last executing test programs: 5.006823512s ago: executing program 0 (id=1750): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x13}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x24, 0x9, 0x0, 0x18fcffff}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.855136905s ago: executing program 0 (id=1753): r0 = socket$inet6(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) close(r1) r2 = socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), r1) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x28, r3, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xc004) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r4], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x71}, 0x94) socket$alg(0x26, 0x5, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00', 0x2}, 0x1c) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001780), &(0x7f00000017c0)=r7}, 0x20) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001840)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b702000000000028850000008600000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x1, 0xe, &(0x7f0000001380)=@raw=[@tail_call, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x8d}, @map_fd={0x18, 0x2}, @ldst={0x3, 0x2, 0x0, 0x9, 0x5, 0xfffffffffffffffe, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @generic={0x8, 0x6, 0x4, 0xaf3}], &(0x7f0000001400)='GPL\x00', 0x2, 0xf9, &(0x7f0000001440)=""/249, 0x41100, 0x30, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000001540)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001580)={0x0, 0x2, 0x4b95fb9, 0x2}, 0x10, 0x0, r6, 0x6, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, r11, r12, r13, r14, r15], &(0x7f0000001900)=[{0x5, 0x4, 0x5, 0xb}, {0x5, 0x5, 0x2, 0x3}, {0x0, 0x5, 0x2}, {0x5, 0x2, 0xa, 0x8}, {0x2, 0x4, 0x1, 0x3}, {0x5, 0x3, 0x0, 0x3}], 0x10, 0x2e}, 0x94) sendto$inet6(r0, &(0x7f0000000100)="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", 0x1000, 0x24000071, &(0x7f0000001100)={0xa, 0x4e20, 0x1ff, @mcast2, 0xc0000000}, 0x1c) 4.430654466s ago: executing program 0 (id=1759): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x44}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="1200000080000000080000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000123cdea11447230dc0ea0de3ee42c64779f542636ddddab7c4698221de4f1b23c60442ef8069df99f2c433f752f8998e7fe0c087bbe2c3e4bda3e5063ac71fed3e207388b2ee613ac04cb527e4762512fd862a6fad7a615b2d0ca200cc4762bb4d5313c951f842d415d2d87ee5f9c9ae67cd08ac821f4bfdc9bfebf2e447be090ce3f7b6bc86f222f7c5210774fad703d808f2450a4155e792e845da2c349d29", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4, r3}, 0x38) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000180)={'sit0\x00'}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000740)={'veth0\x00', 0x600}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x30}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x18090) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) 3.478075111s ago: executing program 2 (id=1766): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x18}, 0x8040) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000400)={0x2f}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$inet6(0xa, 0x2, 0x0) (async) close(r0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) (async) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x18}, 0x8040) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000400)={0x2f}, 0x8) (async) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) 3.402805893s ago: executing program 2 (id=1769): r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private2, 0x1, 0x6426bfd368fb86c, 0x0, 0x1, 0x3, 0x3d7}, &(0x7f0000000040)=0x20) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x1, 0x10000, @rand_addr=' \x01\x00', 0x2}, 0x1c) 3.335739816s ago: executing program 2 (id=1771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703640000000000b7040000000000008500000008000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 3.098068683s ago: executing program 2 (id=1773): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x47b7, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000b2749e12ada9f16a6b001800000018000000000d0000321a4c1ea0536b5a98000000000000cff7be700700eebc1cab002155c22e295b103e2c302bdc00a9dd8bfa10b5e905bdea5dcfffc24140743211dbaa0bdee5feab3134363b9fc0f560cbea6ff5187fab7caeca73a5bc93fa74bcb4c4be85abed33646537f281466d0f738af8445d58adf5defc19393e598f88dae677afea5fbb44"], 0x0, 0x32, 0x0, 0xfffffff8}, 0x28) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a0103"], 0x28}}, 0x0) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xf6}], 0x1, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x28, 0x5, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x198}}, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10) listen(r4, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYRES8=r2, @ANYRESOCT=r4, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) 3.097727777s ago: executing program 0 (id=1774): socket(0x2c, 0xa, 0xfffffffc) shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x34000}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0, 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0xa}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYBLOB="03800000000000001c0012800b00010067726574617000000c000280080001"], 0x44}, 0x1, 0x0, 0x0, 0xad724fc17f5eaadc}, 0x4054) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4001000041000701fefffffffeffffff017c000008004280040008000c00018006000600800a0000180102"], 0x140}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(r4) syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000a40)=""/206, 0xce}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/167, 0xa7}, {&(0x7f0000001740)=""/4076, 0xfec}], 0x6}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}], 0x7, 0x100, 0x0) sendmsg$alg(r4, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000340)="606a01b1cdaa7a80b5b9989416117987ab10d04158d382d88130e20d10726e171d9f3fca144c18ad32fe07e6620aae144d0dc3793e71b36ab3d9ab1f0ee5218acefdad4625fa613b671de65257689f14ada44aecbb0c5fc7a1985d091b2ea51a678fb3511089f5431511369e1b46b0cd10ca4deb51a302275664abb795f681e02dea19ec06f18e23536213f5b30f50f2b3b6e8f12234da4252b4796e1895823c8582f9223e99d2decfeecbf5ab4a0c4db72ea22e65a210953e7870d0262b2ee5e101a38661ef61e89237c0c39e67ad03a2e6ffd44be7e3852567b18d9945fb2ca00d9ee6317e00aa2225d2530c968e7d", 0xf0}, {&(0x7f00000005c0)="29179cc49edd9776ee5b54216ae6356a833a9b9013bb1173130d7cc84fc18b9dc319338b1ea3cf4e1caecaae035e9b9d4f06bb4336b6db3131a4dd4ad81a36017651649d9e011b1745a3817ca11cd990f5e4fd4a565921c6d76627f90ae56a", 0x5f}, {&(0x7f0000000640)="9c55b9ebb0ba42ba0e3af3725748825e80a3da27b6c2c635c00179f39bef4f078c43c5384b8eedf52c175aab355925a61ec48053d087b118100675ae0ee026baa7d941e04655b726d75de52e6dd8a87647fbd1c70e3a0643d1b852ccf1c65b05de30814eb084cf4de3e19e6f7e10a3eeb792e2b04790223e72918621f0ea85930b3456b031bd887e587d33350f7fa5ae974f7ad2f43219159e6570d26ffc237e5efa432333fc0fd8e1e29ef98c8af7aa022804d928156119befa8b4175ac3d56b996840f26bf226ae66e0d", 0xcb}, {&(0x7f0000000740)="f1b52a29027424250d601703aad55ef9206e54a64da60a8e530efef0892eb1f8c11dc895070ec89b3335662140f8dd22794f21bee33c34925e0ee0185974e61b494c461c0b728345d0533396e5044298a156e159", 0x54}, {&(0x7f00000007c0)="c4d238a4d71e19326603", 0xa}, {&(0x7f0000002740)="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", 0x1000}, {&(0x7f0000003740)="94629c0a36c66a908e4d51787db81dcbf2181aa1db00927b8d7c8f20fa5cc227f54099eedb89a5eef94959f3283e082fc692b017164ab586e842ce46f65ee66a647ce1b46549657dce7b653bc0500f2bc35ac3319a6d33f67e46edbda6035eb15a5425f0f8ae1446aceaf72c8e845e4c19cc89e8d5740413541833b55a4af58bdd9fdbe160165a0d9a7fef2194152204ee80fbb0a247bdfd26acd5c069e3d0cf8fa1a6e453d786a9bf33d638b417edff4f084b2740ae0483446635219ea3e0fc", 0xc0}, {&(0x7f0000003800)="278043728b84ce2ca2e9f199d02eeef67809338b573f23ada4b9c33e97adf1f08c6660111c4f2ca3aec5238bcc8add650eda54544ef98c575cbd4847d6701ad1bd6454699e5d9d4ff9cf11a30f5ae883600214a6d00a0c64db5d0b71b43d63389927270148aad34cf9c6a795289ad770837c1154a5363e2036aedbb53d488c672abd2aadc8fe00a56214d6888adceb8378b775129ec12c0052e0a2e9ea16a94cc623e9dcb9b3f1e4f5f5cfae50b6f8e3d7b6b648e7df802c37595b0c49e5095225c4", 0xc2}], 0x8, 0x0, 0x0, 0x20008000}, 0x1) 3.096169962s ago: executing program 3 (id=1775): socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000be820502d28ea068301da7ecd38b485a6ee14061a5e3c56726cfa398005f0c227db465ceb64a5e9e5a353091894efcb102d92ed5d4ea6e9882b8f40c2cfd9d3e9359293c9752ee2ec597d99f0b69cfd4e4c925ad5c05179a12c31f34009a0569789a5be3ac03f35ac31fb67dc7a5695bb3014022ba92d2dd2dd9473c9f2de3f6280f5e99a7fabf33e30ad52ea44e25ecf8e86b6be5f76bd5a6b3f8b676a3194bbd4f073b15bf73e9c9de5a479c5daccec99266b0d0c20bec37896d7e795f8d550982", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18050000080400000000000003000002180100002020703e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000bbf5ffff850000000600000085000000d000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.133908742s ago: executing program 3 (id=1776): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/245, 0xf5}], 0x1}, 0x3}], 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 2.058480111s ago: executing program 0 (id=1777): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x300, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d5786b4f843d8ff2885266d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000088500000076000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x8e0, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8cc, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x87c, 0x2, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x6, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0xffffffff, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0xffffffff, 0xc, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x81, 0x300, 0x9, 0x8, 0x6f, 0x9, 0x5, 0x9, 0x9, 0x101, 0xc, 0x8, 0x18000000, 0xd288, 0x8659, 0x9, 0x3, 0x40, 0x101, 0xb173, 0x1, 0x1, 0x9, 0xd399, 0x5, 0x8000, 0x6, 0x2, 0x8, 0x1, 0x80000000, 0x2, 0x4, 0x3, 0x0, 0x7fffffff, 0x7fff, 0x800, 0x9, 0x5, 0x3, 0x400, 0x8001, 0x9, 0xfffffffa, 0x7, 0x7, 0x4, 0x7cd8, 0x80000001, 0x80, 0x1, 0xfffffc00, 0x8, 0x7ff, 0x6, 0x25c, 0x3, 0xf, 0x5, 0x9, 0x8, 0x5, 0x7, 0x0, 0x9, 0x8, 0x0, 0xffff8001, 0x3, 0x48, 0x0, 0x33f2, 0x6, 0xffffffff, 0x1d0, 0x1, 0x5, 0x7fffffff, 0xc3b, 0x4, 0x7, 0x821, 0x0, 0x1fec, 0xe, 0x0, 0xc, 0x1, 0x4, 0x0, 0x8001, 0x0, 0x2000000, 0x2, 0x0, 0xb, 0x7ff, 0x8, 0x400, 0x4, 0x63, 0x5, 0x3, 0x2f, 0x4, 0x8000, 0x8, 0x95f, 0xfffffffe, 0x5, 0x5, 0x3, 0x7, 0x2, 0xd33, 0x8, 0x2, 0x3, 0xffff, 0x7, 0x8c88, 0xfffeffff, 0x6, 0x3, 0x0, 0x3, 0x1, 0xcb, 0x8001, 0x1, 0x3, 0x5, 0x1, 0x0, 0x6, 0xc666, 0x7, 0x10, 0x2, 0x4, 0x4, 0x729, 0x9, 0x9, 0x8001, 0x5, 0xfffffff9, 0x4, 0x6, 0x781, 0x1, 0x10000, 0x9, 0x7, 0x61c, 0x3, 0x1000, 0x0, 0x8, 0x2, 0x101, 0x1, 0x800, 0x5, 0x5, 0x9, 0x3, 0x8001, 0x401, 0x6, 0x8, 0x1, 0x3, 0x10000, 0x8001, 0x1, 0x4, 0x2, 0x5, 0x800, 0x3ff, 0x7, 0x80000001, 0x9, 0x5, 0x8, 0x353, 0x7c8e, 0xfffffbff, 0x5, 0x5, 0x0, 0x2, 0x10000, 0x1bac88d5, 0x9, 0x6, 0x1, 0x1, 0x38, 0x401, 0xd, 0x0, 0x2, 0x101, 0x6, 0x6, 0x6, 0x40, 0x4, 0xe, 0xaf9e, 0xf4e, 0x5, 0x5, 0x10, 0x6, 0xfffffffc, 0xb862, 0x4e, 0x6, 0x0, 0x3b10, 0x6e43e9cc, 0x3ff, 0xffff, 0xd, 0x4, 0x3, 0x4, 0x401, 0xf, 0x6, 0x4, 0x41f6, 0xf, 0x4e27, 0xc0000000, 0x4, 0x3, 0x4, 0x1, 0x6, 0x7ff, 0x1, 0x3, 0x480000, 0x7, 0x7, 0x3, 0x5, 0x4, 0x99, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_opts(r0, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write(r7, &(0x7f0000000280)="aa0a30f6dbc4f75ae9", 0x9) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r8) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000001c0), &(0x7f00000002c0)=0x40) close(0x3) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000001040102000001800000000000"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000001040500000000000000000000400000060006460003000005000100010000"], 0x24}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000440)=0x3f, 0x4) 1.979718556s ago: executing program 4 (id=1779): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 1.846037139s ago: executing program 4 (id=1780): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x63, 0xa, 0xff04}, [@call={0x44, 0x0, 0x0, 0x7400}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r0 = epoll_create1(0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) epoll_wait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000100000000a0020"], 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000004000000e00000020000000000000000000000000000000000000000000000000000000000000000100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) 1.642173813s ago: executing program 4 (id=1782): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) 1.418404797s ago: executing program 4 (id=1784): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) close(r2) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x6, r4, 0x4}, 0x38) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000040a010800000000000000000a0000030900010073797a310000000009000300"], 0x2c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0400000008000000010000008006000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmmsg$inet(r3, &(0x7f0000003d80)=[{{&(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000800)=[{&(0x7f00000003c0)="ff0ccb1da0870eecf9c17521ef9c218140b783c56e0ce7c4e117ceaa349d598b64c65e0d4a33ae0496c145e48bb81693d80f9b99948c109ebfb3b0d83fb0e3677c2b9ff8158e51ea11930116dc747f111df11efe3d4096a415ef4cbe5c3a9f69378b0bc0f9d2eb0d970a6666e078e6c83920b8f1f266d4adba68fce4543f86aeed9eea018e99ed9516536c18f0be12cd73e1b28fec024b4bad048d575036eaafa9891f20085d7bd9b028ed0036ee541a45f2343537f93a4d06430337242b6963804467438132ff169b5c27ffe0bb36316ea59963a8765b694ed0badfaa", 0xdd}, {&(0x7f0000000640)="465a1113da6d52ea5196e9da07cee9bd1a147f944f6b23291295d91a7dbf75270b45d4cf89b28583c4227fb4b0b88e34f7a9f0581447d91eaa6e8863ae9f82da51cd7f76199541f42cbfeca111e8dda7ede305566524a1b6d837f060e77a29aaac0e0cbbfef61c0c3f", 0x69}, {&(0x7f0000000700)="f34766ca4a165def3dd76a4089b1c7ea0a0f63449ff4728780573925bf7ef16e8220a59779b9330892d55e5ce02ada8c4f28c46bcd1201e8975fc050cd33a93115bdacd6d1b2806a8cec3934c1c3ba2a1787cd827086a9cfba6eef02ebd19f1c265fd65b4d15deb24efbd96689c97f3099d76f0147d687809888e03e61e4144707e7710947784b9a91918d9b0e957037b41a464a7c2a043a9bdc53b03853fcda45089efc49f216841655a5a54e359e7b3ac273ec48dfd747bc19b1c01ca44dc42a413d6f8ec9da64ded86ab9b980228db39d4b05b4087653384cc7d30f", 0xdd}], 0x3, &(0x7f0000000840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfe}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x8f, 0x0, 0x6, [0x2, 0xe2, 0x5, 0x80, 0x7ff]}, @ssrr={0x89, 0x17, 0x1c, [@private=0xa010101, @multicast2, @multicast1, @multicast2, @broadcast]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x30, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x91, 0x0, 0xb, [0x0, 0x1]}, @generic={0x88, 0x11, "4bc8c2d9969e9798eb748f85e70f51"}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @loopback, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x128}}, {{&(0x7f0000000980)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000a00)="2eb9f03de72801b5c5aa4c102fb7478668131ee1922f55ce3b35d4698eddb9de7c140e41f767b70420db71f0", 0x2c}], 0x1}}, {{&(0x7f0000000a80)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000b40)="48e9ce", 0x3}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)="94b616a3c9a9ea6d842c3129ef08a5329c54f23c9500b180f89081c2e8829c97a98824fb322e05d9643bf1006212acba14ac4c4b84126122ad331c10c76e4945506a6ed28a6281560a06e2727b99d376d45b48da2a2e390ee9839aed632e2ca2ddf6b22d0f86f6e06e1068ab8724ab8c91b53d56a55afe3148c36f3f5f60e86d631d60fc8fade3a502dc38e0e616053e4976d283e3a6121cfc5d43c7196168ade397e99b4b7c7f886cec6ebb23e95ed9a7bd03ce508edf2633646611299b06c56db3e767a8a5c5e8c349", 0xca}, {&(0x7f0000000cc0)="fe745e2de913d354e1d1ace68a045c641b621abaf9b81f4d6bcfacd88f258f66fdac972136c89c1967e258629dec36ff909eec2579fe9b8519341d8f344be4af8808fb1e45ee699fa3eef20b8176243f741ffbd742a227db103b74f3e4d860992f3fb6496aa5c948f6594616d3cabbdac7f08524cd65cd6d11c6fe6eb3e725871ba6960d24793812f3e54341d9e4d73d40e23d187a076e85db3d0c7497ec873a8fb48bb44350c7b528750ac6299eaace8fb3d314baba9b060f79fe56ae9a85735cd73430c7205ecf46340e36a7d95b9ac7aa6d5a64", 0xd5}], 0x4, &(0x7f0000000e00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x25}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7f}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000e80)="9cb87baa403e445c80afbde8c6bc0ec57132db4b6350389776f4715d323ba09c232b6aa84fad134f4d81b22556dfe41acdbcdd256682ee70eec1461db0d8c31d12c9677a48e60efb054960799ea0c5ef231ffab414ecb41eaa5307df375e55b12a2c10dd5daf79c952acc35574a871371d006ec5a4bae7edebd587c0c7355fce752ae2474e7059b0cc285e3591a6e53b4c23c743e2fc606a707202d4e0e3727f920bb79c6f365b359df659d40ad7265e14d93f82f6bb02d946b82900bc7a49c77f61053ead6832263172bf62f3bda2289e9e9aabc1519d3f15181954f56e3e7fc8a33e", 0xe3}], 0x1, &(0x7f0000000fc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x58}}, {{&(0x7f0000001040)={0x2, 0x2, @rand_addr=0x64010102}, 0x10, &(0x7f0000002d00)=[{&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000002b00)="ccfaa504a4e18acbbaee2dfcaa0323816b94b2f1dd261fe7079f7c85c463b0f1543bfb531bd777100682dee8bc8eaf2366afd16940bea0b1b61f968d04d1d7afce33a6bb66cc8edfcfad0caf094637ddc2b0d73ddb44652c5e793c16e802d0b04557422b46104a9ad87dd0300e20c3762ac576887eae2e9117816f31951d9ee07b4b08d6e5df8f98cbc368beb812315baec992712ea9a5ea85b1ee6fd3aa5f03543bd097dd5db766901113d5f29296677d7e2a50ba5c91fcfa5b4842592cedac92353524093737731d14f10144c3bfe454ed48a399fbf073224702b6ff87bb8704bff9bc9eab889553be3816b6151abf0dfa4e42fc0369", 0xf7}, {&(0x7f0000002c00)="6e7eb0cc731cc10c9cf8c2ebe2a38601168e87ff9ec23a076a0f342a484b796b965a3c7e2280ae05e2b88cc92ccb343c739df7308aad2c4fa5a6814351ce0e0f58329bc8292d69b4c5f1625e3407be0e44024d224d3c06b74b98f8a053b0b3c6613610d7262435175c765d5e29d4d341c81f84cb8920", 0x76}, {&(0x7f0000002c80)="e1f86329dffc16e6489f3571d209a6a19da7d2b6d3f1a09bc41166bbf62c04df29cbd95011e7766c0955233403925b0260874ff3f9e99bb7a1f960f39fa15567753a3a55c37bbf67", 0x48}], 0x4, &(0x7f0000002d40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0xed, [@rand_addr=0x64010102, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x13, 0xad, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x20}]}]}}}], 0x58}}, {{&(0x7f0000002dc0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000003480)=[{&(0x7f0000002e00)="1c7cf1eae2ce48a3fcf95129a14f3f1483eca0250cfebf2953e204229524e1605d5e63162500e9b837920158df3b834d4bd273d1f8ffdb9836fe2120fc474306239b2a6fc935cd9fee9f57841475b41a1936acbbef7a836b0d9ee1c20c39345992b9e7083a9c7c4530734fc68c8235bcde5cca5e63b970743062daffa3d74f59d881db0fe25b48846cf3872e9f96e816892ad2", 0x93}, {&(0x7f0000002ec0)="5ab91fbef32675508d01f6b46a98dda4ed7c527226b19fa3ca1039f7e480ae8685d52e414bef76b7fe1c9d75e78b8bad6c2501a54ae0f98f0957eeb463a187e10b27435ff2f31704b048b04b82bf73333cbf47a2b53757fd53b05c0a6de3f87fd7714db7f704cf7474701473253bde07d60fd271eb3f52095ad62552b116f31a06bcc010eb536d650f2368713544be07ee324b9be4bb211ce068651d5820b4d0887f0cf6cb170ef556435b4621b5cefb689c6aac6d9fd1c8ba5fc82f372232b4187125efb5e60b1313765420a0bbef19c2cee579353bff8a5cb507979ca09503c847796de6ecbebd0ce3e92d0271dfa60a3e8340bb0c", 0xf6}, {&(0x7f0000002fc0)}, {&(0x7f0000003000)="46cc72408f4f427b378a7cc2e3251d40756bb8e6490a6ce62029374d77b2360e10e0f53bcec14f933a45366b2debdf443fc67912af65d14527948fac28d126431784325d644017a1400ef2604aff83f3938c6c61311d0fbaccfc483a39b4da0b4de346c22635a9e25a5731b7f1f352b171e21e33d59bed0c1f8d3f76e725e11780257972f1fae981d55caac87c", 0x8d}, {&(0x7f00000030c0)="f4b4928392a246f56fddd25a679014b6b6bedb93c9dff9131f37b0ce23af05b1387a40c08d2e623bd4adf5188c4b3e456accf9e0d37e3f67a54a0cfb5bd7dbba191af07a57156a771857354b279763f446adbaaf4215b0ea9bca60e1ebb9146baec1a07ebc00da7ac6c528420b58b55dfefa70ba3f413da460b753dd722418edfc10023fdf7eee9a004bff31dcfd5cc9fc64e53b5157a94ea92c636ca6096c1e164a7c7180ff359e5ac7c86c280b47a9a2a27fea87e0c7ac44ca6bde0601530253fadf7be1d0339fd0dfa4db76d42a56b3d882c61a51db03e1424cd63c306944a32b88343f79a8cf94fafbfbc82aea36", 0xf0}, {&(0x7f00000031c0)="a30803dc38fb95443e93849ac8a20bd2e698f29f3362cfecb31f6b7794917c969eabd60138e886e183a317dc967529f117531182af4a7634037e7fb9729531fa1831dae55940a3216a88a1bf648048d4d0f0a5f02aa6f75366d281298dd00d34f736182656ca86bd44", 0x69}, {&(0x7f0000003240)="993904b4a8e18eb195", 0x9}, {&(0x7f0000003280)="404950d76c8c639229fec8f7a592d4bb7f85669ed612ccf6d957a9eeaa4432800e3d3b534f102fc41ab1056da4800b5e12a8301efd85eb7ea70a37d1de89a8b7c022aea108bfab4e45b9fa6d1b8b1885d44f12394a1a82498a290b2082b9df366c5bc98e99cec63a6fca244c6a294da1880093159fc16cbeccd08738fc2c188fc388723e7925996756f68e0ce315ca6529e6a76e29fcac321808da4903cd8b426d10bac8b24dd5693726b094e041542f37b3a35e0a21feddc7bbba90ce3531c11b377e232a7abcec184dfcf4dc067c2e26f7d1312b55b365cfb31ee604e77f1a098f69b84089fa", 0xe7}, {&(0x7f0000003380)="d927c58650c0cf2903711d416391c7997d0d95339de124d58347bf5814987e88dba2d0cc568c0aef4f020fe7cc2320586104cb5288ec47cac4ac09a30cadc958961093f5512ddce519f56d6901aa1b301b7d86fcb65786aa0c2564aa3f9ac0bdbb216da8ea8aa27a36194fca5f2a0a46937533e1b35a902d056f37458b3c88cc66b0813a0dbda99073b68ba9d1061aedb9bf4cb6297e7d855c5d1104a7a710247ad5e129908535ccf49154c4a10be8552b2d66aadd368e342e5111cc7c96baf9d0868dce3969486e63bc1c", 0xcb}], 0x9, &(0x7f0000003540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xe8}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x7, 0x12, "8107fd4ba0c2c75602f12b92f5cc88d7"}, {0x0, 0xf, "4bbe576dd38f57e29a2bbead8d"}, {0x0, 0x4, "b86b"}, {0x6, 0x3, "9a"}]}, @end, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @end]}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xe, "e454fa3ebb446e74f375e88a"}]}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@cipso={0x86, 0x3d, 0x1, [{0x6, 0xd, "0ea7c67b9ef8e033567247"}, {0x2, 0xb, "5e695ee77c4f6e50c7"}, {0x0, 0x8, "a5b25d8929d3"}, {0x3, 0x10, "659432ba11f4b3bb1bfbe5e4c2c7"}, {0x1, 0x7, "4058143c26"}]}, @lsrr={0x83, 0x1f, 0x82, [@broadcast, @broadcast, @multicast1, @empty, @private=0xa010100, @loopback, @rand_addr=0x64010100]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x1d}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x130}}, {{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000003680)="ea8b9f459070891ae760bd58e7ba9ed8e1533c2b5e9dbf0c04107ed760481c93256ddd99ce6856dc7f30b59307034c4b4edec4aab78499abb800779fbdf72e69eb27dc3058035fdd9479d56279e884e89169762851dbbcd4174ca6b09873e143a2c4897d82dfa1cab1260c3ea877960e47074c18e102cf2ce8290c65915e41eba5e4eeddd1495d72fd7202dc7057f13f1d1eb7", 0x93}], 0x1, &(0x7f0000003780)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x18}}, {{&(0x7f00000037c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000038c0)=[{&(0x7f0000003800)="8eb205bd2a424e0745e1980014da522cc8658a1cd29de15af6af9be632d308032198430c6d696301491482caddfdbdc8b02a1e2e5858f5296cd9c0df8b0fa6bef7d09ed327759b8d4d2aaf3638c888a65ce8018ad52fa07ba230e0f48c9632816226b3950f5432bc7b10d5128501dedf896ba5ae13e70583bf8aca608deed0d8", 0x80}, {&(0x7f0000003880)="d030cfaa625ed7250732247289ac81019b6152b10c350d6ab6957eab8f5cc570b955b5a0796d2fda7cf9c52633966a00f46eb50dbf93e06c", 0x38}], 0x2, &(0x7f0000003900)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x10}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@cipso={0x86, 0x39, 0xffffffffffffffff, [{0x5, 0x4, "1384"}, {0x0, 0x7, "9ad2c6c02a"}, {0x6, 0xa, "04731983631a5b47"}, {0x0, 0x7, "de871f78c2"}, {0x5, 0x7, "2a781f451b"}, {0x0, 0x9, "cf26f86b507506"}, {0x1, 0x7, "0fbca0cdca"}]}]}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x8, 0xffffffffffffffff, [{0x5, 0x2}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0xc8}}, {{&(0x7f0000003a00)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000003c40)=[{&(0x7f0000003a40)="de568e98e5783003b1d8fb8b68b3bc9dcbb7b9808252def2713088715aa084b371106bce065a63ed8868fdeb830f1867049c37042faf5470499d72ef27cb636ea43ea3d712392931cd5bef0ae9a02c19b3c04a0613ad86f0ee52bb93479661fcbe3e0a383fe7319eae035ca0baf032ba67519f618a912dcca00e62425fd3fe6765c4b0ed2d52d33e60e8413296005fe4", 0x90}, {&(0x7f0000003b00)="7861f79330aa18d7f0647347fd47ca9de197fcd9491cee9d5a62e7df007d06496e527ef6323613c80b1433022568dee4c53ca5c9da3052a4ff5eebc9ddf0c3bf0f0bd5a4733e796c84bbdb4f452c8d0b6b7d0b1445a31bdec9741df1f2aa9d5d5a80e71f5dff198f12db40b030e1693a6e6d2758a89f", 0x76}, {&(0x7f0000003b80)="c78d67a92bc48962a0e999c846be4564ee69fdd1209695b63e4b0309109f89e067840d5d73509c7a74c451338c5b8f7286115c42163bd4008dd60c3c72d373a190a26e934e98ca3a09949c4fe4626a443da61b3ceec6454ce4f337f2969d65a398ca55ebc71fccf9081868d8d67f342b4b1d4f09e06f83c3d4133daece3b70b5f36b080bd21b592e98bcae98ae193df7d2106d8fbe68563c9e948dfe309f868cfe2307286ac0fd8102b7d37d5da016681e40b6623789b45b6a698bfd912d27", 0xbf}], 0x3, &(0x7f0000003c80)=[@ip_retopts={{0xc4, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x5f, [@remote, @broadcast, @multicast2]}, @generic={0x89, 0xf, "222a661c4362abf54e6342fbc8"}, @noop, @end, @timestamp={0x44, 0x1c, 0x74, 0x0, 0xb, [0x3, 0x8, 0xff, 0x9, 0x100, 0xfffffff4]}, @timestamp_addr={0x44, 0x34, 0x9b, 0x1, 0x6, [{@private=0xa010100, 0x8}, {@private=0xa010101, 0xec}, {@broadcast}, {@local, 0x6}, {@empty, 0x7f}, {@remote, 0x8001}]}, @cipso={0x86, 0x2a, 0x2, [{0x2, 0x6, "9ec3e5a9"}, {0x2, 0x5, "c6fc32"}, {0x2, 0x8, "d46ab83b6385"}, {0x5, 0xe, "83874c402a978156d9ad4976"}, {0x2, 0x3, "9d"}]}, @ssrr={0x89, 0x17, 0xb6, [@multicast1, @remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0xf8}}], 0x9, 0x4180) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007fff0001050004000100000008000a00", @ANYRES32=r10], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.305632493s ago: executing program 2 (id=1786): socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000be820502d28ea068301da7ecd38b485a6ee14061a5e3c56726cfa398005f0c227db465ceb64a5e9e5a353091894efcb102d92ed5d4ea6e9882b8f40c2cfd9d3e9359293c9752ee2ec597d99f0b69cfd4e4c925ad5c05179a12c31f34009a0569789a5be3ac03f35ac31fb67dc7a5695bb3014022ba92d2dd2dd9473c9f2de3f6280f5e99a7fabf33e30ad52ea44e25ecf8e86b6be5f76bd5a6b3f8b676a3194bbd4f073b15bf73e9c9de5a479c5daccec99266b0d0c20bec37896d7e795f8d550982", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18050000080400000000000003000002180100002020703e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000bbf5ffff850000000600000085000000d000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.202601437s ago: executing program 3 (id=1787): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x100}}, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x24060400) r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYBLOB="a00000002100010000000000feffffff7f00000100000000000000000000000000000000000000000000000000000001fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc020400000000000000000000000000ffffffff00000000000000000000000000000000000000000000ffffffffffffffffffff0000000000000000000000006c0150030000000000000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 1.121955005s ago: executing program 0 (id=1788): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x5}}]}, 0x38}}, 0x4890) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x80000001, 0x7, 0x8005, 0x5, 0xfff7fdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 958.972508ms ago: executing program 1 (id=1790): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000100000000a"], 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) 806.058538ms ago: executing program 1 (id=1791): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x24, 0x9}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}, {0x95, 0x0, 0x0, 0xb00}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 739.696267ms ago: executing program 1 (id=1792): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 650.366294ms ago: executing program 1 (id=1793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="f0010084ff010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001004e240000060002004e240000140005000000000000000000000000000000000108000200e0000002140004000000000000000000000000000000000014000400fc00000000000000000000000000000114000400fe80000000000000000000000000002308000200ac1414bb08000100e00000022c0010800800034000000000080003400000dba30800034000000101080001400000000408000140000002004c000f80", @ANYRESHEX=r0], 0x1f0}, 0x1, 0x0, 0x0, 0x2000c004}, 0x0) 526.278545ms ago: executing program 1 (id=1794): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000100000000a0020"], 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000304000000e00000020000000000000000000000000000000000000000000000000000000000000000100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) 516.776004ms ago: executing program 3 (id=1795): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000010385000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bfa00000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 427.729527ms ago: executing program 3 (id=1796): r0 = socket$packet(0x11, 0x3, 0x300) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0xde, &(0x7f00000008c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0xc3, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x30, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000020000000000000004000000951b286eedc77aa22cb0f3bd460a338aff2c9ed431239e101647dd3c83fff74bdba2a5fa29a9ba8a2bbaea693e82c28a64481be2beceed920c49fd5a5eb891cb23fb43ac73f78dcd9651d75a96ba782b85caa013db0b6f14bb17913f3f556f0d7678ffc7618175d975f778f01cb05b19206f0923a82735993217f16823f10e24a4d2e2879e05a9bccabc34ff8837626b094e88f893823037f942de"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="050300000000000000000a00000008000300", @ANYRES32], 0x1c}}, 0x0) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)) (async) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYRES16=r2, @ANYRESHEX=r0, @ANYBLOB="f532fd1c8cf545ec4da63fa110cf148adff048ffddeb72fb39abb7ecc49bc5c245a63afd85707ac5e5d6e44429305615171c13f366d968f516b84643f88b00007136b116a809199bdcd31498ba988148dcbbd427a470bff0ca641e9400c7023df58f9bd871d931282111257875d30aae69740fcf790f94f7fc63c7560b32e0bcff57f5ad1b2f6240e4132d71a0e49af948"], 0x24}, 0x1, 0x0, 0x0, 0x2004a0b0}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1_to_batadv\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x88, 0x0, 0xffb, 0x7, 0xb6b, 0x10000000, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0x3, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x1, 0x100000, 0x2, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0x7, 0x40, 0x2, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x2, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x10001, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x8, 0x80180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x40000000, 0x800, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xffffffff, 0x84, 0x100, 0xffffffff, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffc, 0x43, 0x2, 0x5, 0x8, 0x1, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1f8, 0x1ff, 0xffffffff]}}) 382.47766ms ago: executing program 1 (id=1797): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x5, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0x4, 0x10000, 0xffffffffffffffff, 0x3, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7f8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001180)={{r7}, &(0x7f00000010c0), &(0x7f00000002c0)=r6}, 0x20) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r4) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x0, 0x210, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff], 'ip6gre0\x00', 'veth0_macvtap\x00', {}, {}, 0x0, 0x9, 0x7, 0x29}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0xffff, 0x3], 0xffffffff, 0x21, 0x2}}, @common=@eui64={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x128}}, {{@ipv6={@local, @mcast2, [0xff000000, 0xff, 0xffffff00], [0xff000000, 0x0, 0xff, 0xffffff00], 'wg1\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x4a, 0x5, 0x38}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x8, "0253176656f9e5c8378ca8c05c224f6b4ee6289a5895a32a6389c1ad0604"}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x25}, [0xff, 0xffffff00, 0xffffffff, 0xff], [0xffffffff, 0xff, 0x0, 0xffffff00], 'lo\x00', 'wlan0\x00', {}, {0xff}, 0x0, 0x5, 0x1, 0x8}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x3c}, 'bridge0\x00', {0xa9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f00000005c0)={0x4, {{0xa, 0x4e22, 0x9, @mcast2, 0xaa5}}, {{0xa, 0x4e24, 0xfffffff7, @remote, 0x2}}}, 0x108) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x5, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0x4, 0x10000, 0xffffffffffffffff, 0x3, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7f8}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001180)={{r7}, &(0x7f00000010c0), &(0x7f00000002c0)=r6}, 0x20) (async) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r4) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x0, 0x210, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff], 'ip6gre0\x00', 'veth0_macvtap\x00', {}, {}, 0x0, 0x9, 0x7, 0x29}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0xffff, 0x3], 0xffffffff, 0x21, 0x2}}, @common=@eui64={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x128}}, {{@ipv6={@local, @mcast2, [0xff000000, 0xff, 0xffffff00], [0xff000000, 0x0, 0xff, 0xffffff00], 'wg1\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x4a, 0x5, 0x38}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x8, "0253176656f9e5c8378ca8c05c224f6b4ee6289a5895a32a6389c1ad0604"}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x25}, [0xff, 0xffffff00, 0xffffffff, 0xff], [0xffffffff, 0xff, 0x0, 0xffffff00], 'lo\x00', 'wlan0\x00', {}, {0xff}, 0x0, 0x5, 0x1, 0x8}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x3c}, 'bridge0\x00', {0xa9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) (async) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f00000005c0)={0x4, {{0xa, 0x4e22, 0x9, @mcast2, 0xaa5}}, {{0xa, 0x4e24, 0xfffffff7, @remote, 0x2}}}, 0x108) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 295.846762ms ago: executing program 4 (id=1798): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000f30000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005e000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 208.486056ms ago: executing program 2 (id=1799): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r5, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) 110.766205ms ago: executing program 3 (id=1800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r2, 0x0) mmap(&(0x7f00000a3000/0x4000)=nil, 0x4000, 0x100000a, 0x13, r1, 0xdf08e000) mmap(&(0x7f0000492000/0xf000)=nil, 0xf000, 0x1000002, 0x12, r1, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r3, 0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r5], 0x20, 0x6044}, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=1801): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000580), &(0x7f00000005c0)=0x4) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) (async, rerun: 64) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b8000000a008fee0000080009000000000008000a00afc3000008000a000000000008000a0000000000080009003b3ef51608000a000000000008000a000000000008000a000000000008000a000000000004000b801c000b80080009000000000008000a"], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) r5 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x800) (async, rerun: 64) r6 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0) (async, rerun: 64) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x628, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007910480000000000630a1719000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) (async, rerun: 64) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r10, 0x701, 0x70bd2c, 0x25dfdc00, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async, rerun: 64) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r9) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x1, 0xb, 0x9, 0x17, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x0, 0xffff888101827518}, 0x1, 0x8, 0xffffffff, 0xffff78b6}}) (async, rerun: 64) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000080)) (rerun: 64) socket$inet6(0xa, 0x1, 0x4) (async) r12 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r12, &(0x7f0000000040)={0xa, 0x4e1d, 0x4, @mcast1, 0x6}, 0x1c) (async) setsockopt$inet6_udp_int(r12, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r12, 0x0, 0x0, 0x400ad80, &(0x7f0000000140)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) (async) sendmmsg$inet6(r12, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1800f2bc1f00010002000000000000000700a600252ffe00"], 0x18}], 0x1, 0x0, 0x0, 0x24000080}, 0x24004004) kernel console output (not intermixed with test programs): [ T6173] netlink: 'syz.2.123': attribute type 3 has an invalid length. [ 98.125842][ T6190] §: renamed from sit0 (while UP) [ 98.172443][ T6189] netlink: 'syz.4.129': attribute type 4 has an invalid length. [ 98.324002][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'. [ 98.483097][ T6212] netlink: 2 bytes leftover after parsing attributes in process `syz.0.136'. [ 98.489177][ T6195] syzkaller0: entered promiscuous mode [ 98.489199][ T6195] syzkaller0: entered allmulticast mode [ 99.199881][ T6246] netlink: 64 bytes leftover after parsing attributes in process `syz.3.142'. [ 99.542277][ T6259] netlink: 2 bytes leftover after parsing attributes in process `syz.0.150'. [ 100.523127][ T6240] syzkaller1: entered promiscuous mode [ 100.523183][ T6240] syzkaller1: entered allmulticast mode [ 101.015602][ T6283] netlink: 72 bytes leftover after parsing attributes in process `syz.1.154'. [ 101.173866][ T6285] ip6t_hbh: too many supported opts specified [ 101.182602][ T6288] ip6t_hbh: too many supported opts specified [ 101.618032][ T6291] netlink: 'syz.0.160': attribute type 1 has an invalid length. [ 102.227010][ T6305] xt_CT: No such helper "snmp_trap" [ 102.330156][ T6305] __nla_validate_parse: 2 callbacks suppressed [ 102.330218][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'. [ 102.330242][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'. [ 102.361725][ T6305] bridge0: port 3(erspan0) entered blocking state [ 102.361864][ T6305] bridge0: port 3(erspan0) entered disabled state [ 102.362039][ T6305] erspan0: entered allmulticast mode [ 102.374354][ T6305] erspan0: entered promiscuous mode [ 102.374972][ T6305] bridge0: port 3(erspan0) entered blocking state [ 102.375071][ T6305] bridge0: port 3(erspan0) entered forwarding state [ 102.823303][ T6338] netlink: 2 bytes leftover after parsing attributes in process `syz.0.173'. [ 102.915485][ T6346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.176'. [ 103.887906][ T5277] veth0_macvtap: left promiscuous mode [ 104.579698][ T6406] tipc: Enabled bearer , priority 10 [ 104.696152][ T6412] ip_tables: iptables: counters copy to user failed while replacing table [ 105.734915][ T6442] netlink: 36 bytes leftover after parsing attributes in process `syz.4.199'. [ 105.770074][ T6157] tipc: Node number set to 1852044639 [ 106.175088][ T6458] netlink: 40 bytes leftover after parsing attributes in process `syz.4.203'. [ 106.325526][ T6464] netlink: zone id is out of range [ 106.325574][ T6464] netlink: zone id is out of range [ 106.325600][ T6464] netlink: zone id is out of range [ 106.325609][ T6464] netlink: zone id is out of range [ 106.325616][ T6464] netlink: zone id is out of range [ 106.325622][ T6464] netlink: zone id is out of range [ 106.325797][ T6464] netlink: zone id is out of range [ 106.325807][ T6464] netlink: zone id is out of range [ 106.325815][ T6464] netlink: zone id is out of range [ 106.371156][ T6459] warning: `syz.3.202' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.417560][ T6466] netlink: 2 bytes leftover after parsing attributes in process `syz.4.205'. [ 106.818079][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 106.906776][ T6476] netlink: 32 bytes leftover after parsing attributes in process `syz.3.209'. [ 106.984337][ T6484] netlink: 104 bytes leftover after parsing attributes in process `syz.3.209'. [ 107.498127][ T6503] netlink: 104 bytes leftover after parsing attributes in process `syz.2.220'. [ 108.068652][ T6533] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 108.092787][ T6536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.231'. [ 108.150084][ T6543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.233'. [ 108.220317][ T6539] netlink: 244 bytes leftover after parsing attributes in process `syz.1.232'. [ 108.272540][ T6547] netlink: 32 bytes leftover after parsing attributes in process `syz.0.233'. [ 108.273034][ T6539] netlink: 'syz.1.232': attribute type 1 has an invalid length. [ 108.305315][ T6550] netlink: 'syz.2.234': attribute type 11 has an invalid length. [ 108.320337][ T6539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.355938][ T6539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.369011][ T6539] bond1: (slave bond0): making interface the new active one [ 108.379153][ T6539] bond1: (slave bond0): Enslaving as an active interface with an up link [ 108.429329][ T6550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.439045][ T6550] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.453254][ T6550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.514938][ T6557] netlink: 104 bytes leftover after parsing attributes in process `syz.0.236'. [ 108.733281][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.741097][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.749609][ T6550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.749634][ T6550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.759056][ T6550] veth1_vlan: left promiscuous mode [ 108.760378][ T6550] veth0_vlan: left promiscuous mode [ 108.762538][ T6550] veth0_vlan: entered promiscuous mode [ 108.765166][ T6550] veth1_vlan: entered promiscuous mode [ 108.779333][ T6550] veth1_macvtap: left promiscuous mode [ 108.780710][ T6550] veth0_macvtap: left promiscuous mode [ 108.781965][ T6550] veth0_macvtap: entered promiscuous mode [ 108.783432][ T6550] veth1_macvtap: entered promiscuous mode [ 108.792114][ T6550] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.793390][ T6550] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.795130][ T6550] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.803888][ T6550] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.817681][ T6563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.239'. [ 108.846769][ T6550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.865629][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.865781][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.877572][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.877674][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.074130][ T6563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.181306][ T6564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.190961][ T6564] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 109.191520][ T6563] netlink: 104 bytes leftover after parsing attributes in process `syz.0.239'. [ 109.191960][ T6564] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 109.476318][ T6565] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 109.482414][ T6565] bond1: (slave wlan1): Enslaving as an active interface with an up link [ 109.496606][ T1174] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.496659][ T1174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.577524][ T1029] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.577571][ T1029] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.657360][ T6591] netlink: 104 bytes leftover after parsing attributes in process `syz.2.250'. [ 109.678093][ T37] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.688009][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.773068][ T1029] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.773134][ T1029] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.800399][ T6595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.251'. [ 109.809991][ T6595] netlink: 'syz.2.251': attribute type 7 has an invalid length. [ 109.821487][ T6595] netlink: 'syz.2.251': attribute type 8 has an invalid length. [ 109.830980][ T6595] netlink: 'syz.2.251': attribute type 1 has an invalid length. [ 110.111480][ T6604] veth0_virt_wifi: entered promiscuous mode [ 110.130749][ T6604] veth0_virt_wifi: left promiscuous mode [ 110.304589][ T6601] netlink: 'syz.3.254': attribute type 3 has an invalid length. [ 110.900052][ T6633] netlink: 'syz.1.265': attribute type 4 has an invalid length. [ 111.566061][ T6647] netlink: 'syz.0.271': attribute type 1 has an invalid length. [ 111.619254][ T6647] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.669012][ T6654] veth0_virt_wifi: entered promiscuous mode [ 111.672919][ T6654] veth0_virt_wifi: left promiscuous mode [ 113.035507][ T6682] __nla_validate_parse: 8 callbacks suppressed [ 113.035565][ T6682] netlink: 124 bytes leftover after parsing attributes in process `syz.2.284'. [ 113.093644][ T6688] netlink: 'syz.0.285': attribute type 2 has an invalid length. [ 113.199485][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'. [ 113.883352][ T6712] netlink: 40 bytes leftover after parsing attributes in process `syz.4.292'. [ 114.136299][ T6731] nbd: must specify a size in bytes for the device [ 114.248745][ T6739] net_ratelimit: 497 callbacks suppressed [ 114.254999][ T6739] openvswitch: netlink: ufid size 253 bytes exceeds the range (1, 16) [ 114.263830][ T6739] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 114.275604][ T6731] netlink: 'syz.1.296': attribute type 1 has an invalid length. [ 114.455709][ T6731] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.609137][ T6744] bond2: (slave veth3): Enslaving as an active interface with a down link [ 114.987726][ T6770] syzkaller0: entered promiscuous mode [ 114.987768][ T6770] syzkaller0: entered allmulticast mode [ 115.010639][ T6770] tipc: Enabled bearer , priority 0 [ 115.017411][ T6776] netlink: 'syz.2.315': attribute type 11 has an invalid length. [ 115.032719][ T6774] netlink: 'syz.0.308': attribute type 11 has an invalid length. [ 115.099880][ T6770] tipc: Resetting bearer [ 115.191213][ T6786] netlink: 224 bytes leftover after parsing attributes in process `syz.3.316'. [ 115.214946][ T6766] tipc: Resetting bearer [ 115.245085][ T6766] tipc: Disabling bearer [ 115.626661][ T6800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.318'. [ 115.648346][ T6800] netlink: 10 bytes leftover after parsing attributes in process `syz.1.318'. [ 115.801974][ T6807] netlink: 76 bytes leftover after parsing attributes in process `syz.0.320'. [ 115.862673][ T6807] netlink: 76 bytes leftover after parsing attributes in process `syz.0.320'. [ 115.895665][ T6807] netlink: 76 bytes leftover after parsing attributes in process `syz.0.320'. [ 115.905382][ T6807] netlink: 76 bytes leftover after parsing attributes in process `syz.0.320'. [ 116.199565][ T6833] netlink: 'syz.4.323': attribute type 1 has an invalid length. [ 116.703212][ T6849] veth0_virt_wifi: entered promiscuous mode [ 116.741923][ T6849] veth0_virt_wifi: left promiscuous mode [ 117.399914][ T6882] netlink: 'syz.4.339': attribute type 1 has an invalid length. [ 117.949607][ T6877] syz.3.338 (6877) used greatest stack depth: 18088 bytes left [ 118.550283][ T6915] pimreg: entered allmulticast mode [ 118.572842][ T6915] pimreg: left allmulticast mode [ 118.681752][ T6915] netlink: Unknown nat attribute (0) [ 118.681814][ T6915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.167516][ T6938] __nla_validate_parse: 36 callbacks suppressed [ 119.174186][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.353'. [ 119.228198][ T6943] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 119.272384][ T6938] team0: Port device team_slave_0 removed [ 119.402634][ T6943] xt_CT: No such helper "netbios-ns" [ 119.431669][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 120.770416][ T6992] veth0_virt_wifi: entered promiscuous mode [ 120.782497][ T6992] veth0_virt_wifi: left promiscuous mode [ 121.191157][ T7003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.379'. [ 121.829652][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'. [ 121.857977][ T7028] ip6gre1: entered promiscuous mode [ 121.863397][ T7028] ip6gre1: entered allmulticast mode [ 121.871984][ T6217] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.872241][ T6217] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.920572][ T5616] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.920785][ T5616] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.207743][ T5616] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.250080][ T7046] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 122.250134][ T7046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.273649][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 122.515735][ T7056] netlink: 104 bytes leftover after parsing attributes in process `syz.3.399'. [ 122.731067][ T7062] netlink: 'syz.1.405': attribute type 5 has an invalid length. [ 122.752839][ T7062] Cannot find add_set index 0 as target [ 122.831498][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'. [ 123.157432][ T7079] vcan0: tx drop: invalid sa for name 0x0000004000000000 [ 123.178578][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.412'. [ 123.178653][ T7079] netlink: 'syz.1.412': attribute type 30 has an invalid length. [ 123.217829][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.412'. [ 123.217880][ T7079] netlink: 'syz.1.412': attribute type 30 has an invalid length. [ 123.240373][ T6217] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.240601][ T6217] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.240657][ T6217] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.240698][ T6217] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.271101][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'. [ 123.902564][ T7113] lo speed is unknown, defaulting to 1000 [ 123.910940][ T7113] lo speed is unknown, defaulting to 1000 [ 123.972174][ T7113] lo speed is unknown, defaulting to 1000 [ 124.000003][ T7113] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 124.000073][ T7113] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 124.000116][ T7113] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 124.039224][ T7113] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 124.199489][ T7113] lo speed is unknown, defaulting to 1000 [ 124.298311][ T7113] lo speed is unknown, defaulting to 1000 [ 124.322447][ T7128] ip_tables: iptables: counters copy to user failed while replacing table [ 124.324895][ T7113] lo speed is unknown, defaulting to 1000 [ 124.348155][ T7113] lo speed is unknown, defaulting to 1000 [ 124.371559][ T7113] lo speed is unknown, defaulting to 1000 [ 124.414649][ T7132] __nla_validate_parse: 3 callbacks suppressed [ 124.414709][ T7132] netlink: 24 bytes leftover after parsing attributes in process `syz.4.429'. [ 124.739872][ T7138] xt_REDIRECT: bad MAP_IPS. [ 125.576040][ T7166] netlink: 56 bytes leftover after parsing attributes in process `syz.0.441'. [ 125.597651][ T7171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.444'. [ 125.839031][ T7180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.446'. [ 125.876617][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.169968][ T7192] team0: Port device vlan2 added [ 126.342637][ T7197] netlink: 16 bytes leftover after parsing attributes in process `syz.1.453'. [ 126.396916][ T7197] netlink: 'syz.1.453': attribute type 13 has an invalid length. [ 126.396963][ T7197] netlink: 'syz.1.453': attribute type 58 has an invalid length. [ 126.396996][ T7197] netlink: 152 bytes leftover after parsing attributes in process `syz.1.453'. [ 126.590723][ T7202] openvswitch: netlink: IP tunnel dst address not specified [ 127.014365][ T7215] syz.1.461: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 127.036300][ T7215] CPU: 0 UID: 0 PID: 7215 Comm: syz.1.461 Not tainted syzkaller #0 PREEMPT(full) [ 127.036328][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.036341][ T7215] Call Trace: [ 127.036350][ T7215] [ 127.036359][ T7215] dump_stack_lvl+0xe8/0x150 [ 127.036400][ T7215] warn_alloc+0x24d/0x270 [ 127.036435][ T7215] ? kasan_save_track+0x4f/0x80 [ 127.036456][ T7215] ? kasan_save_track+0x3e/0x80 [ 127.036480][ T7215] ? __pfx_warn_alloc+0x10/0x10 [ 127.036509][ T7215] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 127.036531][ T7215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.036575][ T7215] __vmalloc_node_range_noprof+0x127/0x1540 [ 127.036631][ T7215] ? rcu_is_watching+0x16/0xb0 [ 127.036662][ T7215] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 127.036691][ T7215] ? __kmalloc_cache_noprof+0x321/0x600 [ 127.036733][ T7215] ? __kmalloc_cache_noprof+0x14d/0x600 [ 127.036765][ T7215] ? xskq_create+0x56/0x220 [ 127.036799][ T7215] xskq_create+0x148/0x220 [ 127.036828][ T7215] ? xsk_init_queue+0x8a/0xe0 [ 127.036858][ T7215] xsk_init_queue+0x8a/0xe0 [ 127.036887][ T7215] xsk_setsockopt+0x5e0/0x960 [ 127.036918][ T7215] ? __pfx_xsk_setsockopt+0x10/0x10 [ 127.036945][ T7215] ? __pfx_aa_sk_perm+0x10/0x10 [ 127.036972][ T7215] ? aa_sock_opt_perm+0x142/0x1e0 [ 127.037000][ T7215] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 127.037026][ T7215] ? __pfx_xsk_setsockopt+0x10/0x10 [ 127.037055][ T7215] do_sock_setsockopt+0x17c/0x1b0 [ 127.037083][ T7215] __x64_sys_setsockopt+0x13d/0x1b0 [ 127.037112][ T7215] do_syscall_64+0x166/0x520 [ 127.037141][ T7215] ? trace_irq_disable+0x3b/0x140 [ 127.037162][ T7215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.037184][ T7215] ? clear_bhb_loop+0x70/0xc0 [ 127.037211][ T7215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.037231][ T7215] RIP: 0033:0x7eff7579e159 [ 127.037252][ T7215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.037270][ T7215] RSP: 002b:00007eff7663d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 127.037294][ T7215] RAX: ffffffffffffffda RBX: 00007eff75a25fa0 RCX: 00007eff7579e159 [ 127.037309][ T7215] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000006 [ 127.037321][ T7215] RBP: 00007eff75835024 R08: 0000000000000004 R09: 0000000000000000 [ 127.037334][ T7215] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.037347][ T7215] R13: 00007eff75a26038 R14: 00007eff75a25fa0 R15: 00007ffed9374fe8 [ 127.037381][ T7215] [ 127.132575][ T7215] Mem-Info: [ 127.132592][ T7215] active_anon:8594 inactive_anon:0 isolated_anon:0 [ 127.132592][ T7215] active_file:0 inactive_file:43119 isolated_file:0 [ 127.132592][ T7215] unevictable:0 dirty:375 writeback:0 [ 127.132592][ T7215] slab_reclaimable:10210 slab_unreclaimable:95966 [ 127.132592][ T7215] mapped:31302 shmem:1422 pagetables:1226 [ 127.132592][ T7215] sec_pagetables:0 bounce:0 [ 127.132592][ T7215] kernel_misc_reclaimable:0 [ 127.132592][ T7215] free:1312042 free_pcp:10135 free_cma:0 [ 127.132644][ T7215] Node 0 active_anon:34376kB inactive_anon:0kB active_file:0kB inactive_file:172272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125208kB dirty:1496kB writeback:0kB shmem:5688kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13380kB pagetables:4740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 127.132696][ T7215] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 127.132743][ T7215] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.132798][ T7215] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 127.132835][ T7215] Node 0 DMA32 free:1293564kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:34376kB inactive_anon:0kB active_file:0kB inactive_file:172272kB unevictable:0kB writepending:1496kB zspages:0kB present:3129332kB managed:2546708kB mlocked:0kB bounce:0kB free_pcp:40540kB local_pcp:20424kB free_cma:0kB [ 127.132889][ T7215] lowmem_reserve[]: 0 0 0 0 0 [ 127.132922][ T7215] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.132971][ T7215] lowmem_reserve[]: 0 0 0 0 0 [ 127.133004][ T7215] Node 1 Normal free:3939244kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.133056][ T7215] lowmem_reserve[]: 0 0 0 0 0 [ 127.133089][ T7215] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 127.133246][ T7215] Node 0 DMA32: 11*4kB (UE) 16*8kB (UME) 344*16kB (UME) 370*32kB (UE) 166*64kB (UME) 59*128kB (UM) 15*256kB (ME) 9*512kB (UM) 6*1024kB (M) 5*2048kB (UME) 301*4096kB (UM) = 1293420kB [ 127.149988][ T7215] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 127.150088][ T7215] Node 1 Normal: 9*4kB (UM) 3*8kB (UM) 7*16kB (UM) 4*32kB (UM) 6*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3939244kB [ 127.150255][ T7215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.150270][ T7215] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.150285][ T7215] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.150300][ T7215] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.150340][ T7215] 44587 total pagecache pages [ 127.150348][ T7215] 0 pages in swap cache [ 127.150355][ T7215] Free swap = 124996kB [ 127.150362][ T7215] Total swap = 124996kB [ 127.150370][ T7215] 2097051 pages RAM [ 127.150377][ T7215] 0 pages HighMem/MovableOnly [ 127.150384][ T7215] 428758 pages reserved [ 127.150391][ T7215] 0 pages cma reserved [ 128.147395][ T7232] bridge0: port 3(erspan0) entered disabled state [ 128.147600][ T7232] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.148334][ T7232] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.154660][ T7232] bridge0: entered allmulticast mode [ 128.205771][ T7235] sctp: [Deprecated]: syz.2.468 (pid 7235) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.205771][ T7235] Use struct sctp_sack_info instead [ 128.223035][ T7235] netlink: 20 bytes leftover after parsing attributes in process `syz.2.468'. [ 128.460379][ T7241] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 128.594441][ T7245] netlink: 220 bytes leftover after parsing attributes in process `syz.2.471'. [ 128.594489][ T7245] tc_dump_action: action bad kind [ 129.001396][ T7254] netlink: Failed to add helper -22 [ 129.001478][ T7254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.220276][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.476'. [ 129.403327][ T7261] netlink: 40 bytes leftover after parsing attributes in process `syz.4.477'. [ 129.428429][ T7267] netlink: 64 bytes leftover after parsing attributes in process `syz.2.478'. [ 130.480462][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.491'. [ 130.506809][ T7304] syzkaller0: entered promiscuous mode [ 130.512729][ T7304] syzkaller0: entered allmulticast mode [ 131.227142][ T7342] IPVS: set_ctl: invalid protocol: 59 172.30.1.3:20002 [ 131.390130][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'. [ 131.399789][ T7348] netlink: 32 bytes leftover after parsing attributes in process `syz.2.501'. [ 131.413962][ T7349] xt_socket: unknown flags 0x4c [ 132.441330][ T7346] netlink: 'syz.4.500': attribute type 2 has an invalid length. [ 132.832526][ T7360] netlink: 'syz.1.504': attribute type 1 has an invalid length. [ 132.842859][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.870632][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.506'. [ 132.870838][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.506'. [ 132.870855][ T7370] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 132.916374][ T7365] xt_connbytes: Forcing CT accounting to be enabled [ 133.072668][ T7366] tipc: Started in network mode [ 133.072727][ T7366] tipc: Node identity 72d1e57ba37d, cluster identity 4711 [ 133.072933][ T7366] tipc: Enabled bearer , priority 1 [ 133.302499][ T7366] netlink: 23 bytes leftover after parsing attributes in process `syz.2.507'. [ 133.338015][ T7386] netlink: 20 bytes leftover after parsing attributes in process `syz.4.512'. [ 133.347360][ T7386] nbd: socks must be embedded in a SOCK_ITEM attr [ 133.404116][ T7364] tipc: Resetting bearer [ 133.441473][ T7364] tipc: Disabling bearer [ 133.738187][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.519'. [ 134.116588][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.270293][ T7430] netlink: 60 bytes leftover after parsing attributes in process `syz.1.526'. [ 134.311162][ T7419] lo speed is unknown, defaulting to 1000 [ 134.490391][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'. [ 134.500596][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'. [ 134.509809][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'. [ 134.520499][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'. [ 134.604806][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'. [ 134.604843][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'. [ 134.640543][ T7443] veth0_virt_wifi: entered promiscuous mode [ 134.642679][ T7443] veth0_virt_wifi: left promiscuous mode [ 134.661583][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'. [ 134.661629][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'. [ 134.841166][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.525'. [ 134.850311][ T7429] netlink: 24 bytes leftover after parsing attributes in process `syz.4.525'. [ 135.548783][ T7475] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 135.676240][ T7472] netlink: 'syz.0.540': attribute type 13 has an invalid length. [ 135.676296][ T7472] netlink: 'syz.0.540': attribute type 58 has an invalid length. [ 136.609124][ T7518] netlink: 'syz.2.559': attribute type 11 has an invalid length. [ 137.019597][ T5618] Bluetooth: hci4: link tx timeout [ 137.019724][ T5618] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.039119][ T5618] Bluetooth: hci4: link tx timeout [ 137.039153][ T5618] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.052949][ T5618] Bluetooth: hci4: link tx timeout [ 137.052983][ T5618] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.066931][ T5618] Bluetooth: hci4: link tx timeout [ 137.066966][ T5618] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.081913][ T5618] Bluetooth: hci4: link tx timeout [ 137.087341][ T7533] FAULT_INJECTION: forcing a failure. [ 137.087341][ T7533] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 137.087372][ T7533] CPU: 0 UID: 0 PID: 7533 Comm: syz.3.564 Not tainted syzkaller #0 PREEMPT(full) [ 137.087392][ T7533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.087402][ T7533] Call Trace: [ 137.087409][ T7533] [ 137.087417][ T7533] dump_stack_lvl+0xe8/0x150 [ 137.087448][ T7533] should_fail_ex+0x410/0x560 [ 137.087481][ T7533] prepare_alloc_pages+0x223/0x600 [ 137.087508][ T7533] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 137.087534][ T7533] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 137.087553][ T7533] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 137.087575][ T7533] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 137.087598][ T7533] ? __pfx_policy_nodemask+0x10/0x10 [ 137.087620][ T7533] ? __get_vm_area_node+0x155/0x2f0 [ 137.087640][ T7533] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 137.087661][ T7533] ? __vmalloc_noprof+0xd2/0x120 [ 137.087685][ T7533] __alloc_pages_noprof+0x10/0x100 [ 137.087704][ T7533] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 137.087728][ T7533] ? alloc_pages_noprof+0x140/0x2b0 [ 137.087751][ T7533] __kasan_populate_vmalloc+0xb7/0x1c0 [ 137.087782][ T7533] alloc_vmap_area+0xd1a/0x1420 [ 137.087817][ T7533] ? __pfx_alloc_vmap_area+0x10/0x10 [ 137.087836][ T7533] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 137.087862][ T7533] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 137.087887][ T7533] ? __get_vm_area_node+0x155/0x2f0 [ 137.087913][ T7533] __get_vm_area_node+0x200/0x2f0 [ 137.087942][ T7533] __vmalloc_node_range_noprof+0x343/0x1540 [ 137.087966][ T7533] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 137.087986][ T7533] ? __lock_acquire+0x6df/0x2e50 [ 137.088027][ T7533] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 137.088059][ T7533] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 137.088076][ T7533] __vmalloc_noprof+0xd2/0x120 [ 137.088099][ T7533] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 137.088121][ T7533] bpf_prog_alloc_no_stats+0x47/0x560 [ 137.088139][ T7533] ? bpf_prog_alloc+0x2a/0x1a0 [ 137.088160][ T7533] bpf_prog_alloc+0x3c/0x1a0 [ 137.088179][ T7533] bpf_prog_load+0x7f8/0x1c20 [ 137.088226][ T7533] ? __pfx_bpf_prog_load+0x10/0x10 [ 137.088270][ T7533] __sys_bpf+0xd0d/0xd90 [ 137.088296][ T7533] ? __pfx___sys_bpf+0x10/0x10 [ 137.088325][ T7533] ? __fget_files+0x2a/0x420 [ 137.088364][ T7533] ? ksys_write+0x242/0x270 [ 137.088389][ T7533] ? __pfx_ksys_write+0x10/0x10 [ 137.088417][ T7533] __x64_sys_bpf+0xba/0xd0 [ 137.088438][ T7533] do_syscall_64+0x166/0x520 [ 137.088460][ T7533] ? trace_irq_disable+0x3b/0x140 [ 137.088476][ T7533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.088494][ T7533] ? clear_bhb_loop+0x70/0xc0 [ 137.088516][ T7533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.088533][ T7533] RIP: 0033:0x7fc601f9e159 [ 137.088551][ T7533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.088566][ T7533] RSP: 002b:00007fc602dca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 137.088608][ T7533] RAX: ffffffffffffffda RBX: 00007fc602225fa0 RCX: 00007fc601f9e159 [ 137.088621][ T7533] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 137.088633][ T7533] RBP: 00007fc602dca090 R08: 0000000000000000 R09: 0000000000000000 [ 137.088644][ T7533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.088653][ T7533] R13: 00007fc602226038 R14: 00007fc602225fa0 R15: 00007ffc73cb72e8 [ 137.088681][ T7533] [ 137.088736][ T5618] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.092396][ T7533] syz.3.564: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 137.092463][ T7533] CPU: 0 UID: 0 PID: 7533 Comm: syz.3.564 Not tainted syzkaller #0 PREEMPT(full) [ 137.092483][ T7533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.092493][ T7533] Call Trace: [ 137.092500][ T7533] [ 137.092507][ T7533] dump_stack_lvl+0xe8/0x150 [ 137.092537][ T7533] warn_alloc+0x24d/0x270 [ 137.092565][ T7533] ? lockdep_hardirqs_on+0x7b/0x110 [ 137.092592][ T7533] ? __pfx_warn_alloc+0x10/0x10 [ 137.092617][ T7533] ? kfree+0x1c5/0x650 [ 137.092646][ T7533] ? __get_vm_area_node+0x219/0x2f0 [ 137.092677][ T7533] __vmalloc_node_range_noprof+0x36b/0x1540 [ 137.092702][ T7533] ? __lock_acquire+0x6df/0x2e50 [ 137.092743][ T7533] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 137.092776][ T7533] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 137.092795][ T7533] __vmalloc_noprof+0xd2/0x120 [ 137.092819][ T7533] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 137.092841][ T7533] bpf_prog_alloc_no_stats+0x47/0x560 [ 137.092859][ T7533] ? bpf_prog_alloc+0x2a/0x1a0 [ 137.092880][ T7533] bpf_prog_alloc+0x3c/0x1a0 [ 137.092902][ T7533] bpf_prog_load+0x7f8/0x1c20 [ 137.092933][ T7533] ? __pfx_bpf_prog_load+0x10/0x10 [ 137.092976][ T7533] __sys_bpf+0xd0d/0xd90 [ 137.093003][ T7533] ? __pfx___sys_bpf+0x10/0x10 [ 137.093033][ T7533] ? __fget_files+0x2a/0x420 [ 137.093071][ T7533] ? ksys_write+0x242/0x270 [ 137.093098][ T7533] ? __pfx_ksys_write+0x10/0x10 [ 137.093127][ T7533] __x64_sys_bpf+0xba/0xd0 [ 137.093148][ T7533] do_syscall_64+0x166/0x520 [ 137.093172][ T7533] ? trace_irq_disable+0x3b/0x140 [ 137.093197][ T7533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.093216][ T7533] ? clear_bhb_loop+0x70/0xc0 [ 137.093238][ T7533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.093255][ T7533] RIP: 0033:0x7fc601f9e159 [ 137.093272][ T7533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.093287][ T7533] RSP: 002b:00007fc602dca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 137.093305][ T7533] RAX: ffffffffffffffda RBX: 00007fc602225fa0 RCX: 00007fc601f9e159 [ 137.093319][ T7533] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 137.093330][ T7533] RBP: 00007fc602dca090 R08: 0000000000000000 R09: 0000000000000000 [ 137.093341][ T7533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.093352][ T7533] R13: 00007fc602226038 R14: 00007fc602225fa0 R15: 00007ffc73cb72e8 [ 137.093381][ T7533] [ 137.093388][ T7533] Mem-Info: [ 137.093396][ T7533] active_anon:6003 inactive_anon:0 isolated_anon:0 [ 137.093396][ T7533] active_file:0 inactive_file:43123 isolated_file:0 [ 137.093396][ T7533] unevictable:0 dirty:285 writeback:0 [ 137.093396][ T7533] slab_reclaimable:10276 slab_unreclaimable:95777 [ 137.093396][ T7533] mapped:29653 shmem:521 pagetables:1202 [ 137.093396][ T7533] sec_pagetables:0 bounce:0 [ 137.093396][ T7533] kernel_misc_reclaimable:0 [ 137.093396][ T7533] free:1314869 free_pcp:11073 free_cma:0 [ 137.093442][ T7533] Node 0 active_anon:24012kB inactive_anon:0kB active_file:0kB inactive_file:172288kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118612kB dirty:1140kB writeback:0kB shmem:2084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13412kB pagetables:4644kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 137.093491][ T7533] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 137.093536][ T7533] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 137.093587][ T7533] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 137.093621][ T7533] Node 0 DMA32 free:1304872kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24012kB inactive_anon:0kB active_file:0kB inactive_file:172288kB unevictable:0kB writepending:1140kB zspages:0kB present:3129332kB managed:2546708kB mlocked:0kB bounce:0kB free_pcp:44292kB local_pcp:25384kB free_cma:0kB [ 137.093674][ T7533] lowmem_reserve[]: 0 0 0 0 0 [ 137.093706][ T7533] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 137.093770][ T7533] lowmem_reserve[]: 0 0 0 0 0 [ 137.093802][ T7533] Node 1 Normal free:3939244kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 137.110677][ T7533] lowmem_reserve[]: 0 0 0 0 0 [ 137.110718][ T7533] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 137.110827][ T7533] Node 0 DMA32: 1488*4kB (UME) 585*8kB (UME) 512*16kB (UM) 447*32kB (UME) 186*64kB (UME) 45*128kB (UM) 5*256kB (ME) 9*512kB (UM) 7*1024kB (UM) 4*2048kB (UME) 301*4096kB (UM) = 1304936kB [ 137.110973][ T7533] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 137.111064][ T7533] Node 1 Normal: 9*4kB (UM) 3*8kB (UM) 7*16kB (UM) 4*32kB (UM) 6*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3939244kB [ 137.111216][ T7533] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 137.111230][ T7533] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 137.111244][ T7533] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 137.111259][ T7533] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 137.111273][ T7533] 43640 total pagecache pages [ 137.111280][ T7533] 0 pages in swap cache [ 137.111287][ T7533] Free swap = 124996kB [ 137.111293][ T7533] Total swap = 124996kB [ 137.111301][ T7533] 2097051 pages RAM [ 137.111307][ T7533] 0 pages HighMem/MovableOnly [ 137.111313][ T7533] 428758 pages reserved [ 137.111320][ T7533] 0 pages cma reserved [ 137.121611][ T5618] Bluetooth: hci4: link tx timeout [ 137.121631][ T5618] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.137418][ T5618] Bluetooth: hci4: link tx timeout [ 137.137436][ T5618] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.620743][ T7575] netlink: 'syz.3.581': attribute type 13 has an invalid length. [ 138.631352][ T7575] netlink: 'syz.3.581': attribute type 58 has an invalid length. [ 139.039917][ T7595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.079135][ T5618] Bluetooth: hci4: command 0x0406 tx timeout [ 139.194205][ T7604] FAULT_INJECTION: forcing a failure. [ 139.194205][ T7604] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 139.194256][ T7604] CPU: 1 UID: 0 PID: 7604 Comm: syz.4.593 Not tainted syzkaller #0 PREEMPT(full) [ 139.194278][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.194289][ T7604] Call Trace: [ 139.194297][ T7604] [ 139.194306][ T7604] dump_stack_lvl+0xe8/0x150 [ 139.194342][ T7604] should_fail_ex+0x410/0x560 [ 139.194374][ T7604] _copy_from_iter+0x1d3/0x1660 [ 139.194406][ T7604] ? __alloc_skb+0x27a/0x7a0 [ 139.194437][ T7604] ? __alloc_skb+0x27a/0x7a0 [ 139.194466][ T7604] ? __alloc_skb+0x27a/0x7a0 [ 139.194494][ T7604] ? __pfx__copy_from_iter+0x10/0x10 [ 139.194520][ T7604] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 139.194547][ T7604] ? __alloc_skb+0x27a/0x7a0 [ 139.194573][ T7604] ? __alloc_skb+0x27a/0x7a0 [ 139.194606][ T7604] ? netlink_sendmsg+0x650/0xb40 [ 139.194633][ T7604] ? skb_put+0x112/0x210 [ 139.194654][ T7604] netlink_sendmsg+0x6c0/0xb40 [ 139.194687][ T7604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.194718][ T7604] ? apparmor_socket_sendmsg+0x98/0x360 [ 139.194759][ T7604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.194781][ T7604] sock_sendmsg_nosec+0x13a/0x180 [ 139.194809][ T7604] __sys_sendto+0x408/0x5a0 [ 139.194827][ T7604] ? ksys_write+0x1e6/0x270 [ 139.194858][ T7604] ? __pfx___sys_sendto+0x10/0x10 [ 139.194884][ T7604] ? __mutex_unlock_slowpath+0x731/0x900 [ 139.194944][ T7604] ? __pfx_ksys_write+0x10/0x10 [ 139.194976][ T7604] __x64_sys_sendto+0xde/0x100 [ 139.194997][ T7604] do_syscall_64+0x166/0x520 [ 139.195024][ T7604] ? trace_irq_disable+0x3b/0x140 [ 139.195044][ T7604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.195064][ T7604] ? clear_bhb_loop+0x70/0xc0 [ 139.195087][ T7604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.195107][ T7604] RIP: 0033:0x7f6088b9e159 [ 139.195127][ T7604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.195144][ T7604] RSP: 002b:00007f6089a5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 139.195167][ T7604] RAX: ffffffffffffffda RBX: 00007f6088e25fa0 RCX: 00007f6088b9e159 [ 139.195182][ T7604] RDX: 0000000000000012 RSI: 0000200000000740 RDI: 000000000000000b [ 139.195195][ T7604] RBP: 00007f6089a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 139.195208][ T7604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.195220][ T7604] R13: 00007f6088e26038 R14: 00007f6088e25fa0 R15: 00007ffcacb64888 [ 139.195251][ T7604] [ 139.512417][ T7609] netlink: 'syz.2.594': attribute type 13 has an invalid length. [ 139.512476][ T7609] netlink: 'syz.2.594': attribute type 58 has an invalid length. [ 139.512509][ T7609] __nla_validate_parse: 18 callbacks suppressed [ 139.512526][ T7609] netlink: 152 bytes leftover after parsing attributes in process `syz.2.594'. [ 139.535182][ T7613] netlink: 228 bytes leftover after parsing attributes in process `syz.1.595'. [ 140.420895][ T7636] block nbd0: NBD_DISCONNECT [ 141.622018][ T7665] openvswitch: netlink: Unknown key attributes 1 [ 142.379546][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.622'. [ 142.428198][ T7676] erspan1: entered promiscuous mode [ 142.465530][ T7676] netlink: 72 bytes leftover after parsing attributes in process `syz.0.621'. [ 142.697759][ T7688] netlink: 2 bytes leftover after parsing attributes in process `syz.3.625'. [ 142.912169][ T7696] netlink: 'syz.0.626': attribute type 9 has an invalid length. [ 143.004967][ T7696] netlink: 'syz.0.626': attribute type 9 has an invalid length. [ 143.042868][ T7696] netlink: 'syz.0.626': attribute type 9 has an invalid length. [ 143.094988][ T7696] netlink: 'syz.0.626': attribute type 9 has an invalid length. [ 143.164617][ T7696] netlink: 'syz.0.626': attribute type 9 has an invalid length. [ 143.240659][ T7696] netlink: 'syz.0.626': attribute type 9 has an invalid length. [ 143.374768][ T7704] netlink: Failed to add À helper -22 [ 143.380686][ T7704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.822774][ T7725] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 143.940633][ T1029] IPVS: starting estimator thread 0... [ 144.036492][ T7730] IPVS: using max 23 ests per chain, 55200 per kthread [ 144.412242][ T7735] validate_nla: 13 callbacks suppressed [ 144.412316][ T7735] netlink: 'syz.0.636': attribute type 3 has an invalid length. [ 144.695545][ T7740] netlink: 2 bytes leftover after parsing attributes in process `syz.0.639'. [ 144.810827][ T7746] Bluetooth: ISO socket layer initialized [ 144.859176][ T7746] syzkaller1: entered promiscuous mode [ 144.859230][ T7746] syzkaller1: entered allmulticast mode [ 144.945007][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 145.092009][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 145.100279][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.640'. [ 145.216308][ T7762] bridge0: entered promiscuous mode [ 145.218955][ T7762] bridge0: entered allmulticast mode [ 145.639708][ T7777] netlink: 16 bytes leftover after parsing attributes in process `syz.4.649'. [ 146.447227][ T7795] syzkaller0: entered promiscuous mode [ 146.447276][ T7795] syzkaller0: entered allmulticast mode [ 146.589875][ T7804] FAULT_INJECTION: forcing a failure. [ 146.589875][ T7804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.603683][ T7804] CPU: 1 UID: 0 PID: 7804 Comm: syz.0.657 Not tainted syzkaller #0 PREEMPT(full) [ 146.603713][ T7804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.603725][ T7804] Call Trace: [ 146.603734][ T7804] [ 146.603743][ T7804] dump_stack_lvl+0xe8/0x150 [ 146.603779][ T7804] should_fail_ex+0x410/0x560 [ 146.603815][ T7804] _copy_from_user+0x2d/0xb0 [ 146.603839][ T7804] ___sys_sendmsg+0x1c6/0x360 [ 146.603861][ T7804] ? __lock_acquire+0x6df/0x2e50 [ 146.603887][ T7804] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.603915][ T7804] ? kstrtouint+0x6e/0xe0 [ 146.603970][ T7804] ? __fget_files+0x2a/0x420 [ 146.603995][ T7804] ? __fget_files+0x3a2/0x420 [ 146.604032][ T7804] __sys_sendmmsg+0x273/0x4d0 [ 146.604061][ T7804] ? __pfx___sys_sendmmsg+0x10/0x10 [ 146.604094][ T7804] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 146.604139][ T7804] ? ksys_write+0x242/0x270 [ 146.604170][ T7804] ? __pfx_ksys_write+0x10/0x10 [ 146.604206][ T7804] __x64_sys_sendmmsg+0xa0/0xc0 [ 146.604231][ T7804] do_syscall_64+0x166/0x520 [ 146.604260][ T7804] ? trace_irq_disable+0x3b/0x140 [ 146.604279][ T7804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.604300][ T7804] ? clear_bhb_loop+0x70/0xc0 [ 146.604326][ T7804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.604345][ T7804] RIP: 0033:0x7fe5a539e159 [ 146.604365][ T7804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.604382][ T7804] RSP: 002b:00007fe5a628e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 146.604406][ T7804] RAX: ffffffffffffffda RBX: 00007fe5a5625fa0 RCX: 00007fe5a539e159 [ 146.604421][ T7804] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 146.604434][ T7804] RBP: 00007fe5a628e090 R08: 0000000000000000 R09: 0000000000000000 [ 146.604447][ T7804] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.604460][ T7804] R13: 00007fe5a5626038 R14: 00007fe5a5625fa0 R15: 00007ffde4d6e408 [ 146.604502][ T7804] [ 147.599623][ T7834] netlink: 16 bytes leftover after parsing attributes in process `syz.2.668'. [ 147.610138][ T7834] netlink: 'syz.2.668': attribute type 13 has an invalid length. [ 147.610159][ T7834] netlink: 'syz.2.668': attribute type 58 has an invalid length. [ 147.610174][ T7834] netlink: 152 bytes leftover after parsing attributes in process `syz.2.668'. [ 147.671044][ T7839] netlink: 'syz.1.671': attribute type 178 has an invalid length. [ 147.694696][ T7839] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 148.153161][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 148.612813][ T7848] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.719653][ T7868] netlink: 140 bytes leftover after parsing attributes in process `syz.3.680'. [ 148.729649][ T7868] netlink: 56 bytes leftover after parsing attributes in process `syz.3.680'. [ 149.024402][ T7874] openvswitch: netlink: Duplicate key (type 0). [ 149.035851][ T7848] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.051725][ T7872] can: request_module (can-proto-4) failed. [ 149.910799][ T7848] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.018649][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.689'. [ 150.102124][ T7848] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.436536][ T1174] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.586938][ T1174] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.596849][ T1174] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.605261][ T1174] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.756612][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.772748][ T7918] netlink: 'syz.3.695': attribute type 1 has an invalid length. [ 150.924365][ T7926] openvswitch: netlink: IP tunnel dst address not specified [ 151.477582][ T7948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.707'. [ 152.225597][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.715'. [ 152.299065][ T7970] netlink: 52 bytes leftover after parsing attributes in process `syz.2.716'. [ 152.323112][ T7966] bond7: option lacp_active: invalid value (7) [ 152.337877][ T7966] bond7 (unregistering): Released all slaves [ 152.607635][ T7981] batman_adv: batadv0: Adding interface: macvtap1 [ 152.607687][ T7981] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.607743][ T7981] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 152.854411][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'. [ 152.854466][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 152.855928][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'. [ 152.855944][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 152.856232][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'. [ 152.856246][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 153.085431][ T8002] netlink: 'syz.3.725': attribute type 10 has an invalid length. [ 153.111994][ T8002] team0 (unregistering): Port device team_slave_0 removed [ 153.131254][ T8002] team0 (unregistering): Port device team_slave_1 removed [ 153.486314][ T8019] bond6: option lacp_active: invalid value (10) [ 153.495224][ T8019] bond6 (unregistering): Released all slaves [ 154.534482][ T8041] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.604838][ T8045] netlink: 'syz.3.737': attribute type 2 has an invalid length. [ 154.810440][ T8059] lo speed is unknown, defaulting to 1000 [ 155.517667][ T8088] __nla_validate_parse: 132 callbacks suppressed [ 155.518013][ T8088] netlink: 16 bytes leftover after parsing attributes in process `syz.4.747'. [ 155.628527][ T8089] netlink: 'syz.4.747': attribute type 13 has an invalid length. [ 155.639158][ T8089] netlink: 'syz.4.747': attribute type 58 has an invalid length. [ 155.647221][ T8089] netlink: 152 bytes leftover after parsing attributes in process `syz.4.747'. [ 156.080204][ T5277] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 156.302229][ T8110] netlink: 'syz.4.756': attribute type 39 has an invalid length. [ 156.498783][ T8119] Illegal XDP return value 4294967262 on prog (id 224) dev syz_tun, expect packet loss! [ 156.784333][ T8126] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 156.784399][ T8126] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 156.784439][ T8126] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 156.791411][ T8126] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 156.922361][ T8126] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 157.003826][ T52] Bluetooth: hci4: unexpected event for opcode 0x0009 [ 157.440443][ T8152] netlink: 24 bytes leftover after parsing attributes in process `syz.0.768'. [ 157.444280][ T8152] netlink: 24 bytes leftover after parsing attributes in process `syz.0.768'. [ 157.616827][ T8164] 8021q: VLANs not supported on wg0 [ 157.632521][ T8152] syzkaller0: entered promiscuous mode [ 157.632561][ T8152] syzkaller0: entered allmulticast mode [ 157.637932][ T8163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.773132][ T8169] sock: sock_set_timeout: `syz.1.771' (pid 8169) tries to set negative timeout [ 158.012697][ T8175] netlink: 40 bytes leftover after parsing attributes in process `syz.2.773'. [ 158.051548][ T8184] netlink: 2 bytes leftover after parsing attributes in process `syz.3.775'. [ 159.078622][ T8233] netlink: 96 bytes leftover after parsing attributes in process `syz.4.789'. [ 159.115291][ T8231] netlink: 40 bytes leftover after parsing attributes in process `syz.0.788'. [ 159.601927][ T8248] xt_socket: unknown flags 0x4 [ 159.629028][ T8248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.795'. [ 159.650738][ T8252] netlink: 104 bytes leftover after parsing attributes in process `syz.1.796'. [ 160.115755][ T8272] netlink: 'syz.4.803': attribute type 11 has an invalid length. [ 161.086235][ T8286] __nla_validate_parse: 2 callbacks suppressed [ 161.086292][ T8286] netlink: 20 bytes leftover after parsing attributes in process `syz.0.808'. [ 161.146201][ T8317] netlink: 'syz.4.820': attribute type 10 has an invalid length. [ 161.183099][ T8317] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.185576][ T8317] bond0: (slave team0): Enslaving as an active interface with an up link [ 161.915993][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.830'. [ 162.341435][ T8365] netlink: 'syz.1.833': attribute type 1 has an invalid length. [ 162.591817][ T8365] 8021q: adding VLAN 0 to HW filter on device bond7 [ 162.699486][ T8358] bond7 (unregistering): Released all slaves [ 162.902704][ T8359] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 163.183598][ T8384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.413484][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.845'. [ 163.609325][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.844'. [ 164.169099][ T8425] netlink: 'syz.3.856': attribute type 14 has an invalid length. [ 164.181607][ T8426] netlink: 28 bytes leftover after parsing attributes in process `syz.4.854'. [ 164.184301][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.854'. [ 164.184326][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.854'. [ 164.185769][ T8426] netlink: 'syz.4.854': attribute type 4 has an invalid length. [ 164.185785][ T8426] netlink: 152 bytes leftover after parsing attributes in process `syz.4.854'. [ 164.208899][ T8426] .`: renamed from bond0 [ 165.097460][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.867'. [ 165.231477][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.867'. [ 165.602401][ T8485] block nbd1: Unsupported socket: should be TCP or UNIX. [ 165.799054][ T8486] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 165.811141][ T8486] bond5 (unregistering): Released all slaves [ 166.227653][ T8514] __nla_validate_parse: 7 callbacks suppressed [ 166.234038][ T8514] netlink: 28 bytes leftover after parsing attributes in process `syz.2.883'. [ 166.512102][ T8527] netlink: 'syz.3.888': attribute type 2 has an invalid length. [ 166.563505][ T8535] netlink: 'syz.3.888': attribute type 2 has an invalid length. [ 166.760643][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'. [ 166.778675][ T8544] netlink: 220 bytes leftover after parsing attributes in process `syz.1.893'. [ 166.788449][ T8544] NCSI netlink: No device for ifindex 0 [ 166.798074][ T8545] netlink: 'syz.3.894': attribute type 1 has an invalid length. [ 166.798110][ T8545] netlink: 208 bytes leftover after parsing attributes in process `syz.3.894'. [ 166.798139][ T8545] netlink: 'syz.3.894': attribute type 1 has an invalid length. [ 166.798155][ T8545] netlink: 22 bytes leftover after parsing attributes in process `syz.3.894'. [ 166.950427][ T8559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.895'. [ 167.425523][ T8581] netlink: 48 bytes leftover after parsing attributes in process `syz.0.903'. [ 167.442529][ T8581] netlink: 'syz.0.903': attribute type 8 has an invalid length. [ 167.453148][ T8581] netlink: 12127 bytes leftover after parsing attributes in process `syz.0.903'. [ 167.536033][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'. [ 167.705032][ T8592] netlink: 40 bytes leftover after parsing attributes in process `syz.2.904'. [ 167.944352][ T8608] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 168.249646][ T8611] bridge_slave_0: left allmulticast mode [ 168.249705][ T8611] bridge_slave_0: left promiscuous mode [ 168.249923][ T8611] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.286149][ T8611] bridge_slave_1: left allmulticast mode [ 168.286198][ T8611] bridge_slave_1: left promiscuous mode [ 168.286889][ T8611] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.333543][ T8611] bond0: (slave bond_slave_0): Releasing backup interface [ 168.378490][ T8611] bond0: (slave bond_slave_1): Releasing backup interface [ 168.429487][ T8611] team0: Port device team_slave_0 removed [ 168.460542][ T8611] team0: Port device team_slave_1 removed [ 168.461481][ T8611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.461526][ T8611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.502598][ T8622] netlink: 'syz.4.917': attribute type 1 has an invalid length. [ 168.516677][ T8611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.516719][ T8611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.535270][ T8611] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 168.555840][ T8622] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 168.841672][ T8631] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 169.413750][ T52] Bluetooth: hci3: command tx timeout [ 171.061007][ T8716] macsec1: entered allmulticast mode [ 171.061063][ T8716] veth1_macvtap: entered allmulticast mode [ 171.074337][ T8716] veth1_macvtap: left allmulticast mode [ 171.404094][ T52] block nbd1: Receive control failed (result -32) [ 171.412387][ T5618] block nbd1: Receive control failed (result -32) [ 171.919161][ T8755] __nla_validate_parse: 10 callbacks suppressed [ 171.919215][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.950'. [ 172.729019][ T8777] FAULT_INJECTION: forcing a failure. [ 172.729019][ T8777] name failslab, interval 1, probability 0, space 0, times 0 [ 172.752492][ T8777] CPU: 1 UID: 0 PID: 8777 Comm: syz.0.959 Not tainted syzkaller #0 PREEMPT(full) [ 172.752524][ T8777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.752537][ T8777] Call Trace: [ 172.752545][ T8777] [ 172.752554][ T8777] dump_stack_lvl+0xe8/0x150 [ 172.752590][ T8777] should_fail_ex+0x410/0x560 [ 172.752626][ T8777] should_failslab+0xa8/0x100 [ 172.752651][ T8777] ? skb_clone+0x212/0x3a0 [ 172.752674][ T8777] kmem_cache_alloc_noprof+0xa1/0x600 [ 172.752706][ T8777] ? skb_clone+0x212/0x3a0 [ 172.752748][ T8777] skb_clone+0x212/0x3a0 [ 172.752774][ T8777] __netlink_deliver_tap+0x413/0x860 [ 172.752812][ T8777] ? netlink_deliver_tap+0x2e/0x1b0 [ 172.752839][ T8777] netlink_deliver_tap+0x19c/0x1b0 [ 172.752868][ T8777] netlink_sendskb+0x68/0x140 [ 172.752894][ T8777] netlink_rcv_skb+0x2a4/0x4a0 [ 172.752919][ T8777] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 172.752952][ T8777] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 172.752991][ T8777] ? netlink_deliver_tap+0x2e/0x1b0 [ 172.753015][ T8777] ? netlink_deliver_tap+0x2e/0x1b0 [ 172.753044][ T8777] netlink_unicast+0x7bd/0x940 [ 172.753079][ T8777] netlink_sendmsg+0x813/0xb40 [ 172.753114][ T8777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.753149][ T8777] ? apparmor_socket_sendmsg+0x98/0x360 [ 172.753182][ T8777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.753205][ T8777] sock_sendmsg_nosec+0x13a/0x180 [ 172.753234][ T8777] ____sys_sendmsg+0x54e/0x850 [ 172.753263][ T8777] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.753296][ T8777] ? import_iovec+0x73/0xa0 [ 172.753323][ T8777] ___sys_sendmsg+0x2a5/0x360 [ 172.753344][ T8777] ? __lock_acquire+0x6df/0x2e50 [ 172.753371][ T8777] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.753433][ T8777] ? __fget_files+0x2a/0x420 [ 172.753458][ T8777] ? __fget_files+0x3a2/0x420 [ 172.753495][ T8777] __x64_sys_sendmsg+0x1b1/0x290 [ 172.753521][ T8777] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.753567][ T8777] do_syscall_64+0x166/0x520 [ 172.753595][ T8777] ? trace_irq_disable+0x3b/0x140 [ 172.753614][ T8777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.753636][ T8777] ? clear_bhb_loop+0x70/0xc0 [ 172.753662][ T8777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.753681][ T8777] RIP: 0033:0x7fe5a539e159 [ 172.753701][ T8777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.753717][ T8777] RSP: 002b:00007fe5a628e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.753748][ T8777] RAX: ffffffffffffffda RBX: 00007fe5a5625fa0 RCX: 00007fe5a539e159 [ 172.753763][ T8777] RDX: 0000000000008050 RSI: 0000200000000080 RDI: 0000000000000003 [ 172.753775][ T8777] RBP: 00007fe5a628e090 R08: 0000000000000000 R09: 0000000000000000 [ 172.753787][ T8777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.753798][ T8777] R13: 00007fe5a5626038 R14: 00007fe5a5625fa0 R15: 00007ffde4d6e408 [ 172.753831][ T8777] [ 173.204496][ T8789] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 173.204565][ T8789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.104368][ T8821] sctp: [Deprecated]: syz.3.973 (pid 8821) Use of int in maxseg socket option. [ 174.104368][ T8821] Use struct sctp_assoc_value instead [ 174.354032][ T8827] netlink: 36 bytes leftover after parsing attributes in process `syz.0.975'. [ 174.990048][ T8848] netlink: 10 bytes leftover after parsing attributes in process `syz.3.982'. [ 175.012986][ T8848] netlink: Unknown conntrack attr (0) [ 176.213850][ T8907] netlink: 2 bytes leftover after parsing attributes in process `syz.3.996'. [ 176.950728][ T8947] syzkaller0: entered promiscuous mode [ 176.950776][ T8947] syzkaller0: entered allmulticast mode [ 177.382127][ T8962] tipc: Failed to remove unknown binding: 66,0,0/0:2411523002/2411523004 [ 177.382177][ T8962] tipc: Failed to remove unknown binding: 66,0,0/0:2411523002/2411523003 [ 177.400345][ T8962] tipc: Failed to remove unknown binding: 66,0,0/0:2411523002/2411523004 [ 177.400379][ T8962] tipc: Failed to remove unknown binding: 66,0,0/0:2411523002/2411523003 [ 177.421151][ T8962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1015'. [ 177.522817][ T8970] syzkaller1: entered promiscuous mode [ 177.528578][ T8970] syzkaller1: entered allmulticast mode [ 177.798762][ T8983] veth0_virt_wifi: entered promiscuous mode [ 177.805829][ T8983] veth0_virt_wifi: left promiscuous mode [ 177.935152][ T8982] syzkaller0: entered promiscuous mode [ 177.935200][ T8982] syzkaller0: entered allmulticast mode [ 178.121102][ T8988] syzkaller0: entered promiscuous mode [ 178.121147][ T8988] syzkaller0: entered allmulticast mode [ 178.395923][ T9001] xt_CT: No such helper "snmp_trap" [ 178.516821][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1028'. [ 178.525825][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1028'. [ 178.542209][ T9001] netlink: 'syz.1.1028': attribute type 1 has an invalid length. [ 178.543456][ T9014] sctp: [Deprecated]: syz.3.1032 (pid 9014) Use of int in max_burst socket option. [ 178.543456][ T9014] Use struct sctp_assoc_value instead [ 178.569565][ T9001] netlink: 'syz.1.1028': attribute type 1 has an invalid length. [ 178.769356][ T9017] vlan2: entered promiscuous mode [ 178.774540][ T9017] bond0: entered promiscuous mode [ 178.776659][ T9017] vlan2: entered allmulticast mode [ 178.776676][ T9017] bond0: entered allmulticast mode [ 178.816718][ T9022] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1034'. [ 178.943765][ T9027] tipc: Started in network mode [ 178.943837][ T9027] tipc: Node identity 56321f03304a, cluster identity 4711 [ 178.943994][ T9027] tipc: Enabled bearer , priority 0 [ 178.950695][ T9023] syzkaller0: entered promiscuous mode [ 178.950716][ T9023] syzkaller0: entered allmulticast mode [ 179.037555][ T9023] tipc: Resetting bearer [ 179.068497][ T9036] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1039'. [ 179.071554][ T9020] tipc: Resetting bearer [ 179.158862][ T9020] tipc: Disabling bearer [ 179.483732][ T9051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.575163][ T9049] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 179.586020][ T9049] bond4 (unregistering): Released all slaves [ 179.622321][ T9057] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1047'. [ 179.872368][ T9068] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1051'. [ 179.872420][ T9068] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1051'. [ 179.873899][ T9068] netlink: 'syz.4.1051': attribute type 10 has an invalid length. [ 179.899325][ T9068] team0: Port device dummy0 added [ 180.173393][ T9081] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1055'. [ 180.299861][ T9085] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1056'. [ 180.324517][ T6151] lo speed is unknown, defaulting to 1000 [ 180.730491][ T9092] team0: Port device team_slave_1 removed [ 180.923888][ T9102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.071270][ T9110] block nbd2: server does not support multiple connections per device. [ 181.096067][ T9110] block nbd2: shutting down sockets [ 181.209276][ T9126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.172171][ T9158] nbd: nbd1 already in use [ 182.178265][ T9158] block nbd1: NBD_DISCONNECT [ 182.184322][ T9158] block nbd1: Send disconnect failed -32 [ 182.184376][ T9158] block nbd1: Send disconnect failed -32 [ 182.184400][ T9158] block nbd1: shutting down sockets [ 182.414460][ T9160] lo speed is unknown, defaulting to 1000 [ 182.555224][ T9170] __nla_validate_parse: 7 callbacks suppressed [ 182.555281][ T9170] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1085'. [ 182.745167][ T9177] FAULT_INJECTION: forcing a failure. [ 182.745167][ T9177] name failslab, interval 1, probability 0, space 0, times 0 [ 182.745219][ T9177] CPU: 1 UID: 0 PID: 9177 Comm: syz.0.1088 Not tainted syzkaller #0 PREEMPT(full) [ 182.745243][ T9177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.745254][ T9177] Call Trace: [ 182.745262][ T9177] [ 182.745271][ T9177] dump_stack_lvl+0xe8/0x150 [ 182.745305][ T9177] should_fail_ex+0x410/0x560 [ 182.745340][ T9177] should_failslab+0xa8/0x100 [ 182.745370][ T9177] __kvmalloc_node_noprof+0x176/0x820 [ 182.745390][ T9177] ? __pfx_bpf_compute_const_regs+0x10/0x10 [ 182.745417][ T9177] ? sort_subprogs_topo+0xbf/0xf20 [ 182.745435][ T9177] ? sort_subprogs_topo+0xbf/0xf20 [ 182.745463][ T9177] sort_subprogs_topo+0xbf/0xf20 [ 182.745486][ T9177] ? bpf_prune_dead_branches+0xa3b/0xab0 [ 182.745526][ T9177] bpf_check+0x25a5/0x2e10 [ 182.745558][ T9177] ? ktime_get_with_offset+0x93/0x2d0 [ 182.745584][ T9177] ? __pfx_bpf_check+0x10/0x10 [ 182.745607][ T9177] ? bpf_obj_name_cpy+0x194/0x1e0 [ 182.745638][ T9177] bpf_prog_load+0x14d6/0x1c20 [ 182.745672][ T9177] ? __pfx_bpf_prog_load+0x10/0x10 [ 182.745717][ T9177] __sys_bpf+0xd0d/0xd90 [ 182.745756][ T9177] ? __pfx___sys_bpf+0x10/0x10 [ 182.745788][ T9177] ? __fget_files+0x2a/0x420 [ 182.745832][ T9177] ? ksys_write+0x242/0x270 [ 182.745862][ T9177] ? __pfx_ksys_write+0x10/0x10 [ 182.745895][ T9177] __x64_sys_bpf+0xba/0xd0 [ 182.745917][ T9177] do_syscall_64+0x166/0x520 [ 182.745942][ T9177] ? trace_irq_disable+0x3b/0x140 [ 182.745959][ T9177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.745977][ T9177] ? clear_bhb_loop+0x70/0xc0 [ 182.745999][ T9177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.746018][ T9177] RIP: 0033:0x7fe5a539e159 [ 182.746038][ T9177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.746052][ T9177] RSP: 002b:00007fe5a628e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 182.746076][ T9177] RAX: ffffffffffffffda RBX: 00007fe5a5625fa0 RCX: 00007fe5a539e159 [ 182.746091][ T9177] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 182.746104][ T9177] RBP: 00007fe5a628e090 R08: 0000000000000000 R09: 0000000000000000 [ 182.746115][ T9177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.746127][ T9177] R13: 00007fe5a5626038 R14: 00007fe5a5625fa0 R15: 00007ffde4d6e408 [ 182.746158][ T9177] [ 182.759555][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 183.014758][ T9183] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1090'. [ 183.417943][ T9187] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1093'. [ 183.435644][ T9192] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1092'. [ 183.722251][ T9213] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1100'. [ 183.730455][ T9208] veth0_virt_wifi: entered promiscuous mode [ 183.739158][ T9208] veth0_virt_wifi: left promiscuous mode [ 183.988233][ T9222] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1102'. [ 183.991130][ T9222] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1102'. [ 184.125965][ T9226] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1104'. [ 184.206039][ T9230] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1106'. [ 184.261818][ T9230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1106'. [ 185.164039][ T9260] unsupported nla_type 216 [ 186.742808][ T9308] netlink: 'syz.3.1129': attribute type 6 has an invalid length. [ 186.742854][ T9308] netlink: 'syz.3.1129': attribute type 5 has an invalid length. [ 186.782310][ T1029] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.782414][ T1029] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.798833][ T6217] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.799050][ T9314] syzkaller0: renamed from bond0 [ 187.570290][ T9328] __nla_validate_parse: 11 callbacks suppressed [ 187.570606][ T9328] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1134'. [ 188.572900][ T9357] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1143'. [ 188.915353][ T9366] syzkaller0: entered promiscuous mode [ 188.921468][ T9366] syzkaller0: entered allmulticast mode [ 188.955225][ T9367] bond0: entered promiscuous mode [ 188.956931][ T9367] batadv0: entered promiscuous mode [ 188.958470][ T9367] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 188.960724][ T9367] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 188.981313][ T9367] bond0: left promiscuous mode [ 188.986058][ T9367] batadv0: left promiscuous mode [ 189.022674][ T9371] .`: (slave team0): Releasing backup interface [ 189.105740][ T9371] team0: Port device dummy0 removed [ 189.106297][ T9371] bridge_slave_0: left allmulticast mode [ 189.106336][ T9371] bridge_slave_0: left promiscuous mode [ 189.113957][ T9371] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.221188][ T9371] bridge_slave_1: left allmulticast mode [ 189.221244][ T9371] bridge_slave_1: left promiscuous mode [ 189.221482][ T9371] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.365644][ T9371] .`: (slave bond_slave_0): Releasing backup interface [ 189.416226][ T9381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1146'. [ 189.453271][ T9371] .`: (slave bond_slave_1): Releasing backup interface [ 189.539593][ T9371] team0: Port device team_slave_0 removed [ 189.549373][ T9371] team0: Port device team_slave_1 removed [ 189.549758][ T9371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.555966][ T9371] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 189.563653][ T9366] tipc: Enabled bearer , priority 0 [ 189.566670][ T9367] tipc: Resetting bearer [ 189.944201][ T9390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1149'. [ 190.181848][ T9228] Set syz1 is full, maxelem 65536 reached [ 190.277130][ T9394] ip_tables: iptables: counters copy to user failed while replacing table [ 190.389420][ T9396] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1151'. [ 190.396896][ T9396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1151'. [ 190.456643][ T9399] x_tables: ip_tables: ECN target: only valid in mangle table, not  [ 190.461914][ T9398] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1151'. [ 190.462312][ T9401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1151'. [ 191.406882][ T9367] tipc: Disabling bearer [ 191.416893][ T9390] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 191.571515][ T6159] tipc: Node number set to 3517769083 [ 191.766171][ T9415] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1158'. [ 191.776035][ T9413] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1154'. [ 193.165835][ T1174] IPVS: starting estimator thread 0... [ 193.181753][ T9492] __nla_validate_parse: 3 callbacks suppressed [ 193.189375][ T9492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1182'. [ 193.256554][ T9491] IPVS: using max 30 ests per chain, 72000 per kthread [ 193.342965][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1182'. [ 193.354199][ T9482] 8021q: adding VLAN 0 to HW filter on device syzkaller0 [ 194.185142][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1197'. [ 194.280253][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.375015][ T9538] macvtap1: entered promiscuous mode [ 194.375060][ T9538] bridge0: entered promiscuous mode [ 194.382357][ T9538] macvtap1: entered allmulticast mode [ 194.382378][ T9538] bridge0: entered allmulticast mode [ 194.885383][ T9576] ip_tables: iptables: counters copy to user failed while replacing table [ 195.088137][ T9535] tipc: Resetting bearer [ 195.598058][ T9596] netlink: ct family unspecified [ 195.598114][ T9596] openvswitch: netlink: Actions may not be safe on all matching packets [ 196.155154][ T9618] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1220'. [ 196.309267][ T9624] xt_policy: output policy not valid in PREROUTING and INPUT [ 197.271061][ T9663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.583041][ T9676] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 197.929213][ T9648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 197.931600][ T9650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.747861][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1237'. [ 198.747911][ T9715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1237'. [ 198.749768][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1237'. [ 198.749786][ T9715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1237'. [ 199.086825][ T9725] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1242'. [ 199.086894][ T9725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.122980][ T9728] netlink: 8778 bytes leftover after parsing attributes in process `syz.0.1242'. [ 199.123097][ T9728] openvswitch: netlink: Flow actions attr not present in new flow. [ 199.302563][ T9734] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 199.302624][ T9734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.881355][ T9783] xt_CT: No such helper "netbios-ns" [ 201.218072][ T9800] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 201.426680][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1259'. [ 201.482004][ T5622] Bluetooth: hci1: command 0x0406 tx timeout [ 201.482070][ T5622] Bluetooth: hci3: command 0x0406 tx timeout [ 201.482096][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 202.415346][ T9586] Set syz1 is full, maxelem 65536 reached [ 202.791375][ T31] audit: type=1804 audit(1788596236.774:2): pid=9843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1266" name="/newroot/242/cgroup.controllers" dev="tmpfs" ino=1249 res=1 errno=0 [ 202.799227][ T31] audit: type=1800 audit(1788596236.784:3): pid=9843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1266" name="cgroup.controllers" dev="tmpfs" ino=1249 res=0 errno=0 [ 202.800743][ T31] audit: type=1804 audit(1788596236.784:4): pid=9844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1266" name="/newroot/242/cgroup.controllers" dev="tmpfs" ino=1249 res=1 errno=0 [ 203.124349][ T9853] netlink: 'syz.0.1268': attribute type 1 has an invalid length. [ 203.270304][ T9853] 8021q: adding VLAN 0 to HW filter on device bond8 [ 203.352305][ T9858] bond8: (slave veth7): Enslaving as an active interface with a down link [ 203.533537][ T9858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1268'. [ 203.544575][ T9860] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 203.568940][ T9860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.591323][ T9860] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.620330][ T9860] 8021q: adding VLAN 0 to HW filter on device bond4 [ 203.625005][ T9860] erspan1: left promiscuous mode [ 203.641087][ T9860] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 203.649700][ T9860] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 203.659015][ T9860] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 203.668598][ T9860] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 203.678125][ T9860] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 203.687663][ T9860] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 203.697833][ T9860] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 203.707380][ T9860] 8021q: adding VLAN 0 to HW filter on device macvlan9 [ 203.719346][ T9860] 8021q: adding VLAN 0 to HW filter on device macvlan10 [ 203.730716][ T9860] 8021q: adding VLAN 0 to HW filter on device macvlan11 [ 203.741759][ T9860] 8021q: adding VLAN 0 to HW filter on device macvlan12 [ 203.751688][ T9860] 8021q: adding VLAN 0 to HW filter on device macvlan13 [ 203.761421][ T9860] 8021q: adding VLAN 0 to HW filter on device macvlan14 [ 203.771291][ T9860] 8021q: adding VLAN 0 to HW filter on device macvlan15 [ 203.783809][ T9860] 8021q: adding VLAN 0 to HW filter on device macvlan16 [ 203.793826][ T9860] 8021q: adding VLAN 0 to HW filter on device macvlan17 [ 203.804058][ T9860] 8021q: adding VLAN 0 to HW filter on device macvlan18 [ 203.814355][ T9860] 8021q: adding VLAN 0 to HW filter on device macvlan19 [ 203.825667][ T9860] 8021q: adding VLAN 0 to HW filter on device macvlan20 [ 203.837344][ T9860] 8021q: adding VLAN 0 to HW filter on device eth0 [ 203.847707][ T9860] 8021q: adding VLAN 0 to HW filter on device eth1 [ 203.857441][ T9860] 8021q: adding VLAN 0 to HW filter on device eth2 [ 203.868579][ T9860] 8021q: adding VLAN 0 to HW filter on device eth3 [ 203.878841][ T9860] 8021q: adding VLAN 0 to HW filter on device bond5 [ 203.890971][ T9860] 8021q: adding VLAN 0 to HW filter on device bond6 [ 203.903103][ T9860] 8021q: adding VLAN 0 to HW filter on device bond7 [ 203.990286][ T6159] bond_slave_0: entered promiscuous mode [ 203.991141][ T6159] bond_slave_1: entered promiscuous mode [ 204.119935][ T9853] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 204.135224][ T9853] bond8: (slave batadv1): making interface the new active one [ 204.145354][ T9853] batadv1: entered promiscuous mode [ 204.157549][ T9853] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 204.230169][ T12] bond8: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 204.718372][ T9891] FAULT_INJECTION: forcing a failure. [ 204.718372][ T9891] name failslab, interval 1, probability 0, space 0, times 0 [ 204.718437][ T9891] CPU: 0 UID: 0 PID: 9891 Comm: syz.4.1279 Not tainted syzkaller #0 PREEMPT(full) [ 204.718460][ T9891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.718471][ T9891] Call Trace: [ 204.718479][ T9891] [ 204.718486][ T9891] dump_stack_lvl+0xe8/0x150 [ 204.718517][ T9891] should_fail_ex+0x410/0x560 [ 204.718549][ T9891] should_failslab+0xa8/0x100 [ 204.718572][ T9891] __kmalloc_cache_noprof+0xa3/0x600 [ 204.718599][ T9891] ? __kmalloc_cache_noprof+0x14d/0x600 [ 204.718624][ T9891] ? do_check_common+0x352/0x5d30 [ 204.718644][ T9891] ? do_check_common+0x352/0x5d30 [ 204.718671][ T9891] do_check_common+0x352/0x5d30 [ 204.718720][ T9891] ? mark_fastcall_patterns+0xe21/0xe80 [ 204.718745][ T9891] ? __pfx_do_check_common+0x10/0x10 [ 204.718779][ T9891] bpf_check+0x2639/0x2e10 [ 204.718809][ T9891] ? ktime_get_with_offset+0x93/0x2d0 [ 204.718831][ T9891] ? __pfx_bpf_check+0x10/0x10 [ 204.718853][ T9891] ? bpf_obj_name_cpy+0x194/0x1e0 [ 204.718881][ T9891] bpf_prog_load+0x14d6/0x1c20 [ 204.718921][ T9891] ? __pfx_bpf_prog_load+0x10/0x10 [ 204.718965][ T9891] __sys_bpf+0xd0d/0xd90 [ 204.718993][ T9891] ? __pfx___sys_bpf+0x10/0x10 [ 204.719023][ T9891] ? __fget_files+0x2a/0x420 [ 204.719063][ T9891] ? ksys_write+0x242/0x270 [ 204.719089][ T9891] ? __pfx_ksys_write+0x10/0x10 [ 204.719119][ T9891] __x64_sys_bpf+0xba/0xd0 [ 204.719140][ T9891] do_syscall_64+0x166/0x520 [ 204.719164][ T9891] ? trace_irq_disable+0x3b/0x140 [ 204.719181][ T9891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.719200][ T9891] ? clear_bhb_loop+0x70/0xc0 [ 204.719222][ T9891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.719240][ T9891] RIP: 0033:0x7f6088b9e159 [ 204.719258][ T9891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.719277][ T9891] RSP: 002b:00007f6089a5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 204.719297][ T9891] RAX: ffffffffffffffda RBX: 00007f6088e25fa0 RCX: 00007f6088b9e159 [ 204.719310][ T9891] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 204.719322][ T9891] RBP: 00007f6089a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 204.719333][ T9891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.719344][ T9891] R13: 00007f6088e26038 R14: 00007f6088e25fa0 R15: 00007ffcacb64888 [ 204.719373][ T9891] [ 204.773172][ T9893] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 204.773204][ T9893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.266703][ T9905] netlink: 'syz.1.1283': attribute type 10 has an invalid length. [ 205.292743][ T9905] bridge0: left allmulticast mode [ 205.304603][ T9905] bridge0: port 3(erspan0) entered blocking state [ 205.304764][ T9905] bridge0: port 3(erspan0) entered forwarding state [ 205.306080][ T9905] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.306238][ T9905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.306560][ T9905] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.306720][ T9905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.374294][ T9905] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 205.511419][ T9909] nbd: couldn't find a device at index 0 [ 205.554753][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1284'. [ 205.554806][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1284'. [ 205.965827][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1292'. [ 206.298034][ T9930] lo speed is unknown, defaulting to 1000 [ 206.530655][ T9950] syzkaller1: entered promiscuous mode [ 206.530700][ T9950] syzkaller1: entered allmulticast mode [ 206.546928][ T9952] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 206.631590][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1303'. [ 206.933819][ T9959] FAULT_INJECTION: forcing a failure. [ 206.933819][ T9959] name failslab, interval 1, probability 0, space 0, times 0 [ 206.933876][ T9959] CPU: 1 UID: 0 PID: 9959 Comm: syz.3.1304 Not tainted syzkaller #0 PREEMPT(full) [ 206.933900][ T9959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.933912][ T9959] Call Trace: [ 206.933921][ T9959] [ 206.933930][ T9959] dump_stack_lvl+0xe8/0x150 [ 206.933964][ T9959] should_fail_ex+0x410/0x560 [ 206.934002][ T9959] should_failslab+0xa8/0x100 [ 206.934028][ T9959] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 206.934062][ T9959] ? realloc_array+0x76/0x130 [ 206.934085][ T9959] ? realloc_array+0x76/0x130 [ 206.934112][ T9959] ? realloc_array+0x76/0x130 [ 206.934138][ T9959] krealloc_node_align_noprof+0x19a/0x390 [ 206.934159][ T9959] ? number+0xc60/0xed0 [ 206.934185][ T9959] realloc_array+0x76/0x130 [ 206.934210][ T9959] check_stack_access_within_bounds+0x6ca/0xb60 [ 206.934252][ T9959] ? __pfx_check_stack_access_within_bounds+0x10/0x10 [ 206.934286][ T9959] ? vsnprintf+0xe42/0xef0 [ 206.934321][ T9959] check_mem_access+0xa2c/0x2620 [ 206.934357][ T9959] ? __pfx_check_mem_access+0x10/0x10 [ 206.934397][ T9959] ? vsnprintf+0xe42/0xef0 [ 206.934427][ T9959] do_check_insn+0x1d21/0x17d70 [ 206.934472][ T9959] ? bpf_verifier_vlog+0x3d1/0x900 [ 206.934510][ T9959] ? format_decode+0xdc/0xda0 [ 206.934532][ T9959] ? vsnprintf+0x3a0/0xef0 [ 206.934557][ T9959] ? __asan_memcpy+0x40/0x70 [ 206.934590][ T9959] ? __pfx_do_check_insn+0x10/0x10 [ 206.934626][ T9959] ? vscnprintf+0x5c/0x90 [ 206.934652][ T9959] ? bpf_verifier_vlog+0x3d1/0x900 [ 206.934695][ T9959] ? verbose+0x11d/0x1a0 [ 206.934724][ T9959] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 206.934759][ T9959] ? __pfx_verbose+0x10/0x10 [ 206.934791][ T9959] ? bpf_vlog_reset+0x1db/0x340 [ 206.934825][ T9959] ? print_insn_state+0x106/0x170 [ 206.934849][ T9959] do_check_common+0x3c19/0x5d30 [ 206.934916][ T9959] ? __pfx_do_check_common+0x10/0x10 [ 206.934939][ T9959] ? __pfx_verbose+0x10/0x10 [ 206.934965][ T9959] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 206.935010][ T9959] bpf_check+0x2639/0x2e10 [ 206.935044][ T9959] ? ktime_get_with_offset+0x93/0x2d0 [ 206.935070][ T9959] ? __pfx_bpf_check+0x10/0x10 [ 206.935095][ T9959] ? bpf_obj_name_cpy+0x194/0x1e0 [ 206.935128][ T9959] bpf_prog_load+0x14d6/0x1c20 [ 206.935165][ T9959] ? __pfx_bpf_prog_load+0x10/0x10 [ 206.935216][ T9959] __sys_bpf+0xd0d/0xd90 [ 206.935248][ T9959] ? __pfx___sys_bpf+0x10/0x10 [ 206.935283][ T9959] ? __fget_files+0x2a/0x420 [ 206.935329][ T9959] ? ksys_write+0x242/0x270 [ 206.935360][ T9959] ? __pfx_ksys_write+0x10/0x10 [ 206.935394][ T9959] __x64_sys_bpf+0xba/0xd0 [ 206.935419][ T9959] do_syscall_64+0x166/0x520 [ 206.935447][ T9959] ? trace_irq_disable+0x3b/0x140 [ 206.935474][ T9959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.935495][ T9959] ? clear_bhb_loop+0x70/0xc0 [ 206.935521][ T9959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.935541][ T9959] RIP: 0033:0x7fc601f9e159 [ 206.935561][ T9959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.935578][ T9959] RSP: 002b:00007fc602dca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.935601][ T9959] RAX: ffffffffffffffda RBX: 00007fc602225fa0 RCX: 00007fc601f9e159 [ 206.935616][ T9959] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 206.935629][ T9959] RBP: 00007fc602dca090 R08: 0000000000000000 R09: 0000000000000000 [ 206.935642][ T9959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 206.935654][ T9959] R13: 00007fc602226038 R14: 00007fc602225fa0 R15: 00007ffc73cb72e8 [ 206.935685][ T9959] [ 207.403436][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1306'. [ 207.624181][ T9969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1307'. [ 207.887501][ T9974] bond6 (unregistering): Released all slaves [ 207.950934][ T9989] sctp: [Deprecated]: syz.4.1310 (pid 9989) Use of int in max_burst socket option. [ 207.950934][ T9989] Use struct sctp_assoc_value instead [ 208.184809][ T9987] netlink: zone id is out of range [ 208.184844][ T9987] netlink: zone id is out of range [ 208.184920][ T9987] netlink: zone id is out of range [ 208.184934][ T9987] netlink: zone id is out of range [ 208.184945][ T9987] netlink: zone id is out of range [ 208.184970][ T9987] netlink: zone id is out of range [ 208.184989][ T9987] netlink: zone id is out of range [ 208.185002][ T9987] netlink: zone id is out of range [ 208.185023][ T9987] netlink: zone id is out of range [ 208.185043][ T9987] netlink: zone id is out of range [ 208.410508][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1294'. [ 209.190886][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1316'. [ 209.368298][T10021] ip6erspan0: entered allmulticast mode [ 209.496845][T10031] netlink: 'syz.3.1324': attribute type 1 has an invalid length. [ 209.672281][T10033] bond8: (slave veth0_to_bond): making interface the new active one [ 209.688775][T10033] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 210.090427][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1329'. [ 210.247587][ T31] audit: type=1804 audit(1788596244.234:5): pid=10063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1332" name="/newroot/249/cgroup.controllers" dev="tmpfs" ino=1296 res=1 errno=0 [ 210.272139][ T31] audit: type=1800 audit(1788596244.264:6): pid=10063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1332" name="cgroup.controllers" dev="tmpfs" ino=1296 res=0 errno=0 [ 210.459591][T10072] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1334'. [ 210.557669][T10072] netlink: 'syz.4.1334': attribute type 13 has an invalid length. [ 210.557711][T10072] netlink: 'syz.4.1334': attribute type 58 has an invalid length. [ 210.557739][T10072] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1334'. [ 210.858333][T10092] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1343'. [ 211.121689][T10100] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1347'. [ 211.133186][T10101] netlink: 'syz.2.1346': attribute type 10 has an invalid length. [ 211.133221][T10101] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1346'. [ 211.166437][T10101] team0: Device wg2 is of different type [ 211.198420][T10105] netlink: 'syz.2.1346': attribute type 10 has an invalid length. [ 211.198468][T10105] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1346'. [ 211.240380][T10105] team0: Device wg2 is of different type [ 211.316110][T10112] syzkaller0: entered promiscuous mode [ 211.316151][T10112] syzkaller0: entered allmulticast mode [ 211.502722][ T31] audit: type=1804 audit(1788596245.484:7): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1351" name="/newroot/283/cgroup.controllers" dev="tmpfs" ino=1470 res=1 errno=0 [ 211.510038][ T31] audit: type=1800 audit(1788596245.484:8): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1351" name="cgroup.controllers" dev="tmpfs" ino=1470 res=0 errno=0 [ 211.610206][T10121] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1352'. [ 211.667621][T10123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1353'. [ 211.926950][T10132] FAULT_INJECTION: forcing a failure. [ 211.926950][T10132] name failslab, interval 1, probability 0, space 0, times 0 [ 211.927005][T10132] CPU: 1 UID: 0 PID: 10132 Comm: syz.3.1357 Not tainted syzkaller #0 PREEMPT(full) [ 211.927029][T10132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.927041][T10132] Call Trace: [ 211.927049][T10132] [ 211.927058][T10132] dump_stack_lvl+0xe8/0x150 [ 211.927092][T10132] should_fail_ex+0x410/0x560 [ 211.927126][T10132] ? __alloc_skb+0x1db/0x7a0 [ 211.927149][T10132] should_failslab+0xa8/0x100 [ 211.927169][T10132] ? __alloc_skb+0x1db/0x7a0 [ 211.927190][T10132] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 211.927213][T10132] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 211.927240][T10132] ? __alloc_skb+0x1db/0x7a0 [ 211.927270][T10132] __alloc_skb+0x1db/0x7a0 [ 211.927298][T10132] tipc_msg_create+0x4c/0x4c0 [ 211.927321][T10132] ? tipc_own_addr+0x45/0x2a0 [ 211.927344][T10132] ? tipc_own_addr+0x45/0x2a0 [ 211.927370][T10132] tipc_group_proto_xmit+0xce/0x790 [ 211.927401][T10132] tipc_group_cong+0x4db/0x5e0 [ 211.927432][T10132] ? __pfx_tipc_group_cong+0x10/0x10 [ 211.927462][T10132] ? tipc_dest_find+0x102/0x120 [ 211.927483][T10132] tipc_send_group_unicast+0x31f/0x550 [ 211.927521][T10132] ? __pfx_tipc_send_group_unicast+0x10/0x10 [ 211.927541][T10132] ? lockdep_hardirqs_on+0x7b/0x110 [ 211.927569][T10132] ? __pfx_woken_wake_function+0x10/0x10 [ 211.927593][T10132] ? tipc_dest_pop+0x19c/0x230 [ 211.927618][T10132] ? tipc_dest_pop+0x19c/0x230 [ 211.927641][T10132] __tipc_sendmsg+0x152b/0x2b60 [ 211.927672][T10132] ? arch_stack_walk+0xfb/0x150 [ 211.927695][T10132] ? look_up_lock_class+0x57/0x110 [ 211.927720][T10132] ? register_lock_class+0x31/0x2e0 [ 211.927739][T10132] ? __pfx___tipc_sendmsg+0x10/0x10 [ 211.927764][T10132] ? __lock_acquire+0x6df/0x2e50 [ 211.927788][T10132] ? ima_match_policy+0x115/0x2230 [ 211.927838][T10132] ? ima_match_policy+0x21a6/0x2230 [ 211.927880][T10132] ? lock_acquire+0x115/0x350 [ 211.927916][T10132] ? process_measurement+0x7b2/0x1c10 [ 211.927951][T10132] ? __lock_acquire+0x6df/0x2e50 [ 211.927970][T10132] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 211.927998][T10132] __tipc_sendstream+0x105f/0x12a0 [ 211.928021][T10132] ? __lock_acquire+0x6df/0x2e50 [ 211.928045][T10132] ? lock_acquire+0x115/0x350 [ 211.928066][T10132] ? __lock_acquire+0x6df/0x2e50 [ 211.928097][T10132] ? do_raw_spin_lock+0x12b/0x2f0 [ 211.928124][T10132] ? __pfx___tipc_sendstream+0x10/0x10 [ 211.928152][T10132] ? tipc_send_packet+0x6e/0xa0 [ 211.928179][T10132] ? __local_bh_enable_ip+0xd6/0x140 [ 211.928207][T10132] tipc_send_packet+0x7c/0xa0 [ 211.928232][T10132] ? __pfx_tipc_send_packet+0x10/0x10 [ 211.928254][T10132] sock_sendmsg_nosec+0x13a/0x180 [ 211.928281][T10132] ____sys_sendmsg+0x54e/0x850 [ 211.928307][T10132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.928336][T10132] ? import_iovec+0x73/0xa0 [ 211.928359][T10132] ___sys_sendmsg+0x2a5/0x360 [ 211.928378][T10132] ? __lock_acquire+0x6df/0x2e50 [ 211.928401][T10132] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.928464][T10132] ? __fget_files+0x2a/0x420 [ 211.928486][T10132] ? __fget_files+0x3a2/0x420 [ 211.928519][T10132] __x64_sys_sendmsg+0x1b1/0x290 [ 211.928542][T10132] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.928582][T10132] do_syscall_64+0x166/0x520 [ 211.928607][T10132] ? trace_irq_disable+0x3b/0x140 [ 211.928624][T10132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.928643][T10132] ? clear_bhb_loop+0x70/0xc0 [ 211.928665][T10132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.928683][T10132] RIP: 0033:0x7fc601f9e159 [ 211.928701][T10132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.928718][T10132] RSP: 002b:00007fc602dca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.928739][T10132] RAX: ffffffffffffffda RBX: 00007fc602225fa0 RCX: 00007fc601f9e159 [ 211.928753][T10132] RDX: 0000000020040001 RSI: 0000200000000500 RDI: 0000000000000004 [ 211.928766][T10132] RBP: 00007fc602dca090 R08: 0000000000000000 R09: 0000000000000000 [ 211.928778][T10132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.928789][T10132] R13: 00007fc602226038 R14: 00007fc602225fa0 R15: 00007ffc73cb72e8 [ 211.928820][T10132] [ 212.648917][T10155] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1364'. [ 212.660807][T10157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1366'. [ 213.063945][T10170] syzkaller0: entered promiscuous mode [ 213.063988][T10170] syzkaller0: entered allmulticast mode [ 213.131249][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 213.255147][T10175] bond9: option lacp_active: invalid value (33) [ 213.289233][T10175] bond9 (unregistering): Released all slaves [ 213.682232][T10197] netlink: 'syz.2.1383': attribute type 7 has an invalid length. [ 213.682273][T10197] netlink: 'syz.2.1383': attribute type 8 has an invalid length. [ 213.700788][T10197] netlink: 'syz.2.1383': attribute type 1 has an invalid length. [ 213.780276][T10201] net_ratelimit: 19 callbacks suppressed [ 213.780337][T10201] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 213.840012][T10204] macsec1: entered allmulticast mode [ 213.848601][T10204] veth1_macvtap: entered allmulticast mode [ 213.858930][T10204] veth1_macvtap: left allmulticast mode [ 215.034213][T10263] netlink: 'syz.2.1406': attribute type 1 has an invalid length. [ 215.379273][ T1029] batadv1: left promiscuous mode [ 215.536118][T10284] netlink: 'syz.0.1416': attribute type 10 has an invalid length. [ 215.686296][T10289] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 215.686482][T10289] syzkaller1: linktype set to 1 [ 215.705272][T10289] __nla_validate_parse: 10 callbacks suppressed [ 215.712519][T10289] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1417'. [ 215.809196][T10298] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1419'. [ 216.780631][T10352] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1434'. [ 217.160599][T10365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.178699][T10365] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1440'. [ 217.189094][T10365] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1440'. [ 217.700911][T10386] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 218.412799][T10418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1457'. [ 218.693483][T10426] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1461'. [ 218.694132][T10426] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1461'. [ 219.134081][T10437] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1465'. [ 219.625413][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1472'. [ 220.205486][T10471] netlink: 'syz.3.1480': attribute type 1 has an invalid length. [ 221.153276][T10505] __nla_validate_parse: 9 callbacks suppressed [ 221.162157][T10505] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1488'. [ 221.171435][T10505] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1488'. [ 221.235667][T10508] netlink: 'syz.1.1489': attribute type 1 has an invalid length. [ 221.235718][T10508] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1489'. [ 221.422987][T10513] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1490'. [ 221.837161][T10526] gtp0: entered promiscuous mode [ 221.843937][T10526] gtp0: entered allmulticast mode [ 221.986209][T10534] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1499'. [ 222.009683][T10537] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1498'. [ 222.009836][T10537] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1498'. [ 222.034218][T10538] netlink: 'syz.2.1500': attribute type 2 has an invalid length. [ 222.091210][T10534] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1499'. [ 222.139846][T10538] : entered promiscuous mode [ 222.257915][T10547] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1502'. [ 222.464227][T10556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1505'. [ 222.612352][T10556] bond9: option lacp_active: invalid value (4) [ 222.625893][T10556] bond9 (unregistering): Released all slaves [ 222.875853][T10577] ip6gre2: entered allmulticast mode [ 223.219311][T10588] syz.3.1518: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 223.219535][T10588] CPU: 1 UID: 0 PID: 10588 Comm: syz.3.1518 Not tainted syzkaller #0 PREEMPT(full) [ 223.219561][T10588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.219574][T10588] Call Trace: [ 223.219583][T10588] [ 223.219592][T10588] dump_stack_lvl+0xe8/0x150 [ 223.219629][T10588] warn_alloc+0x24d/0x270 [ 223.219664][T10588] ? kasan_save_track+0x4f/0x80 [ 223.219689][T10588] ? kasan_save_track+0x3e/0x80 [ 223.219712][T10588] ? __pfx_warn_alloc+0x10/0x10 [ 223.219738][T10588] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 223.219757][T10588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.219792][T10588] __vmalloc_node_range_noprof+0x127/0x1540 [ 223.219840][T10588] ? rcu_is_watching+0x16/0xb0 [ 223.219868][T10588] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 223.219893][T10588] ? __kmalloc_cache_noprof+0x321/0x600 [ 223.219922][T10588] ? __kmalloc_cache_noprof+0x14d/0x600 [ 223.219948][T10588] ? xskq_create+0x56/0x220 [ 223.219976][T10588] xskq_create+0x148/0x220 [ 223.220000][T10588] ? xsk_init_queue+0x8a/0xe0 [ 223.220026][T10588] xsk_init_queue+0x8a/0xe0 [ 223.220052][T10588] xsk_setsockopt+0x52a/0x960 [ 223.220077][T10588] ? __pfx_xsk_setsockopt+0x10/0x10 [ 223.220100][T10588] ? __pfx_aa_sk_perm+0x10/0x10 [ 223.220129][T10588] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 223.220151][T10588] ? __pfx_xsk_setsockopt+0x10/0x10 [ 223.220175][T10588] do_sock_setsockopt+0x17c/0x1b0 [ 223.220199][T10588] __x64_sys_setsockopt+0x13d/0x1b0 [ 223.220224][T10588] do_syscall_64+0x166/0x520 [ 223.220259][T10588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.220278][T10588] ? clear_bhb_loop+0x70/0xc0 [ 223.220301][T10588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.220319][T10588] RIP: 0033:0x7fc601f9e159 [ 223.220338][T10588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.220355][T10588] RSP: 002b:00007fc602dca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 223.220376][T10588] RAX: ffffffffffffffda RBX: 00007fc602225fa0 RCX: 00007fc601f9e159 [ 223.220391][T10588] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 223.220403][T10588] RBP: 00007fc602035024 R08: 0000000000000004 R09: 0000000000000000 [ 223.220415][T10588] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.220427][T10588] R13: 00007fc602226038 R14: 00007fc602225fa0 R15: 00007ffc73cb72e8 [ 223.220459][T10588] [ 223.220497][T10588] Mem-Info: [ 223.220507][T10588] active_anon:6057 inactive_anon:0 isolated_anon:0 [ 223.220507][T10588] active_file:0 inactive_file:43361 isolated_file:0 [ 223.220507][T10588] unevictable:0 dirty:320 writeback:0 [ 223.220507][T10588] slab_reclaimable:10587 slab_unreclaimable:104852 [ 223.220507][T10588] mapped:29672 shmem:522 pagetables:1213 [ 223.220507][T10588] sec_pagetables:0 bounce:0 [ 223.220507][T10588] kernel_misc_reclaimable:0 [ 223.220507][T10588] free:1302918 free_pcp:9251 free_cma:0 [ 223.220556][T10588] Node 0 active_anon:24228kB inactive_anon:0kB active_file:0kB inactive_file:173240kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118688kB dirty:1280kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14068kB pagetables:4688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 223.220609][T10588] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 223.220658][T10588] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 223.220713][T10588] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 223.220750][T10588] Node 0 DMA32 free:1257076kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24228kB inactive_anon:0kB active_file:0kB inactive_file:173240kB unevictable:0kB writepending:1280kB zspages:0kB present:3129332kB managed:2546708kB mlocked:0kB bounce:0kB free_pcp:37004kB local_pcp:12384kB free_cma:0kB [ 223.220806][T10588] lowmem_reserve[]: 0 0 0 0 0 [ 223.220839][T10588] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 223.232659][T10588] lowmem_reserve[]: 0 0 0 0 0 [ 223.232698][T10588] Node 1 Normal free:3939236kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 223.232781][T10588] lowmem_reserve[]: 0 0 0 0 0 [ 223.232816][T10588] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 223.232927][T10588] Node 0 DMA32: 826*4kB (UME) 839*8kB (UME) 484*16kB (UME) 252*32kB (UME) 146*64kB (UME) 62*128kB (UME) 18*256kB (UME) 14*512kB (UME) 4*1024kB (M) 1*2048kB (M) 292*4096kB (UM) = 1257056kB [ 223.233082][T10588] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 223.233175][T10588] Node 1 Normal: 7*4kB (UM) 3*8kB (UM) 7*16kB (UM) 4*32kB (UM) 6*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3939236kB [ 223.233333][T10588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 223.233348][T10588] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 223.233363][T10588] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 223.233379][T10588] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 223.233394][T10588] 43879 total pagecache pages [ 223.233402][T10588] 0 pages in swap cache [ 223.233408][T10588] Free swap = 124996kB [ 223.233415][T10588] Total swap = 124996kB [ 223.233423][T10588] 2097051 pages RAM [ 223.233430][T10588] 0 pages HighMem/MovableOnly [ 223.233437][T10588] 428758 pages reserved [ 223.233444][T10588] 0 pages cma reserved [ 223.788067][T10601] bond0: entered promiscuous mode [ 223.790623][T10601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.905324][T10609] macvlan2: entered promiscuous mode [ 223.905367][T10609] bond0: entered promiscuous mode [ 223.905399][T10609] bond_slave_0: entered promiscuous mode [ 223.905630][T10609] bond_slave_1: entered promiscuous mode [ 223.928180][T10609] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 223.939956][T10609] macvlan2: entered allmulticast mode [ 223.945478][T10609] bond0: entered allmulticast mode [ 223.950842][T10609] bond_slave_0: entered allmulticast mode [ 223.956861][T10609] bond_slave_1: entered allmulticast mode [ 223.962822][T10609] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 223.973432][T10609] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 223.980048][T10609] bond0: left allmulticast mode [ 223.980067][T10609] bond_slave_0: left allmulticast mode [ 223.980082][T10609] bond_slave_1: left allmulticast mode [ 223.980100][T10609] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 223.980218][T10609] bond0: left promiscuous mode [ 224.057881][ T5731] bond_slave_0: left promiscuous mode [ 224.058046][ T5731] bond_slave_1: left promiscuous mode [ 224.058206][ T5731] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 224.058448][T10610] tipc: Started in network mode [ 224.058471][T10610] tipc: Node identity 762f14574b2b, cluster identity 4711 [ 224.058627][T10610] tipc: Enabled bearer , priority 0 [ 224.059305][T10611] veth0_to_bond: mtu less than device minimum [ 224.152360][T10606] tipc: Disabling bearer [ 224.492157][T10633] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 225.120219][T10665] bond9: option lacp_active: invalid value (2) [ 225.136072][T10665] bond9 (unregistering): Released all slaves [ 226.243765][T10702] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.392155][T10702] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.533678][T10702] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.887226][T10702] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.073556][T10737] __nla_validate_parse: 14 callbacks suppressed [ 227.081884][T10737] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1557'. [ 227.157276][ T1029] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.234534][ T1029] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.249520][T10744] tipc: Enabled bearer , priority 30 [ 227.249996][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.346925][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.945065][T10771] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1568'. [ 228.098209][T10768] netlink: Failed to add filter helper -22 [ 228.098293][T10768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.503173][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1575'. [ 229.001136][T10808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1581'. [ 229.190219][T10817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1585'. [ 229.209866][T10821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1588'. [ 229.216937][T10817] ipvlan2: entered allmulticast mode [ 229.216958][T10817] syz_tun: entered allmulticast mode [ 229.457874][ T5626] block nbd1: Receive control failed (result -1) [ 229.620742][T10841] netlink: 'syz.0.1591': attribute type 1 has an invalid length. [ 229.626227][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1591'. [ 229.675163][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1591'. [ 230.029423][T10857] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1599'. [ 231.139281][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1609'. [ 231.334202][T10899] netlink: 'syz.1.1613': attribute type 9 has an invalid length. [ 231.675157][T10868] infiniband syz2: set active [ 231.681571][T10868] infiniband syz2: added team_slave_1 [ 231.696153][T10868] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 231.702513][T10868] infiniband syz2: Couldn't open port 1 [ 231.719513][T10868] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 231.734906][T10868] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 231.758699][T10868] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 231.843397][T10868] RDS/IB: syz2: added [ 231.848653][T10868] smc: adding ib device syz2 with port count 1 [ 231.851124][T10868] smc: ib device syz2 port 1 has no pnetid [ 231.942924][T10918] netlink: 'syz.4.1618': attribute type 9 has an invalid length. [ 232.447428][T10931] netlink: 'syz.2.1621': attribute type 1 has an invalid length. [ 232.715225][T10932] bond7: (slave gretap2): making interface the new active one [ 232.726253][T10932] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 232.817459][T10939] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1622'. [ 232.830964][T10939] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1622'. [ 233.349820][T10957] Bluetooth: hci0: unsupported parameter 5135 [ 233.349872][T10957] Bluetooth: hci0: unsupported parameter 8192 [ 233.349886][T10957] Bluetooth: hci0: unsupported parameter 5135 [ 233.349900][T10957] Bluetooth: hci0: unsupported parameter 8192 [ 233.599392][T10964] tipc: Enabling of bearer rejected, media not registered [ 234.149929][T10980] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 234.485232][T10983] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1639'. [ 234.519886][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1640'. [ 234.816629][T10991] netlink: 'syz.4.1642': attribute type 8 has an invalid length. [ 234.816674][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1642'. [ 234.816734][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1642'. [ 235.244132][T11002] netlink: 'syz.1.1646': attribute type 9 has an invalid length. [ 235.983162][T11022] FAULT_INJECTION: forcing a failure. [ 235.983162][T11022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.983232][T11022] CPU: 0 UID: 0 PID: 11022 Comm: syz.2.1653 Not tainted syzkaller #0 PREEMPT(full) [ 235.983257][T11022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.983267][T11022] Call Trace: [ 235.983274][T11022] [ 235.983281][T11022] dump_stack_lvl+0xe8/0x150 [ 235.983311][T11022] should_fail_ex+0x410/0x560 [ 235.983345][T11022] _copy_from_user+0x2d/0xb0 [ 235.983366][T11022] __sys_bind+0x1c6/0x410 [ 235.983394][T11022] ? __pfx___sys_bind+0x10/0x10 [ 235.983431][T11022] ? __pfx_ksys_write+0x10/0x10 [ 235.983464][T11022] __x64_sys_bind+0x7a/0x90 [ 235.983490][T11022] do_syscall_64+0x166/0x520 [ 235.983515][T11022] ? trace_irq_disable+0x3b/0x140 [ 235.983532][T11022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.983551][T11022] ? clear_bhb_loop+0x70/0xc0 [ 235.983573][T11022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.983596][T11022] RIP: 0033:0x7f3394d9e159 [ 235.983614][T11022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.983631][T11022] RSP: 002b:00007f3395be0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 235.983653][T11022] RAX: ffffffffffffffda RBX: 00007f3395025fa0 RCX: 00007f3394d9e159 [ 235.983666][T11022] RDX: 000000000000001c RSI: 00002000000000c0 RDI: 0000000000000003 [ 235.983678][T11022] RBP: 00007f3395be0090 R08: 0000000000000000 R09: 0000000000000000 [ 235.983690][T11022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.983702][T11022] R13: 00007f3395026038 R14: 00007f3395025fa0 R15: 00007ffc2f6b0f58 [ 235.983732][T11022] [ 236.482312][T11034] netlink: 'syz.2.1657': attribute type 1 has an invalid length. [ 236.739417][T11034] veth3: entered allmulticast mode [ 236.753380][T11034] bond8: (slave veth3): Enslaving as an active interface with a down link [ 236.809158][T11037] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 236.863572][T11034] macvlan2: entered promiscuous mode [ 236.871819][T11034] macvlan2: entered allmulticast mode [ 236.872514][T11034] bond8: entered promiscuous mode [ 236.920723][T11034] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 236.923947][T11034] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 236.930293][T11034] bond8: left promiscuous mode [ 237.016524][T11045] netlink: NAT attribute has 4 unknown bytes [ 237.016613][T11045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.410045][T11049] tipc: Resetting bearer [ 238.650464][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1671'. [ 239.004527][T10956] Set syz1 is full, maxelem 65536 reached [ 239.213655][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1676'. [ 239.223388][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1676'. [ 239.254169][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1676'. [ 239.263869][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1676'. [ 239.276239][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1676'. [ 239.366130][T11110] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1680'. [ 239.448656][T11113] xt_l2tp: invalid flags combination: 8 [ 239.580316][ T6159] hid-generic 0005:0008:0009.0001: item fetching failed at offset 2/3 [ 239.593558][ T6159] hid-generic 0005:0008:0009.0001: probe with driver hid-generic failed with error -22 [ 240.733077][T11153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1690'. [ 241.271185][T11129] ip6gre1: left promiscuous mode [ 241.271235][T11129] ip6gre1: left allmulticast mode [ 241.291498][T11129] bridge0: left allmulticast mode [ 241.298838][T11129] macvtap1: left promiscuous mode [ 241.298899][T11129] macvtap1: left allmulticast mode [ 241.417170][T11129] veth3: left allmulticast mode [ 241.619651][T11153] ip6gre1: entered promiscuous mode [ 241.619706][T11153] ip6gre1: entered allmulticast mode [ 241.630600][ T37] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.630636][ T37] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.632116][ T37] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.632144][ T37] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.632181][ T37] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.632203][ T37] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.632235][ T37] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.632256][ T37] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.216651][T11192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1702'. [ 242.329706][T11186] lo speed is unknown, defaulting to 1000 [ 242.369338][T11200] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1705'. [ 242.655278][T11208] netlink: 'syz.3.1708': attribute type 4 has an invalid length. [ 245.311044][T11311] __nla_validate_parse: 7 callbacks suppressed [ 245.311099][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1738'. [ 245.334809][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1738'. [ 245.347068][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1738'. [ 245.358516][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1738'. [ 245.371183][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1738'. [ 245.560788][T11320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1742'. [ 245.585519][T11322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1744'. [ 245.592286][T11320] netlink: 'syz.4.1742': attribute type 1 has an invalid length. [ 245.592307][T11320] netlink: 756 bytes leftover after parsing attributes in process `syz.4.1742'. [ 245.620395][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1743'. [ 245.742538][T11324] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1744'. [ 246.620029][T11361] --map-set only usable from mangle table [ 247.464377][T11374] sit0: entered promiscuous mode [ 247.464575][T11374] netlink: 'syz.4.1763': attribute type 1 has an invalid length. [ 247.734306][T11397] bridge0: left allmulticast mode [ 247.754505][T11398] xt_TCPMSS: Only works on TCP SYN packets [ 247.800475][T11397] bridge0: port 1(vlan2) entered blocking state [ 247.800619][T11397] bridge0: port 1(vlan2) entered disabled state [ 247.800759][T11397] vlan2: entered allmulticast mode [ 247.800774][T11397] geneve0: entered allmulticast mode [ 247.837663][T11397] vlan2: entered promiscuous mode [ 247.837709][T11397] geneve0: entered promiscuous mode [ 247.850434][T11401] erspan0: left allmulticast mode [ 247.850490][T11401] erspan0: left promiscuous mode [ 247.850726][T11401] bridge0: port 3(erspan0) entered disabled state [ 247.895871][T11401] bridge_slave_1: left allmulticast mode [ 247.895918][T11401] bridge_slave_1: left promiscuous mode [ 247.905440][T11401] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.932646][T11401] bridge_slave_0: left allmulticast mode [ 247.932697][T11401] bridge_slave_0: left promiscuous mode [ 247.951978][T11401] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.028576][T11401] bond0: (slave bridge0): Releasing backup interface [ 248.101424][T11397] bond4: option resend_igmp: invalid value (2878) [ 248.108087][T11397] bond4: option resend_igmp: allowed values 0 - 255 [ 248.210881][T11397] bond4 (unregistering): Released all slaves [ 249.752259][T11442] netlink: 'syz.4.1784': attribute type 1 has an invalid length. [ 250.043069][T11452] syzkaller0: entered promiscuous mode [ 250.049960][T11452] syzkaller0: entered allmulticast mode [ 250.065481][T11452] tipc: Enabled bearer , priority 0 [ 250.079927][T11452] tipc: Resetting bearer [ 250.088371][T11452] netlink: 'syz.0.1788': attribute type 1 has an invalid length. [ 250.552054][T11465] __nla_validate_parse: 10 callbacks suppressed [ 250.552112][T11465] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1794'. [ 250.862204][T11451] tipc: Resetting bearer [ 250.955196][T11451] tipc: Disabling bearer [ 251.027381][T11486] nbd2: detected capacity change from 0 to 63 [ 251.034798][T11486] block nbd2: NBD_DISCONNECT [ 251.040897][T11486] block nbd2: Disconnected due to user request. [ 251.048355][T ** replaying previous printk message ** [ 251.048355][T11486] block nbd2: shutting down sockets [ 251.049349][ T1993] [ 251.061080][ T1993] ====================================================== [ 251.068129][ T1993] WARNING: possible circular locking dependency detected [ 251.075165][ T1993] syzkaller #0 Not tainted [ 251.079587][ T1993] ------------------------------------------------------ [ 251.086619][ T1993] kworker/1:1H/1993 is trying to acquire lock: [ 251.092791][ T1993] ffff8880270b9c68 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0xff0 [ 251.101776][ T1993] [ 251.101776][ T1993] but task is already holding lock: [ 251.109846][ T1993] ffff888026c851f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 251.118301][ T1993] [ 251.118301][ T1993] which lock already depends on the new lock. [ 251.118301][ T1993] [ 251.128701][ T1993] [ 251.128701][ T1993] the existing dependency chain (in reverse order) is: [ 251.137711][ T1993] [ 251.137711][ T1993] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 251.144922][ T1993] __mutex_lock+0x19d/0x1550 [ 251.150040][ T1993] nbd_queue_rq+0xc1/0xff0 [ 251.154980][ T1993] blk_mq_dispatch_rq_list+0x499/0x1990 [ 251.161052][ T1993] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 251.167900][ T1993] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 251.174397][ T1993] blk_mq_run_work_fn+0x16c/0x300 [ 251.179945][ T1993] process_scheduled_works+0xc3d/0x1630 [ 251.186014][ T1993] worker_thread+0xa47/0xfb0 [ 251.191127][ T1993] kthread+0x38b/0x480 [ 251.195719][ T1993] ret_from_fork+0x514/0xb70 [ 251.200827][ T1993] ret_from_fork_asm+0x1a/0x30 [ 251.206119][ T1993] [ 251.206119][ T1993] -> #5 (set->srcu){.+.+}-{0:0}: [ 251.213240][ T1993] __synchronize_srcu+0xc9/0x2f0 [ 251.218698][ T1993] elevator_switch+0x1e8/0x7b0 [ 251.223990][ T1993] elevator_change+0x2fa/0x480 [ 251.229278][ T1993] elevator_set_default+0x375/0x440 [ 251.235001][ T1993] blk_register_queue+0x3f3/0x4e0 [ 251.240548][ T1993] __add_disk+0x6cb/0xe30 [ 251.245402][ T1993] add_disk_fwnode+0x100/0x3a0 [ 251.250685][ T1993] nbd_dev_add+0x733/0xb60 [ 251.255632][ T1993] nbd_init+0x168/0x1f0 [ 251.260315][ T1993] do_one_initcall+0x250/0x870 [ 251.265604][ T1993] do_initcall_level+0x10a/0x1a0 [ 251.271068][ T1993] do_initcalls+0x59/0xa0 [ 251.275920][ T1993] kernel_init_freeable+0x29d/0x3e0 [ 251.281645][ T1993] kernel_init+0x22/0x1d0 [ 251.286496][ T1993] ret_from_fork+0x514/0xb70 [ 251.291604][ T1993] ret_from_fork_asm+0x1a/0x30 [ 251.296900][ T1993] [ 251.296900][ T1993] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 251.304718][ T1993] __mutex_lock+0x19d/0x1550 [ 251.309834][ T1993] elevator_change+0x1af/0x480 [ 251.315125][ T1993] elevator_set_none+0xb5/0x140 [ 251.320501][ T1993] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 251.326830][ T1993] nbd_start_device+0x189/0xb30 [ 251.332205][ T1993] nbd_genl_connect+0x167d/0x1cd0 [ 251.337757][ T1993] genl_family_rcv_msg_doit+0x233/0x340 [ 251.343832][ T1993] genl_rcv_msg+0x614/0x7a0 [ 251.348862][ T1993] netlink_rcv_skb+0x226/0x4a0 [ 251.354149][ T1993] genl_rcv+0x28/0x40 [ 251.358653][ T1993] netlink_unicast+0x7bd/0x940 [ 251.363937][ T1993] netlink_sendmsg+0x813/0xb40 [ 251.369223][ T1993] sock_sendmsg_nosec+0x13a/0x180 [ 251.374776][ T1993] ____sys_sendmsg+0x54e/0x850 [ 251.380057][ T1993] ___sys_sendmsg+0x2a5/0x360 [ 251.385254][ T1993] __x64_sys_sendmsg+0x1b1/0x290 [ 251.390713][ T1993] do_syscall_64+0x166/0x520 [ 251.395829][ T1993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.402243][ T1993] [ 251.402243][ T1993] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 251.410851][ T1993] blk_alloc_queue+0x544/0x690 [ 251.416141][ T1993] __blk_mq_alloc_disk+0x194/0x390 [ 251.421770][ T1993] nbd_dev_add+0x494/0xb60 [ 251.426712][ T1993] nbd_init+0x168/0x1f0 [ 251.431396][ T1993] do_one_initcall+0x250/0x870 [ 251.436685][ T1993] do_initcall_level+0x10a/0x1a0 [ 251.442142][ T1993] do_initcalls+0x59/0xa0 [ 251.446990][ T1993] kernel_init_freeable+0x29d/0x3e0 [ 251.452712][ T1993] kernel_init+0x22/0x1d0 [ 251.457564][ T1993] ret_from_fork+0x514/0xb70 [ 251.462676][ T1993] ret_from_fork_asm+0x1a/0x30 [ 251.467965][ T1993] [ 251.467965][ T1993] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 251.475173][ T1993] fs_reclaim_acquire+0x71/0x100 [ 251.480638][ T1993] __kmalloc_noprof+0xbc/0x720 [ 251.485930][ T1993] tls_sw_sendmsg+0x59b/0x2b50 [ 251.491217][ T1993] sock_sendmsg_nosec+0x90/0x180 [ 251.496678][ T1993] sock_sendmsg+0x1ca/0x2d0 [ 251.501704][ T1993] splice_to_socket+0xb5e/0x12a0 [ 251.507164][ T1993] direct_splice_actor+0x101/0x160 [ 251.512802][ T1993] splice_direct_to_actor+0x57b/0xcb0 [ 251.518701][ T1993] do_splice_direct+0x195/0x290 [ 251.524078][ T1993] do_sendfile+0x52e/0x7c0 [ 251.529015][ T1993] __se_sys_sendfile64+0x144/0x1a0 [ 251.534650][ T1993] do_syscall_64+0x166/0x520 [ 251.539766][ T1993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.546179][ T1993] [ 251.546179][ T1993] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 251.554257][ T1993] lock_sock_nested+0x41/0x100 [ 251.559545][ T1993] inet_shutdown+0x6a/0x390 [ 251.564572][ T1993] nbd_mark_nsock_dead+0x2cb/0x550 [ 251.570213][ T1993] recv_work+0x1cee/0x1e10 [ 251.575163][ T1993] process_scheduled_works+0xc3d/0x1630 [ 251.581231][ T1993] worker_thread+0xa47/0xfb0 [ 251.586350][ T1993] kthread+0x38b/0x480 [ 251.590939][ T1993] ret_from_fork+0x514/0xb70 [ 251.596048][ T1993] ret_from_fork_asm+0x1a/0x30 [ 251.601337][ T1993] [ 251.601337][ T1993] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 251.608983][ T1993] __lock_acquire+0x15ff/0x2e50 [ 251.614355][ T1993] lock_acquire+0x115/0x350 [ 251.619378][ T1993] __mutex_lock+0x19d/0x1550 [ 251.624495][ T1993] nbd_queue_rq+0x373/0xff0 [ 251.629527][ T1993] blk_mq_dispatch_rq_list+0x499/0x1990 [ 251.635602][ T1993] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 251.642454][ T1993] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 251.648955][ T1993] blk_mq_run_work_fn+0x16c/0x300 [ 251.654504][ T1993] process_scheduled_works+0xc3d/0x1630 [ 251.660570][ T1993] worker_thread+0xa47/0xfb0 [ 251.665688][ T1993] kthread+0x38b/0x480 [ 251.670274][ T1993] ret_from_fork+0x514/0xb70 [ 251.675382][ T1993] ret_from_fork_asm+0x1a/0x30 [ 251.680669][ T1993] [ 251.680669][ T1993] other info that might help us debug this: [ 251.680669][ T1993] [ 251.690893][ T1993] Chain exists of: [ 251.690893][ T1993] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 251.690893][ T1993] [ 251.702976][ T1993] Possible unsafe locking scenario: [ 251.702976][ T1993] [ 251.710422][ T1993] CPU0 CPU1 [ 251.715783][ T1993] ---- ---- [ 251.721138][ T1993] lock(&cmd->lock); [ 251.725116][ T1993] lock(set->srcu); [ 251.731526][ T1993] lock(&cmd->lock); [ 251.738028][ T1993] lock(&nsock->tx_lock); [ 251.742443][ T1993] [ 251.742443][ T1993] *** DEADLOCK *** [ 251.742443][ T1993] [ 251.750581][ T1993] locks held by kworker/1:1H/1993: 4, last CPU#1: [ 251.756998][ T1993] #0: ffff888020ae0140 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 251.768052][ T1993] #1: ffffc90005f6fc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 251.780931][ T1993] #2: ffff8880266aed98 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 251.790333][ T1993] #3: ffff888026c851f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 251.799222][ T1993] [ 251.799222][ T1993] stack backtrace: [ 251.805109][ T1993] CPU: 1 UID: 0 PID: 1993 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) [ 251.814564][ T1993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.824624][ T1993] Workqueue: kblockd blk_mq_run_work_fn [ 251.830186][ T1993] Call Trace: [ 251.833470][ T1993] [ 251.836403][ T1993] dump_stack_lvl+0xe8/0x150 [ 251.841001][ T1993] print_circular_bug+0x2e2/0x300 [ 251.846029][ T1993] check_noncircular+0x12f/0x150 [ 251.850968][ T1993] __lock_acquire+0x15ff/0x2e50 [ 251.855821][ T1993] ? iowrite16+0x31/0x80 [ 251.860074][ T1993] lock_acquire+0x115/0x350 [ 251.864578][ T1993] ? nbd_queue_rq+0x373/0xff0 [ 251.869289][ T1993] __mutex_lock+0x19d/0x1550 [ 251.873887][ T1993] ? nbd_queue_rq+0x373/0xff0 [ 251.878569][ T1993] ? ret_from_fork_asm+0x1a/0x30 [ 251.883515][ T1993] ? unwind_next_frame+0x8f/0x2550 [ 251.888634][ T1993] ? nbd_queue_rq+0x373/0xff0 [ 251.893318][ T1993] ? __pfx___mutex_lock+0x10/0x10 [ 251.898349][ T1993] ? ret_from_fork_asm+0x1a/0x30 [ 251.903296][ T1993] ? stack_trace_save+0xa9/0x100 [ 251.908240][ T1993] ? __pfx_stack_trace_save+0x10/0x10 [ 251.913622][ T1993] nbd_queue_rq+0x373/0xff0 [ 251.918132][ T1993] ? __lock_acquire+0x14b9/0x2e50 [ 251.923160][ T1993] ? __pfx_nbd_queue_rq+0x10/0x10 [ 251.928194][ T1993] blk_mq_dispatch_rq_list+0x499/0x1990 [ 251.933755][ T1993] ? sbitmap_get+0x229/0x390 [ 251.938348][ T1993] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 251.944334][ T1993] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 251.950149][ T1993] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 251.956489][ T1993] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 251.963254][ T1993] ? lock_acquire+0x115/0x350 [ 251.967931][ T1993] ? process_scheduled_works+0x97a/0x1630 [ 251.973659][ T1993] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 251.979640][ T1993] ? blk_mq_run_work_fn+0x144/0x300 [ 251.984841][ T1993] blk_mq_run_work_fn+0x16c/0x300 [ 251.989867][ T1993] ? process_scheduled_works+0x97a/0x1630 [ 251.995593][ T1993] process_scheduled_works+0xc3d/0x1630 [ 252.001156][ T1993] ? __pfx_process_scheduled_works+0x10/0x10 [ 252.007142][ T1993] ? assign_work+0x3cf/0x5d0 [ 252.011740][ T1993] worker_thread+0xa47/0xfb0 [ 252.016343][ T1993] ? __kthread_parkme+0x71/0x1f0 [ 252.021295][ T1993] kthread+0x38b/0x480 [ 252.025363][ T1993] ? __pfx_worker_thread+0x10/0x10 [ 252.030477][ T1993] ? __pfx_kthread+0x10/0x10 [ 252.035070][ T1993] ret_from_fork+0x514/0xb70 [ 252.039663][ T1993] ? __pfx_ret_from_fork+0x10/0x10 [ 252.044802][ T1993] ? __switch_to+0xc89/0x1420 [ 252.049486][ T1993] ? __pfx_kthread+0x10/0x10 [ 252.054079][ T1993] ret_from_fork_asm+0x1a/0x30 [ 252.058857][ T1993] [ 252.073649][ T1993] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.073694][ T1993] Buffer I/O error on dev nbd2, logical block 0, async page read [ 252.174438][ T2016] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 252.174486][ T2016] Buffer I/O error on dev nbd2, logical block 1, async page read [ 252.174514][ T2016] Buffer I/O error on dev nbd2, logical block 2, async page read [ 252.174532][ T2016] Buffer I/O error on dev nbd2, logical block 3, async page read [ 252.174725][ T2016] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 252.174755][ T2016] Buffer I/O error on dev nbd2, logical block 0, async page read [ 252.174773][ T2016] Buffer I/O error on dev nbd2, logical block 1, async page read [ 252.174791][ T2016] Buffer I/O error on dev nbd2, logical block 2, async page read [ 252.174808][ T2016] Buffer I/O error on dev nbd2, logical block 3, async page read [ 252.174926][ T2016] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 252.174955][ T2016] Buffer I/O error on dev nbd2, logical block 0, async page read [ 252.174972][ T2016] Buffer I/O error on dev nbd2, logical block 1, async page read [ 252.175089][ T2016] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 252.175228][ T2016] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 252.175622][ T2016] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 252.175769][ T2016] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 252.175918][ T2016] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 252.175975][ T5628] ldm_validate_partition_table(): Disk read failed. [ 252.176072][ T2016] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 252.179755][ T5628] Dev nbd2: unable to read RDB block 0 [ 252.180336][ T5628] nbd2: unable to read partition table [ 252.192681][ T5628] ldm_validate_partition_table(): Disk read failed. [ 252.193145][ T5628] Dev nbd2: unable to read RDB block 0 [ 252.193654][ T5628] nbd2: unable to read partition table [ 252.204662][T11498] ip6t_rt: `--rt-type 0' required before `--rt-0-*'