}]}}}]}, 0x44}}, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b0, 0x130, 0x130, 0x98, 0x130, 0x98, 0x398, 0x398, 0x130, 0x398, 0x398, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000007c0)={0x2, &(0x7f0000000800)=[{0x54, 0x6, 0x48, 0x2}, {0x6, 0x5, 0xf9, 0x204}]}, 0x10) (async) bind(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r5, 0x0) sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40}, [@IFA_CACHEINFO={0x14, 0x6, {0x3, 0xffffffff, 0x1000, 0x4}}, @IFA_FLAGS={0x8}, @IFA_LOCAL={0x14, 0x2, @remote}]}, 0x48}}, 0x0) (async) getsockname$inet(r4, &(0x7f0000000980)={0x2, 0x0, @empty}, &(0x7f00000009c0)=0x10) (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00), 0x4) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newtaction={0xe84, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe70, 0x1, [@m_pedit={0xe6c, 0x1, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x9, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6}, {0x8ce, 0x8, 0x2, 0x4, 0x800, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x10000000}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010004, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x6}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd2d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x1000005, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x5, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x80, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x5, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xfffffffb, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x56912219, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x0, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x9, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x9}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xd, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xff, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x402, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x6}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0xf, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x9, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff, 0x1}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0xe20, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0xa, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x5, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8b0, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x9, 0x1000000, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x1c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe84}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f0000001980)={0x0, {0x10, 0x9, 0xffff, 0x3, 0x7}}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000019c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001a00)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000001a40)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000001a80)={0x2c, 0x0, r8}, 0x10) (async) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x4048004) (async) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r2, 0x180000000) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000480)={0x0, 0x2800, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000003000003000001802c000400140001dbc060e000ac17ae0ff2ffffff000000201400020002000000ffffe241cbff0000000000991115b04fb0bc1bca0c9e0000000000000000"], 0x54}}, 0x0) 573.259396ms ago: executing program 3 (id=1156): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000060000000000000700000000020000000000001201000000002e5f0000c9aba83a"], 0x0, 0x3a}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{0x0, 0x2, 0x8, 0x6}], 0x10, 0x10001}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, 0x5, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_batadv\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, [0x0, 0x10, 0x0, 0x0, 0x400000]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="0500ffff"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 482.688365ms ago: executing program 0 (id=1157): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800000000ff07000000000000ffff18140000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000ffffffd7850000005a000000bca9000000000000350901000700000095000000000000003e980000000000002608000002000000850000008c000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ec}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xf, 0x0, &(0x7f0000000380)="40f0538ef047b21fb60068305500a8", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 310.469131ms ago: executing program 3 (id=1158): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000068a000000000000040000001801000020696c2500000000002020207b1ad8ff000000009fa1000000000000070100000400ffffb702000008000000b703000002000000850000002effb00095"], &(0x7f0000000200)='GPL\x00', 0x6, 0xffa, &(0x7f0000000e40)=""/4090, 0x0, 0xa8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) 305.808226ms ago: executing program 2 (id=1159): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) (async) r1 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000080)=""/19, &(0x7f00000000c0)=0x13) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00', 0xf}], 0x3c) (async) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000001c0)=[{{0x0, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x4}}, {{0x0, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x3, 0x0, 0x1}, {0x3, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}], 0x30) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb8, 0x1a, 0x300, 0x70bd26, 0x25dfdbfb, {0x6}, [@generic="29ad8b0f52a6c58c1c493fc3f0cabc039673583b870327bbd4c48320c1e3dbdfe12f505aedeb41ca", @typed={0x8, 0xc5, 0x0, 0x0, @fd=r0}, @generic="a7356a47bd8728f748c320eb08ada282765abb4ecd385eba4f8a0b5f1a1f8a58b1371cee21ceb91e327d1c13d15bfc510ee43840a058c55e072786c43c12f87eb5b38624801f9b6b15967bfefba3f713c402a9ceb6619e141bd4957dfe6cb319a7f42d47330375c13abd5c5d08bb32a650"]}, 0xb8}, 0x1, 0x0, 0x0, 0x880}, 0x20008820) (async) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000400)=0x1, 0x4) (async) r7 = accept$unix(0xffffffffffffffff, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) sendmsg$unix(r7, &(0x7f0000001a00)={&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000580)="310d611f", 0x4}, {&(0x7f00000005c0)="b48ea6b228d9146ae305abee7219a4f3aec6e79cf1a53daef4a609dc22faa2834bb8e7a3427c848f3888daa5f3d603b2eeb0ed89dd155d97ff9b0f876231c1c6b89a9529f8983edae72ecbf4607fb25ad4e50b7c7af909ef1d2ea341d438a1131ee26064de", 0x65}, {&(0x7f0000000640)="cdf1acdeb88886ee5bf0e4ce5bf5de88de4104a16426bffbbe159298fa367ee8b42f4df79864d9497edb12aa87ffa1c9155fce15c059cdb8e43c0fa878d00cd81407afe8f1cb68e0921b899a43747252a2b5c7da30be7d074af7c6ffdac4bb51c68af13002ef0c57381a87ee6879b3e024a82ab79d8712d6205c192853fd0a0e5fe74cea4e3d4bf780a2e5281d42334c2c66e87171a40e1c48713b559291f6697aae6eadb10ab9d81d1e99ac333efa706fd8184c4cbb2db5fbd9ecda6fa5a32016d2f222f932c54d60d2ed5b8345fac02dc89102cfa1611205957679a527552188ca57131ed589fd4ebbc150fdbc1b5f9cca0aaad58fcf0d47c026d5333178eac7b430e1b4c8630a7f8cb249d685f0111d8a78d4d6014ba7d9639d8750d24f9ad6ac79625bb4b0cb5bd9351cf0ab6e9ad7d6fd0715cbe1f55d4f370ffc95e3da09b6b89374c780537c214f07272d8492fc95264a540762e4de8ebf81ad07761b21591765ee4c92138448637a1881b8e898f98d66f23cad69b441d6ba94b839cff5a86d5229eb4a5728b0269e485c9315c3e3ae0659a3fcabb3c1dc9e7910cd776b5084b5dfc5301955cb7b7ea3207ba094a237175ec5a407be7eed5c80e7dd2d6db6e094bd97815b3ef20693f00ddbb0b9a6f0cbf069c8ad361e108c8fd66ee2686e5dc9963f739af521c40cb3f7bb5952962b7654e63b3d8cf46dea2a1126ff6547b97cc47a837dd32f5d177a70df6c91d19152db564baec2662ff5c65a15299af7306cabd9b33a57c6ec7b9cad694f35e634dc931d7b6966f0032db52f8655c9a3cb5e86c825b6da68cbb20905850009acf88ccb16db9e36dc852ec3ce035183a974dfd3daf5bdd4c35c1b768c8f555d25fb7b8cae47512817e15db0966a6d17e6f026cacb862b45c7eb5db936824f2fc3be2dabf6a32e9438589e6e5434a81c73cca0d2c2838fc73d5c2013ec63702d322ab4745ccc7b111ccb56425e71412b85d339066a1ddd21466c55d633c701d5986e7e1ccf6ea1b8581a5a91fa1c3a9705903e093b61484f1b472ecec3229a4951e0cf6ea55bbb0c3176579da9603608c143dd810dbf595c25a1a028258296d77d930637f1307f57c009ccbc1e90f53f84f48b85a1a4ac80b0c2b23ac01b42f22bfaff0d0cecb8d0cd4092a2f1cef1198cf952b21c1ac924274100e9d08f2220d34ea1ee56d56d76003efee381f04db4398ead542e205a2ae8265bb4b4e020dcfb7e4ae01f81cf20724aacedc6266602d78856303c7aa22b5d34d2081e31414415ed06f1acc0e47a7cd6e8f39d108b05e75732f52c491f4fe4407fccf3e6303d43be20a734a6621d87bf0927890885c944971900076f51c47496e3d8fb470a3ab9ebc676b3d3d21ef701000e0f03bda943ea976966269751def663b72410e01e460ceae105e7150a2cbac13f9b3a8eeacd07bf949ebfb08787af1977184af4d83fd8a1a226147ed7498222880552f04db811519eb84d6e725e53f9da97cf499c2f4fe4f44e4fdbcb913c5289a8a383b14ff4903e81a7e2d995d9f3895d4b218745034d39ed5aa6be91126b1210d0f469da4f121b71d3a89cd318b96ec3ee821e468c6a03a0dce3c059ddecb6c9dd7a180d682924935ad9960deee75a57155b4c36b31b74aba5e0922e8be9028e74fae40f7374ce16629b4c462edfee789e1a38fe732249d0ca7ffcd512034dcf446ad9b22391fa9df27b2579a33595b7df66aac5c023c848589868a5d2467a42695ef02bdfb691fcde19990a54ba37905f32806870958e0c94bbcfaa7c65b7ebcc2d53eae7deac6594af52664dcdaea30c67c014817b1c6019d0cd52def277e95a757aac79de0cbf0335c4449f58564f062888bb362d200d5905c78cb9e4f4f6d2664f2d6e591f56979ef612c00b15ac42ecd4911e62359a3db3144fec769de99353e2cb22855af847b6cc60323a9095a6a771fde087044bf12b69a5a0d5d7ffb92d0612d1120ba84c5d93830c18add10ccfa5130c7635104c2ba6d79f90d829492fe8468965388e74ca08d32f74ba91b195cd32b062caa384d99b8b441261dfc55353c6abc751692af5682231c7b72df0216657fd03b17c6d13ed702690fbbc1ee13d331bf06042ea84f69c77da65ab84ae74de31d06252e0599570f24758471b6519d79b65c1d82ce49f0f2949589e1c0a70110a8f1353c7b23611707457b628d6ac582d82828bb1dd456335b6eebff3952e6672ef92e092222dc545ad67590cb06b7253a09447a4abe3bef0700904d6f0ad5b184f5f076ba1cbb0d4ffa6503a2cb9db50b201f44bc43bc469648fe7de6c93ba6dc4ab6f761f004e82ba40e385f45f834e7f3f51ba638abd9f7a6da649565d56f7c6605a8317efd0d696c05054bd1f9aa34bf7dcf326c080cb29ee244ad174eb93c2539335335c1a3f41858a851a6f1d45ccd49e4c20adb444b3d54f61e499e030af682d4deb4f460fe79094a7092ece8021970c560320db5780e711186a18f14f8f9b06237db281867969daa569bde852ffe7c5ee2d9fc450e0c0f66153638dfae4368c5828b9b21377199d09f6bd93a3052c05ceed2bd947062c361cd39b6c7cf5cadb241a8317aab0f9571de3c00d1c04eb71f92b2c81807c3ec78b8d18db08e2ad280274556024a75cd5312adb943ac5b5f3b6be08187d82a3b3b7fb413a576d131bc5181619b6e14dea5c58180c987a84afa43a639fa6d80a460b0eaf96b06f8c995782f044a293713f0d9884cbaf171cf8f97a2aafdbeb42033c294e3dfdd9e534900775adf7681381772c9c9670eeba9a4a01938e55d0d72c32f71850a44918c5cab5c64d891bb38f7d67f76af23c57b48be16f5c5ebcb89c644d1c3b44b632e437fddac06c30aa304000b1a157871e10d02b51e1f5410b1a6f739c6e4a1ca26b9f89b8e4d7b1bf8549b51a0e554b4e6082c14aea79caa509bf6f4dba9754829918bb5d526a43c24a185a06b65ddc38b55f1ab7faf20f5b7d0592c1f2de7f56ccca8f9b1fc9d8c45a2ca565b441cabad90ca1847faa7d4678e0a23be5234d187ca6edcf788dd439cb8964536ebdd9f8c4f90a7b4cd0a4a0407f8abe8afb2b5a16d1d200a94d0e3217f77681033744b630443b40e0b5ab974830baf49c1b0e1e8899c52bffaf823b7c30f5059ff0fece30f9cbcbdf11874ff2ee0be70a5b1c5d30b94a4f164995b35c20917a66cfe39bd329547265c8f6c2fce5dabeee305396dbcc7bb145f21f0d0d5a83e7c0873c93250af77da5ea5a54f401b4eb4563aa1b54442d4690237bcc9135df90e13b1ebbee8c4c3efc97ac002169e2964abdbd799c4bd1075ad2095f4d13ee3ecedb2e60d89d3997b5d25254dab5304b5546f9e35b32129b3d745bea01e6c37a13f1c54444fa6954ecff89cf26ae8f325f9877561301c65397f6c31b4f6f9d35deeb5053e669d1c7177fb90b569e24d1d06487b51dde7c2126fdc9fcbe244098db8ee79c5442fd5480258cd5bea40f528ae5e46db8a59a9c65881181c8720b4f2f61d002d546a2dda8815335f37871305c0c031a934910e582c05e72ab4b06178084e0cc026b1deaf5ef54dbbe6bd0282bd55b7df355199815f83a36d09569a56d054c4b9055f72b8c3034234a36a8c1e4996d71232d80a4750dfddccc219e4b5c331e456555d7bc9b60faa7fe884d2f342b53e485a4529ac7184a3b7d88604d89861571057dba2d66178aa6c39a2f2a82850e1298d677fa04e67d8395da66d2a2dd650ab48783f4917f7f7659748332c5309430e3ceb24d2b9dbf0f19dcc89e87abe7d8d9d44cb1cc629ccddabebc57cc336ee96ca2c723315a420323b0a4db2ead9c3c14379577133658470250e633765ae5b366e4de1c1d59eae601630ac49454a0be7a5a291946e2ce8a616aaef1727c794ca8c2161b6b7dbb1ebe57cce0ed3605c8139ec55db627609ff236099113abdef79dd46cc63703216bd335ecd35f708c8cc12e96fa4dc09082668a8a06c07c24d5e55580f6db0e6cb153403c48b1e2689d6aeff95fb6fd5cefcad809a8a779914fffafa5ee05301357c78f03b4ff17c7260dd917b862bedb472158464f7ddc1df03e802e0020862498004681efb1bf18341c8f541ce45e3b71854ac6ab364df8b94ee1cd14170c4b10ac3904646de4eb83bc2f0cafe5d89ee079fc72135b44248323aadca783d6c1eae0c9fd8b33fb944786a53a7df683af1cb854fbfa212890f76f26d3d3eb6f205a2ec6cbfa253c9e2aadd038ca1ca72910949196695c0babb3c040aec11009fe1ef9ffa08cdcc3d05fb67a892d9a248911bde2299c4575eb22a790bfeb5a80241ec432cfe520fa4733399b28ececc4d9df10e38876b943dd45325bcafb825f4159f571dab967907ef91b873329772e436029c5709855b5fcfce77bd57b1f156f083ad1ef892c874594ba1c999bdd5a0cd2c297b72e8a5b94ba7c26722cb09cf4abdc8afdb454ca28ad4535abba3054a96ecfa90865891e303b619d34c92ae23b0893239523df54925d0e269d697412b34999f9683890c0c870280fcad4c730141c69da49fb9970b62900ded842be0d7d84850ff37f11420e2c1dfea03e64730744f71e269ed78632457ff21a64526be67aceb1f8902ab96c82f9601d6467dcb742ec5d2f1d1543e384870cf17b23acd6d9ddb6576dc04bac3c027e9eba88dc28adc262be5849e1b1ff5a3d07d321b3c8266eaa66453f05aead1718b84646d6aada421aa71ccb590257a05c7410de51eaa3c4a3624c36e1dd27bb32a29ea7324c02b8f5a65ece5a7e109aacd88ba280b4613e446202340b7ee36826e3d19ffec6df08af6b169e16e756e81220c0ec411f5b356690bd30789f0d03c62b86c99d06fdae0bf1ba48f2bc9b2b5afceac787d206e09ccc3c9d71a3920cb314a399886a7bd89cae675057e7d54a3fc72c92a2773574af29c7d7b760f5aa2edef8c9e3a57dcb06ffa53f29762bbc711b859d9fe58c8ebeca5cebcf4081264c0632719d7c92b3d3166574163d29b2060f033c06bc303e5f708a6239c6072e63b37552e497b7a2da428a69549233e23cfc943e37f9e001be5ce080dad920262d10f343420df6ec3aa48b82de305b7d50e2d5ee6fe73f6bd8840327760dc2984e1d851adc70e4a264303f10064194a1445f3dc3304409e5e192ebd3b97d25a15997330bc79e79940d2983fd7b3eb87e9113cf9578ddd6c39026245a7b5c1ab2b20ea3202e9a14cc101ff84eae72bb9536f0a3b40cfd2fc31fa3466f45eea31600d61c00368f0dd7cf25f8c4e2055eafa64ff2fda65a2d1290ca39c3e51163fcbd6b78c9874d53bf71647e910065a62a55e90f4d73517426d36c89c36f65d7c8f13b4568d8a779af23e2aab17e2c4ea7c4b57b4425e7158c1b0ba6263d8765387cdad7335022250b875a0afb1963c7e607a67283cf691cc6965a53cc7781af32827a6008457bf1ff285c3367b31f58134092635f29bcdca8e4cbcf45ee6129bc9bb54ab1a5b1d39d9af699470bfa95cf8aca4132f0b54d9bf9d2f08bbc4243133fffe819ebdd066ba339dbcd85b9d763a92db9e6d3ed0d23fa536989ab2956d037d85aa5405220f16aacf17e5dd3fc7627c3edf50ad25eb72f5c56d92cd62ded38d597d6010eb525697e72a1ed56884fef8c789cb597cd513ad25a0442c66d859278eef0c48663dc7ea76950aa3bfa761d7d58b9e8e283ba502f94f7310e686d56dbb2ad53700080188db57b800b9032c4dc02cc3adf87157b607f1b54113902bc674f03aea0bfb23b83", 0x1000}, {&(0x7f0000001640)="12d1a500a96d7aaa8696d5344e", 0xd}, {&(0x7f0000001680)="0e0df5c5007055294c3423c63b997d43a23e214d081700eed209afc9844802a73546a51a730401dbbb6fafbf4a3fe58218132fcc9ef1506dd6f0320d2559d30e1229f983ff1c25c9a85827dd843b451df0247f0fd43e1f13cbdfc4c7", 0x5c}, {&(0x7f0000001700)="a6a6df05749d70fbf4cada48c785d547b906a7a6b30cc7c98c80bef9756dd4688c206c4b93acddca65ef75c3e76f6c5c1ac077724d7598c81b0bf497b754522c1e13f7e2e722983f3b2e2cdb7bbdcfd642fb45ff98610d66ce9a49f303a302e5acc5eead85c09d8753fcaf93d9487e4369eca39f5dfa90bfab833320245ffdfb6923219108e0dc395c47b7573b74246220b3c0df51ae65f65edbb3507d7446410f710e8e117872f4c8fd45083ab2e03227033963de", 0xb5}, {&(0x7f00000017c0)="a79e7307904ffe08e21a6a2f5d9370f0a767812d927335c72ef6dc0a5b95b829e8f1488bbb65707c6ce851900aa3d1427293e1788d18217237d5f931a0f583ec8ee56fee813151b2c7cd23a7fa70dc849a04cb0721fbea6ed5ffba2097d7fc99b7d173bf1396cac4a8e3c3425cfebe6d7b601d59f00eb5df6221eff715d4dece80b28a6f95d8fa299e5ed4b772358f84a5217797d19321d8e6f676a00fa0096b2d4851262fe5477aff99cc7cd8f3074eb9ef8bb3a0f4225fb8a83b157073b6a859b1b4def03022aa1996dadc74f5d091cd60a89d9e9600eb51f273111d817d91d12a99", 0xe3}, {&(0x7f00000018c0)="7867288e3852583f9f297dc1b831f7e6c4f17d09e82b0c69315ad74cb89638ceaa11408f70903f9182a054a71e8c9545cb7f14734d2f0b6060aad02f7dfd8d118f8ad867f89972ab9966caa8a3830f18637e8f3e8e5139771e7bc8096916c7bfda7d8145cabe31104bac39c30935291bae945505ef70b01270cb56a4b4958b69fd91a31ba5d4949bd9d85527813209537c4ddcbc128f", 0x96}], 0x8, 0x0, 0x0, 0x40000000}, 0x4008080) (async) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001a80)={r3, 0x0, 0x25, 0x10, @val=@iter={&(0x7f0000001a40)=@task={0xffffffffffffffff, 0xffffffffffffffff}, 0x10}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000001ac0)=r8, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=@arena={0x21, 0x0, 0x0, 0x34, 0x400, 0x1, 0x6, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) (async) ioctl$FITHAW(r7, 0xc0045878) socket$igmp(0x2, 0x3, 0x2) (async) r9 = accept4$inet6_tcp(r2, &(0x7f0000001b80)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000001bc0)=0x1c, 0x800) setsockopt$inet6_tcp_buf(r9, 0x6, 0xe, &(0x7f0000001c00)="25016a4cc5c2c99eb23c987acfe8362e4c1d32b290c1bf25e42042a0bc1998ebbdbb68791f898de5c75c984584e6e53d6bd8546835efa71b8b073a05fa1dc838e793c23a1953cfaac7a4b077c9d6e344e99c7d470c38f4ebd1d910d654bfd06f1c0aa3a01dbdce213e0b7549872b9b40487b5de291630d1459c9f313c9a91675", 0x80) (async) unshare(0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000001e80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001e40)={&(0x7f0000001cc0)={0x164, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xa1, 0xa9, @random="3d76ea9f8ae7011fb9fbaff007bb48d77dd9c9d909fa06443431a4497273b93391f14ce73b161f489a683860df50a73703fcef40ac64cbd348afd65f58984c0893801a98ac03b38f6a6d21c155fcf85f26c47f8595512e59ca293babe01d1d3e5e63aaeecbb426584c961bf07747dad9ebd4ae1beac5338c935bb0177137979d396d0c7b2f9b126f7a50dcd0f72cc5a692f6d3caeacc7350a488165023"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x7d6}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x4b, 0xa9, @random="519cca0da5d8a90dc042761fbde91aaca8b32f4e3dcdbeb30013b08247fee0862d17589c0b7cdcfb717cd697463867eca128acbba67d0acb479e053056c6e66fb784e9d22cff42"}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) (async) socket$kcm(0x29, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000001ec0)={0x2, 0x4e22, @loopback}, 0x10) (async) r10 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r10, &(0x7f0000001f00)={0x2, 0x0, @broadcast}, &(0x7f0000001f40)=0x10) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001f80)={0x7, {{0xa, 0x4e21, 0x6d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfff}}, 0x1, 0x3, [{{0xa, 0x4e23, 0xfffffffb, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, {{0xa, 0x4e21, 0x2, @remote, 0x4}}, {{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1000}}]}, 0x210) 294.575924ms ago: executing program 0 (id=1160): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000800)='/', 0x1}], 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000c80)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000008004b0000400000000000069078ac141425ac1e0001440f08e0000002ac141414ac14141183030544040000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="00dbbb3ac5c92abae4ef63248a680d0a04e4ffffff0000"], 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c40)={r3}, 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000d40)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000d80)="2e000300010001", 0x7) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x7, 0x7, 0xfffff590, 0x0, {{0x18, 0x4, 0x2, 0x1f, 0x60, 0x67, 0x0, 0xa, 0x29, 0x0, @remote, @multicast1, {[@noop, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0x15, [@local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x1f, 0xab, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x39}, @empty, @multicast1, @rand_addr=0x64010101]}, @rr={0x7, 0xb, 0xd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @ra={0x94, 0x4, 0x1}, @generic={0x89, 0x9, "5b3bcc06c1cafe"}]}}}}}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, r0, 0x2, 0x5, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x15, &(0x7f0000000840)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000085630000ae000000182300002f96e72c4f4c8a261cecec17da66af003ef618a2ee7bbe8a0008000804d751a1e5f1961bf983a681c02c1fd2a413e7dbb17ff6e90500000000000000342688b9ae3ae47cb323a454355206253684abaa45ced4fac24fb241b46e01e301cd3a6a6e710d0c8b76b3e4e224ef14722b137d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00'], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x4, '\x00', r6, 0x0, r0, 0x8, &(0x7f00000003c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000004c0)=[r0, r0, r7, r0, r0, r0, r0, r0], &(0x7f0000000500)=[{0x3, 0x1, 0x4, 0x6}, {0x3, 0x1, 0xb, 0x1}, {0x3, 0x4, 0xd, 0x4}, {0x0, 0x1, 0x9, 0x2}, {0x4, 0x2, 0x0, 0x8}, {0x0, 0x2, 0x3}, {0x5, 0x4, 0x5, 0xa}], 0x10, 0x4}, 0x94) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x48, r8, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x48}}, 0x400400c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f00000006c0), 0x4) sendmsg$key(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) close(0x3) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000001014d9ec29c27000fcd9df250800030001000000080001000000000008004b001300000208004a"], 0x30}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x4000d, 0x4000, 0x6, 0x8}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) 42.057291ms ago: executing program 3 (id=1161): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe8800000000000000000000000000016401010000000000000000000000000000017fff4e230025000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ff010000000000000000000000000001000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000fbffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004500000020001002000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240009000400000000000000ff0300000000000009000000000000000001"], 0x15c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x4e20, 0x71c, 0x4e20, 0x5, 0x2, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private0, {0x300, 0xf, 0x100000000000006, 0xfffffffffffffbff, 0x8251c, 0xffffffffffff37a6, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc, 0x80}, 0x70bd25, 0x3505, 0x2, 0x1, 0x7, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x5dbc, 0x4) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x800, @mcast2}, 0x1c, 0x0}}], 0x1, 0x60040000) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) recvfrom$inet6(r1, 0x0, 0x0, 0x2000, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000000000000000000be413e7b9390aef2a30e35", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000400"/28], 0x50) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000140), 0x0) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0c00000004000000040000000100000000000000", @ANYRES32=r4, @ANYBLOB="1e00526440607600"/25, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000300"/28], 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310728bd7000000000003800000008303a3030383130c4a7d3443a82443737c2ecbc40000000080003000300000000080000"], 0x38}, 0x1, 0x2}, 0x4c880) bind$l2tp6(r3, &(0x7f0000000240)={0xa, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2}, 0x20) connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0xffffffff}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x11, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @printk={@lld, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x5}}, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000340)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 1 (id=1162): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = socket$netlink(0x10, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x10}, {0xffff}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0xf, 0x4, 0x4, 0x8, 0xd20b, 0x2, 0xe48c, 0xe16, 0xb, 0x102, 0x5, 0x7ad5785a, 0x80000000, 0x7, 0x4, 0x2, 0x7, 0x7f, 0x7, 0x3, 0x7, 0x9, 0x8, 0x9a6, 0x3518, 0x8, 0x0, 0x6, 0x0, 0x5, 0xfffffffd, 0x7, 0x1, 0xc, 0x200019, 0x6, 0x3, 0x4, 0x6, 0x3, 0x8, 0xb, 0xd5aa, 0xfff, 0x8, 0x4, 0xfffffffe, 0xfff, 0xffff, 0x3, 0xb, 0x1, 0x7, 0x101, 0x6, 0x75a, 0x0, 0x5, 0x3, 0x400, 0xfffffff7, 0x6, 0xfffffffd, 0xfffffe00, 0x6, 0x7fffffff, 0xd, 0x4, 0x1, 0x4a, 0x3, 0x5, 0x5, 0x2, 0x0, 0x4, 0x3, 0x8, 0x4, 0x2, 0x10, 0x2, 0x4, 0x10000000, 0x6, 0x80000001, 0x3b, 0x8, 0x2, 0x9, 0x800, 0x1, 0x8001, 0xa, 0x2a, 0xffffffff, 0x0, 0x401, 0x8, 0xfffffffe, 0x1, 0xa479, 0x7, 0x2, 0x6, 0x8a8, 0x7, 0x2, 0x8, 0x8, 0x4, 0x2, 0x40, 0xba5, 0x7, 0x74a3ae00, 0x9, 0x200, 0x7fec, 0x5, 0xffffffff, 0x478, 0x8001, 0x8000001, 0x2, 0x9, 0x8f69, 0xe, 0x4b4, 0x2, 0x2, 0x4, 0x8000, 0x5, 0x6, 0xe26, 0xffffffff, 0x4, 0x8, 0xea98f1e, 0x900000, 0x5, 0xd, 0x8, 0xdc3d, 0x8, 0x9, 0x5, 0x81, 0x9, 0x6, 0x1, 0x400, 0x1, 0xfffffffd, 0x13bd0de8, 0xae2, 0xb0e, 0x4, 0x5, 0x40, 0x5, 0x1, 0x8, 0x3, 0x9e1b, 0x7f, 0xe40e, 0xc4, 0xa, 0x152, 0x9d, 0x7ff, 0x0, 0x8, 0x8, 0xc0, 0x1, 0x52e9, 0x1ff, 0x83c, 0x8, 0x2, 0x6, 0x7bfe, 0x8, 0xd8a, 0x765, 0x6, 0xe247, 0x3, 0x801fe, 0x8, 0xe, 0x7, 0x5, 0x7, 0x7, 0x0, 0x9, 0x44, 0x7, 0x3, 0x54d, 0x6fd2, 0x6, 0x3, 0x7, 0x9, 0x1, 0xffffffff, 0x7fff, 0xfff, 0xd7, 0xb90, 0x6, 0xaec, 0x9, 0xfffffffb, 0xe, 0x407, 0xffff, 0x1, 0x1, 0x6, 0x2, 0xffffffff, 0x2, 0x0, 0x6, 0x1, 0x49f, 0x6, 0x0, 0x1000, 0x37cf0891, 0x4, 0x4, 0xfffffff8, 0x9, 0x3, 0x7, 0x1, 0x6, 0xdee, 0x3, 0x9, 0x6, 0xfffffffa, 0x8, 0x8, 0x3, 0x9, 0x5, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000c40), &(0x7f0000000c80)=0x8) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) sendmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c080000090601020000000000000000010000050900020073797a3000000000080009400000000114000880100007800a0011000180c20000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x891b, &(0x7f00000001c0)={'lo\x00', {0x2, 0x4e23, @loopback}}) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000380)=0x1) bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x100000000003f}}], 0x48}, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) kernel console output (not intermixed with test programs): m eth3 [ 84.255870][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.295229][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.333081][ T1300] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.333162][ T1300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.335529][ T5637] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.338544][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.373974][ T5637] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.376929][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.398244][ T5637] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.402950][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.405959][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.406061][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.433196][ T5637] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.435532][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.508594][ T5636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.518520][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.520860][ T5636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.530004][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.554319][ T5636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.557588][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.558514][ T5636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.570115][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.638569][ T5652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.741469][ T5652] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.753609][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.777907][ T1300] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.778159][ T1300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.806704][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.828579][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.828702][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.871283][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.871452][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.912343][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.912464][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.988363][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.094753][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.096546][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.173785][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.173901][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.206828][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.253086][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.253203][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.256941][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.257052][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.318939][ T5644] Bluetooth: hci0: command tx timeout [ 85.327708][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.327827][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.399914][ T5644] Bluetooth: hci1: command tx timeout [ 85.399946][ T5644] Bluetooth: hci3: command tx timeout [ 85.483180][ T5642] Bluetooth: hci2: command tx timeout [ 85.560044][ T5642] Bluetooth: hci4: command tx timeout [ 85.565414][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.766358][ T5638] veth0_vlan: entered promiscuous mode [ 85.815915][ T5638] veth1_vlan: entered promiscuous mode [ 85.946692][ T5638] veth0_macvtap: entered promiscuous mode [ 85.986282][ T5638] veth1_macvtap: entered promiscuous mode [ 86.065372][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.088227][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.130961][ T1300] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.170120][ T1300] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.170166][ T1300] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.254943][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.413993][ T5652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.527013][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.527033][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.568323][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.676638][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.676658][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.850194][ T24] cfg80211: failed to load regulatory.db [ 86.887736][ T5635] veth0_vlan: entered promiscuous mode [ 86.917559][ T5635] veth1_vlan: entered promiscuous mode [ 86.982757][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.044325][ T5635] veth0_macvtap: entered promiscuous mode [ 87.081303][ T5635] veth1_macvtap: entered promiscuous mode [ 87.096218][ T5638] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.173854][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.211003][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.216030][ T5637] veth0_vlan: entered promiscuous mode [ 87.236134][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.291470][ T5637] veth1_vlan: entered promiscuous mode [ 87.329105][ T88] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.330169][ T88] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.330212][ T88] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.330246][ T88] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.399220][ T5642] Bluetooth: hci0: command tx timeout [ 87.406624][ T5834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.480080][ T5642] Bluetooth: hci3: command tx timeout [ 87.480111][ T5642] Bluetooth: hci1: command tx timeout [ 87.510951][ T5652] veth0_vlan: entered promiscuous mode [ 87.535492][ T5636] veth0_vlan: entered promiscuous mode [ 87.556529][ T5637] veth0_macvtap: entered promiscuous mode [ 87.560077][ T5644] Bluetooth: hci2: command tx timeout [ 87.602025][ T5652] veth1_vlan: entered promiscuous mode [ 87.615933][ T5636] veth1_vlan: entered promiscuous mode [ 87.637072][ T5637] veth1_macvtap: entered promiscuous mode [ 87.639877][ T5644] Bluetooth: hci4: command tx timeout [ 87.654866][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.654886][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.764775][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.764794][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.817969][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.855235][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.874083][ T5636] veth0_macvtap: entered promiscuous mode [ 87.877135][ T5652] veth0_macvtap: entered promiscuous mode [ 87.913345][ T5652] veth1_macvtap: entered promiscuous mode [ 87.918195][ T5636] veth1_macvtap: entered promiscuous mode [ 88.055160][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.071035][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.095746][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.115671][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.184188][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.184208][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.229351][ T985] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.231068][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.231860][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.232169][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.295778][ T1300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.295857][ T1300] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.295890][ T1300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.295922][ T1300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.295954][ T1300] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.295985][ T1300] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.296017][ T1300] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.296048][ T1300] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.432430][ T1300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.432450][ T1300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.474393][ T5855] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10'. [ 88.615725][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.615745][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.654591][ T5858] xt_hashlimit: size too large, truncated to 1048576 [ 88.728565][ T985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.728583][ T985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.802739][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.802839][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.881688][ T5865] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12'. [ 88.984588][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.985366][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.048189][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.048206][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.107219][ T5861] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12'. [ 89.108352][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.108494][ T5861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.109000][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.109135][ T5861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.126268][ T5861] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12'. [ 89.134190][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.134373][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.149999][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 89.174415][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 89.174786][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 89.175262][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 89.199890][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 89.377817][ T5868] TC_ACT_REPEAT abuse ? [ 89.672865][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 89.786176][ T5883] netlink: 'syz.4.5': attribute type 11 has an invalid length. [ 89.989873][ T5884] syzkaller1: entered promiscuous mode [ 89.989894][ T5884] syzkaller1: entered allmulticast mode [ 90.050278][ T5884] netlink: 'syz.0.16': attribute type 4 has an invalid length. [ 90.245515][ T5893] netlink: 'syz.2.17': attribute type 2 has an invalid length. [ 90.449548][ T5895] NFSD: Failed to start, no listeners configured. [ 90.700275][ T5899] netlink: 'syz.1.20': attribute type 1 has an invalid length. [ 90.716955][ T5899] batadv_slave_1: entered promiscuous mode [ 90.716976][ T5899] batadv_slave_1: entered allmulticast mode [ 90.937995][ T5901] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 90.951250][ T5903] ip_tables: iptables: counters copy to user failed while replacing table [ 90.977140][ T5903] syz.3.19 uses obsolete (PF_INET,SOCK_PACKET) [ 91.056972][ T877] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.111177][ T5911] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 91.222134][ T5915] ip_tables: iptables: counters copy to user failed while replacing table [ 92.616931][ T5987] Zero length message leads to an empty skb [ 92.636272][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.637248][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.886734][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.917879][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.160267][ T1300] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.161532][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.161887][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.196865][ T6007] netlink: 'syz.4.44': attribute type 1 has an invalid length. [ 93.199509][ T985] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.199547][ T985] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.199576][ T985] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.742298][ T6037] bridge_slave_1: left allmulticast mode [ 93.742327][ T6037] bridge_slave_1: left promiscuous mode [ 93.742580][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.800582][ T6037] bridge_slave_0: left allmulticast mode [ 93.800608][ T6037] bridge_slave_0: left promiscuous mode [ 93.800838][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.892965][ T6046] __nla_validate_parse: 11 callbacks suppressed [ 93.892984][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'. [ 93.909288][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.56'. [ 93.909377][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.940023][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.233539][ T6056] netlink: 44 bytes leftover after parsing attributes in process `syz.1.58'. [ 94.260810][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.59'. [ 94.283396][ T6059] bridge_slave_1: left allmulticast mode [ 94.283421][ T6059] bridge_slave_1: left promiscuous mode [ 94.283788][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.298018][ T6059] bridge_slave_0: left allmulticast mode [ 94.298040][ T6059] bridge_slave_0: left promiscuous mode [ 94.298250][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.351015][ T6060] ip_tables: iptables: counters copy to user failed while replacing table [ 94.620017][ T6066] netlink: 'syz.1.63': attribute type 8 has an invalid length. [ 94.650826][ T6066] netlink: 36 bytes leftover after parsing attributes in process `syz.1.63'. [ 94.650849][ T6066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.63'. [ 94.650868][ T6066] netlink: 36 bytes leftover after parsing attributes in process `syz.1.63'. [ 94.654399][ T6066] netlink: 68 bytes leftover after parsing attributes in process `syz.1.63'. [ 94.654425][ T6066] tipc: Started in network mode [ 94.654439][ T6066] tipc: Node identity 4246, cluster identity 4711 [ 94.654450][ T6066] tipc: Node number set to 16966 [ 94.806258][ T6070] netlink: 24 bytes leftover after parsing attributes in process `syz.4.64'. [ 94.894067][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.66'. [ 95.346035][ T6093] syzkaller1: entered promiscuous mode [ 95.346058][ T6093] syzkaller1: entered allmulticast mode [ 95.355881][ T6093] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 4032 [ 96.166038][ T6146] warning: `syz.2.85' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.166351][ T6139] nbd0: detected capacity change from 0 to 63 [ 96.193838][ T5644] block nbd0: Receive control failed (result -104) [ 96.451492][ T6160] FAULT_INJECTION: forcing a failure. [ 96.451492][ T6160] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 96.451522][ T6160] CPU: 0 UID: 0 PID: 6160 Comm: syz.4.93 Not tainted syzkaller #0 PREEMPT(full) [ 96.451544][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 96.451555][ T6160] Call Trace: [ 96.451563][ T6160] [ 96.451572][ T6160] dump_stack_lvl+0xe8/0x150 [ 96.451607][ T6160] should_fail_ex+0x3eb/0x540 [ 96.451638][ T6160] _copy_to_user+0x31/0xb0 [ 96.451666][ T6160] simple_read_from_buffer+0xe1/0x170 [ 96.451697][ T6160] proc_fail_nth_read+0x1bb/0x230 [ 96.451723][ T6160] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.451749][ T6160] ? rw_verify_area+0x24a/0x4c0 [ 96.451777][ T6160] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.451797][ T6160] vfs_read+0x213/0xa80 [ 96.451834][ T6160] ? __pfx___mutex_lock+0x10/0x10 [ 96.451860][ T6160] ? __pfx_vfs_read+0x10/0x10 [ 96.451888][ T6160] ? __fget_files+0x2a/0x420 [ 96.451920][ T6160] ? __fget_files+0x3a2/0x420 [ 96.451942][ T6160] ? __fget_files+0x2a/0x420 [ 96.451970][ T6160] ? fdget+0x1ac/0x250 [ 96.452003][ T6160] ksys_read+0x150/0x270 [ 96.452032][ T6160] ? __pfx_ksys_read+0x10/0x10 [ 96.452072][ T6160] do_syscall_64+0x166/0x520 [ 96.452095][ T6160] ? trace_irq_disable+0x3b/0x140 [ 96.452121][ T6160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.452141][ T6160] ? clear_bhb_loop+0x70/0xc0 [ 96.452167][ T6160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.452186][ T6160] RIP: 0033:0x7f7d58f6974e [ 96.452204][ T6160] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 96.452219][ T6160] RSP: 002b:00007f7d59ed7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.452241][ T6160] RAX: ffffffffffffffda RBX: 00007f7d59ed86c0 RCX: 00007f7d58f6974e [ 96.452255][ T6160] RDX: 000000000000000f RSI: 00007f7d59ed80a0 RDI: 0000000000000004 [ 96.452266][ T6160] RBP: 00007f7d59ed8090 R08: 0000000000000000 R09: 0000000000000000 [ 96.452277][ T6160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.452289][ T6160] R13: 00007f7d59226038 R14: 00007f7d59225fa0 R15: 00007ffc753ee538 [ 96.452323][ T6160] [ 99.348372][ T6155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.355421][ T6166] netlink: 'syz.2.92': attribute type 1 has an invalid length. [ 99.355440][ T6166] netlink: 'syz.2.92': attribute type 1 has an invalid length. [ 99.598932][ T6199] __nla_validate_parse: 11 callbacks suppressed [ 99.598951][ T6199] netlink: 44 bytes leftover after parsing attributes in process `syz.2.101'. [ 99.734358][ T6199] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.736284][ T5644] Bluetooth: hci2: unexpected cc 0x1005 length: 10 > 8 [ 99.743418][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'. [ 99.757577][ T6204] netlink: 100 bytes leftover after parsing attributes in process `syz.0.103'. [ 99.792423][ T6203] netlink: 1 bytes leftover after parsing attributes in process `syz.1.102'. [ 99.794356][ T6203] netlink: 1 bytes leftover after parsing attributes in process `syz.1.102'. [ 99.795884][ T6203] netlink: 1 bytes leftover after parsing attributes in process `syz.1.102'. [ 99.796991][ T6203] netlink: 1 bytes leftover after parsing attributes in process `syz.1.102'. [ 99.798482][ T6203] netlink: 1 bytes leftover after parsing attributes in process `syz.1.102'. [ 99.812045][ T6203] netlink: 1 bytes leftover after parsing attributes in process `syz.1.102'. [ 99.819297][ T6203] netlink: 1 bytes leftover after parsing attributes in process `syz.1.102'. [ 99.910100][ T6209] geneve1: entered promiscuous mode [ 99.910122][ T6209] geneve1: entered allmulticast mode [ 100.060580][ T6199] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.086083][ T88] IPVS: starting estimator thread 0... [ 100.114038][ T6217] syzkaller1: entered promiscuous mode [ 100.114058][ T6217] syzkaller1: entered allmulticast mode [ 100.133430][ T6215] IPVS: Error connecting to the multicast addr [ 100.168901][ T6218] IPVS: using max 23 ests per chain, 55200 per kthread [ 100.206542][ T6199] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.256748][ T6199] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.388827][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.388881][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.388913][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.388942][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.284033][ T6251] syzkaller1: entered promiscuous mode [ 101.284055][ T6251] syzkaller1: entered allmulticast mode [ 103.135754][ T6222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.607302][ T6311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.339771][ T6311] syz.0.127 (6311) used greatest stack depth: 17992 bytes left [ 105.960790][ T6387] bond1: entered allmulticast mode [ 106.112142][ T6387] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.116533][ T6387] bond2: entered allmulticast mode [ 106.117109][ T6387] bond1: (slave bond2): Enslaving as an active interface with an up link [ 106.155701][ T6400] __nla_validate_parse: 7 callbacks suppressed [ 106.155719][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 106.173560][ T6390] bond1 (unregistering): (slave bond2): Releasing backup interface [ 106.187055][ T6390] bond2: left allmulticast mode [ 106.209874][ T6390] bond1 (unregistering): Released all slaves [ 107.421194][ T6443] tipc: Failed to remove unknown binding: 66,1,1/0:3453756182/3453756184 [ 107.421236][ T6443] tipc: Failed to remove unknown binding: 66,1,1/0:3453756182/3453756184 [ 107.567069][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.149'. [ 107.666542][ T6448] netlink: 28 bytes leftover after parsing attributes in process `syz.1.150'. [ 108.465579][ T6492] netlink: 'syz.4.155': attribute type 1 has an invalid length. [ 108.485988][ T6493] netlink: 68 bytes leftover after parsing attributes in process `syz.4.155'. [ 108.496229][ T6491] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 108.571319][ T6504] ip6t_hbh: too many supported opts specified [ 108.572155][ T6505] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 108.604735][ T6492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.061913][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 109.150223][ T6536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.163'. [ 109.178345][ T6536] netlink: 'syz.2.163': attribute type 10 has an invalid length. [ 109.178366][ T6536] netlink: 40 bytes leftover after parsing attributes in process `syz.2.163'. [ 109.317502][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.162'. [ 109.535102][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.162'. [ 109.637320][ T6546] skbuff: bad partial csum: csum=65535/2 headroom=2 headlen=65543 [ 109.718024][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.162'. [ 110.266463][ T6593] ip6gretap0: entered promiscuous mode [ 110.424054][ T6601] IPVS: Scheduler module ip_vs_mh not found [ 110.427956][ T6602] IPVS: length: 4096 != 24 [ 110.562864][ T6613] xt_cgroup: invalid path, errno=-2 [ 110.720458][ T6627] xt_bpf: check failed: parse error [ 110.870716][ T6635] netlink: 'syz.2.188': attribute type 4 has an invalid length. [ 111.926423][ T6699] __nla_validate_parse: 6 callbacks suppressed [ 111.926444][ T6699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.198'. [ 111.971464][ T6691] bond0: (slave bond_slave_0): Releasing backup interface [ 112.013088][ T6691] bond0: (slave bond_slave_1): Releasing backup interface [ 112.071385][ T6691] team0: Port device team_slave_0 removed [ 112.131559][ T6691] team0: Port device team_slave_1 removed [ 112.134026][ T6691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.134044][ T6691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.134063][ T6705] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 112.167058][ T6691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.167078][ T6691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.173741][ T6691] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 112.232217][ T6702] veth0_vlan: mtu less than device minimum [ 112.884549][ T6742] sit1: entered promiscuous mode [ 112.989829][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.212'. [ 113.051609][ T6747] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.062409][ T6751] lo: entered promiscuous mode [ 113.178614][ T6752] syzkaller0: entered promiscuous mode [ 113.178648][ T6752] syzkaller0: entered allmulticast mode [ 113.222577][ T6752] netlink: 32 bytes leftover after parsing attributes in process `syz.0.213'. [ 113.469730][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'. [ 113.519692][ T6767] IPv6: NLM_F_CREATE should be specified when creating new route [ 113.519899][ T6767] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.519912][ T6767] IPv6: NLM_F_CREATE should be set when creating new route [ 113.519955][ T6767] IPv6: NLM_F_CREATE should be set when creating new route [ 113.519979][ T6767] IPv6: NLM_F_CREATE should be set when creating new route [ 113.983873][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.224'. [ 113.983900][ T6793] openvswitch: netlink: Message has 16 unknown bytes. [ 113.987132][ T6793] û: renamed from vlan1 (while UP) [ 114.014124][ T6793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.224'. [ 114.014145][ T6793] netlink: 468 bytes leftover after parsing attributes in process `syz.3.224'. [ 114.026501][ T6793] netlink: 152 bytes leftover after parsing attributes in process `syz.3.224'. [ 114.118167][ T6790] ipvlan2: entered promiscuous mode [ 114.150326][ T6800] netlink: 64 bytes leftover after parsing attributes in process `syz.1.226'. [ 114.168327][ T6800] syzkaller1: entered promiscuous mode [ 114.168347][ T6800] syzkaller1: entered allmulticast mode [ 114.187985][ T6804] netlink: 'syz.0.227': attribute type 1 has an invalid length. [ 114.308545][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.229'. [ 114.871616][ T6847] syzkaller1: entered promiscuous mode [ 114.871639][ T6847] syzkaller1: entered allmulticast mode [ 114.987312][ T6855] netlink: 'syz.0.244': attribute type 1 has an invalid length. [ 115.021434][ T6857] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 115.106869][ T6855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.234410][ T6860] bond1: (slave gretap1): making interface the new active one [ 115.236740][ T6860] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 115.257317][ T6867] Set syz1 is full, maxelem 1029 reached [ 116.064061][ T30] audit: type=1804 audit(1794294772.206:2): pid=6907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.257" name="/newroot/50/cgroup.controllers" dev="tmpfs" ino=274 res=1 errno=0 [ 116.064752][ T30] audit: type=1800 audit(1794294772.206:3): pid=6907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.257" name="cgroup.controllers" dev="tmpfs" ino=274 res=0 errno=-22 [ 116.176789][ T6917] bond3: option min_links: invalid value (18446744073709551612) [ 116.176811][ T6917] bond3: option min_links: allowed values 0 - 2147483647 [ 116.198375][ T6917] bond3 (unregistering): Released all slaves [ 116.965176][ T6963] __nla_validate_parse: 9 callbacks suppressed [ 116.965197][ T6963] netlink: 80 bytes leftover after parsing attributes in process `syz.1.270'. [ 116.965741][ T6963] netlink: 64 bytes leftover after parsing attributes in process `syz.1.270'. [ 117.068951][ T6963] netlink: 'syz.1.270': attribute type 27 has an invalid length. [ 117.855911][ T7006] netlink: 'syz.2.281': attribute type 1 has an invalid length. [ 117.855934][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'. [ 117.858208][ T7006] netlink: 'syz.2.281': attribute type 11 has an invalid length. [ 117.945007][ T7008] openvswitch: netlink: Multiple metadata blocks provided [ 119.437111][ T7043] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 119.605048][ T7067] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 119.772167][ T7076] tipc: Started in network mode [ 119.772183][ T7076] tipc: Node identity , cluster identity 4711 [ 119.772198][ T7076] tipc: Failed to obtain node identity [ 119.772227][ T7076] tipc: Enabling of bearer rejected, failed to enable media [ 119.808437][ T7076] xt_l2tp: unknown flags: e7 [ 120.004319][ T7084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.296'. [ 120.557266][ T7107] netlink: 44 bytes leftover after parsing attributes in process `syz.4.304'. [ 120.557289][ T7107] netlink: 192 bytes leftover after parsing attributes in process `syz.4.304'. [ 120.557340][ T7107] netlink: 44 bytes leftover after parsing attributes in process `syz.4.304'. [ 120.890452][ T7116] ip6erspan0: entered allmulticast mode [ 121.241877][ T7130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.310'. [ 121.458977][ T7134] Bluetooth: MGMT ver 1.23 [ 121.497683][ T1179] IPVS: starting estimator thread 0... [ 121.528001][ T7142] netlink: 596 bytes leftover after parsing attributes in process `syz.0.312'. [ 121.570486][ T7142] netlink: 24 bytes leftover after parsing attributes in process `syz.0.312'. [ 121.592066][ T7141] IPVS: using max 24 ests per chain, 57600 per kthread [ 121.900431][ T7144] xt_CT: No such helper "snmp_trap" [ 122.051807][ T153] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.051855][ T153] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.058877][ T153] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.058925][ T153] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.064513][ T7133] __nla_validate_parse: 2 callbacks suppressed [ 122.064529][ T7133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.310'. [ 122.064660][ T7137] xfrm0: entered allmulticast mode [ 122.064827][ T7137] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 122.103216][ T7157] netlink: 'syz.4.319': attribute type 1 has an invalid length. [ 122.166401][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.319'. [ 122.304292][ T7158] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.351894][ T7157] netlink: 'syz.4.319': attribute type 10 has an invalid length. [ 122.351914][ T7157] netlink: 40 bytes leftover after parsing attributes in process `syz.4.319'. [ 122.382001][ T7166] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 122.391833][ T7170] @: renamed from dummy0 (while UP) [ 122.421560][ T7157] bond2: (slave dummy0): Releasing backup interface [ 122.684392][ T7172] xt_CT: No such helper "snmp_trap" [ 122.751444][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'. [ 122.768493][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'. [ 122.920214][ T7205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.328'. [ 122.920246][ T7205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.328'. [ 122.927207][ T7205] gretap0: entered promiscuous mode [ 122.937710][ T7205] gretap0: left promiscuous mode [ 122.979063][ T7207] tipc: Enabling of bearer rejected, failed to enable media [ 123.398287][ T30] audit: type=1800 audit(1794294779.536:4): pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.329" name="blkio.bfq.time_recursive" dev="tmpfs" ino=301 res=0 errno=-22 [ 123.436568][ T30] audit: type=1800 audit(1794294779.576:5): pid=7230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.329" name="blkio.bfq.time_recursive" dev="tmpfs" ino=301 res=0 errno=-22 [ 123.480336][ T5644] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 123.481206][ T5644] Bluetooth: hci2: command 0x0401 tx timeout [ 124.570712][ T7282] Cannot find set identified by id 0 to match [ 124.934287][ T5976] syzkaller1: tun_net_xmit 90 [ 125.361059][ T7327] nbd1: detected capacity change from 0 to 63 [ 125.380360][ T7327] netlink: 'syz.2.351': attribute type 12 has an invalid length. [ 125.435618][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'. [ 125.594488][ T5642] block nbd1: Receive control failed (result -104) [ 125.623608][ T7343] pimreg0: tun_chr_ioctl cmd 1074025677 [ 125.623684][ T7343] pimreg0: linktype set to 804 [ 125.822245][ T7362] netlink: 'syz.0.357': attribute type 2 has an invalid length. [ 125.822479][ T7362] netlink: 'syz.0.357': attribute type 2 has an invalid length. [ 126.002772][ T7371] block nbd2: server does not support multiple connections per device. [ 126.003225][ T7371] block nbd2: shutting down sockets [ 126.314251][ T7388] netlink: zone id is out of range [ 126.314267][ T7388] netlink: zone id is out of range [ 126.314275][ T7388] netlink: set zone limit has 8 unknown bytes [ 126.314702][ T7386] netlink: zone id is out of range [ 126.314714][ T7386] netlink: zone id is out of range [ 126.314721][ T7386] netlink: set zone limit has 8 unknown bytes [ 126.520843][ T51] block nbd0: Possible stuck request ffff8880284b7000: control (read@0,1024B). Runtime 30 seconds [ 126.521202][ T51] block nbd0: Possible stuck request ffff8880284b71c0: control (read@1024,3072B). Runtime 30 seconds [ 126.846070][ T7418] netlink: 'syz.1.371': attribute type 15 has an invalid length. [ 126.965834][ T7418] netlink: 'syz.1.371': attribute type 15 has an invalid length. [ 126.969630][ T1300] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 126.991738][ T1300] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 126.992892][ T1300] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 126.992938][ T1300] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 127.170509][ T7425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.373'. [ 128.255329][ T7455] netlink: 28 bytes leftover after parsing attributes in process `syz.4.379'. [ 128.484372][ T7461] netlink: 'syz.2.382': attribute type 7 has an invalid length. [ 129.463066][ T7487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.385'. [ 129.483268][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 129.587459][ T7488] netlink: 'syz.2.387': attribute type 1 has an invalid length. [ 129.654336][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.654540][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 129.654561][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.654713][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 129.654728][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.654863][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 129.654887][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.655023][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 129.655038][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.655636][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 129.655656][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.655836][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 129.655854][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.656069][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.741964][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.742168][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.742307][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.742452][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.742588][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.742723][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.742883][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.746468][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.746612][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.753166][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.753313][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.753504][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.753639][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.753775][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.753985][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.760130][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.762665][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.770443][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.770593][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.770732][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.770868][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.771003][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.771138][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.771302][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 129.771499][ T7486] bond0: Unable to set up delay as MII monitoring is disabled [ 130.112470][ T7497] syzkaller1: entered promiscuous mode [ 130.112494][ T7497] syzkaller1: entered allmulticast mode [ 130.931037][ T7537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.931063][ T7537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.938058][ T7537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.938081][ T7537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.035739][ T7541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.594969][ T7608] netlink: 'syz.0.405': attribute type 1 has an invalid length. [ 132.594993][ T7608] __nla_validate_parse: 92 callbacks suppressed [ 132.595005][ T7608] netlink: 96 bytes leftover after parsing attributes in process `syz.0.405'. [ 132.901589][ T7608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.405'. [ 132.924628][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.013732][ T7554] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 133.360826][ T7626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.409'. [ 133.380870][ T7626] netlink: 92 bytes leftover after parsing attributes in process `syz.1.409'. [ 133.676132][ T7643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.795630][ T7644] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 133.891721][ T7650] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 133.965276][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.418'. [ 133.982562][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.417'. [ 134.347970][ T7673] Bluetooth: MGMT ver 1.23 [ 134.499322][ T7680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.425'. [ 134.499354][ T7680] netlink: 20 bytes leftover after parsing attributes in process `syz.4.425'. [ 134.977147][ T7702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.431'. [ 135.207938][ T7669] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.221976][ T7669] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.471956][ T7712] netlink: 24 bytes leftover after parsing attributes in process `syz.4.435'. [ 135.861358][ T7730] bond3: entered promiscuous mode [ 135.863441][ T7730] 8021q: adding VLAN 0 to HW filter on device bond3 [ 135.952498][ T7734] bridge2: entered promiscuous mode [ 135.953403][ T7734] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 136.086163][ T7730] ipvlan2: entered allmulticast mode [ 136.086183][ T7730] bond3: entered allmulticast mode [ 136.086196][ T7730] bridge2: entered allmulticast mode [ 136.092977][ T7730] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 136.092999][ T7730] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 136.093117][ T7730] bond3: (slave ipvlan2): Error -95 calling set_mac_address [ 136.212469][ T7758] tipc: Enabling of bearer rejected, failed to enable media [ 136.288254][ T7761] syzkaller1: entered promiscuous mode [ 136.288274][ T7761] syzkaller1: entered allmulticast mode [ 136.742457][ T7778] bridge_slave_1: left allmulticast mode [ 136.742482][ T7778] bridge_slave_1: left promiscuous mode [ 136.742715][ T7778] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.780341][ T7778] bridge_slave_0: left allmulticast mode [ 136.780364][ T7778] bridge_slave_0: left promiscuous mode [ 136.780597][ T7778] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.841392][ T7792] netlink: 'syz.2.452': attribute type 10 has an invalid length. [ 136.934301][ T7793] netlink: 'syz.2.452': attribute type 10 has an invalid length. [ 136.934463][ T7793] netlink: 'syz.2.452': attribute type 10 has an invalid length. [ 136.934620][ T7793] netlink: 'syz.2.452': attribute type 10 has an invalid length. [ 136.934798][ T7793] netlink: 'syz.2.452': attribute type 10 has an invalid length. [ 136.934951][ T7793] netlink: 'syz.2.452': attribute type 10 has an invalid length. [ 136.935096][ T7793] netlink: 'syz.2.452': attribute type 10 has an invalid length. [ 136.935249][ T7793] netlink: 'syz.2.452': attribute type 10 has an invalid length. [ 136.935487][ T7793] netlink: 'syz.2.452': attribute type 10 has an invalid length. [ 136.936377][ T7793] netlink: 'syz.2.452': attribute type 10 has an invalid length. [ 137.492419][ T7812] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 137.816883][ T7846] __nla_validate_parse: 4 callbacks suppressed [ 137.816903][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'. [ 137.816981][ T7846] bridge_slave_1: left allmulticast mode [ 137.817000][ T7846] bridge_slave_1: left promiscuous mode [ 137.817240][ T7846] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.857806][ T7846] bridge_slave_0: left allmulticast mode [ 137.857832][ T7846] bridge_slave_0: left promiscuous mode [ 137.859140][ T7846] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.926780][ T7849] ip_tables: iptables: counters copy to user failed while replacing table [ 138.059865][ T7848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.467'. [ 138.103639][ T7865] netlink: set zone limit has 4 unknown bytes [ 138.207221][ T7848] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.150917][ T7904] xt_hashlimit: overflow, rate too high: 0 [ 139.874326][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'. [ 140.135501][ T7952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.494'. [ 140.135526][ T7952] nbd: must specify at least one socket [ 141.028554][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'. [ 141.600461][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.510'. [ 141.912177][ T7994] lo: left promiscuous mode [ 141.955550][ T7994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.957347][ T7994] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.006735][ T7994] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 142.006752][ T7994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.011868][ T7994] veth1_vlan: left promiscuous mode [ 142.013034][ T7994] veth0_vlan: left promiscuous mode [ 142.014955][ T7994] veth0_vlan: entered promiscuous mode [ 142.017257][ T7994] veth1_vlan: entered promiscuous mode [ 142.036307][ T7994] 8021q: adding VLAN 0 to HW filter on device eth0 [ 142.038227][ T7994] 8021q: adding VLAN 0 to HW filter on device eth1 [ 142.041511][ T7994] 8021q: adding VLAN 0 to HW filter on device eth2 [ 142.044262][ T7994] 8021q: adding VLAN 0 to HW filter on device eth3 [ 142.048119][ T7994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.053628][ T7994] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check. [ 142.077431][ T8010] gre1: entered allmulticast mode [ 142.105605][ T1300] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.211091][ T1300] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 142.282574][ T6352] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.282647][ T6352] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.282690][ T6352] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.526921][ T8039] validate_nla: 28 callbacks suppressed [ 142.526939][ T8039] netlink: 'syz.4.514': attribute type 1 has an invalid length. [ 142.531033][ T8039] netlink: 'syz.4.514': attribute type 2 has an invalid length. [ 142.611731][ T8049] netlink: 28 bytes leftover after parsing attributes in process `syz.4.514'. [ 142.863228][ T8058] netlink: 'syz.4.520': attribute type 1 has an invalid length. [ 142.863252][ T8058] netlink: 991 bytes leftover after parsing attributes in process `syz.4.520'. [ 142.960284][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.522'. [ 142.966083][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 143.045907][ T8072] Bluetooth: MGMT ver 1.23 [ 143.054486][ T8064] ip6gretap1: entered allmulticast mode [ 143.065885][ T8064] batman_adv: batadv0: Adding interface: ip6gretap1 [ 143.065901][ T8064] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.065928][ T8064] batman_adv: batadv0: Interface activated: ip6gretap1 [ 143.730771][ T8097] netlink: 32 bytes leftover after parsing attributes in process `syz.4.528'. [ 144.034298][ T8102] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 144.337903][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.536'. [ 144.357244][ T8118] netlink: 32 bytes leftover after parsing attributes in process `syz.3.535'. [ 145.031874][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'. [ 145.599671][ T8185] wg1: entered allmulticast mode [ 145.611980][ T8181] x_tables: duplicate underflow at hook 1 [ 145.688132][ T8182] wg1: left allmulticast mode [ 145.942817][ T8205] netlink: 24 bytes leftover after parsing attributes in process `syz.4.554'. [ 146.048958][ T8209] TCP: TCP_TX_DELAY enabled [ 146.054910][ T8208] syzkaller1: entered promiscuous mode [ 146.054931][ T8208] syzkaller1: entered allmulticast mode [ 146.063233][ T8205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.554'. [ 146.438897][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 146.792649][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'. [ 147.823831][ T8274] netlink: zone id is out of range [ 147.824346][ T8274] netlink: zone id is out of range [ 147.827414][ T8274] netlink: zone id is out of range [ 147.827975][ T8274] netlink: zone id is out of range [ 147.828023][ T8274] netlink: zone id is out of range [ 147.828032][ T8274] netlink: zone id is out of range [ 147.828039][ T8274] netlink: zone id is out of range [ 147.828047][ T8274] netlink: zone id is out of range [ 147.882001][ T8274] netlink: zone id is out of range [ 147.882016][ T8274] netlink: zone id is out of range [ 148.815255][ T8305] Bluetooth: MGMT ver 1.23 [ 149.058588][ T8315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.575'. [ 149.860595][ T8359] netlink: 124 bytes leftover after parsing attributes in process `syz.2.582'. [ 150.445338][ T8382] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 150.726618][ T8393] netlink: 56 bytes leftover after parsing attributes in process `syz.4.589'. [ 151.435690][ T8425] netlink: 'syz.1.594': attribute type 5 has an invalid length. [ 154.915143][ T8519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.942482][ T8519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.286684][ T8519] gre1: left allmulticast mode [ 155.319491][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 155.329379][ T6352] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.329421][ T6352] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.329452][ T6352] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.329491][ T6352] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.504968][ T8531] bond1: option updelay: invalid value (18446744073709518847) [ 155.504992][ T8531] bond1: option updelay: allowed values 0 - 2147483647 [ 155.530500][ T8531] bond1 (unregistering): Released all slaves [ 155.641535][ T8540] ovs-dp0: entered promiscuous mode [ 155.669631][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.621'. [ 155.885684][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'. [ 155.885707][ T8572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.622'. [ 155.885870][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'. [ 155.885885][ T8572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.622'. [ 155.964125][ T51] block nbd1: Possible stuck request ffff8880284f5080: control (read@0,1024B). Runtime 30 seconds [ 155.964167][ T51] block nbd1: Possible stuck request ffff8880284f5240: control (read@1024,1024B). Runtime 30 seconds [ 155.964194][ T51] block nbd1: Possible stuck request ffff8880284f5400: control (read@2048,1024B). Runtime 30 seconds [ 155.964220][ T51] block nbd1: Possible stuck request ffff8880284f55c0: control (read@3072,1024B). Runtime 30 seconds [ 156.049551][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.624'. [ 156.050127][ T8580] netlink: 'syz.1.624': attribute type 2 has an invalid length. [ 156.050143][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.624'. [ 156.603409][ T51] block nbd0: Possible stuck request ffff8880284b7000: control (read@0,1024B). Runtime 60 seconds [ 156.603462][ T51] block nbd0: Possible stuck request ffff8880284b71c0: control (read@1024,3072B). Runtime 60 seconds [ 156.654145][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'. [ 156.717513][ T8599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.628'. [ 157.054698][ T8632] raw_sendmsg: syz.4.637 forgot to set AF_INET. Fix it! [ 157.073674][ T8626] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.636'. [ 157.073854][ T8626] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 157.085327][ T8626] 0ªX¹¦Dö»: entered allmulticast mode [ 157.213214][ T8642] netlink: 'syz.2.638': attribute type 1 has an invalid length. [ 157.257860][ T8642] bond2: entered promiscuous mode [ 157.258318][ T8642] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.727258][ T8668] netlink: 'syz.2.642': attribute type 1 has an invalid length. [ 158.039747][ T8687] x_tables: duplicate underflow at hook 1 [ 158.219173][ T8698] netlink: 'syz.3.649': attribute type 21 has an invalid length. [ 158.475208][ T8695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.485896][ T8695] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.531115][ T8695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.819989][ T8695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.835457][ T8695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.895903][ T8695] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 159.041207][ T8730] tc_dump_action: action bad kind [ 159.083909][ T8737] net_ratelimit: 42 callbacks suppressed [ 159.083926][ T8737] ip_tables: iptables: counters copy to user failed while replacing table [ 159.221077][ T8739] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 159.340082][ T8743] netlink: 'syz.0.657': attribute type 2 has an invalid length. [ 159.371460][ T8743] !: entered promiscuous mode [ 159.396091][ T8743] !: left promiscuous mode [ 159.440288][ T8748] Bluetooth: hci0: unsupported parameter 5161 [ 159.440310][ T8748] Bluetooth: hci0: unsupported parameter 8192 [ 159.440322][ T8748] Bluetooth: hci0: unsupported parameter 5161 [ 159.440334][ T8748] Bluetooth: hci0: unsupported parameter 8192 [ 160.226474][ T5003] udevd[5003]: worker [5639] /devices/virtual/block/nbd0 is taking a long time [ 160.247009][ T8788] block nbd2: shutting down sockets [ 160.542536][ T8799] syz_tun: entered allmulticast mode [ 160.580665][ T8798] syz_tun: left allmulticast mode [ 161.058489][ T8827] __nla_validate_parse: 18 callbacks suppressed [ 161.058510][ T8827] netlink: 20 bytes leftover after parsing attributes in process `syz.3.674'. [ 161.090077][ T8828] netlink: 'syz.3.674': attribute type 1 has an invalid length. [ 161.090100][ T8828] nbd: illegal input index 393236 [ 161.174917][ T8838] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 161.175872][ T8823] IPVS: stopping backup sync thread 8838 ... [ 161.678518][ T8862] netlink: 'syz.1.679': attribute type 4 has an invalid length. [ 161.678542][ T8862] netlink: 17 bytes leftover after parsing attributes in process `syz.1.679'. [ 161.825909][ T8865] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 162.752870][ T8907] netlink: 'syz.2.684': attribute type 21 has an invalid length. [ 162.975429][ T8929] netlink: 'syz.0.687': attribute type 4 has an invalid length. [ 163.085670][ T8936] xt_hl: Unknown Hop Limit match mode: 4 [ 163.266995][ T8916] syzkaller1: entered promiscuous mode [ 163.267016][ T8916] syzkaller1: entered allmulticast mode [ 164.102226][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.697'. [ 164.102669][ T8976] ipip1: entered promiscuous mode [ 164.117312][ T8974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.696'. [ 164.166124][ T8976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.698'. [ 164.285550][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.698'. [ 164.681661][ T9006] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 164.682633][ T9006] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 164.906164][ T9012] netlink: 40 bytes leftover after parsing attributes in process `syz.0.703'. [ 165.396743][ T9034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.708'. [ 165.399239][ T9034] sit0: entered promiscuous mode [ 165.399397][ T9034] netlink: 'syz.3.708': attribute type 1 has an invalid length. [ 165.399411][ T9034] netlink: 1 bytes leftover after parsing attributes in process `syz.3.708'. [ 165.521627][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.708'. [ 165.630867][ T9041] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 166.232615][ T9054] rxe_eth0 speed is unknown, defaulting to 1000 [ 166.305650][ T9062] __nla_validate_parse: 2 callbacks suppressed [ 166.305668][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 166.975450][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'. [ 167.558007][ T9120] netlink: 'syz.1.724': attribute type 5 has an invalid length. [ 168.387072][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 168.390556][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 168.390762][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 168.390954][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 168.391144][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 168.391343][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 168.391538][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 168.391729][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 169.085399][ T9184] tun0: tun_chr_ioctl cmd 1074025673 [ 169.443805][ T9201] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 169.714378][ T9213] ip_tables: iptables: counters copy to user failed while replacing table [ 169.968794][ T9228] netlink: 'syz.2.744': attribute type 3 has an invalid length. [ 169.993454][ T9230] netlink: 'syz.2.744': attribute type 3 has an invalid length. [ 170.637520][ T9274] xt_TPROXY: Can be used only with -p tcp or -p udp [ 171.566580][ T9321] netlink: 'syz.1.763': attribute type 7 has an invalid length. [ 171.585876][ T9309] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode [ 171.622022][ T9309] mac80211_hwsim hwsim13 wlan0: left promiscuous mode [ 171.633040][ T9318] __nla_validate_parse: 63 callbacks suppressed [ 171.633057][ T9318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.761'. [ 171.944030][ T1148] IPVS: starting estimator thread 0... [ 171.967785][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.765'. [ 171.986545][ T9334] x_tables: duplicate underflow at hook 1 [ 172.052080][ T9336] IPVS: using max 23 ests per chain, 55200 per kthread [ 173.081218][ T9392] block nbd0: reconnected socket [ 173.085442][ T9392] netlink: 'syz.0.772': attribute type 9 has an invalid length. [ 173.202711][ T5642] block nbd0: Receive control failed (result -32) [ 173.241419][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 173.306299][ T9401] xt_CT: No such helper "snmp_trap" [ 173.435887][ T9407] vxlan0: entered allmulticast mode [ 173.498515][ T9417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.778'. [ 173.697199][ T9430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.780'. [ 173.731654][ T9430] vlan2: entered promiscuous mode [ 173.731671][ T9430] bond_slave_1: entered promiscuous mode [ 174.648558][ T9440] bond0: entered promiscuous mode [ 174.648580][ T9440] bond_slave_0: entered promiscuous mode [ 174.662735][ T9440] bond_slave_1: entered promiscuous mode [ 174.666162][ T9440] batadv0: entered promiscuous mode [ 174.682069][ T9440] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 174.682090][ T9440] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 174.686346][ T9440] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 174.761860][ T9440] bond0: left promiscuous mode [ 174.761879][ T9440] bond_slave_0: left promiscuous mode [ 174.762115][ T9440] bond_slave_1: left promiscuous mode [ 175.128956][ T9440] batadv0: left promiscuous mode [ 177.141009][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.788'. [ 177.219592][ T6340] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.219636][ T6340] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.219669][ T6340] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.219700][ T6340] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.436723][ T9474] bond0: (slave bond_slave_0): Releasing backup interface [ 177.479928][ T9474] bond0: (slave bond_slave_1): Releasing backup interface [ 177.549574][ T9474] team0: Port device team_slave_0 removed [ 177.601172][ T9474] team0: Port device team_slave_1 removed [ 177.646236][ T9474] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 177.653478][ T9473] team0: Mode changed to "activebackup" [ 178.490653][ T1300] IPVS: starting estimator thread 0... [ 178.578838][ T9520] IPVS: using max 23 ests per chain, 55200 per kthread [ 178.587874][ T9525] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 178.892949][ T9541] netlink: 36 bytes leftover after parsing attributes in process `syz.0.803'. [ 179.176019][ T9554] netlink: 'syz.2.807': attribute type 1 has an invalid length. [ 179.176040][ T9554] netlink: 244 bytes leftover after parsing attributes in process `syz.2.807'. [ 179.337720][ T50] IPVS: starting estimator thread 0... [ 179.347071][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'. [ 179.413266][ T9567] netlink: 'syz.2.807': attribute type 3 has an invalid length. [ 179.413286][ T9567] netlink: 152 bytes leftover after parsing attributes in process `syz.2.807'. [ 179.420037][ T9565] IPVS: using max 27 ests per chain, 64800 per kthread [ 179.475607][ T9554] syzkaller0: entered promiscuous mode [ 179.475627][ T9554] syzkaller0: entered allmulticast mode [ 181.489429][ T9612] netlink: 132 bytes leftover after parsing attributes in process `syz.1.821'. [ 181.499447][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'. [ 181.499468][ T9612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.821'. [ 181.696689][ T9622] netlink: 'syz.2.823': attribute type 15 has an invalid length. [ 181.696710][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.823'. [ 181.740576][ T9622] netlink: 'syz.2.823': attribute type 15 has an invalid length. [ 181.740596][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.823'. [ 181.750257][ T50] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 181.751789][ T6342] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 181.751822][ T6342] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 181.751850][ T6342] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 182.594336][ T9661] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 182.594336][ T9661] Please contact the netfilter-devel mailing list or update your nftables rules. [ 182.877052][ T9675] __nla_validate_parse: 1 callbacks suppressed [ 182.877073][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.836'. [ 182.987263][ T9675] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 184.084943][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 184.448164][ T9750] netlink: 32 bytes leftover after parsing attributes in process `syz.4.854'. [ 184.448430][ T9750] netlink: 32 bytes leftover after parsing attributes in process `syz.4.854'. [ 184.474943][ T9750] netlink: 32 bytes leftover after parsing attributes in process `syz.4.854'. [ 184.475214][ T9750] netlink: 32 bytes leftover after parsing attributes in process `syz.4.854'. [ 184.478634][ T9750] netlink: 32 bytes leftover after parsing attributes in process `syz.4.854'. [ 184.508420][ T9750] netlink: 32 bytes leftover after parsing attributes in process `syz.4.854'. [ 184.520805][ T9750] netlink: 32 bytes leftover after parsing attributes in process `syz.4.854'. [ 184.521115][ T9750] netlink: 32 bytes leftover after parsing attributes in process `syz.4.854'. [ 184.897821][ T9764] syz_tun: entered allmulticast mode [ 185.139614][ T9788] netlink: 'syz.1.859': attribute type 4 has an invalid length. [ 185.141169][ T9787] netlink: 'syz.1.859': attribute type 4 has an invalid length. [ 185.165866][ T9763] syz_tun: left allmulticast mode [ 185.297289][ T9793] tipc: Invalid UDP bearer configuration [ 185.297346][ T9793] tipc: Enabling of bearer rejected, failed to enable media [ 185.474809][ T9801] sctp: [Deprecated]: syz.4.862 (pid 9801) Use of int in max_burst socket option. [ 185.474809][ T9801] Use struct sctp_assoc_value instead [ 185.986291][ T9831] netlink: 'syz.2.870': attribute type 1 has an invalid length. [ 186.040816][ T51] block nbd1: Possible stuck request ffff8880284f5080: control (read@0,1024B). Runtime 60 seconds [ 186.040854][ T51] block nbd1: Possible stuck request ffff8880284f5240: control (read@1024,1024B). Runtime 60 seconds [ 186.040880][ T51] block nbd1: Possible stuck request ffff8880284f5400: control (read@2048,1024B). Runtime 60 seconds [ 186.040906][ T51] block nbd1: Possible stuck request ffff8880284f55c0: control (read@3072,1024B). Runtime 60 seconds [ 186.348923][ T9840] bond3: (slave bridge0): Enslaving as a backup interface with an up link [ 186.706723][ T51] block nbd0: Possible stuck request ffff8880284b7000: control (read@0,1024B). Runtime 90 seconds [ 186.707043][ T51] block nbd0: Possible stuck request ffff8880284b71c0: control (read@1024,3072B). Runtime 90 seconds [ 186.707427][ T51] block nbd0: Dead connection, failed to find a fallback [ 186.707446][ T51] block nbd0: shutting down sockets [ 186.707540][ T51] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 186.707617][ T51] Buffer I/O error on dev nbd0, logical block 1, async page read [ 186.707653][ T51] Buffer I/O error on dev nbd0, logical block 2, async page read [ 186.707669][ T51] Buffer I/O error on dev nbd0, logical block 3, async page read [ 186.707710][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 186.707733][ T51] Buffer I/O error on dev nbd0, logical block 0, async page read [ 186.750970][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 186.751007][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 186.751029][ T11] Buffer I/O error on dev nbd0, logical block 1, async page read [ 186.751042][ T11] Buffer I/O error on dev nbd0, logical block 2, async page read [ 186.751055][ T11] Buffer I/O error on dev nbd0, logical block 3, async page read [ 186.751855][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 186.751882][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 186.751897][ T11] Buffer I/O error on dev nbd0, logical block 1, async page read [ 186.752057][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 186.752213][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 186.754244][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 186.754419][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 186.754573][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 186.754628][ T5639] ldm_validate_partition_table(): Disk read failed. [ 186.754738][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 186.758031][ T5639] Dev nbd0: unable to read RDB block 0 [ 186.762014][ T5639] nbd0: unable to read partition table [ 186.834285][ T5639] ldm_validate_partition_table(): Disk read failed. [ 186.835616][ T5639] Dev nbd0: unable to read RDB block 0 [ 186.841860][ T5639] nbd0: unable to read partition table [ 187.079818][ T5642] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 187.079895][ T5642] Bluetooth: hci1: Injecting HCI hardware error event [ 187.081064][ T5642] Bluetooth: hci1: hardware error 0x00 [ 187.579502][ T5644] block nbd2: Receive control failed (result -1) [ 187.845529][ T9892] netlink: 'syz.0.880': attribute type 1 has an invalid length. [ 187.876462][ T9891] xt_hashlimit: size too large, truncated to 1048576 [ 188.519862][ T9922] sctp: [Deprecated]: syz.2.887 (pid 9922) Use of int in maxseg socket option. [ 188.519862][ T9922] Use struct sctp_assoc_value instead [ 188.954263][ T9946] __nla_validate_parse: 65 callbacks suppressed [ 188.954285][ T9946] netlink: 36 bytes leftover after parsing attributes in process `syz.0.892'. [ 189.063774][ T9949] FAULT_INJECTION: forcing a failure. [ 189.063774][ T9949] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 189.063803][ T9949] CPU: 0 UID: 0 PID: 9949 Comm: syz.3.893 Not tainted syzkaller #0 PREEMPT(full) [ 189.063824][ T9949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 189.063834][ T9949] Call Trace: [ 189.063841][ T9949] [ 189.063850][ T9949] dump_stack_lvl+0xe8/0x150 [ 189.063891][ T9949] should_fail_ex+0x3eb/0x540 [ 189.063922][ T9949] prepare_alloc_pages+0x21e/0x5f0 [ 189.063964][ T9949] __alloc_frozen_pages_noprof+0x17c/0x410 [ 189.063990][ T9949] ? __lock_acquire+0x747/0x2de0 [ 189.064017][ T9949] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 189.064048][ T9949] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 189.064073][ T9949] ? __get_vm_area_node+0x155/0x2f0 [ 189.064091][ T9949] ? __vmalloc_node_range_noprof+0x36e/0x16f0 [ 189.064116][ T9949] ? policy_nodemask+0x31b/0x980 [ 189.064133][ T9949] ? __x64_sys_bpf+0xba/0xd0 [ 189.064157][ T9949] ? do_syscall_64+0x166/0x520 [ 189.064181][ T9949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.064206][ T9949] alloc_pages_mpol+0x21e/0x390 [ 189.064234][ T9949] alloc_pages_noprof+0xb1/0x2b0 [ 189.064257][ T9949] get_free_pages_noprof+0xf/0x80 [ 189.064284][ T9949] __kasan_populate_vmalloc+0x38/0x1c0 [ 189.064309][ T9949] ? do_raw_spin_unlock+0xf5/0x200 [ 189.064334][ T9949] alloc_vmap_area+0xd10/0x1410 [ 189.064373][ T9949] ? __pfx_alloc_vmap_area+0x10/0x10 [ 189.064391][ T9949] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 189.064417][ T9949] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 189.064440][ T9949] ? __get_vm_area_node+0x155/0x2f0 [ 189.064465][ T9949] __get_vm_area_node+0x200/0x2f0 [ 189.064495][ T9949] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 189.064519][ T9949] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 189.064540][ T9949] ? lock_acquire+0x115/0x350 [ 189.064567][ T9949] ? __lock_acquire+0x747/0x2de0 [ 189.064607][ T9949] ? hook_capable+0x1c3/0x5e0 [ 189.064638][ T9949] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 189.064672][ T9949] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 189.064689][ T9949] __vmalloc_noprof+0xd2/0x120 [ 189.064711][ T9949] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 189.064734][ T9949] bpf_prog_alloc_no_stats+0x47/0x550 [ 189.064752][ T9949] ? bpf_prog_alloc+0x2a/0x1a0 [ 189.064773][ T9949] bpf_prog_alloc+0x3c/0x1a0 [ 189.064796][ T9949] bpf_prog_load+0x7f8/0x1c60 [ 189.064830][ T9949] ? __pfx_bpf_prog_load+0x10/0x10 [ 189.064869][ T9949] ? __might_fault+0xaf/0x130 [ 189.064897][ T9949] __sys_bpf+0xd86/0xe00 [ 189.064927][ T9949] ? __pfx___sys_bpf+0x10/0x10 [ 189.064967][ T9949] ? __fget_files+0x2a/0x420 [ 189.065012][ T9949] ? ksys_write+0x242/0x270 [ 189.065042][ T9949] ? __pfx_ksys_write+0x10/0x10 [ 189.065075][ T9949] __x64_sys_bpf+0xba/0xd0 [ 189.065106][ T9949] do_syscall_64+0x166/0x520 [ 189.065129][ T9949] ? trace_irq_disable+0x3b/0x140 [ 189.065154][ T9949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.065173][ T9949] ? clear_bhb_loop+0x70/0xc0 [ 189.065198][ T9949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.065217][ T9949] RIP: 0033:0x7f720c1a8f19 [ 189.065236][ T9949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.065252][ T9949] RSP: 002b:00007f720a3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 189.065274][ T9949] RAX: ffffffffffffffda RBX: 00007f720c425fa0 RCX: 00007f720c1a8f19 [ 189.065288][ T9949] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 189.065301][ T9949] RBP: 00007f720a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 189.065313][ T9949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.065324][ T9949] R13: 00007f720c426038 R14: 00007f720c425fa0 R15: 00007fffd4e487d8 [ 189.065358][ T9949] [ 189.117331][ T9949] syz.3.893: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 189.117414][ T9949] CPU: 0 UID: 0 PID: 9949 Comm: syz.3.893 Not tainted syzkaller #0 PREEMPT(full) [ 189.117434][ T9949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 189.117443][ T9949] Call Trace: [ 189.117450][ T9949] [ 189.117457][ T9949] dump_stack_lvl+0xe8/0x150 [ 189.117488][ T9949] warn_alloc+0x24d/0x270 [ 189.117511][ T9949] ? lockdep_hardirqs_on+0x7b/0x110 [ 189.117535][ T9949] ? __pfx_warn_alloc+0x10/0x10 [ 189.117556][ T9949] ? kfree+0x1c5/0x650 [ 189.117581][ T9949] ? __get_vm_area_node+0x219/0x2f0 [ 189.117608][ T9949] __vmalloc_node_range_noprof+0x396/0x16f0 [ 189.117629][ T9949] ? lock_acquire+0x115/0x350 [ 189.117653][ T9949] ? __lock_acquire+0x747/0x2de0 [ 189.117687][ T9949] ? hook_capable+0x1c3/0x5e0 [ 189.117714][ T9949] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 189.117744][ T9949] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 189.117760][ T9949] __vmalloc_noprof+0xd2/0x120 [ 189.117780][ T9949] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 189.117800][ T9949] bpf_prog_alloc_no_stats+0x47/0x550 [ 189.117815][ T9949] ? bpf_prog_alloc+0x2a/0x1a0 [ 189.117834][ T9949] bpf_prog_alloc+0x3c/0x1a0 [ 189.117853][ T9949] bpf_prog_load+0x7f8/0x1c60 [ 189.117884][ T9949] ? __pfx_bpf_prog_load+0x10/0x10 [ 189.117917][ T9949] ? __might_fault+0xaf/0x130 [ 189.117950][ T9949] __sys_bpf+0xd86/0xe00 [ 189.117977][ T9949] ? __pfx___sys_bpf+0x10/0x10 [ 189.118005][ T9949] ? __fget_files+0x2a/0x420 [ 189.118044][ T9949] ? ksys_write+0x242/0x270 [ 189.118070][ T9949] ? __pfx_ksys_write+0x10/0x10 [ 189.118098][ T9949] __x64_sys_bpf+0xba/0xd0 [ 189.118125][ T9949] do_syscall_64+0x166/0x520 [ 189.118146][ T9949] ? trace_irq_disable+0x3b/0x140 [ 189.118168][ T9949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.118185][ T9949] ? clear_bhb_loop+0x70/0xc0 [ 189.118206][ T9949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.118223][ T9949] RIP: 0033:0x7f720c1a8f19 [ 189.118239][ T9949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.118253][ T9949] RSP: 002b:00007f720a3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 189.118271][ T9949] RAX: ffffffffffffffda RBX: 00007f720c425fa0 RCX: 00007f720c1a8f19 [ 189.118283][ T9949] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 189.118294][ T9949] RBP: 00007f720a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 189.118304][ T9949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.118315][ T9949] R13: 00007f720c426038 R14: 00007f720c425fa0 R15: 00007fffd4e487d8 [ 189.118344][ T9949] [ 189.118350][ T9949] Mem-Info: [ 189.118358][ T9949] active_anon:5854 inactive_anon:0 isolated_anon:0 [ 189.118358][ T9949] active_file:132 inactive_file:42947 isolated_file:0 [ 189.118358][ T9949] unevictable:0 dirty:121 writeback:0 [ 189.118358][ T9949] slab_reclaimable:11042 slab_unreclaimable:101020 [ 189.118358][ T9949] mapped:29556 shmem:523 pagetables:1344 [ 189.118358][ T9949] sec_pagetables:0 bounce:0 [ 189.118358][ T9949] kernel_misc_reclaimable:0 [ 189.118358][ T9949] free:1298914 free_pcp:12133 free_cma:0 [ 189.118401][ T9949] Node 0 active_anon:23416kB inactive_anon:0kB active_file:528kB inactive_file:171584kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118224kB dirty:480kB writeback:0kB shmem:2092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13808kB pagetables:5196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 189.118446][ T9949] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 189.118488][ T9949] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 189.118535][ T9949] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 189.118567][ T9949] Node 0 DMA32 free:1248052kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23416kB inactive_anon:0kB active_file:528kB inactive_file:171584kB unevictable:0kB writepending:480kB zspages:0kB present:3129332kB managed:2522828kB mlocked:0kB bounce:0kB free_pcp:48340kB local_pcp:27436kB free_cma:0kB [ 189.118617][ T9949] lowmem_reserve[]: 0 0 1 1 1 [ 189.118647][ T9949] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 189.126714][ T9949] lowmem_reserve[]: 0 0 0 0 0 [ 189.126751][ T9949] Node 1 Normal free:3932244kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:192kB local_pcp:0kB free_cma:0kB [ 189.126800][ T9949] lowmem_reserve[]: 0 0 0 0 0 [ 189.126830][ T9949] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 189.126929][ T9949] Node 0 DMA32: 898*4kB (UME) 732*8kB (UME) 407*16kB (UME) 301*32kB (UME) 51*64kB (UME) 76*128kB (UME) 28*256kB (UME) 27*512kB (UME) 7*1024kB (UM) 7*2048kB (UME) 285*4096kB (UM) = 1248440kB [ 189.127075][ T9949] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 189.127158][ T9949] Node 1 Normal: 3*4kB (UM) 9*8kB (UM) 12*16kB (UM) 2*32kB (UM) 10*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 959*4096kB (UM) = 3932244kB [ 189.127290][ T9949] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 189.127304][ T9949] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 189.127317][ T9949] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 189.127330][ T9949] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 189.127343][ T9949] 43598 total pagecache pages [ 189.127349][ T9949] 0 pages in swap cache [ 189.127355][ T9949] Free swap = 124996kB [ 189.127362][ T9949] Total swap = 124996kB [ 189.127368][ T9949] 2097051 pages RAM [ 189.127375][ T9949] 0 pages HighMem/MovableOnly [ 189.127380][ T9949] 434380 pages reserved [ 189.127386][ T9949] 0 pages cma reserved [ 189.160234][ T5642] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 189.473460][ T9962] netlink: 'syz.3.897': attribute type 4 has an invalid length. [ 189.486506][ T9963] netlink: 'syz.3.897': attribute type 4 has an invalid length. [ 189.598711][ T9956] xt_hashlimit: size too large, truncated to 1048576 [ 189.613341][ T9962] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 189.632523][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.894'. [ 189.912537][ T9978] netlink: 'syz.2.898': attribute type 4 has an invalid length. [ 189.912555][ T9978] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.898'. [ 190.304451][ T9985] bond0: entered promiscuous mode [ 190.326559][ T9985] syzkaller1: entered promiscuous mode [ 190.326580][ T9985] syzkaller1: entered allmulticast mode [ 190.623601][ T5003] udevd[5003]: worker [6346] /devices/virtual/block/nbd1 is taking a long time [ 190.700053][ T1300] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.700097][ T1300] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.700130][ T1300] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.700161][ T1300] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.858279][T10010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.908'. [ 191.453162][T10037] netlink: 'syz.4.915': attribute type 4 has an invalid length. [ 191.666194][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.918'. [ 191.800470][T10053] FAULT_INJECTION: forcing a failure. [ 191.800470][T10053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.800499][T10053] CPU: 1 UID: 0 PID: 10053 Comm: syz.1.917 Not tainted syzkaller #0 PREEMPT(full) [ 191.800520][T10053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 191.800532][T10053] Call Trace: [ 191.800539][T10053] [ 191.800547][T10053] dump_stack_lvl+0xe8/0x150 [ 191.800581][T10053] should_fail_ex+0x3eb/0x540 [ 191.800612][T10053] _copy_from_user+0x2d/0xb0 [ 191.800641][T10053] ___sys_sendmsg+0x1c6/0x360 [ 191.800662][T10053] ? __lock_acquire+0x747/0x2de0 [ 191.800691][T10053] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.800753][T10053] ? __fget_files+0x3a2/0x420 [ 191.800777][T10053] ? __fget_files+0x2a/0x420 [ 191.800811][T10053] __x64_sys_sendmsg+0x1b1/0x290 [ 191.800835][T10053] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.800879][T10053] do_syscall_64+0x166/0x520 [ 191.800902][T10053] ? trace_irq_disable+0x3b/0x140 [ 191.800925][T10053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.800943][T10053] ? clear_bhb_loop+0x70/0xc0 [ 191.800968][T10053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.800986][T10053] RIP: 0033:0x7fd50dba8f19 [ 191.801005][T10053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.801020][T10053] RSP: 002b:00007fd50e9c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.801041][T10053] RAX: ffffffffffffffda RBX: 00007fd50de26180 RCX: 00007fd50dba8f19 [ 191.801055][T10053] RDX: 00000000000000c4 RSI: 0000200000001200 RDI: 0000000000000004 [ 191.801067][T10053] RBP: 00007fd50e9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 191.801078][T10053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.801089][T10053] R13: 00007fd50de26218 R14: 00007fd50de26180 R15: 00007ffe34a294d8 [ 191.801121][T10053] [ 191.813434][T10048] ip_tables: iptables: counters copy to user failed while replacing table [ 191.853502][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.919'. [ 191.853521][T10048] netlink: 20 bytes leftover after parsing attributes in process `syz.3.919'. [ 192.559451][T10079] netlink: 'syz.3.923': attribute type 10 has an invalid length. [ 192.584240][T10079] team0: Port device dummy0 added [ 192.922077][T10103] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 193.056489][T10116] FAULT_INJECTION: forcing a failure. [ 193.056489][T10116] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 193.056519][T10116] CPU: 1 UID: 0 PID: 10116 Comm: syz.2.932 Not tainted syzkaller #0 PREEMPT(full) [ 193.056541][T10116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 193.056551][T10116] Call Trace: [ 193.056559][T10116] [ 193.056567][T10116] dump_stack_lvl+0xe8/0x150 [ 193.056602][T10116] should_fail_ex+0x3eb/0x540 [ 193.056632][T10116] prepare_alloc_pages+0x21e/0x5f0 [ 193.056666][T10116] __alloc_frozen_pages_noprof+0x17c/0x410 [ 193.056697][T10116] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 193.056722][T10116] ? __alloc_frozen_pages_noprof+0x24c/0x410 [ 193.056751][T10116] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 193.056789][T10116] __alloc_pages_noprof+0x10/0x100 [ 193.056816][T10116] alloc_pages_bulk_noprof+0x67a/0x8a0 [ 193.056854][T10116] ? alloc_pages_noprof+0x140/0x2b0 [ 193.056879][T10116] __kasan_populate_vmalloc+0xb7/0x1c0 [ 193.056911][T10116] alloc_vmap_area+0xd10/0x1410 [ 193.056943][T10116] ? __pfx_alloc_vmap_area+0x10/0x10 [ 193.056958][T10116] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 193.056980][T10116] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 193.057000][T10116] ? __get_vm_area_node+0x155/0x2f0 [ 193.057022][T10116] __get_vm_area_node+0x200/0x2f0 [ 193.057046][T10116] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 193.057066][T10116] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 193.057083][T10116] ? lock_acquire+0x115/0x350 [ 193.057105][T10116] ? __lock_acquire+0x747/0x2de0 [ 193.057137][T10116] ? hook_capable+0x1c3/0x5e0 [ 193.057165][T10116] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 193.057199][T10116] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 193.057216][T10116] __vmalloc_noprof+0xd2/0x120 [ 193.057237][T10116] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 193.057259][T10116] bpf_prog_alloc_no_stats+0x47/0x550 [ 193.057277][T10116] ? bpf_prog_alloc+0x2a/0x1a0 [ 193.057297][T10116] bpf_prog_alloc+0x3c/0x1a0 [ 193.057319][T10116] bpf_prog_load+0x7f8/0x1c60 [ 193.057354][T10116] ? __pfx_bpf_prog_load+0x10/0x10 [ 193.057398][T10116] ? __might_fault+0xaf/0x130 [ 193.057427][T10116] __sys_bpf+0xd86/0xe00 [ 193.057457][T10116] ? __pfx___sys_bpf+0x10/0x10 [ 193.057489][T10116] ? __fget_files+0x2a/0x420 [ 193.057531][T10116] ? ksys_write+0x242/0x270 [ 193.057559][T10116] ? __pfx_ksys_write+0x10/0x10 [ 193.057591][T10116] __x64_sys_bpf+0xba/0xd0 [ 193.057620][T10116] do_syscall_64+0x166/0x520 [ 193.057644][T10116] ? trace_irq_disable+0x3b/0x140 [ 193.057667][T10116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.057687][T10116] ? clear_bhb_loop+0x70/0xc0 [ 193.057710][T10116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.057729][T10116] RIP: 0033:0x7f19a93a8f19 [ 193.057748][T10116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.057764][T10116] RSP: 002b:00007f19aa1d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 193.057786][T10116] RAX: ffffffffffffffda RBX: 00007f19a9625fa0 RCX: 00007f19a93a8f19 [ 193.057799][T10116] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 193.057812][T10116] RBP: 00007f19aa1d3090 R08: 0000000000000000 R09: 0000000000000000 [ 193.057824][T10116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.057835][T10116] R13: 00007f19a9626038 R14: 00007f19a9625fa0 R15: 00007ffe917479e8 [ 193.057867][T10116] [ 193.677400][T10137] syzkaller1: entered promiscuous mode [ 193.677424][T10137] syzkaller1: entered allmulticast mode [ 194.364168][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.398267][T10163] ip_tables: iptables: counters copy to user failed while replacing table [ 194.729656][T10182] xt_REDIRECT: bad MAP_IPS. [ 194.926928][T10198] FAULT_INJECTION: forcing a failure. [ 194.926928][T10198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.926958][T10198] CPU: 0 UID: 0 PID: 10198 Comm: syz.4.947 Not tainted syzkaller #0 PREEMPT(full) [ 194.926979][T10198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 194.926990][T10198] Call Trace: [ 194.926998][T10198] [ 194.927006][T10198] dump_stack_lvl+0xe8/0x150 [ 194.927041][T10198] should_fail_ex+0x3eb/0x540 [ 194.927074][T10198] _copy_from_iter+0x1d3/0x1680 [ 194.927097][T10198] ? __alloc_skb+0x27a/0x7a0 [ 194.927117][T10198] ? __alloc_skb+0x27a/0x7a0 [ 194.927138][T10198] ? __alloc_skb+0x27a/0x7a0 [ 194.927156][T10198] ? __pfx__copy_from_iter+0x10/0x10 [ 194.927175][T10198] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 194.927197][T10198] ? __alloc_skb+0x27a/0x7a0 [ 194.927214][T10198] ? __alloc_skb+0x27a/0x7a0 [ 194.927239][T10198] ? netlink_sendmsg+0x64f/0xb20 [ 194.927257][T10198] ? skb_put+0x112/0x210 [ 194.927280][T10198] netlink_sendmsg+0x6bb/0xb20 [ 194.927305][T10198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.927328][T10198] ? aa_sock_msg_perm+0x144/0x210 [ 194.927353][T10198] ? apparmor_socket_sendmsg+0x98/0x360 [ 194.927381][T10198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.927398][T10198] sock_sendmsg_nosec+0x14e/0x190 [ 194.927426][T10198] ____sys_sendmsg+0x54e/0x850 [ 194.927454][T10198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.927484][T10198] ? import_iovec+0x73/0xa0 [ 194.927511][T10198] ___sys_sendmsg+0x2a5/0x360 [ 194.927531][T10198] ? __lock_acquire+0x747/0x2de0 [ 194.927559][T10198] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.927618][T10198] ? __fget_files+0x3a2/0x420 [ 194.927642][T10198] ? __fget_files+0x2a/0x420 [ 194.927675][T10198] __x64_sys_sendmsg+0x1b1/0x290 [ 194.927700][T10198] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.927744][T10198] do_syscall_64+0x166/0x520 [ 194.927767][T10198] ? trace_irq_disable+0x3b/0x140 [ 194.927792][T10198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.927811][T10198] ? clear_bhb_loop+0x70/0xc0 [ 194.927834][T10198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.927861][T10198] RIP: 0033:0x7f7d58fa8f19 [ 194.927881][T10198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.927896][T10198] RSP: 002b:00007f7d59e96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.927918][T10198] RAX: ffffffffffffffda RBX: 00007f7d59226180 RCX: 00007f7d58fa8f19 [ 194.927931][T10198] RDX: 00000000000000c4 RSI: 0000200000001200 RDI: 0000000000000004 [ 194.927943][T10198] RBP: 00007f7d59e96090 R08: 0000000000000000 R09: 0000000000000000 [ 194.927954][T10198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.927965][T10198] R13: 00007f7d59226218 R14: 00007f7d59226180 R15: 00007ffc753ee538 [ 194.927997][T10198] [ 195.248984][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.949'. [ 196.173571][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.960'. [ 196.247145][T10251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.960'. [ 196.329973][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.960'. [ 196.446924][T10275] FAULT_INJECTION: forcing a failure. [ 196.446924][T10275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.446953][T10275] CPU: 1 UID: 0 PID: 10275 Comm: syz.1.961 Not tainted syzkaller #0 PREEMPT(full) [ 196.446975][T10275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 196.446986][T10275] Call Trace: [ 196.446993][T10275] [ 196.447001][T10275] dump_stack_lvl+0xe8/0x150 [ 196.447042][T10275] should_fail_ex+0x3eb/0x540 [ 196.447073][T10275] _copy_from_iter+0x1d3/0x1680 [ 196.447096][T10275] ? __alloc_skb+0x27a/0x7a0 [ 196.447118][T10275] ? __alloc_skb+0x27a/0x7a0 [ 196.447139][T10275] ? __alloc_skb+0x27a/0x7a0 [ 196.447158][T10275] ? __pfx__copy_from_iter+0x10/0x10 [ 196.447177][T10275] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 196.447200][T10275] ? __alloc_skb+0x27a/0x7a0 [ 196.447217][T10275] ? __alloc_skb+0x27a/0x7a0 [ 196.447242][T10275] ? netlink_sendmsg+0x64f/0xb20 [ 196.447261][T10275] ? skb_put+0x112/0x210 [ 196.447284][T10275] netlink_sendmsg+0x6bb/0xb20 [ 196.447309][T10275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.447331][T10275] ? aa_sock_msg_perm+0x144/0x210 [ 196.447355][T10275] ? apparmor_socket_sendmsg+0x98/0x360 [ 196.447384][T10275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.447402][T10275] sock_sendmsg_nosec+0x14e/0x190 [ 196.447430][T10275] ____sys_sendmsg+0x54e/0x850 [ 196.447459][T10275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.447491][T10275] ? import_iovec+0x73/0xa0 [ 196.447519][T10275] ___sys_sendmsg+0x2a5/0x360 [ 196.447539][T10275] ? __lock_acquire+0x747/0x2de0 [ 196.447569][T10275] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.447630][T10275] ? __fget_files+0x3a2/0x420 [ 196.447655][T10275] ? __fget_files+0x2a/0x420 [ 196.447689][T10275] __x64_sys_sendmsg+0x1b1/0x290 [ 196.447715][T10275] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.447761][T10275] do_syscall_64+0x166/0x520 [ 196.447784][T10275] ? trace_irq_disable+0x3b/0x140 [ 196.447809][T10275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.447837][T10275] ? clear_bhb_loop+0x70/0xc0 [ 196.447861][T10275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.447880][T10275] RIP: 0033:0x7fd50dba8f19 [ 196.447899][T10275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.447914][T10275] RSP: 002b:00007fd50e9c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.447935][T10275] RAX: ffffffffffffffda RBX: 00007fd50de26180 RCX: 00007fd50dba8f19 [ 196.447949][T10275] RDX: 00000000000000c4 RSI: 0000200000001200 RDI: 0000000000000004 [ 196.447961][T10275] RBP: 00007fd50e9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 196.447972][T10275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.447983][T10275] R13: 00007fd50de26218 R14: 00007fd50de26180 R15: 00007ffe34a294d8 [ 196.448017][T10275] [ 197.284232][T10307] netlink: 128 bytes leftover after parsing attributes in process `syz.4.970'. [ 197.284256][T10307] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 197.318786][T10307] IPv6: addrconf: prefix option has invalid lifetime [ 197.485200][T10313] netlink: 132 bytes leftover after parsing attributes in process `syz.1.971'. [ 197.813421][T10333] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 197.923148][T10336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.972'. [ 198.164076][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.973'. [ 198.248096][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.974'. [ 198.251874][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'. [ 199.947124][T10435] netlink: 'syz.1.990': attribute type 1 has an invalid length. [ 200.070141][T10441] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20265 [ 200.070433][T10441] IPVS: nq: FWM 3 0x00000003 - no destination available [ 200.072737][T10441] netlink: 'syz.2.992': attribute type 1 has an invalid length. [ 200.445603][T10451] __nla_validate_parse: 5 callbacks suppressed [ 200.445617][T10451] netlink: 48 bytes leftover after parsing attributes in process `syz.2.995'. [ 200.535889][T10454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.996'. [ 200.955576][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.998'. [ 201.165963][T10467] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1000'. [ 201.165986][T10467] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1000'. [ 201.166440][T10468] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1000'. [ 201.166454][T10468] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1000'. [ 201.271398][T10471] netlink: 'syz.1.1001': attribute type 1 has an invalid length. [ 201.289100][T10471] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.307067][T10471] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 201.320466][T10471] bond2: entered promiscuous mode [ 201.320488][T10471] bond2: entered allmulticast mode [ 201.560216][ T54] Bluetooth: hci2: command 0x0401 tx timeout [ 201.560264][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 201.819497][T10378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.038247][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'. [ 202.273392][T10499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1008'. [ 202.273505][T10499] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1008'. [ 202.444190][T10500] trusted_key: syz.2.1009 sent an empty control message without MSG_MORE. [ 202.486785][T10510] 0ªX¹¦Dö»: left allmulticast mode [ 202.503096][T10507] netlink: 'syz.2.1009': attribute type 2 has an invalid length. [ 202.514818][T10510] bond0: left promiscuous mode [ 202.515689][T10510] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 202.939097][T10519] netlink: 'syz.1.1013': attribute type 8 has an invalid length. [ 203.019750][T10519] veth5: entered allmulticast mode [ 203.248429][T10543] FAULT_INJECTION: forcing a failure. [ 203.248429][T10543] name failslab, interval 1, probability 0, space 0, times 0 [ 203.248459][T10543] CPU: 0 UID: 0 PID: 10543 Comm: syz.2.1016 Not tainted syzkaller #0 PREEMPT(full) [ 203.248480][T10543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 203.248492][T10543] Call Trace: [ 203.248500][T10543] [ 203.248508][T10543] dump_stack_lvl+0xe8/0x150 [ 203.248545][T10543] should_fail_ex+0x3eb/0x540 [ 203.248574][T10543] should_failslab+0xa8/0x100 [ 203.248596][T10543] __kmalloc_cache_noprof+0x9e/0x600 [ 203.248622][T10543] ? bpf_prog_stream_init+0x9f/0x4a0 [ 203.248645][T10543] ? bpf_prog_stream_init+0x9f/0x4a0 [ 203.248681][T10543] bpf_prog_stream_init+0x9f/0x4a0 [ 203.248709][T10543] bpf_prog_load+0xcb8/0x1c60 [ 203.248754][T10543] ? __pfx_bpf_prog_load+0x10/0x10 [ 203.248791][T10543] ? __might_fault+0xaf/0x130 [ 203.248819][T10543] __sys_bpf+0xd86/0xe00 [ 203.248847][T10543] ? __pfx___sys_bpf+0x10/0x10 [ 203.248878][T10543] ? __fget_files+0x2a/0x420 [ 203.248922][T10543] ? ksys_write+0x242/0x270 [ 203.248951][T10543] ? __pfx_ksys_write+0x10/0x10 [ 203.248983][T10543] __x64_sys_bpf+0xba/0xd0 [ 203.249014][T10543] do_syscall_64+0x166/0x520 [ 203.249037][T10543] ? trace_irq_disable+0x3b/0x140 [ 203.249060][T10543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.249079][T10543] ? clear_bhb_loop+0x70/0xc0 [ 203.249103][T10543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.249122][T10543] RIP: 0033:0x7f19a93a8f19 [ 203.249140][T10543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.249155][T10543] RSP: 002b:00007f19aa1d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 203.249176][T10543] RAX: ffffffffffffffda RBX: 00007f19a9625fa0 RCX: 00007f19a93a8f19 [ 203.249190][T10543] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 203.249202][T10543] RBP: 00007f19aa1d3090 R08: 0000000000000000 R09: 0000000000000000 [ 203.249214][T10543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.249225][T10543] R13: 00007f19a9626038 R14: 00007f19a9625fa0 R15: 00007ffe917479e8 [ 203.249257][T10543] [ 203.381967][T10546] FAULT_INJECTION: forcing a failure. [ 203.381967][T10546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.381991][T10546] CPU: 1 UID: 0 PID: 10546 Comm: syz.3.1015 Not tainted syzkaller #0 PREEMPT(full) [ 203.382010][T10546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 203.382019][T10546] Call Trace: [ 203.382026][T10546] [ 203.382033][T10546] dump_stack_lvl+0xe8/0x150 [ 203.382065][T10546] should_fail_ex+0x3eb/0x540 [ 203.382095][T10546] _copy_to_user+0x31/0xb0 [ 203.382119][T10546] simple_read_from_buffer+0xe1/0x170 [ 203.382146][T10546] proc_fail_nth_read+0x1bb/0x230 [ 203.382168][T10546] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.382190][T10546] ? rw_verify_area+0x24a/0x4c0 [ 203.382215][T10546] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.382242][T10546] vfs_read+0x213/0xa80 [ 203.382275][T10546] ? __pfx___mutex_lock+0x10/0x10 [ 203.382300][T10546] ? __pfx_vfs_read+0x10/0x10 [ 203.382326][T10546] ? __fget_files+0x2a/0x420 [ 203.382348][T10546] ? __fget_files+0x3a2/0x420 [ 203.382368][T10546] ? __fget_files+0x2a/0x420 [ 203.382396][T10546] ? fdget+0x1ac/0x250 [ 203.382428][T10546] ksys_read+0x150/0x270 [ 203.382457][T10546] ? __pfx_ksys_read+0x10/0x10 [ 203.382496][T10546] do_syscall_64+0x166/0x520 [ 203.382517][T10546] ? trace_irq_disable+0x3b/0x140 [ 203.382538][T10546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.382557][T10546] ? clear_bhb_loop+0x70/0xc0 [ 203.382580][T10546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.382599][T10546] RIP: 0033:0x7f720c16974e [ 203.382618][T10546] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 203.382632][T10546] RSP: 002b:00007f720a3b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 203.382651][T10546] RAX: ffffffffffffffda RBX: 00007f720a3b46c0 RCX: 00007f720c16974e [ 203.382664][T10546] RDX: 000000000000000f RSI: 00007f720a3b40a0 RDI: 0000000000000006 [ 203.382674][T10546] RBP: 00007f720a3b4090 R08: 0000000000000000 R09: 0000000000000000 [ 203.382685][T10546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.382695][T10546] R13: 00007f720c426218 R14: 00007f720c426180 R15: 00007fffd4e487d8 [ 203.382726][T10546] [ 203.835439][T10553] tc_dump_action: action bad kind [ 204.133749][T10561] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 204.783414][T10584] FAULT_INJECTION: forcing a failure. [ 204.783414][T10584] name failslab, interval 1, probability 0, space 0, times 0 [ 204.783447][T10584] CPU: 0 UID: 0 PID: 10584 Comm: syz.1.1027 Not tainted syzkaller #0 PREEMPT(full) [ 204.783469][T10584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 204.783479][T10584] Call Trace: [ 204.783487][T10584] [ 204.783496][T10584] dump_stack_lvl+0xe8/0x150 [ 204.783532][T10584] should_fail_ex+0x3eb/0x540 [ 204.783562][T10584] should_failslab+0xa8/0x100 [ 204.783585][T10584] __kmalloc_cache_noprof+0x9e/0x600 [ 204.783611][T10584] ? __raw_spin_lock_init+0x45/0x100 [ 204.783630][T10584] ? bpf_prog_stream_init+0x24c/0x4a0 [ 204.783653][T10584] ? bpf_prog_stream_init+0x24c/0x4a0 [ 204.783683][T10584] bpf_prog_stream_init+0x24c/0x4a0 [ 204.783721][T10584] bpf_prog_load+0xcb8/0x1c60 [ 204.783756][T10584] ? __pfx_bpf_prog_load+0x10/0x10 [ 204.783795][T10584] ? __might_fault+0xaf/0x130 [ 204.783824][T10584] __sys_bpf+0xd86/0xe00 [ 204.783854][T10584] ? __pfx___sys_bpf+0x10/0x10 [ 204.783886][T10584] ? __fget_files+0x2a/0x420 [ 204.783931][T10584] ? ksys_write+0x242/0x270 [ 204.783961][T10584] ? __pfx_ksys_write+0x10/0x10 [ 204.783994][T10584] __x64_sys_bpf+0xba/0xd0 [ 204.784026][T10584] do_syscall_64+0x166/0x520 [ 204.784050][T10584] ? trace_irq_disable+0x3b/0x140 [ 204.784075][T10584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.784094][T10584] ? clear_bhb_loop+0x70/0xc0 [ 204.784119][T10584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.784137][T10584] RIP: 0033:0x7fd50dba8f19 [ 204.784157][T10584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.784172][T10584] RSP: 002b:00007fd50ea09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 204.784194][T10584] RAX: ffffffffffffffda RBX: 00007fd50de25fa0 RCX: 00007fd50dba8f19 [ 204.784206][T10584] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 204.784219][T10584] RBP: 00007fd50ea09090 R08: 0000000000000000 R09: 0000000000000000 [ 204.784230][T10584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.784242][T10584] R13: 00007fd50de26038 R14: 00007fd50de25fa0 R15: 00007ffe34a294d8 [ 204.784279][T10584] [ 205.676786][T10614] netlink: 'syz.0.1036': attribute type 1 has an invalid length. [ 205.694080][T10616] netlink: 'syz.3.1035': attribute type 1 has an invalid length. [ 205.694099][T10616] __nla_validate_parse: 6 callbacks suppressed [ 205.694109][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1035'. [ 205.737550][T10616] netlink: 'syz.3.1035': attribute type 11 has an invalid length. [ 205.792207][T10614] bond5: entered promiscuous mode [ 205.793846][T10614] 8021q: adding VLAN 0 to HW filter on device bond5 [ 205.873940][T10629] FAULT_INJECTION: forcing a failure. [ 205.873940][T10629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.873969][T10629] CPU: 0 UID: 0 PID: 10629 Comm: syz.4.1039 Not tainted syzkaller #0 PREEMPT(full) [ 205.873991][T10629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 205.874002][T10629] Call Trace: [ 205.874010][T10629] [ 205.874018][T10629] dump_stack_lvl+0xe8/0x150 [ 205.874055][T10629] should_fail_ex+0x3eb/0x540 [ 205.874086][T10629] _copy_from_user+0x2d/0xb0 [ 205.874112][T10629] copy_from_bpfptr+0x5c/0x90 [ 205.874134][T10629] bpf_prog_load+0xd26/0x1c60 [ 205.874167][T10629] ? __pfx_bpf_prog_load+0x10/0x10 [ 205.874204][T10629] ? __might_fault+0xaf/0x130 [ 205.874233][T10629] __sys_bpf+0xd86/0xe00 [ 205.874262][T10629] ? __pfx___sys_bpf+0x10/0x10 [ 205.874294][T10629] ? __fget_files+0x2a/0x420 [ 205.874337][T10629] ? ksys_write+0x242/0x270 [ 205.874366][T10629] ? __pfx_ksys_write+0x10/0x10 [ 205.874398][T10629] __x64_sys_bpf+0xba/0xd0 [ 205.874429][T10629] do_syscall_64+0x166/0x520 [ 205.874454][T10629] ? trace_irq_disable+0x3b/0x140 [ 205.874478][T10629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.874496][T10629] ? clear_bhb_loop+0x70/0xc0 [ 205.874519][T10629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.874538][T10629] RIP: 0033:0x7f7d58fa8f19 [ 205.874557][T10629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.874577][T10629] RSP: 002b:00007f7d59ed8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 205.874598][T10629] RAX: ffffffffffffffda RBX: 00007f7d59225fa0 RCX: 00007f7d58fa8f19 [ 205.874612][T10629] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 205.874624][T10629] RBP: 00007f7d59ed8090 R08: 0000000000000000 R09: 0000000000000000 [ 205.874636][T10629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 205.874648][T10629] R13: 00007f7d59226038 R14: 00007f7d59225fa0 R15: 00007ffc753ee538 [ 205.874689][T10629] [ 205.895605][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1036'. [ 205.971918][T10614] ip_tables: iptables: counters copy to user failed while replacing table [ 206.151434][T10623] 8021q: adding VLAN 0 to HW filter on device bond5 [ 206.151919][T10623] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 206.151941][T10623] bond5: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 206.195245][T10623] bond5: (slave xfrm1): making interface the new active one [ 206.195267][T10623] xfrm1: entered promiscuous mode [ 206.197501][T10623] bond5: (slave xfrm1): Enslaving as an active interface with an up link [ 206.675506][T10662] Bluetooth: hci0: too big key_count value 38657 [ 206.894346][T10672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1051'. [ 207.093900][T10690] ip_tables: iptables: counters copy to user failed while replacing table [ 207.121806][T10689] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1051'. [ 207.175700][T10698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1055'. [ 207.465406][T10672] veth3: entered allmulticast mode [ 207.491821][T10672] bond2: (slave veth3): Enslaving as an active interface with an up link [ 207.496364][T10699] 8021q: VLANs not supported on tunl0 [ 207.657801][T10718] Cannot find del_set index 4 as target [ 207.798928][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 207.863680][T10725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1060'. [ 207.891439][T10725] bond4: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 207.893897][T10725] bond4 (unregistering): Released all slaves [ 207.973035][T10730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1062'. [ 208.013031][T10730] bond3: entered promiscuous mode [ 208.013520][T10730] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.429569][T10749] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1068'. [ 208.429654][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1068'. [ 209.827471][T10671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 209.841697][T10744] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1066'. [ 210.055522][T10771] tipc: Started in network mode [ 210.055553][T10771] tipc: Node identity 5e94e4a736d8, cluster identity 4711 [ 210.056274][T10771] tipc: Enabled bearer , priority 0 [ 210.376391][T10771] syzkaller0: entered promiscuous mode [ 210.376415][T10771] syzkaller0: entered allmulticast mode [ 210.376894][T10771] tipc: Resetting bearer [ 210.427382][T10770] tipc: Resetting bearer [ 211.264305][T10826] __nla_validate_parse: 1 callbacks suppressed [ 211.264328][T10826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1079'. [ 212.564919][T10770] tipc: Disabling bearer [ 212.633942][ T6004] tipc: Node number set to 1749869735 [ 212.660652][T10815] rxe_eth0 speed is unknown, defaulting to 1000 [ 212.946635][T10844] TC_ACT_REPEAT abuse ? [ 212.947332][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'. [ 212.969057][T10844] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1084'. [ 214.326576][T10891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1093'. [ 214.481624][T10897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1093'. [ 214.613770][T10897] veth5: entered allmulticast mode [ 214.625191][T10897] bond3: (slave veth5): Enslaving as an active interface with an up link [ 214.694175][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 214.818416][T10900] bond4: entered promiscuous mode [ 214.818437][T10900] bond4: entered allmulticast mode [ 215.007352][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1096'. [ 215.113713][T10920] FAULT_INJECTION: forcing a failure. [ 215.113713][T10920] name failslab, interval 1, probability 0, space 0, times 0 [ 215.113742][T10920] CPU: 0 UID: 0 PID: 10920 Comm: syz.2.1098 Not tainted syzkaller #0 PREEMPT(full) [ 215.113765][T10920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 215.113777][T10920] Call Trace: [ 215.113785][T10920] [ 215.113793][T10920] dump_stack_lvl+0xe8/0x150 [ 215.113831][T10920] should_fail_ex+0x3eb/0x540 [ 215.113860][T10920] should_failslab+0xa8/0x100 [ 215.113882][T10920] __kmalloc_cache_noprof+0x9e/0x600 [ 215.113909][T10920] ? push_stack+0x7e/0x380 [ 215.113935][T10920] ? push_stack+0x7e/0x380 [ 215.113973][T10920] push_stack+0x7e/0x380 [ 215.114005][T10920] do_check_insn+0x6681/0xb800 [ 215.114060][T10920] ? __pfx_do_check_insn+0x10/0x10 [ 215.114090][T10920] ? __pfx_verbose+0x10/0x10 [ 215.114125][T10920] ? print_insn_state+0x106/0x170 [ 215.114153][T10920] do_check_common+0x557a/0x7590 [ 215.114180][T10920] ? stack_depot_save_flags+0x33/0x810 [ 215.114257][T10920] ? __pfx_do_check_common+0x10/0x10 [ 215.114281][T10920] ? __pfx_verbose+0x10/0x10 [ 215.114305][T10920] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 215.114345][T10920] ? mark_fastcall_patterns+0x10e1/0x1140 [ 215.114389][T10920] do_check_main+0x95/0x1f0 [ 215.114416][T10920] bpf_check+0x302b/0x34e0 [ 215.114448][T10920] ? ktime_get_with_offset+0x93/0x2d0 [ 215.114473][T10920] ? ktime_get_with_offset+0x93/0x2d0 [ 215.114499][T10920] ? __pfx_bpf_check+0x10/0x10 [ 215.114525][T10920] ? bpf_obj_name_cpy+0x194/0x1e0 [ 215.114551][T10920] bpf_prog_load+0x14da/0x1c60 [ 215.114585][T10920] ? __pfx_bpf_prog_load+0x10/0x10 [ 215.114624][T10920] ? __might_fault+0xaf/0x130 [ 215.114653][T10920] __sys_bpf+0xd86/0xe00 [ 215.114683][T10920] ? __pfx___sys_bpf+0x10/0x10 [ 215.114715][T10920] ? __fget_files+0x2a/0x420 [ 215.114758][T10920] ? ksys_write+0x242/0x270 [ 215.114787][T10920] ? __pfx_ksys_write+0x10/0x10 [ 215.114819][T10920] __x64_sys_bpf+0xba/0xd0 [ 215.114848][T10920] do_syscall_64+0x166/0x520 [ 215.114871][T10920] ? trace_irq_disable+0x3b/0x140 [ 215.114896][T10920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.114916][T10920] ? clear_bhb_loop+0x70/0xc0 [ 215.114940][T10920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.114959][T10920] RIP: 0033:0x7f19a93a8f19 [ 215.114977][T10920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.114993][T10920] RSP: 002b:00007f19aa1d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.115015][T10920] RAX: ffffffffffffffda RBX: 00007f19a9625fa0 RCX: 00007f19a93a8f19 [ 215.115029][T10920] RDX: 0000000000000048 RSI: 00002000000005c0 RDI: 0000000000000005 [ 215.115055][T10920] RBP: 00007f19aa1d3090 R08: 0000000000000000 R09: 0000000000000000 [ 215.115066][T10920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 215.115078][T10920] R13: 00007f19a9626038 R14: 00007f19a9625fa0 R15: 00007ffe917479e8 [ 215.115111][T10920] [ 215.295012][T10926] netlink: 'syz.4.1100': attribute type 1 has an invalid length. [ 215.507862][T10926] 8021q: adding VLAN 0 to HW filter on device bond4 [ 215.509207][T10931] netlink: 'syz.4.1100': attribute type 10 has an invalid length. [ 215.509225][T10931] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1100'. [ 215.534309][T10929] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 215.534874][T10931] dummy0: entered promiscuous mode [ 215.543267][T10931] bond4: (slave dummy0): Releasing backup interface [ 215.600702][T10940] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1103'. [ 215.875368][ T30] audit: type=1800 audit(1794294872.016:6): pid=10934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1103" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1067 res=0 errno=-22 [ 215.877594][T10953] netlink: 'syz.0.1106': attribute type 6 has an invalid length. [ 216.121907][ T51] block nbd1: Possible stuck request ffff8880284f5080: control (read@0,1024B). Runtime 90 seconds [ 216.121953][ T51] block nbd1: Possible stuck request ffff8880284f5240: control (read@1024,1024B). Runtime 90 seconds [ 216.121982][ T51] block nbd1: Possible stuck request ffff8880284f5400: control (read@2048,1024B). Runtime 90 seconds [ 216.122009][ T51] block nbd1: Possible stuck request ffff8880284f55c0: control (read@3072,1024B). Runtime 90 seconds [ 216.193471][T10970] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1110'. [ 216.359773][T10976] FAULT_INJECTION: forcing a failure. [ 216.359773][T10976] name failslab, interval 1, probability 0, space 0, times 0 [ 216.359802][T10976] CPU: 1 UID: 0 PID: 10976 Comm: syz.0.1111 Not tainted syzkaller #0 PREEMPT(full) [ 216.359824][T10976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 216.359837][T10976] Call Trace: [ 216.359845][T10976] [ 216.359854][T10976] dump_stack_lvl+0xe8/0x150 [ 216.359889][T10976] should_fail_ex+0x3eb/0x540 [ 216.359919][T10976] should_failslab+0xa8/0x100 [ 216.359945][T10976] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 216.359973][T10976] ? bpf_push_jmp_history+0x32b/0xb00 [ 216.360000][T10976] ? bpf_push_jmp_history+0x32b/0xb00 [ 216.360031][T10976] ? bpf_push_jmp_history+0x32b/0xb00 [ 216.360061][T10976] krealloc_node_align_noprof+0x19a/0x390 [ 216.360094][T10976] bpf_push_jmp_history+0x32b/0xb00 [ 216.360135][T10976] do_check_common+0x4285/0x7590 [ 216.360218][T10976] ? __pfx_do_check_common+0x10/0x10 [ 216.360241][T10976] ? __pfx_verbose+0x10/0x10 [ 216.360265][T10976] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 216.360305][T10976] ? mark_fastcall_patterns+0x10e1/0x1140 [ 216.360350][T10976] do_check_main+0x95/0x1f0 [ 216.360376][T10976] bpf_check+0x302b/0x34e0 [ 216.360410][T10976] ? ktime_get_with_offset+0x93/0x2d0 [ 216.360437][T10976] ? ktime_get_with_offset+0x93/0x2d0 [ 216.360463][T10976] ? __pfx_bpf_check+0x10/0x10 [ 216.360488][T10976] ? bpf_obj_name_cpy+0x194/0x1e0 [ 216.360525][T10976] bpf_prog_load+0x14da/0x1c60 [ 216.360560][T10976] ? __pfx_bpf_prog_load+0x10/0x10 [ 216.360597][T10976] ? __might_fault+0xaf/0x130 [ 216.360627][T10976] __sys_bpf+0xd86/0xe00 [ 216.360656][T10976] ? __pfx___sys_bpf+0x10/0x10 [ 216.360689][T10976] ? __fget_files+0x2a/0x420 [ 216.360734][T10976] ? ksys_write+0x242/0x270 [ 216.360763][T10976] ? __pfx_ksys_write+0x10/0x10 [ 216.360794][T10976] __x64_sys_bpf+0xba/0xd0 [ 216.360824][T10976] do_syscall_64+0x166/0x520 [ 216.360847][T10976] ? trace_irq_disable+0x3b/0x140 [ 216.360871][T10976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.360891][T10976] ? clear_bhb_loop+0x70/0xc0 [ 216.360916][T10976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.360935][T10976] RIP: 0033:0x7f18941a8f19 [ 216.360954][T10976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.360970][T10976] RSP: 002b:00007f18950fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 216.360990][T10976] RAX: ffffffffffffffda RBX: 00007f1894425fa0 RCX: 00007f18941a8f19 [ 216.361004][T10976] RDX: 0000000000000048 RSI: 00002000000005c0 RDI: 0000000000000005 [ 216.361016][T10976] RBP: 00007f18950fe090 R08: 0000000000000000 R09: 0000000000000000 [ 216.361027][T10976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.361038][T10976] R13: 00007f1894426038 R14: 00007f1894425fa0 R15: 00007ffc1cf41008 [ 216.361072][T10976] [ 216.787887][T10992] ip_tables: iptables: counters copy to user failed while replacing table [ 216.794122][T10991] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1117'. [ 216.935928][T10991] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1117'. [ 218.037792][T11000] bond2: left promiscuous mode [ 218.056928][T11000] bond3: left promiscuous mode [ 218.057814][T11000] bond4: left promiscuous mode [ 218.133499][ T1148] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 218.133558][ T1148] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.133594][ T1148] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 218.133617][ T1148] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.133649][ T1148] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 218.133672][ T1148] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.133704][ T1148] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 218.133727][ T1148] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.933895][T11050] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1129'. [ 219.485421][T11065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1131'. [ 219.822869][T11075] FAULT_INJECTION: forcing a failure. [ 219.822869][T11075] name failslab, interval 1, probability 0, space 0, times 0 [ 219.822899][T11075] CPU: 0 UID: 0 PID: 11075 Comm: syz.0.1132 Not tainted syzkaller #0 PREEMPT(full) [ 219.822920][T11075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 219.822932][T11075] Call Trace: [ 219.822940][T11075] [ 219.822948][T11075] dump_stack_lvl+0xe8/0x150 [ 219.822994][T11075] should_fail_ex+0x3eb/0x540 [ 219.823025][T11075] should_failslab+0xa8/0x100 [ 219.823046][T11075] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 219.823074][T11075] ? copy_array+0x63/0xf0 [ 219.823099][T11075] ? copy_array+0x63/0xf0 [ 219.823126][T11075] ? copy_array+0x63/0xf0 [ 219.823152][T11075] krealloc_node_align_noprof+0x19a/0x390 [ 219.823179][T11075] ? __kmalloc_cache_noprof+0x148/0x600 [ 219.823202][T11075] ? bpf_copy_verifier_state+0xc39/0x1300 [ 219.823232][T11075] copy_array+0x63/0xf0 [ 219.823260][T11075] bpf_copy_verifier_state+0xab9/0x1300 [ 219.823299][T11075] push_stack+0x1b9/0x380 [ 219.823332][T11075] do_check_insn+0x6681/0xb800 [ 219.823376][T11075] ? __pfx_do_check_insn+0x10/0x10 [ 219.823407][T11075] ? __pfx_verbose+0x10/0x10 [ 219.823442][T11075] ? print_insn_state+0x106/0x170 [ 219.823468][T11075] do_check_common+0x557a/0x7590 [ 219.823495][T11075] ? stack_depot_save_flags+0x33/0x810 [ 219.823569][T11075] ? __pfx_do_check_common+0x10/0x10 [ 219.823593][T11075] ? __pfx_verbose+0x10/0x10 [ 219.823616][T11075] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 219.823655][T11075] ? mark_fastcall_patterns+0x10e1/0x1140 [ 219.823698][T11075] do_check_main+0x95/0x1f0 [ 219.823725][T11075] bpf_check+0x302b/0x34e0 [ 219.823759][T11075] ? ktime_get_with_offset+0x93/0x2d0 [ 219.823785][T11075] ? ktime_get_with_offset+0x93/0x2d0 [ 219.823811][T11075] ? __pfx_bpf_check+0x10/0x10 [ 219.823835][T11075] ? bpf_obj_name_cpy+0x194/0x1e0 [ 219.823865][T11075] bpf_prog_load+0x14da/0x1c60 [ 219.823900][T11075] ? __pfx_bpf_prog_load+0x10/0x10 [ 219.823938][T11075] ? __might_fault+0xaf/0x130 [ 219.823976][T11075] __sys_bpf+0xd86/0xe00 [ 219.824005][T11075] ? __pfx___sys_bpf+0x10/0x10 [ 219.824038][T11075] ? __fget_files+0x2a/0x420 [ 219.824083][T11075] ? ksys_write+0x242/0x270 [ 219.824112][T11075] ? __pfx_ksys_write+0x10/0x10 [ 219.824149][T11075] __x64_sys_bpf+0xba/0xd0 [ 219.824180][T11075] do_syscall_64+0x166/0x520 [ 219.824204][T11075] ? trace_irq_disable+0x3b/0x140 [ 219.824230][T11075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.824250][T11075] ? clear_bhb_loop+0x70/0xc0 [ 219.824275][T11075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.824294][T11075] RIP: 0033:0x7f18941a8f19 [ 219.824313][T11075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.824329][T11075] RSP: 002b:00007f18950fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 219.824351][T11075] RAX: ffffffffffffffda RBX: 00007f1894425fa0 RCX: 00007f18941a8f19 [ 219.824365][T11075] RDX: 0000000000000048 RSI: 00002000000005c0 RDI: 0000000000000005 [ 219.824378][T11075] RBP: 00007f18950fe090 R08: 0000000000000000 R09: 0000000000000000 [ 219.824390][T11075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 219.824401][T11075] R13: 00007f1894426038 R14: 00007f1894425fa0 R15: 00007ffc1cf41008 [ 219.824435][T11075] [ 219.988584][T11079] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1133'. [ 220.037428][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1133'. [ 220.037447][T11079] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1133'. [ 220.577762][T11103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1138'. [ 221.185048][T11134] netlink: 'syz.1.1146': attribute type 1 has an invalid length. [ 221.246680][T11134] bond5: entered promiscuous mode [ 221.248638][T11134] 8021q: adding VLAN 0 to HW filter on device bond5 [ 221.282683][T11138] bond5: (slave bridge1): making interface the new active one [ 221.282705][T11138] bridge1: entered promiscuous mode [ 221.286313][T11138] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 221.617734][T11148] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1150'. [ 222.393337][T11189] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1155'. [ 222.876962][T11207] [ 222.879343][T11207] ====================================================== [ 222.886374][T11207] WARNING: possible circular locking dependency detected [ 222.893404][T11207] syzkaller #0 Not tainted [ 222.897833][T11207] ------------------------------------------------------ [ 222.904862][T11207] syz.0.1160/11207 is trying to acquire lock: [ 222.910950][T11207] ffff888026a0aac8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 222.920388][T11207] [ 222.920388][T11207] but task is already holding lock: [ 222.927764][T11207] ffff888026a0a5a0 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 222.937964][T11207] [ 222.937964][T11207] which lock already depends on the new lock. [ 222.937964][T11207] [ 222.948365][T11207] [ 222.948365][T11207] the existing dependency chain (in reverse order) is: [ 222.957373][T11207] [ 222.957373][T11207] -> #6 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 222.965977][T11207] blk_alloc_queue+0x544/0x690 [ 222.971266][T11207] __blk_mq_alloc_disk+0x194/0x390 [ 222.976897][T11207] nbd_dev_add+0x494/0xb60 [ 222.981841][T11207] nbd_init+0x168/0x1f0 [ 222.986521][T11207] do_one_initcall+0x250/0x870 [ 222.991802][T11207] do_initcall_level+0x10a/0x1a0 [ 222.997259][T11207] do_initcalls+0x59/0xa0 [ 223.002110][T11207] kernel_init_freeable+0x29d/0x3e0 [ 223.007842][T11207] kernel_init+0x22/0x1d0 [ 223.012687][T11207] ret_from_fork+0x514/0xb70 [ 223.017799][T11207] ret_from_fork_asm+0x1a/0x30 [ 223.023080][T11207] [ 223.023080][T11207] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 223.030287][T11207] fs_reclaim_acquire+0x71/0x100 [ 223.035745][T11207] __kmalloc_cache_node_noprof+0x66/0x620 [ 223.041984][T11207] create_worker+0x112/0x7c0 [ 223.047092][T11207] workqueue_prepare_cpu+0xe4/0x170 [ 223.052812][T11207] cpuhp_invoke_callback+0x434/0x810 [ 223.058619][T11207] _cpu_up+0x2ce/0x5b0 [ 223.063213][T11207] cpu_up+0x1d2/0x220 [ 223.067717][T11207] cpuhp_bringup_mask+0xb2/0x1a0 [ 223.073173][T11207] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 223.079503][T11207] bringup_nonboot_cpus+0x17/0x30 [ 223.085049][T11207] smp_init+0x32/0x110 [ 223.089638][T11207] kernel_init_freeable+0x27f/0x3e0 [ 223.095355][T11207] kernel_init+0x22/0x1d0 [ 223.100198][T11207] ret_from_fork+0x514/0xb70 [ 223.105311][T11207] ret_from_fork_asm+0x1a/0x30 [ 223.110597][T11207] [ 223.110597][T11207] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 223.118326][T11207] cpus_read_lock+0x3d/0x160 [ 223.123435][T11207] static_key_slow_inc+0x12/0x30 [ 223.128895][T11207] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 223.135136][T11207] nbd_genl_foreach_sock+0x265/0x450 [ 223.140936][T11207] nbd_genl_reconfigure+0xbbb/0x1040 [ 223.146740][T11207] genl_family_rcv_msg_doit+0x233/0x340 [ 223.152811][T11207] genl_rcv_msg+0x614/0x7a0 [ 223.157831][T11207] netlink_rcv_skb+0x226/0x4a0 [ 223.163120][T11207] genl_rcv+0x28/0x40 [ 223.167617][T11207] netlink_unicast+0x8ef/0xa80 [ 223.172905][T11207] netlink_sendmsg+0x7f0/0xb20 [ 223.178192][T11207] sock_sendmsg_nosec+0x14e/0x190 [ 223.183739][T11207] ____sys_sendmsg+0x54e/0x850 [ 223.189030][T11207] ___sys_sendmsg+0x2a5/0x360 [ 223.194226][T11207] __x64_sys_sendmsg+0x1b1/0x290 [ 223.199711][T11207] do_syscall_64+0x166/0x520 [ 223.204824][T11207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.211235][T11207] [ 223.211235][T11207] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 223.218874][T11207] __mutex_lock+0x197/0x15a0 [ 223.223987][T11207] nbd_queue_rq+0x373/0xff0 [ 223.229008][T11207] blk_mq_dispatch_rq_list+0x499/0x1990 [ 223.235079][T11207] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 223.241926][T11207] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 223.248426][T11207] blk_mq_run_work_fn+0x167/0x2f0 [ 223.253969][T11207] process_scheduled_works+0xc3d/0x1630 [ 223.260038][T11207] worker_thread+0xa47/0xfb0 [ 223.265151][T11207] kthread+0x38b/0x480 [ 223.269742][T11207] ret_from_fork+0x514/0xb70 [ 223.274850][T11207] ret_from_fork_asm+0x1a/0x30 [ 223.280136][T11207] [ 223.280136][T11207] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 223.287348][T11207] __mutex_lock+0x197/0x15a0 [ 223.292461][T11207] nbd_queue_rq+0xc1/0xff0 [ 223.297397][T11207] blk_mq_dispatch_rq_list+0x499/0x1990 [ 223.303473][T11207] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 223.310315][T11207] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 223.316815][T11207] blk_mq_run_work_fn+0x167/0x2f0 [ 223.322363][T11207] process_scheduled_works+0xc3d/0x1630 [ 223.328450][T11207] worker_thread+0xa47/0xfb0 [ 223.333562][T11207] kthread+0x38b/0x480 [ 223.338150][T11207] ret_from_fork+0x514/0xb70 [ 223.343262][T11207] ret_from_fork_asm+0x1a/0x30 [ 223.348542][T11207] [ 223.348542][T11207] -> #1 (set->srcu){.+.+}-{0:0}: [ 223.355664][T11207] __synchronize_srcu+0xca/0x2f0 [ 223.361125][T11207] elevator_switch+0x1e8/0x7b0 [ 223.366410][T11207] elevator_change+0x2fa/0x480 [ 223.371695][T11207] elevator_set_default+0x375/0x440 [ 223.377413][T11207] blk_register_queue+0x404/0x4f0 [ 223.382953][T11207] __add_disk+0x6b8/0xdb0 [ 223.387802][T11207] add_disk_fwnode+0x100/0x3a0 [ 223.393081][T11207] nbd_dev_add+0x733/0xb60 [ 223.398015][T11207] nbd_init+0x168/0x1f0 [ 223.402693][T11207] do_one_initcall+0x250/0x870 [ 223.407975][T11207] do_initcall_level+0x10a/0x1a0 [ 223.413430][T11207] do_initcalls+0x59/0xa0 [ 223.418280][T11207] kernel_init_freeable+0x29d/0x3e0 [ 223.423993][T11207] kernel_init+0x22/0x1d0 [ 223.428840][T11207] ret_from_fork+0x514/0xb70 [ 223.433947][T11207] ret_from_fork_asm+0x1a/0x30 [ 223.439227][T11207] [ 223.439227][T11207] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 223.447037][T11207] __lock_acquire+0x164c/0x2de0 [ 223.452409][T11207] lock_acquire+0x115/0x350 [ 223.457432][T11207] __mutex_lock+0x197/0x15a0 [ 223.462541][T11207] elevator_change+0x1af/0x480 [ 223.467826][T11207] elevator_set_none+0xb5/0x140 [ 223.473201][T11207] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 223.479528][T11207] nbd_start_device+0x189/0xb30 [ 223.484904][T11207] nbd_genl_connect+0x167d/0x1cd0 [ 223.490443][T11207] genl_family_rcv_msg_doit+0x233/0x340 [ 223.496510][T11207] genl_rcv_msg+0x614/0x7a0 [ 223.501530][T11207] netlink_rcv_skb+0x226/0x4a0 [ 223.506816][T11207] genl_rcv+0x28/0x40 [ 223.511315][T11207] netlink_unicast+0x8ef/0xa80 [ 223.516601][T11207] netlink_sendmsg+0x7f0/0xb20 [ 223.521891][T11207] sock_sendmsg_nosec+0x14e/0x190 [ 223.527446][T11207] ____sys_sendmsg+0x54e/0x850 [ 223.532727][T11207] ___sys_sendmsg+0x2a5/0x360 [ 223.537926][T11207] __x64_sys_sendmsg+0x1b1/0x290 [ 223.543384][T11207] do_syscall_64+0x166/0x520 [ 223.548497][T11207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.554911][T11207] [ 223.554911][T11207] other info that might help us debug this: [ 223.554911][T11207] [ 223.565136][T11207] Chain exists of: [ 223.565136][T11207] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#52 [ 223.565136][T11207] [ 223.578870][T11207] Possible unsafe locking scenario: [ 223.578870][T11207] [ 223.586316][T11207] CPU0 CPU1 [ 223.591674][T11207] ---- ---- [ 223.597032][T11207] lock(&q->q_usage_counter(io)#52); [ 223.602409][T11207] lock(fs_reclaim); [ 223.608908][T11207] lock(&q->q_usage_counter(io)#52); [ 223.616799][T11207] lock(&q->elevator_lock); [ 223.621384][T11207] [ 223.621384][T11207] *** DEADLOCK *** [ 223.621384][T11207] [ 223.629523][T11207] locks held by syz.0.1160/11207: 6, last CPU#0: [ 223.635842][T11207] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 223.644028][T11207] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 223.652988][T11207] #2: ffff888027f2d9c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x1b70 [ 223.664379][T11207] #3: ffff888027f2d8d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x1b70 [ 223.675338][T11207] #4: ffff888026a0a5a0 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 223.685957][T11207] #5: ffff888026a0a5d8 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 223.696840][T11207] [ 223.696840][T11207] stack backtrace: [ 223.702728][T11207] CPU: 0 UID: 0 PID: 11207 Comm: syz.0.1160 Not tainted syzkaller #0 PREEMPT(full) [ 223.712094][T11207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 223.722144][T11207] Call Trace: [ 223.725425][T11207] [ 223.728353][T11207] dump_stack_lvl+0xe8/0x150 [ 223.732949][T11207] print_circular_bug+0x2e2/0x300 [ 223.737980][T11207] check_noncircular+0x12f/0x150 [ 223.742926][T11207] __lock_acquire+0x164c/0x2de0 [ 223.747784][T11207] lock_acquire+0x115/0x350 [ 223.752285][T11207] ? elevator_change+0x1af/0x480 [ 223.757230][T11207] __mutex_lock+0x197/0x15a0 [ 223.761819][T11207] ? elevator_change+0x1af/0x480 [ 223.766762][T11207] ? rcu_is_watching+0x16/0xb0 [ 223.771532][T11207] ? work_grab_pending+0x3d1/0x930 [ 223.776644][T11207] ? elevator_change+0x1af/0x480 [ 223.781583][T11207] ? __pfx___mutex_lock+0x10/0x10 [ 223.786616][T11207] ? lockdep_hardirqs_on+0x7b/0x110 [ 223.791817][T11207] ? cancel_delayed_work_sync+0xd9/0xf0 [ 223.797359][T11207] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 223.802823][T11207] elevator_change+0x1af/0x480 [ 223.807591][T11207] elevator_set_none+0xb5/0x140 [ 223.812448][T11207] ? __pfx_elevator_set_none+0x10/0x10 [ 223.817918][T11207] ? xa_load+0x1db/0x210 [ 223.822168][T11207] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 223.827973][T11207] ? kernfs_add_one+0xfc/0x510 [ 223.832742][T11207] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 223.838989][T11207] ? sysfs_add_file_mode_ns+0x258/0x300 [ 223.844546][T11207] nbd_start_device+0x189/0xb30 [ 223.849413][T11207] ? device_create_file+0xf4/0x1b0 [ 223.854527][T11207] nbd_genl_connect+0x167d/0x1cd0 [ 223.859554][T11207] ? __pfx_nbd_genl_connect+0x10/0x10 [ 223.864925][T11207] ? rcu_is_watching+0x16/0xb0 [ 223.869697][T11207] ? __nla_parse+0x40/0x60 [ 223.874116][T11207] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 223.880447][T11207] genl_family_rcv_msg_doit+0x233/0x340 [ 223.885996][T11207] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 223.892067][T11207] ? __lock_acquire+0x747/0x2de0 [ 223.897009][T11207] genl_rcv_msg+0x614/0x7a0 [ 223.901514][T11207] ? __pfx_genl_rcv_msg+0x10/0x10 [ 223.906537][T11207] ? __pfx_nbd_genl_connect+0x10/0x10 [ 223.911920][T11207] netlink_rcv_skb+0x226/0x4a0 [ 223.916690][T11207] ? __pfx_genl_rcv_msg+0x10/0x10 [ 223.921714][T11207] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 223.927010][T11207] ? down_read+0x2b9/0x320 [ 223.931432][T11207] genl_rcv+0x28/0x40 [ 223.935417][T11207] netlink_unicast+0x8ef/0xa80 [ 223.940190][T11207] netlink_sendmsg+0x7f0/0xb20 [ 223.944950][T11207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.950233][T11207] ? aa_sock_msg_perm+0x144/0x210 [ 223.955259][T11207] ? apparmor_socket_sendmsg+0x98/0x360 [ 223.960811][T11207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.966090][T11207] sock_sendmsg_nosec+0x14e/0x190 [ 223.971116][T11207] ____sys_sendmsg+0x54e/0x850 [ 223.975884][T11207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.981179][T11207] ? import_iovec+0x73/0xa0 [ 223.985685][T11207] ___sys_sendmsg+0x2a5/0x360 [ 223.990358][T11207] ? __lock_acquire+0x747/0x2de0 [ 223.995297][T11207] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.000498][T11207] ? futex_wait+0x2a2/0x390 [ 224.005011][T11207] ? __fget_files+0x3a2/0x420 [ 224.009688][T11207] ? __fget_files+0x2a/0x420 [ 224.014285][T11207] __x64_sys_sendmsg+0x1b1/0x290 [ 224.019221][T11207] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 224.024685][T11207] do_syscall_64+0x166/0x520 [ 224.029276][T11207] ? trace_irq_disable+0x3b/0x140 [ 224.034308][T11207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.040370][T11207] ? clear_bhb_loop+0x70/0xc0 [ 224.045046][T11207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.050935][T11207] RIP: 0033:0x7f18941a8f19 [ 224.055352][T11207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.074957][T11207] RSP: 002b:00007f18950fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.083369][T11207] RAX: ffffffffffffffda RBX: 00007f1894425fa0 RCX: 00007f18941a8f19 [ 224.091343][T11207] RDX: 000000000400400c RSI: 0000200000000100 RDI: 0000000000000009 [ 224.099311][T11207] RBP: 00007f1894237f6d R08: 0000000000000000 R09: 0000000000000000 [ 224.107282][T11207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.115250][T11207] R13: 00007f1894426038 R14: 00007f1894425fa0 R15: 00007ffc1cf41008 [ 224.123226][T11207] [ 224.240878][ T5647] block nbd3: Receive control failed (result -32) [ 224.240939][ T5647] block nbd3: Receive control failed (result -32)