last executing test programs: 3.421192196s ago: executing program 2 (id=4356): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010003b1528bd7000000000007fffffff", @ANYRES32=0x0, @ANYBLOB="0400000000000000140012800900010076657468000000000400008008000300000000000500110001"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.849448523s ago: executing program 4 (id=4362): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001000ff0f000b00060000ffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a002200faa51eb1950d0000"], 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000050) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000070000000030a010100000000000000000100000008000b400000000014000480080002400000000008000140000000000900010073797a3000000000340008800c00024000000000000000000c000140000000000000000001400000000000000000140000001000010000000000000000000000000a00"/184], 0xb8}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000d45997e2ccdd5c01c0b4ea31e2f35388ebcb226149da743114f878a4631c9f6f7a569f7acf390b60546509ca882586584816f4e3e415088488301f6c658d2df6a3ad3190e162f56c6ed277eef76c31260e5402e594ebfd03ff53b320ec2f4d022e15a9409394d77ed5b75e27c85b2614360faf9c08dc158cb6d092c8790e6fc436d85d61f52be1beff5ce7d56774d15e3b3fe67a6a6a84fc0761bca4d2c748165d68eeb5d8d810e1b1f41eb7bf499e1e9dbf73a47742607ddd91d4b33dc2f6347e7b33329177401973da02b6808bab23256675db570a3033ebb4", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25350000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800730002000000080001007063690011000200303030303a30303a31302e30000000000800030001000000"], 0x60}}, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000600)=0x3ff, 0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) listen(r9, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r8, &(0x7f0000003c40)=[{{&(0x7f0000000500)={0xa, 0x4e23, 0x10001, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000540)="6a3a4f1984be5f6c91f9461f09c0db48f5d5d316b9c22a0ea377540a6545a8f99011e8192f53a3419fb9040a4d61675c74c8e53a03def3bcb6cbc91ed7fc9e161a79d74e3eb3d0aafc68f561", 0x4c}], 0x1}}], 0x1, 0x4000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="02000297e906d4966a39002600fcff6472fcc50bb1a6b55e90487b483f5d05a51f3f5c169cdc5665bfa3"], 0xc) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "1100"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "4f86685b7ab86a3c", "afb6c5b29ca2bb38d41ac2fc7ddf972d", '\x00', "bb01000000000001"}, 0x28) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r4, @ANYRES8=r5, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020089540a000400"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) 1.836165261s ago: executing program 2 (id=4363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000440)={{r2}, "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"}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) 1.613502299s ago: executing program 3 (id=4367): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000540)={0x0, 0x3, 0x1, [0xff, 0x9, 0x7ff, 0x3, 0x7f], [0x1, 0x8b6, 0x6, 0xd52, 0x80, 0x1a, 0x3, 0x7, 0x7, 0x2, 0x1, 0x5, 0xfff, 0x81, 0x7, 0x200, 0xfffffffffffffffc, 0x40007, 0x7, 0xf, 0x1000000008bc, 0x0, 0x7, 0xa, 0x3, 0x1000, 0x72d, 0x126dbad8, 0x0, 0x59, 0xfffffffffffffff0, 0x6, 0x54, 0x6a05, 0x9, 0x8009, 0x80000001, 0xd30, 0x8, 0x1, 0x4, 0x4, 0x80, 0xc, 0x4, 0x4, 0x79, 0x5, 0x1, 0x4, 0x7ff, 0x7, 0x6, 0x2, 0x3, 0x1000000000, 0x0, 0x7fffffffffffffff, 0x9, 0x7, 0x7, 0x0, 0x8, 0xc, 0x7fff, 0x2, 0x9, 0x1, 0x74c8, 0x1ff, 0x5, 0xfffffffffffffff7, 0x3, 0x8, 0x5, 0x7, 0x7fffffffffffffff, 0x78d9a18c, 0x9, 0xe, 0x40, 0x0, 0x8, 0x1, 0x7, 0x7, 0xff, 0x40, 0x5, 0x9, 0xa5a, 0x2, 0x8, 0x6, 0x0, 0xff, 0x7, 0x3ff, 0x3, 0x8, 0x0, 0x4d, 0x5, 0x3be186e3, 0x5, 0x7, 0x208, 0x1, 0x2de0, 0x7, 0x400, 0x3c571f95, 0xc6, 0x8001, 0x8000000000000001, 0x1, 0xffffffffffffffff, 0xbc, 0x5, 0x7, 0x800]}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f00000000c0)=0x1, 0x4) unshare(0x22020600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="08000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=@gettfilter={0x6c, 0x2e, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x3}, {0x0, 0x2}, {0x9, 0x7}}, [{0x8, 0xb, 0xfffffdfd}, {0x8, 0xb, 0xd9}, {0x8, 0xb, 0xc}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x797}, {0x8, 0xb, 0x8}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff3}, {0x0, 0x2}, {0x8}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x6a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000020c0)=ANY=[@ANYRES64=r4, @ANYRES16=r5, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, 0x0, 0x0, 0x2010) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f0000000300)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)}, {&(0x7f0000000380)="09a2d119601502ed05a4013be8fd11f75be159db20c4d98cd97e4fabe83017d1b4445f5e3fb0b8b47b615a3b5ff32b718ef8ab72e5402b4d5c4889102f2a35e7b017ff3cf1c65c1bd685de3baee584ddb84139d2e2d2177dc5f0289fb1ed207472fa3068423f0c7777daf96ad7312a6ebe267b7bca1f0a68c516151e56d72ae5a6", 0x81}, {&(0x7f0000000dc0)="f390bb9ceadf6f8452527bcf5b3370daab54215da062fee7ac05f8db623707e5b4b5c71baa6c4c750b59d52058b614a3981ce05d1ebc72aab57aed041d265f629f1974391bf2d994fa88", 0x4a}, {&(0x7f0000000e80)="096dda520e23089ef1124f0211507251bf31822ac73c2fcb6dcdd075f853c4c1c141e870768b1d91c180abc8b0630c39f2620986c27bed1a522ff9b1141abd0f2bba77d8c985a6002c528b08e83f41c4e360341eda7560779eb4eef09f598eba48eda7d66ecc8a3c60b6582465896b32e6b9fd15bd", 0x75}], 0x4, &(0x7f0000001000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x38}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001080)}, {&(0x7f0000001180)="0ac4082e342e2f654d1540d67d4e394846d2b480e6636398680f957e78021cf5375741ca21aaa2965a9b54f898", 0x2d}, {&(0x7f0000001240)="56550745e7e9c1d30fd9e668ec831f12f0b02aa79c1c8ac922f398ddb2470297b45949b7ebe1f7c509a4c25f7bc70847a51d31c6866e286f5e063c22b22d244dd05cfaee963469f709d66234bb77f02c5166f7829996a385735ee2b773c8eef892dd870131cc9534c6241cd83b12a1ce", 0x70}, {&(0x7f00000012c0)="0cfd6e89c34b30893f6ba998a9f40b8a6fd1df973a6858b01fc698f83c549b75cc6695002172c423866e48fda81c2189e249b261ec677abacf72d30d3d8a85e72c77ba8e7b3c6be9e71ca36c339eb26226023911a8bb42e98c08f398fb23b20e6d01baaa6e0ec362b0b19e85a43287878a15", 0x72}, {0x0}], 0x5}}, {{&(0x7f00000015c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, 0x0}}, {{&(0x7f0000001ac0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000001b00)="ae405d7805192b6d075303c2d93c7155626133eec84cadfb48e0c5fdfe70fe34ff55b1d9d4824c5f39ec1ee1452581be62db40cdd115dd905d1191dc978c816df00824f5aba43eb2593fa96e48166c4e7ca1372781264cf77386ce048d0840d215e63f65ede9f672cd406dcab69e43dd0110dfc2ad00b416f41514f913970cd136af4c33ae9e811f5cf89dc469554b2f2d2616bb7639a091d150c8ac4ddd50ab82efd52d2ae436771f113ee62d6ca9a9e070e699ea7a2f1a8f46488e6a3e67e546ec87583e963052ccfc363498ffa60f98", 0xd1}], 0x1, &(0x7f0000001d00)}}, {{&(0x7f0000001e00)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001e40)="fec7269df48a0d0c127ff7551f17832e17f3aefb8400383bf67a588abf2fcbefe2bedf6beb225b6142c66aae86740d0eae85b21478bb775bec99ecbe32b6bee25f76790609e19298ad1cad1a9815caccde814fd30291ed723d761ff0ffcfc771f388fbf23b78f4c5a9689aa8c4f4e65d0aa1d87c1d03f3167ccbe5ef2768daa2988361ff79b93126b55e54cc9984ea7d5f39d0440049ef4fbff61d0a1131a627e8329017b6c9a6e339265a56eb574eadf9c4af443a2d364b5ac9227e0fcd53c23608b8cd98daeb248b46556f", 0xcc}], 0x1}}], 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) shutdown(r0, 0x1) 1.511643186s ago: executing program 2 (id=4368): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b40900000000000061111000000064008510000002000000850000005000000095000000000000009500000000000000752791631222a4b4dbffcb3e429313c626d8575b733278661f13493d24a9e56d000045361df4f2d2d4f8c2f01b4ebc5e56040b1134ecdb1e1f38ce94b48a6e6325a3c0fa265afb4cfef8a901af313b77f13a966aeb27ccb654fac79ae10600000075fa8341a6875728e9a45938c338b7a958249211eb70d5d978eff738aa6be2d07fedb69c65b63dd665e66a92dec0189df1c319c72478e432b17c45bec66c923fb483a6d4e050bfaa8f8f85364f849802fa2c3b80975e8753560000f0c313d9c19ebc37219f14fbcdd539b9b96af3000000000000a5ba432868c94d89a587a608d4a2775463f6ac50a87677ff52cdc32c5ca6b15a0f7dd116bf074bdf18f78df0a7ea01bf1b70dc492fb776d382e53f33275334ab9055204cf808192fe7965d545adc3025140be6c4ce9c53a78654d285020c3ed1802e4905bdaf45b00ca255fc9720af279d003823d909e0028d0e54b3bbab4040064c8075fb861c0957378d1aa25363fe4e6ee692dbc22d130f06b86ea597aa9147723879c8f36b42109343d97e02186e240d1c455ab6e5bdd818e196a93467649726cd2c134ede56f61c9b8da92eee2a520a1de4078d326bb41cf0e5e83f9354fabeb8f726aa631253e5cb18e2268a4c530df35d2e40646363b84d6e3cc37809dc3dc91b1747d982b00d04f69400"/542], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 1.345238154s ago: executing program 2 (id=4371): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="bc179dcdbbed604d2da49b86a8e849018aac73c91980a4e4c9bca0b65d59ed48af35048f6571c4162bc7453d12723fe3c3700c9059959a26147911fd15b87a7469b252aab2e375d5366ce5edd71ef3d795bd5af52e61da9e254220c6293c38c7ce1c28047314b0bc82c814156531349367a1f4e4f6eeccb77dddeb61a9af88ea0182a9b45d42bd", @ANYRES64=0x0], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x32, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r3, 0x0, 0x0}, 0x10) 1.167176895s ago: executing program 3 (id=4373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$nl_sock_diag(0x10, 0x3, 0x4) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @private=0xa010102}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x5, 0x4, 0x3, 0x2, 0xf6c, 0x68, 0x2f, 0x5, 0x33, 0x1, @remote, @rand_addr=0x64010101}}}}, 0x3e) 1.160223129s ago: executing program 1 (id=4374): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f00000000c0)=0x1, 0x4) unshare(0x22020600) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x20, 0x9}, @mss={0x2, 0xaf}, @window={0x3, 0xda, 0x8}], 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x6a) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, 0x0, 0x0, 0x2010) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f0000000300)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000001000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001080)}, {&(0x7f0000001180)}, {&(0x7f0000001240)="56550745e7e9c1d30fd9e668ec831f12f0b02aa79c1c8ac922f398ddb2470297b45949b7ebe1f7c509a4c25f7bc70847a51d31c6866e286f5e063c22b22d244dd05cfaee963469f709d66234bb77f02c5166f7829996", 0x56}, {0x0}, {0x0}], 0x5}}, {{&(0x7f00000015c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001d00)}}, {{0x0, 0x0, &(0x7f0000001f40)}}], 0x5, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.07934752s ago: executing program 2 (id=4375): socket$inet6(0xa, 0x3, 0x5) (async) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) read(r0, &(0x7f0000000040)=""/244, 0xf4) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="800000002e00090025bd700000dcdf250500000069000a"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x40000000, {}, [{0x54, 0x1, [@m_mpls={0x1b, 0x1, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf47eb}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) socket(0x15, 0x5, 0x0) (async) r6 = socket(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000580)={0x2, 0x0, @local}, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r7, 0x10, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, 0x0, 0x10) (async) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, 0x0, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r3, 0x1, 0x1, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x1cc, r8, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x283a}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xe}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x70}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xe}, {0x6, 0x11, 0xe}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xe8}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x800}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x24000405}, 0x2004c005) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$TIPC_IMPORTANCE(r9, 0x10f, 0x7f, &(0x7f00000000c0), 0x4) 1.028281568s ago: executing program 1 (id=4377): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="a800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010008000200ac1e00010c0002800500010000000000440010800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e9780004000400"], 0x1c}}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000240)={0x0, 0x8000, 0x35, 0x1}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000500)='GPL\x00', 0x5, 0x11, &(0x7f00000017c0)=""/4098}, 0x90) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x50, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x2}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x800}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfffffff7}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c800}, 0x2000c011) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000640)={r3, 0x5, 0x1, [0x2f, 0x8000000000000000, 0x4, 0x40, 0x100], [0x6f6, 0x0, 0x5, 0xc, 0x6, 0x39, 0x7, 0x4, 0x7ff, 0x5, 0x0, 0x8, 0xe, 0x9, 0xae, 0x1, 0x1, 0x4, 0x7, 0x0, 0x6, 0x24f, 0x2, 0x8, 0x0, 0x8000, 0x7, 0x7, 0x1, 0x5, 0x0, 0x2, 0x1, 0x2, 0x3, 0x464b, 0x8, 0x2, 0x2, 0x8, 0x80000001, 0x7, 0x0, 0x5, 0x6, 0x89d, 0x3, 0x3, 0xfffffffffffffff7, 0xf45f, 0x1, 0xaa, 0x0, 0x9, 0x5, 0x1, 0x7f73c542, 0x8, 0x0, 0x8, 0x6, 0x9, 0xfffffffffffffff8, 0x6cf1bf69, 0x1, 0x5, 0xeaa5, 0xc4, 0x2, 0x9, 0x7, 0xf94, 0x7ff, 0x2, 0x10000, 0x8, 0x8, 0xffffffff, 0x0, 0x81, 0x3ff, 0x4, 0x7, 0x4, 0x9, 0x9, 0x401, 0x925a, 0xf26, 0xfffffffffffffff0, 0xc51f, 0xb8, 0x8, 0x6, 0xe76, 0x5, 0x3, 0x0, 0x3, 0x9, 0x14, 0x1, 0x3, 0x8, 0xb, 0x6, 0xfffffffffffffff9, 0x400, 0xb7, 0x18, 0x6, 0x8, 0x50000000000, 0xc9, 0x5, 0x3, 0x4, 0x4, 0x6, 0x0, 0x4]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) r8 = syz_open_procfs$namespace(r7, &(0x7f0000001780)='ns/ipc\x00') getpid() sendmmsg$unix(r6, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x18, 0x1, 0x1, [r8, r5]}}], 0x18, 0x800}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r0, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) 907.468222ms ago: executing program 3 (id=4378): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x1c, 0x1e, 0x1, 0x70bd25, 0x0, {0x2, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000140), 0x4) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189", @ANYRES8=r4], 0x340a) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="8049aeb45f8ee8887f34000000", @ANYRES16=r3, @ANYBLOB="010000000000fedbdf25020202000900030073797a32000000000900010073797a31000000000500040005000000"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)=ANY=[@ANYBLOB="2800000040000701feffffff00000000017c0000040042800c00018008000300", @ANYRES32, @ANYBLOB="04000380"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 907.065246ms ago: executing program 0 (id=4379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x74}}, 0x0) 858.077423ms ago: executing program 4 (id=4380): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001e6f8b1830149b12e00000001d900000000000000000000000100000000200002000a00000000000000fe800000000000000004000000000000000000000d0001007564703a73"], 0x6c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r2, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300, 0x0, 0xc090}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="002330000000100001080000000700010000000002000000c043bcac40c42af1c0d800028f6c1bd274f1a3f1992d23e7da6764edaa0dad70d340a48801b6d7ee7369d3428e8c1a29e652e357355bfb732a0e6e7c57d6011e59864882ffff04b087f7159c0f916d7832ea68cafaa6643da8355d29dcde4361fb92ecafc1e4b0a3c05fa3d1e65e78299d8866e3758b885e72cabb", @ANYRES32=0x0, @ANYBLOB="0000010000000000080028008949000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20004005}, 0x0) 787.902113ms ago: executing program 0 (id=4381): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/542], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 727.615762ms ago: executing program 1 (id=4382): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) 713.938658ms ago: executing program 0 (id=4383): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000540)={0x0, 0x3, 0x1, [0xff, 0x9, 0x7ff, 0x3, 0x7f], [0x1, 0x8b6, 0x6, 0xd52, 0x80, 0x1a, 0x3, 0x7, 0x7, 0x2, 0x1, 0x5, 0xfff, 0x81, 0x7, 0x200, 0xfffffffffffffffc, 0x40007, 0x7, 0xf, 0x1000000008bc, 0x0, 0x7, 0xa, 0x3, 0x1000, 0x72d, 0x126dbad8, 0x0, 0x59, 0xfffffffffffffff0, 0x6, 0x54, 0x6a05, 0x9, 0x8009, 0x80000001, 0xd30, 0x8, 0x1, 0x4, 0x4, 0x80, 0xc, 0x4, 0x4, 0x79, 0x5, 0x1, 0x4, 0x7ff, 0x7, 0x6, 0x2, 0x3, 0x1000000000, 0x0, 0x7fffffffffffffff, 0x9, 0x7, 0x7, 0x0, 0x8, 0xc, 0x7fff, 0x2, 0x9, 0x1, 0x74c8, 0x1ff, 0x5, 0xfffffffffffffff7, 0x3, 0x8, 0x5, 0x7, 0x7fffffffffffffff, 0x78d9a18c, 0x9, 0xe, 0x40, 0x0, 0x8, 0x1, 0x7, 0x7, 0xff, 0x40, 0x5, 0x9, 0xa5a, 0x2, 0x8, 0x6, 0x0, 0xff, 0x7, 0x3ff, 0x3, 0x8, 0x0, 0x4d, 0x5, 0x3be186e3, 0x5, 0x7, 0x208, 0x1, 0x2de0, 0x7, 0x400, 0x3c571f95, 0xc6, 0x8001, 0x8000000000000001, 0x1, 0xffffffffffffffff, 0xbc, 0x5, 0x7, 0x800]}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f00000000c0)=0x1, 0x4) unshare(0x22020600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="08000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=@gettfilter={0x6c, 0x2e, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x3}, {0x0, 0x2}, {0x9, 0x7}}, [{0x8, 0xb, 0xfffffdfd}, {0x8, 0xb, 0xd9}, {0x8, 0xb, 0xc}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x797}, {0x8, 0xb, 0x8}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff3}, {0x0, 0x2}, {0x8}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x6a) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000020c0)=ANY=[@ANYRES64=r4, @ANYRES16=r5, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, 0x0, 0x0, 0x2010) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f0000000300)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)}, {&(0x7f0000000380)="09a2d119601502ed05a4013be8fd11f75be159db20c4d98cd97e4fabe83017d1b4445f5e3fb0b8b47b615a3b5ff32b718ef8ab72e5402b4d5c4889102f2a35e7b017ff3cf1c65c1bd685de3baee584ddb84139d2e2d2177dc5f0289fb1ed207472fa3068423f0c7777daf96ad7312a6ebe267b7bca1f0a68c516151e56d72ae5a6", 0x81}, {&(0x7f0000000dc0)="f390bb9ceadf6f8452527bcf5b3370daab54215da062fee7ac05f8db623707e5b4b5c71baa6c4c750b59d52058b614a3981ce05d1ebc72aab57aed041d265f629f1974391bf2d994fa88", 0x4a}, {&(0x7f0000000e80)="096dda520e23089ef1124f0211507251bf31822ac73c2fcb6dcdd075f853c4c1c141e870768b1d91c180abc8b0630c39f2620986c27bed1a522ff9b1141abd0f2bba77d8c985a6002c528b08e83f41c4e360341eda7560779eb4eef09f598eba48eda7d66ecc8a3c60b6582465896b32e6b9fd15bd", 0x75}], 0x4, &(0x7f0000001000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x38}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001080)}, {&(0x7f0000001180)="0ac4082e342e2f654d1540d67d4e394846d2b480e6636398680f957e78021cf5375741ca21aaa2965a9b54f898", 0x2d}, {&(0x7f0000001240)="56550745e7e9c1d30fd9e668ec831f12f0b02aa79c1c8ac922f398ddb2470297b45949b7ebe1f7c509a4c25f7bc70847a51d31c6866e286f5e063c22b22d244dd05cfaee963469f709d66234bb77f02c5166f7829996a385735ee2b773c8eef892dd870131cc9534c6241cd83b12a1ce", 0x70}, {&(0x7f00000012c0)="0cfd6e89c34b30893f6ba998a9f40b8a6fd1df973a6858b01fc698f83c549b75cc6695002172c423866e48fda81c2189e249b261ec677abacf72d30d3d8a85e72c77ba8e7b3c6be9e71ca36c339eb26226023911a8bb42e98c08f398fb23b20e6d01baaa6e0ec362b0b19e85a43287878a15", 0x72}, {0x0}], 0x5}}, {{&(0x7f00000015c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, 0x0}}, {{&(0x7f0000001ac0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000001b00)="ae405d7805192b6d075303c2d93c7155626133eec84cadfb48e0c5fdfe70fe34ff55b1d9d4824c5f39ec1ee1452581be62db40cdd115dd905d1191dc978c816df00824f5aba43eb2593fa96e48166c4e7ca1372781264cf77386ce048d0840d215e63f65ede9f672cd406dcab69e43dd0110dfc2ad00b416f41514f913970cd136af4c33ae9e811f5cf89dc469554b2f2d2616bb7639a091d150c8ac4ddd50ab82efd52d2ae436771f113ee62d6ca9a9e070e699ea7a2f1a8f46488e6a3e67e546ec87583e963052ccfc363498ffa60f98", 0xd1}], 0x1, &(0x7f0000001d00)}}, {{&(0x7f0000001e00)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001e40)="fec7269df48a0d0c127ff7551f17832e17f3aefb8400383bf67a588abf2fcbefe2bedf6beb225b6142c66aae86740d0eae85b21478bb775bec99ecbe32b6bee25f76790609e19298ad1cad1a9815caccde814fd30291ed723d761ff0ffcfc771f388fbf23b78f4c5a9689aa8c4f4e65d0aa1d87c1d03f3167ccbe5ef2768daa2988361ff79b93126b55e54cc9984ea7d5f39d0440049ef4fbff61d0a1131a627e8329017b6c9a6e339265a56eb574eadf9c4af443a2d364b5ac9227e0fcd53c23608b8cd98daeb248b46556f", 0xcc}], 0x1}}], 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) shutdown(r0, 0x1) 679.410774ms ago: executing program 4 (id=4384): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="02030003100000002cbd7000fbdbdf2502000900400000001c0000000000000005000600000000000a00000000000000000000000000000000000000000000010200000000000000020001000000000000fdfb020000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x4008000) 591.687454ms ago: executing program 1 (id=4385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) (rerun: 64) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="10000000040000000800000002000000000000003faa8bc4c169bd746166b21fb718f8911ddcd93c0be357bb0c2ff26edb8e6dc3b43be3af665d24f9fde92ded1b809f959e5a90cf7626d2850cdd8a66c27396a8e487eb6afc665ac7d82d4c51f3a610149a5fae6197881b9e785d0d4d1851c74c6d676abd52c19e9dbe6a", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x3}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffd, 0xfffffffe, 0xb, 0x1, 0xfffffffc, 0xffff, 0x5, 0x4000007}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) (async, rerun: 64) r8 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r8, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0xd) (rerun: 64) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r9, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @local, 0xfffffff8, 0x4}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)="72fc7c41c2fda9f5a09c814d84d63c27098a36735386397d52b105ca6d8dd0b133bb11efdbd86b0a37d3d6410040e49a366b30c71e2f87b9bdeddd06c6924fcdd8", 0x41}, {&(0x7f0000000100)="670b49d4192c16fce0d660cbecf892cd8ae68e06760b19ea6dce3bccd63d8e2e09f834fec2c1f14d4919cccaf86a5a8715beeea986e7959857", 0x39}, {&(0x7f0000000180)="fcd55a0e8d4e148df5eac2c9ae2c1c8f7b216aa2d3f0e1ef2a9b3ed3dcaeb15218eec78407d9e58071a7022eb2832f34cbdc212edd87e3e3dec43bff", 0x3c}, {&(0x7f00000001c0)="17aeb1dbcc2e4520f634aec9823dec69020c6d4deceb2d774fa6c1b0a78b3f0d9339a00f87e0d158030a122fb35f6dabcb9516550f7b9a4a557e5e2d09415ca9196ba5cbfcdb0c32fb446b7a0ab0375d7f3f8f904931beae677c0384e07d87c4b741d9b2968530656e3928ecaed555800110f0362f9b05afe656d3b327892c8a408a0029bc43c21191aef9e731b988b9c3a28354f52cc397", 0x98}, {&(0x7f0000000280)}], 0x5, &(0x7f0000000340)=[{0x108, 0x10b, 0x80, "0ae87ad36bf0aa6736865f05b50718815a227cca456f4eb5c5c189087f582cad0695713994b39a16467d7746bf4a0ff95b5cd4bf0453774bb8a7382a37954c35e90dbe2151672f024cc1c346ec45775b4405549007cacc5bcb72e4ee04929bc929c1621067c77433e0280ea3656f0b9d2e1d1ac78847da4759a13312ff7ad84e62facdcb599172cfb5223bc24a3f1dc5971260d462e60f767cb541827ecb827093f7e4ef00d75fd38423cc6e5ed80135dc1855f347c3239274123954e817a5b9eeda2c7407624a5e3fac9568baae082f655318b9121bcfe635eec312ccc46a16e37ed17527ab576c2868434f26c36d73939c60943bca"}, {0x98, 0x1, 0x7f, "d1908cc23b0726bec8856b8d21a9fcd45607a31d24667926613770bf3fec589b23bdaee0a6b9e58cdfb98f39151a8b0c5c0489618c27907fe5829094643b0f583dab1fd04070de85321fb93d0c584fd47b8d5c1d3e6d907bcbbc7aea07394c914f6d5cd1c236b65387a3dcad19835ec119daf4a4c4498deeb65cb7f365f660f8cc47e417c2fc"}, {0x90, 0x6, 0x80000000, "7cacaa61973a2a15a7cab0c5c7c5c4e40497b2eb98ab93c86662a946ab920def87188610af5151118f540db0ff5f56425c4acf90e060fd67cc38bd676a95666c829a9cea6dc78c66c0beb81a5e18b28665deb1e63b45695d5d2142c844ecbf2d1f4017fc3825434f812107d9ed9e4d98f1ba0abc5067f5d4a03d353b"}, {0x108, 0xff, 0x7, "ebd9c74995abaaac88a52d159ca8c166e6571512a07f245048ef6aa7e3a1d0a2cb21e70f01bdc6e4be4c03107b85aba81a16349d89c9a8d8dc9dc08ae5ddb642eeb0341641c9a8e67d078574f3ef8080c4936c615bc95c94dcab8687f73f5b07fb095b2018d0fbad8e8eba0ac7043576a7c6ecc15334b7d09a5c637ba3ea26abb940248e814b5728e3abaef6225b80165a1f25f5ca1c55ccaed0f27d5e7c9a975b022bd2080ea374b7fc4b6639bdf4b6819af13bce1926de89379129321473fde1a48720623760bffdf56a520ca98ad7a5dd834f2cbfed156c74552d9c7dc7e729df91d6bf29dcc0047e149c1f0494a1288356e4f1429194"}, {0x28, 0x104, 0xc11, "d3750cbc9ea144c04f25fea7f3092c9cae64bdc8588b"}, {0x110, 0x10a, 0x308d, "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"}, {0x28, 0x103, 0xd, "af6e19b2e5509f148c139c94b9527672176d118119f9fa"}], 0x498}, 0x4) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$unix(r11, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) (async) ppoll(&(0x7f0000000100)=[{r11, 0x5082}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="180000002e00050026bdf000fcdbdf25948adb85a6fdd304"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async, rerun: 64) ioctl$BTRFS_IOC_QUOTA_RESCAN(r10, 0x4040942c, &(0x7f0000000280)={0x0, 0x6b88, [0x9, 0x1b21, 0x0, 0x6, 0x5, 0x10000]}) (rerun: 64) 591.448503ms ago: executing program 3 (id=4386): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x60000000, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}}, 0x0) 339.883381ms ago: executing program 4 (id=4387): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f00000000c0)=0x1, 0x4) unshare(0x22020600) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x20, 0x9}, @mss={0x2, 0xaf}, @window={0x3, 0xda, 0x8}], 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x6a) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, 0x0, 0x0, 0x2010) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f0000000300)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000001000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001080)}, {&(0x7f0000001180)}, {&(0x7f0000001240)="56550745e7e9c1d30fd9e668ec831f12f0b02aa79c1c8ac922f398ddb2470297b45949b7ebe1f7c509a4c25f7bc70847a51d31c6866e286f5e063c22b22d244dd05cfaee963469f709d66234bb77f02c5166f7829996", 0x56}, {0x0}, {0x0}], 0x5}}, {{&(0x7f00000015c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001d00)}}, {{0x0, 0x0, &(0x7f0000001f40)}}], 0x5, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 301.29292ms ago: executing program 0 (id=4388): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x7}, 0x1c) (async) listen(r1, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a}, 0x20) (async) listen(r0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ffc094010ebc000000000000008000f0fffeff0300000000fff5dd00000010000100090810000c00000000040000", 0x58}], 0x1) 251.303731ms ago: executing program 3 (id=4389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0xf4ffffff, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14}}, 0x7c}}, 0x0) 250.627505ms ago: executing program 1 (id=4390): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="61129900000000006113500000000000bf2000000000000007000000087000003d030100e486190095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000170600000ee60000bf0500000000000063620000000000006507000000000000460700004c0000000f75000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095000000000000001c0a7900009d3c2792432a4fa650c512aee994a56462712cb064ecce5e7a9ce0a575a4f7952cb768637e60bd5d2e4b5992de991371274fdf535e001022e25659a7c85615c1b88bc894123c090014e8fb87efecdcb73858479526222b22ff81971ef49b2cb0dcebea6d90e9c1677fbefd35893d883a2c559b7af8db8b2d89fcc8af461b2a74af360eace66cec40d927006bd666c8122217c27902b3933106d0cc5bf6fec345ae9606c3c1a3000c94df67ae600900ffa2f49ec035883e27b1a9e9dff3e8bfc7d1be00f1a0820102b19000000000000000009095601e090012086dee84efd375f0642ed261765d3b9efdfbed9b430bcf04060000bdff1c8bcfc00300000000000000ab5d5f299354997c8bef9ca55841a57eddff9220c67c9e17bee524c3dc74c0271124cf9e4e2d23f7062351edf77c7129eb89085967722da6cb884d1afe82f7f722e38397996271700241094d272dd8b754b2dd36d486e7ffd1bdc198deb495cac0995ca3ef6c1affb693ae366b0f11db6ee4830d87a347d448b0737e852306b4713e5ce6cac6a27e29f164b9f16d6f045271b8e9f172c3db24558d77b8bf18be45c50b3fc005fa7b5e45a209d48d6dc2389d7f34cb9c02cf517c8ee8a9b6159ce895101c2ccff2bde95aa860ed9b8b6d6b8fcab7663d9bd8415e6f90fdb007b8f3e0ffe3a638c4fd88d20d235173720c1df1147c9f5013c82fc98604bd70cd56609a6b73943748a900e1d8cf81bcb1d2620bee688eb0a284040000005cc3ba8bf0b5e0fc018463d03a73fa85429725545128b0e9b550a13d0dd35092250b7d00ff03d5314fa8d37932055bb6d30d0000cad2375a34c7f15c3096f31e6aa6887864f62760ae35214552982bba84d92b1261251330dde4cf97b7cc6b2349e4f7a56003f7303d210fccd2efe6cda2595aacc36db66ff83af576b56dfbd40b15d569244d7d6e1182c4fa829c3f86acd17082bfed73ab9ef37705f9d2734801899e248e1a7155e28f000000000000000fce52263e3953a6f8560f852602ca905b58a9e2dbf16dd0322d0bb3ceb1b01752230bcbbf731701b2b1768aabb9a002090c09ab606e91ad9d88e7205464594add8691b62d55127cd891b8abe4358697e1b5f038773c0aa220cdce78b9346adbd72b293e66ef1a04905aaf6bd31e8d40d425d21232956ee45935d7adb2bf9fb37ff145472c58dbc8db58d0cde99df77d86ed71070000000000006d5cf959fb84c9f8ec46ec9af313d13d1bd85d57f598c00eb7bb8b6b4ff5875a50e2ea3287cf0f838bffdbf985fdce1fb66979b51cc6d6d6661354f33986f7acee499e25e3b70db6f15d7f2bfc0000000000000000ff7f00009eeb78c3d2e83f5e0eaf5cec82f45884cb0394271826ac2d5cc0afc4e784b515c659901c5c6a8573436be7b0f64c6176ef37db239a1ee9839436e951aef4196798d518a4820a241cec1b3e4923dae4c87d460900000000000000de7b13645fc6921a759e2c23153f432a3e5167628a94aacd0f40543049d8ef9787b56006227f143ce5554837675b93eeced66fe71bbe2c055660d23af1c9a83b78d0fde1f9dd526858a320563807a1ef41829913ce0b280010dca0cb3a98a8986e8e656dcaa6ae4ee6717a29e50450688763f1b17c156b860ba0d5a121d00ceac30ef5e104c43d76074c3884cb8fa504ebc94f7c83e90b6cad8d2a02df007bd585f4472cfb004cd9f09995000000000021000002cfceb7feffffffffffffffb1a6c40ac666744ca6c8fbba8452b686fd9b6250edd7d86ebc35898637dd88540e40d5799c11ee9883be26229eeee3941494fcd4389af9b755843126338c346b4d50a5b8684ad74bad46f4ffd86292d72a933fcb7304aef4b4a4bf6e054fea3549e08c0dd2334f485da9382887c16306176f73f029e2f9f8145360cfd5ffd66ae82d51e683ff364981b358a5f48af10059a0716951942eed021e41ba076d486cd095ffcefc3e8b8ead226c5a640b06fc13311826d024248f14b62a7fb0f9b95c9e23e7d29aca69e77db40dd00c0b20e43e300b1a46e243e2a8321dbb1270a22d9a2368de08d625566f253f0760abb44c11583fa5b914ab298ade422e4c0ddc7b17dd2aa8ac94d93d6b590000000000000000000000009b90eb1db265c18521667d305886e9c47ad357a76be0c9ce899bdd80a51a2017190a590d092bc500ea71b338098d1007517c1d6e785d5e0975ca2c2edf221b30377e61fce8bf47e7b93da593d154caca75b1ef1273aa501807005593ba45d219d7c656be0fb900000000004093461ceec5fce099368e07060c21cabb846f2447fc72be9925b2f568b15e5d22c8fabbfd3edac460c70a5619a043ada38fea3b104f9c1a473b7820faecfbb40b5e0d3681013c0cb2b8acc1ceb5f790210a3be07b2727c4e5a5d20468b3ed35f9a71519904c6dd76dee5738dcdac1f4358bb65c1aca8eb0a65aacbaaca92cc7cc553b1c5181d81c15ff4eaea3bcbfc4e0d06bd8d2e2d941924f860f2aba2253b9038e6923b026b7ece3e9fcdf6aa14a65bd6cd7e78457dac1fb3cdc421d6059e17d44e378189035c2fe489e5b7a87c23ec952e2affbc7a4c707312b17a5f428527cb42a8cbd072490eae617e6ea32ee7d3055bfc9b1128553cb963d3873115296a8bd2efb7368ea2727b294d6eceee49ad9093738a3b1bbfa163a917380953fdc3a443a6585925ee14a817390a655c1988632a414b304d688116d79693efd80b293ddc89bb27529c34f4f8ee3ddbaf1c13a4e15186353efd0ced475794ff5f9b0580f2fb996928f0ca6d1a9f4bda1fe9c1bc2e657448c00ca6afb2e5b1c336d657c87f2634db46e2e8e82366a2de4dd41ca0a26ab49d5d357e5a8af73d9504af230513acadd2f0d9d99c4b6e4ebf68582cf8dc4dac990b216a6a216b0cae87a2339fda14e546b224857f758cb64ca2dcdf32b5420ad9f33dbaeb36b7466c5129508d57329f57ac682757e398c4d2a6f93fb1dfc2c840e06bd6c0d7ceedc3721b19c7c9fc1645cf32d79807c4d3e0898ae2a829df5c03834bc2558aeed652399a9cf9e5c859d3c5c5341b329fea445d2e040562a813c35ed1c1afab50aeb12eea9456adf21953947413c03af836bc339355250daeaca253f809493c75c9dcdbae3a76753d593623348e82b1e9c5480fd099b6322b6c6158ebe8ecba0ab364ce4a58e244b76d16b81905878c4caaad1f54cc11df97a50356638016a7e50a92ee55af3c64ae2b95653373d3471c0f26119e18426fae7739a9031618635a257cf58b1e9b8264b6543d6c1c372b66d9a5f96198ae01beeb398744ac4b6f26b568cd7b792039ac4e10f9307b1a8dc268a5d2af3dbce55fdac6d1a158a2243c679261aa080acdf0d55753d3163664df7e4129f12f850c694dc140cf9380687da9914be848a01bc7f5278eb3c3210664b62743887b822814c58a3304b392c7e2a6e64576248af87c0f995af921be86e8102d8343c0de8cda3512f84c894ed6c0206e41443c456467c42ff9ddad36e882cc5287394aedd8d413a061a2894f2ef5fc3072fc8a0c5c2a9f94954278c3d67a0b0fa6e002ce0840e3405d166f037a6e678ce1af6ed9c6e7023f8663d294f4bee1effc148e096d2eb91903c482548c0c5b135a31ae6903a9cb9a40a89155ce15dbe3e373a7ac4c7b4d391bdac5268b2d419f13aeb86f68725a4633eb883417bc23243a302ccc919e0b141ae8aeb7457264f8cad663255db96efda704cef9428ffeb16acd3295a36b1e514ecf65944d5c754e02410075714612e7841e6c7e1e2366bd6ccf335ac9dd35332ee78aaa2ff6950c81fd53db93dcebe8b9c42aeefaf63150d649bd1542014ac64daaec18e82854454967e37a6dccea142f2504a6aba4dd44594c230101a4574d56a1ff4f5b7dd246f7d607ff6f8bebf4fd7e709122f3129bec4dd5b4129829d15d1d3b1fb82e341a325f7863c5035bc6a35a6568b35327a8364d98bdf516e27b57976af232128856692b491469c525eb2a48d4794459dae9213bd0088206f364f8c2c727e3e1d1a3ca9f1b40fea92bfea26189d3bf91e92c1e8795334cc268e0b31cd354701eff8adfa247b848b0ae203f78380b818c0afbe01efec884ff0a6cecfb726886bbdaf78ed3ebc40556b434d0fd81799d96cf302e1115c8cda0b4c7f27c8b4ad1a5808f6b908816ca7483f94fbb8391e6533833470c9c3352d70ae03bc8479e64caf16d5fabe77519aa196fcfb4e480620ef153a09e1dd59490ffab33976fba5b3126dc509e4cbc94bd59f745319efc4523e1f0387968be039a920a0abc8aef753f82ca796055bf28affa706df1312a898162454ff9010ee5fa95d56fa3e8ab283481c20d0fa2b3149a54c268d2b77ad6ce63f97e10bf3baa14dc7a4492587ae1e26237787231d000000000000000000000000003ef8cbcd3ffe8d35974cbb469c41e8ad0b58c5376c4fa943d02a4bd12dab3cab9ef4e62cb10820de0d87ddd79f820879e4ad8868f81cf931760d5c6b9c7337e8efcaa4e63eed8e3eb668f104cf1fa53fb300acb4bd61371d6f12165e9814d2517cba3403530d06737da5cb6ca5996af9a16cca9853430842bdf0995c53681e4a2b0bd1fdaeb0e7839669aed97a6f6f25f7de9ba0ea23384b85957faf49d62dba00af3c7e3c817e13e63c487fc167f2aff6e5a250937bb43b0a8e9d12ff551e6cc2d304aec2a5d843ea327c0a3379594726b92b1919367f3b1711087f160503b3b37170579ce2a664b21d86aca4cf19c1f36d264b0b7ba3de1e020601418d981c6f596e48d5cebe4ff0fb8046e87a5c4d95c07935"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x39, 0x0, 0xffffffffffffffff, 0x8}, 0x48) 247.831605ms ago: executing program 4 (id=4391): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000000180)="af4fd73a", 0xffffffffffffff19, 0x840, 0x0, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) (async) ppoll(&(0x7f0000000000)=[{r1, 0x408a}], 0x1, &(0x7f0000000100), 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0xfc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xe8, 0x1, [@m_police={0x90, 0x1, 0x0, 0x0, {{0xb}, {0xffffffffffffff98}, {0x61, 0x6, "fb97564f8f470910dd75fcd24a81607f5323d13806d7a349d6c55ebc78f02f1a38c9a920041c793cca89ef5c00000000000000002c032f52f86e65b25b12aa602ed4677fe8255909630e02edcba2f47f75b45f0a50ece7857ea7587dd2"}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xe7b}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d46, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfc}}, 0x0) 163.420494ms ago: executing program 0 (id=4392): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0xd000000000000000}, 0x0) 127.457302ms ago: executing program 1 (id=4393): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/542], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 127.053927ms ago: executing program 2 (id=4394): r0 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x8000000000000003}, 0x18) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x7, 0x0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03066003008cb89e08d988a8", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x14, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7}, @ldst={0x0, 0x2, 0x6, 0x9, 0x6, 0xe8cfd98b09b7d46, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0xffff0000, 0xa6, &(0x7f0000000300)=""/166, 0x41000, 0x21, '\x00', r4, @fallback=0x32, r0, 0x8, &(0x7f00000003c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xc, 0x7, 0xe37}, 0x10, r5, r6, 0x0, &(0x7f0000000480)=[r0], 0x0, 0x10, 0x6}, 0x94) (async) bind$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x2, {0x0, 0xff, 0x5}, 0xfd}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000100)) (async) bind$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) (async, rerun: 32) r7 = socket$pptp(0x18, 0x1, 0x2) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r8, 0x10f, 0x85) bind$pptp(r7, &(0x7f00000048c0)={0x18, 0x2, {0x2, @loopback}}, 0x1e) (async, rerun: 32) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) (async, rerun: 32) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) 60.245128ms ago: executing program 3 (id=4395): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 16.962474ms ago: executing program 0 (id=4396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) 0s ago: executing program 4 (id=4397): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="02030003100000002cbd7000fbdbdf2502000900400000001c0000000000000005000600000000000a00000000000000000000000000000000000000000000010200000000000000020001000000000000fd07fd0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x4008000) kernel console output (not intermixed with test programs): faulting to 1000 [ 309.659102][T16212] vlan2: entered allmulticast mode [ 309.699398][T16212] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode [ 309.841854][T16221] bond1: Unable to set down delay as MII monitoring is disabled [ 309.852942][T16221] bond1 (unregistering): Released all slaves [ 310.119299][T16161] vxcan1 speed is unknown, defaulting to 1000 [ 310.125089][T16238] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3180'. [ 310.154270][T16235] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 310.167185][T16235] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 310.182322][T16235] gretap2: entered promiscuous mode [ 310.197875][T16235] gretap2: entered allmulticast mode [ 310.225868][T16238] TC_ACT_REPEAT abuse ? [ 310.575109][T16255] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3185'. [ 310.607329][T16161] vxcan1 speed is unknown, defaulting to 1000 [ 310.657454][T16260] netlink: 'syz.1.3186': attribute type 6 has an invalid length. [ 310.679061][T16260] netlink: 'syz.1.3186': attribute type 6 has an invalid length. [ 311.120053][ T5838] Bluetooth: hci4: command tx timeout [ 311.197984][T16161] vxcan1 speed is unknown, defaulting to 1000 [ 311.419498][T16290] __nla_validate_parse: 1 callbacks suppressed [ 311.419519][T16290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3197'. [ 311.489991][T16293] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3198'. [ 311.522015][ T5838] Bluetooth: hci3: command tx timeout [ 311.545265][T16293] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3198'. [ 311.559923][T16294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3197'. [ 311.672630][T16161] vxcan1 speed is unknown, defaulting to 1000 [ 312.273545][T16161] vxcan1 speed is unknown, defaulting to 1000 [ 312.505636][T16325] tipc: Started in network mode [ 312.517216][T16325] tipc: Node identity ac14140f, cluster identity 4711 [ 312.542162][T16325] tipc: New replicast peer: 255.255.255.255 [ 312.556598][T16325] tipc: Enabled bearer , priority 10 [ 312.758913][T16161] vxcan1 speed is unknown, defaulting to 1000 [ 313.476177][T16366] netlink: 696 bytes leftover after parsing attributes in process `syz.4.3216'. [ 313.592170][ T5838] Bluetooth: hci3: command tx timeout [ 313.669436][T15811] tipc: Node number set to 2886997007 [ 314.126866][T16393] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.3221'. [ 314.180648][T16393] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3221'. [ 314.480886][ T60] hsr_slave_0: left promiscuous mode [ 314.489063][ T60] hsr_slave_1: left promiscuous mode [ 314.501708][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.514528][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.532894][ T60] batman_adv: batadv0: Removing interface: dummy0 [ 314.564078][T16410] FAULT_INJECTION: forcing a failure. [ 314.564078][T16410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.578026][T16410] CPU: 0 UID: 0 PID: 16410 Comm: syz.0.3229 Not tainted syzkaller #0 PREEMPT(full) [ 314.578075][T16410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.578109][T16410] Call Trace: [ 314.578118][T16410] [ 314.578128][T16410] dump_stack_lvl+0x189/0x250 [ 314.578164][T16410] ? __pfx____ratelimit+0x10/0x10 [ 314.578196][T16410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.578226][T16410] ? __pfx__printk+0x10/0x10 [ 314.578265][T16410] should_fail_ex+0x414/0x560 [ 314.578306][T16410] _copy_to_user+0x31/0xb0 [ 314.578337][T16410] simple_read_from_buffer+0xe1/0x170 [ 314.578378][T16410] proc_fail_nth_read+0x1b3/0x220 [ 314.578411][T16410] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 314.578444][T16410] ? rw_verify_area+0x2a6/0x4d0 [ 314.578473][T16410] ? __lock_acquire+0xab9/0xd20 [ 314.578493][T16410] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 314.578523][T16410] vfs_read+0x200/0xa30 [ 314.578559][T16410] ? fdget_pos+0x247/0x320 [ 314.578586][T16410] ? __pfx___mutex_lock+0x10/0x10 [ 314.578621][T16410] ? __pfx_vfs_read+0x10/0x10 [ 314.578653][T16410] ? __fget_files+0x2a/0x420 [ 314.578680][T16410] ? __fget_files+0x3a0/0x420 [ 314.578700][T16410] ? __fget_files+0x2a/0x420 [ 314.578736][T16410] ksys_read+0x145/0x250 [ 314.578771][T16410] ? __pfx_ksys_read+0x10/0x10 [ 314.578813][T16410] ? do_syscall_64+0xbe/0xfa0 [ 314.578862][T16410] do_syscall_64+0xfa/0xfa0 [ 314.578892][T16410] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.578923][T16410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.578945][T16410] ? clear_bhb_loop+0x60/0xb0 [ 314.578973][T16410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.578995][T16410] RIP: 0033:0x7f1e0238e0dc [ 314.579015][T16410] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 314.579034][T16410] RSP: 002b:00007f1e032a8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 314.579057][T16410] RAX: ffffffffffffffda RBX: 00007f1e025e5fa0 RCX: 00007f1e0238e0dc [ 314.579074][T16410] RDX: 000000000000000f RSI: 00007f1e032a80a0 RDI: 0000000000000004 [ 314.579087][T16410] RBP: 00007f1e032a8090 R08: 0000000000000000 R09: 0000000000000000 [ 314.579101][T16410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.579113][T16410] R13: 00007f1e025e6038 R14: 00007f1e025e5fa0 R15: 00007ffc9684f508 [ 314.579150][T16410] [ 314.824145][T16412] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3228'. [ 315.274167][T16437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3235'. [ 315.505239][ T60] team0 (unregistering): Port device team_slave_1 removed [ 315.550339][ T60] team0 (unregistering): Port device team_slave_0 removed [ 315.647893][ T3503] smc: removing ib device syû [ 315.670205][ T5838] Bluetooth: hci3: command tx timeout [ 316.491098][T16454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3240'. [ 316.583481][T16449] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.3238'. [ 316.725707][T16219] chnl_net:caif_netlink_parms(): no params data found [ 317.207651][T16475] sctp: [Deprecated]: syz.3.3247 (pid 16475) Use of int in maxseg socket option. [ 317.207651][T16475] Use struct sctp_assoc_value instead [ 317.394697][T16219] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.418443][T16219] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.440844][T16219] bridge_slave_0: entered allmulticast mode [ 317.465143][T16219] bridge_slave_0: entered promiscuous mode [ 317.495370][T16219] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.522022][T16219] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.545315][T16219] bridge_slave_1: entered allmulticast mode [ 317.567805][T16219] bridge_slave_1: entered promiscuous mode [ 317.642948][T16488] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.749677][ T5838] Bluetooth: hci3: command tx timeout [ 317.942610][T16219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.988731][T16499] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3251'. [ 318.030555][T16499] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 318.060130][T16503] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3252'. [ 318.111495][T16219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.126666][T16505] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3253'. [ 318.375748][T16513] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3256'. [ 318.399075][T16513] netlink: 'syz.3.3256': attribute type 7 has an invalid length. [ 318.420633][T16513] netlink: 'syz.3.3256': attribute type 8 has an invalid length. [ 318.428697][T16513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3256'. [ 318.537330][T16219] team0: Port device team_slave_0 added [ 318.620670][T16219] team0: Port device team_slave_1 added [ 318.842160][T16219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.859990][T16219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.925629][T16219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.938746][T16219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.946302][T16219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.008362][T16219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.115635][ T60] IPVS: stop unused estimator thread 0... [ 319.138697][T16548] netlink: 'syz.1.3266': attribute type 1 has an invalid length. [ 319.184113][T16546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3265'. [ 319.226778][T16548] syzkaller0: entered promiscuous mode [ 319.232833][T16548] syzkaller0: entered allmulticast mode [ 319.257823][T16219] hsr_slave_0: entered promiscuous mode [ 319.265323][T16219] hsr_slave_1: entered promiscuous mode [ 319.273227][T16219] debugfs: 'hsr0' already exists in 'hsr' [ 319.279017][T16219] Cannot create hsr debugfs directory [ 319.285288][T16550] netlink: 'syz.0.3267': attribute type 12 has an invalid length. [ 319.294330][T16550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3267'. [ 319.318758][T16548] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3266'. [ 319.355549][T16550] netlink: 'syz.0.3267': attribute type 12 has an invalid length. [ 319.403070][T16548] bond1: (slave ip6_vti0): Device is not bonding slave [ 319.411147][T16548] bond1: option active_slave: invalid value (ip6_vti0) [ 319.416874][T16554] netlink: 'syz.3.3268': attribute type 10 has an invalid length. [ 319.434436][T16548] bond1 (unregistering): Released all slaves [ 319.468845][T16557] netlink: 'syz.3.3268': attribute type 10 has an invalid length. [ 319.487020][ T6551] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.501670][ T6551] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.517189][ T6551] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.567443][T16554] team0: Port device dummy0 added [ 319.576343][T16557] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 319.600890][T16557] team0: Failed to send options change via netlink (err -105) [ 319.608672][T16557] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 319.631291][T16557] team0: Port device dummy0 removed [ 319.642207][T16557] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 319.705496][ T6551] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.841675][T16572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.191967][T16219] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.203961][T16219] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.322562][T16219] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.345022][T16219] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.423488][T16219] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.434826][T16219] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.462357][T16596] FAULT_INJECTION: forcing a failure. [ 320.462357][T16596] name failslab, interval 1, probability 0, space 0, times 0 [ 320.483880][T16596] CPU: 0 UID: 0 PID: 16596 Comm: syz.4.3286 Not tainted syzkaller #0 PREEMPT(full) [ 320.483910][T16596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 320.483923][T16596] Call Trace: [ 320.483931][T16596] [ 320.483940][T16596] dump_stack_lvl+0x189/0x250 [ 320.483974][T16596] ? __pfx____ratelimit+0x10/0x10 [ 320.484003][T16596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.484031][T16596] ? __pfx__printk+0x10/0x10 [ 320.484059][T16596] ? __pfx___might_resched+0x10/0x10 [ 320.484081][T16596] ? fs_reclaim_acquire+0x7d/0x100 [ 320.484129][T16596] should_fail_ex+0x414/0x560 [ 320.484166][T16596] should_failslab+0xa8/0x100 [ 320.484189][T16596] kmem_cache_alloc_node_noprof+0x77/0x710 [ 320.484217][T16596] ? __alloc_skb+0x112/0x2d0 [ 320.484233][T16596] ? netlink_autobind+0xdb/0x300 [ 320.484259][T16596] __alloc_skb+0x112/0x2d0 [ 320.484282][T16596] netlink_sendmsg+0x5c6/0xb30 [ 320.484312][T16596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.484336][T16596] ? aa_sock_msg_perm+0xf1/0x1d0 [ 320.484369][T16596] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 320.484390][T16596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.484411][T16596] __sock_sendmsg+0x21c/0x270 [ 320.484441][T16596] ____sys_sendmsg+0x505/0x830 [ 320.484469][T16596] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.484501][T16596] ? import_iovec+0x74/0xa0 [ 320.484530][T16596] ___sys_sendmsg+0x21f/0x2a0 [ 320.484554][T16596] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.484614][T16596] ? __fget_files+0x2a/0x420 [ 320.484630][T16596] ? __fget_files+0x3a0/0x420 [ 320.484656][T16596] __x64_sys_sendmsg+0x19b/0x260 [ 320.484679][T16596] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.484711][T16596] ? __pfx_ksys_write+0x10/0x10 [ 320.484743][T16596] ? do_syscall_64+0xbe/0xfa0 [ 320.484776][T16596] do_syscall_64+0xfa/0xfa0 [ 320.484802][T16596] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.484836][T16596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.484856][T16596] ? clear_bhb_loop+0x60/0xb0 [ 320.484881][T16596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.484901][T16596] RIP: 0033:0x7f04c618f6c9 [ 320.484921][T16596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.484938][T16596] RSP: 002b:00007f04c6f4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.484960][T16596] RAX: ffffffffffffffda RBX: 00007f04c63e5fa0 RCX: 00007f04c618f6c9 [ 320.484975][T16596] RDX: 0000000004000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 320.484988][T16596] RBP: 00007f04c6f4c090 R08: 0000000000000000 R09: 0000000000000000 [ 320.485000][T16596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.485012][T16596] R13: 00007f04c63e6038 R14: 00007f04c63e5fa0 R15: 00007ffedbe5e8a8 [ 320.485046][T16596] [ 320.855154][T16219] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.866749][T16219] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.099994][T16613] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 321.137937][T16219] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 321.197581][T16219] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 321.214153][T16219] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 321.234115][T16621] tipc: Enabled bearer , priority 0 [ 321.266739][T16617] syzkaller0: entered promiscuous mode [ 321.290006][T16617] syzkaller0: entered allmulticast mode [ 321.297480][T16219] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 321.325098][T16617] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 321.382561][T16617] tipc: Resetting bearer [ 321.410070][T16616] tipc: Resetting bearer [ 321.452338][T16616] tipc: Disabling bearer [ 321.488114][T16639] netlink: 'syz.3.3302': attribute type 8 has an invalid length. [ 321.719987][T16219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.782230][T16219] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.833573][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.840858][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.876067][T16656] __nla_validate_parse: 10 callbacks suppressed [ 321.876089][T16656] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3306'. [ 321.936614][T16656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.962410][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.969671][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.103536][T16662] FAULT_INJECTION: forcing a failure. [ 322.103536][T16662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.126377][T16662] CPU: 1 UID: 0 PID: 16662 Comm: syz.3.3309 Not tainted syzkaller #0 PREEMPT(full) [ 322.126406][T16662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 322.126419][T16662] Call Trace: [ 322.126427][T16662] [ 322.126436][T16662] dump_stack_lvl+0x189/0x250 [ 322.126470][T16662] ? __pfx____ratelimit+0x10/0x10 [ 322.126497][T16662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.126524][T16662] ? __pfx__printk+0x10/0x10 [ 322.126545][T16662] ? __might_fault+0xb0/0x130 [ 322.126583][T16662] should_fail_ex+0x414/0x560 [ 322.126627][T16662] _copy_from_iter+0x1de/0x1790 [ 322.126658][T16662] ? rcu_is_watching+0x15/0xb0 [ 322.126686][T16662] ? kmalloc_reserve+0xbd/0x290 [ 322.126706][T16662] ? __pfx__copy_from_iter+0x10/0x10 [ 322.126732][T16662] ? __build_skb_around+0x262/0x3f0 [ 322.126765][T16662] ? netlink_sendmsg+0x642/0xb30 [ 322.126794][T16662] ? skb_put+0x11b/0x210 [ 322.126817][T16662] netlink_sendmsg+0x6b2/0xb30 [ 322.126846][T16662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.126869][T16662] ? aa_sock_msg_perm+0xf1/0x1d0 [ 322.126901][T16662] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 322.126920][T16662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.126940][T16662] __sock_sendmsg+0x21c/0x270 [ 322.126971][T16662] ____sys_sendmsg+0x505/0x830 [ 322.126999][T16662] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.127031][T16662] ? import_iovec+0x74/0xa0 [ 322.127060][T16662] ___sys_sendmsg+0x21f/0x2a0 [ 322.127084][T16662] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.127143][T16662] ? __fget_files+0x2a/0x420 [ 322.127162][T16662] ? __fget_files+0x3a0/0x420 [ 322.127192][T16662] __x64_sys_sendmsg+0x19b/0x260 [ 322.127217][T16662] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 322.127249][T16662] ? __pfx_ksys_write+0x10/0x10 [ 322.127283][T16662] ? do_syscall_64+0xbe/0xfa0 [ 322.127317][T16662] do_syscall_64+0xfa/0xfa0 [ 322.127344][T16662] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.127372][T16662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.127394][T16662] ? clear_bhb_loop+0x60/0xb0 [ 322.127418][T16662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.127437][T16662] RIP: 0033:0x7f4d03f8f6c9 [ 322.127456][T16662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.127473][T16662] RSP: 002b:00007f4d04e5b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.127496][T16662] RAX: ffffffffffffffda RBX: 00007f4d041e5fa0 RCX: 00007f4d03f8f6c9 [ 322.127510][T16662] RDX: 0000000004000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 322.127524][T16662] RBP: 00007f4d04e5b090 R08: 0000000000000000 R09: 0000000000000000 [ 322.127536][T16662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.127547][T16662] R13: 00007f4d041e6038 R14: 00007f4d041e5fa0 R15: 00007fff5eea5c88 [ 322.127582][T16662] [ 322.130395][T16664] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3308'. [ 322.213855][ T5838] Bluetooth: hci3: command tx timeout [ 322.269424][T16661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3310'. [ 322.279839][T16664] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3308'. [ 322.412644][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.711984][T16680] netlink: 'syz.4.3312': attribute type 10 has an invalid length. [ 322.738329][T16680] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3312'. [ 322.783073][T16684] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3314'. [ 322.810545][T16680] team0: Port device geneve0 added [ 322.868946][T16219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.998413][T16687] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3314'. [ 323.035275][T16691] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 323.039651][T16687] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3314'. [ 323.078763][T16219] veth0_vlan: entered promiscuous mode [ 323.124628][T16219] veth1_vlan: entered promiscuous mode [ 323.204101][T16219] veth0_macvtap: entered promiscuous mode [ 323.236164][T16690] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 323.255354][T16219] veth1_macvtap: entered promiscuous mode [ 323.342462][T16219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.370435][T16219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.405727][ T3503] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.437229][ T3503] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.477042][ T3503] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.516200][ T3503] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.585104][T16705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3319'. [ 323.774668][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.800122][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.818725][T16713] FAULT_INJECTION: forcing a failure. [ 323.818725][T16713] name failslab, interval 1, probability 0, space 0, times 0 [ 323.858102][T16713] CPU: 1 UID: 0 PID: 16713 Comm: syz.0.3322 Not tainted syzkaller #0 PREEMPT(full) [ 323.858132][T16713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 323.858145][T16713] Call Trace: [ 323.858154][T16713] [ 323.858163][T16713] dump_stack_lvl+0x189/0x250 [ 323.858197][T16713] ? __pfx____ratelimit+0x10/0x10 [ 323.858225][T16713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.858256][T16713] ? __pfx__printk+0x10/0x10 [ 323.858283][T16713] ? __pfx___might_resched+0x10/0x10 [ 323.858304][T16713] ? fs_reclaim_acquire+0x7d/0x100 [ 323.858340][T16713] should_fail_ex+0x414/0x560 [ 323.858378][T16713] should_failslab+0xa8/0x100 [ 323.858399][T16713] kmem_cache_alloc_node_noprof+0x77/0x710 [ 323.858435][T16713] ? __alloc_skb+0x112/0x2d0 [ 323.858461][T16713] __alloc_skb+0x112/0x2d0 [ 323.858484][T16713] netlink_sendmsg+0x5c6/0xb30 [ 323.858515][T16713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.858540][T16713] ? aa_sock_msg_perm+0xf1/0x1d0 [ 323.858573][T16713] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 323.858602][T16713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.858623][T16713] __sock_sendmsg+0x21c/0x270 [ 323.858653][T16713] ____sys_sendmsg+0x505/0x830 [ 323.858682][T16713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.858715][T16713] ? import_iovec+0x74/0xa0 [ 323.858745][T16713] ___sys_sendmsg+0x21f/0x2a0 [ 323.858770][T16713] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.858831][T16713] ? __fget_files+0x2a/0x420 [ 323.858851][T16713] ? __fget_files+0x3a0/0x420 [ 323.858882][T16713] __x64_sys_sendmsg+0x19b/0x260 [ 323.858907][T16713] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 323.858940][T16713] ? __pfx_ksys_write+0x10/0x10 [ 323.858973][T16713] ? do_syscall_64+0xbe/0xfa0 [ 323.859016][T16713] do_syscall_64+0xfa/0xfa0 [ 323.859043][T16713] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.859072][T16713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.859092][T16713] ? clear_bhb_loop+0x60/0xb0 [ 323.859117][T16713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.859135][T16713] RIP: 0033:0x7f1e0238f6c9 [ 323.859154][T16713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.859170][T16713] RSP: 002b:00007f1e032a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.859192][T16713] RAX: ffffffffffffffda RBX: 00007f1e025e5fa0 RCX: 00007f1e0238f6c9 [ 323.859207][T16713] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000004 [ 323.859219][T16713] RBP: 00007f1e032a8090 R08: 0000000000000000 R09: 0000000000000000 [ 323.859231][T16713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.859243][T16713] R13: 00007f1e025e6038 R14: 00007f1e025e5fa0 R15: 00007ffc9684f508 [ 323.859277][T16713] [ 324.141533][T16717] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3324'. [ 324.144824][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.169803][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.852599][ T5147] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 324.866767][ T5147] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 324.877789][ T5147] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 324.887346][ T5147] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 324.896344][ T5147] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 324.964244][T16740] vxcan1 speed is unknown, defaulting to 1000 [ 325.538299][ T996] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.672824][ T996] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.790565][ T996] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.958232][ T996] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.215950][T16740] chnl_net:caif_netlink_parms(): no params data found [ 326.241280][ T996] bridge_slave_0: left allmulticast mode [ 326.247706][ T996] bridge_slave_0: left promiscuous mode [ 326.255876][ T996] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.519095][ T996] bond2 (unregistering): (slave gretap2): Releasing active interface [ 326.568996][ T996] bond0 (unregistering): (slave gre1): Releasing backup interface [ 326.621240][ T996] bond6 (unregistering): (slave geneve2): Releasing active interface [ 326.808060][ T996] bond2 (unregistering): (slave bridge2): Releasing active interface [ 326.925258][T16811] FAULT_INJECTION: forcing a failure. [ 326.925258][T16811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.939928][T16811] CPU: 1 UID: 0 PID: 16811 Comm: syz.3.3352 Not tainted syzkaller #0 PREEMPT(full) [ 326.939957][T16811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 326.939969][T16811] Call Trace: [ 326.939978][T16811] [ 326.939986][T16811] dump_stack_lvl+0x189/0x250 [ 326.940020][T16811] ? __pfx____ratelimit+0x10/0x10 [ 326.940049][T16811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.940077][T16811] ? __pfx__printk+0x10/0x10 [ 326.940100][T16811] ? __might_fault+0xb0/0x130 [ 326.940142][T16811] should_fail_ex+0x414/0x560 [ 326.940185][T16811] _copy_from_user+0x2d/0xb0 [ 326.940212][T16811] ___sys_sendmsg+0x158/0x2a0 [ 326.940238][T16811] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.940302][T16811] ? __fget_files+0x2a/0x420 [ 326.940321][T16811] ? __fget_files+0x3a0/0x420 [ 326.940351][T16811] __sys_sendmmsg+0x227/0x430 [ 326.940380][T16811] ? __pfx___sys_sendmmsg+0x10/0x10 [ 326.940415][T16811] ? bpf_trace_run2+0x322/0x4b0 [ 326.940473][T16811] ? rcu_is_watching+0x15/0xb0 [ 326.940502][T16811] __x64_sys_sendmmsg+0xa0/0xc0 [ 326.940527][T16811] do_syscall_64+0xfa/0xfa0 [ 326.940554][T16811] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.940584][T16811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.940612][T16811] ? clear_bhb_loop+0x60/0xb0 [ 326.940638][T16811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.940658][T16811] RIP: 0033:0x7f4d03f8f6c9 [ 326.940676][T16811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.940693][T16811] RSP: 002b:00007f4d04e5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 326.940715][T16811] RAX: ffffffffffffffda RBX: 00007f4d041e5fa0 RCX: 00007f4d03f8f6c9 [ 326.940730][T16811] RDX: 0000000000000001 RSI: 0000200000001500 RDI: 0000000000000003 [ 326.940742][T16811] RBP: 00007f4d04e5b090 R08: 0000000000000000 R09: 0000000000000000 [ 326.940754][T16811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.940765][T16811] R13: 00007f4d041e6038 R14: 00007f4d041e5fa0 R15: 00007fff5eea5c88 [ 326.940800][T16811] [ 327.153574][ T5147] Bluetooth: hci5: command tx timeout [ 327.334436][ T996] bond1 (unregistering): Released all slaves [ 327.353136][ T996] bond2 (unregistering): Released all slaves [ 327.373475][ T996] bond3 (unregistering): Released all slaves [ 327.395892][ T996] bond4 (unregistering): Released all slaves [ 327.435554][ T996] bond0 (unregistering): Released all slaves [ 327.457727][ T996] bond5 (unregistering): Released all slaves [ 327.574997][ T996] bond6 (unregistering): Released all slaves [ 327.590852][ T996] bond7 (unregistering): Released all slaves [ 327.703050][T16802] __nla_validate_parse: 9 callbacks suppressed [ 327.703071][T16802] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3350'. [ 327.716018][ T996] 9: left promiscuous mode [ 327.773757][T16821] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3357'. [ 327.784749][T16821] tipc: Invalid UDP bearer configuration [ 327.792576][T16826] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3359'. [ 327.793946][T16821] tipc: Enabling of bearer rejected, failed to enable media [ 327.887926][ T996] : left promiscuous mode [ 328.008413][ T996] tipc: Left network mode [ 328.035015][T16838] netlink: 'syz.4.3363': attribute type 25 has an invalid length. [ 328.046509][ T996] IPVS: stopping master sync thread 13812 ... [ 328.060302][T16838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3363'. [ 328.195989][T16740] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.209337][T16740] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.216647][T16740] bridge_slave_0: entered allmulticast mode [ 328.237698][T16853] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3367'. [ 328.240876][T16740] bridge_slave_0: entered promiscuous mode [ 328.257049][T16853] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3367'. [ 328.303921][T16848] tipc: Enabled bearer , priority 0 [ 328.322402][T16740] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.331847][T16740] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.341483][T16740] bridge_slave_1: entered allmulticast mode [ 328.349601][T16740] bridge_slave_1: entered promiscuous mode [ 328.393433][T16848] tipc: Disabling bearer [ 328.478438][T16740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.522331][T16851] tipc: Started in network mode [ 328.527518][T16851] tipc: Node identity ceeeb24cb99e, cluster identity 4711 [ 328.542669][T16851] tipc: Enabled bearer , priority 0 [ 328.568461][T16740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.754791][T16740] team0: Port device team_slave_0 added [ 328.863481][T16740] team0: Port device team_slave_1 added [ 329.042655][T16740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.050353][T16883] nbd0: detected capacity change from 0 to 127 [ 329.057452][T16740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.079774][ T5147] block nbd0: Receive control failed (result -32) [ 329.087392][T16740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.104460][T16849] tipc: Disabling bearer [ 329.132047][T16740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.139047][T16740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.168492][T16740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.190128][ T5147] Bluetooth: hci5: command tx timeout [ 329.262025][T16898] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3377'. [ 329.274753][T16898] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3377'. [ 329.398778][T16904] FAULT_INJECTION: forcing a failure. [ 329.398778][T16904] name failslab, interval 1, probability 0, space 0, times 0 [ 329.417411][T16904] CPU: 1 UID: 0 PID: 16904 Comm: syz.3.3381 Not tainted syzkaller #0 PREEMPT(full) [ 329.417440][T16904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 329.417453][T16904] Call Trace: [ 329.417461][T16904] [ 329.417469][T16904] dump_stack_lvl+0x189/0x250 [ 329.417502][T16904] ? __pfx____ratelimit+0x10/0x10 [ 329.417530][T16904] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.417558][T16904] ? __pfx__printk+0x10/0x10 [ 329.417583][T16904] ? __pfx___might_resched+0x10/0x10 [ 329.417606][T16904] ? fs_reclaim_acquire+0x7d/0x100 [ 329.417643][T16904] should_fail_ex+0x414/0x560 [ 329.417681][T16904] should_failslab+0xa8/0x100 [ 329.417703][T16904] kmem_cache_alloc_node_noprof+0x77/0x710 [ 329.417732][T16904] ? __alloc_skb+0x112/0x2d0 [ 329.417750][T16904] ? netlink_autobind+0xdb/0x300 [ 329.417775][T16904] __alloc_skb+0x112/0x2d0 [ 329.417799][T16904] netlink_sendmsg+0x5c6/0xb30 [ 329.417829][T16904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.417853][T16904] ? aa_sock_msg_perm+0xf1/0x1d0 [ 329.417884][T16904] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 329.417903][T16904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.417925][T16904] __sock_sendmsg+0x21c/0x270 [ 329.417956][T16904] ____sys_sendmsg+0x52d/0x830 [ 329.417983][T16904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.418017][T16904] ? import_iovec+0x74/0xa0 [ 329.418048][T16904] ___sys_sendmsg+0x21f/0x2a0 [ 329.418073][T16904] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.418133][T16904] ? __fget_files+0x2a/0x420 [ 329.418152][T16904] ? __fget_files+0x3a0/0x420 [ 329.418183][T16904] __sys_sendmmsg+0x227/0x430 [ 329.418304][T16904] ? __pfx___sys_sendmmsg+0x10/0x10 [ 329.418349][T16904] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 329.418400][T16904] ? ksys_write+0x22a/0x250 [ 329.418433][T16904] ? __pfx_ksys_write+0x10/0x10 [ 329.418467][T16904] __x64_sys_sendmmsg+0xa0/0xc0 [ 329.418493][T16904] do_syscall_64+0xfa/0xfa0 [ 329.418521][T16904] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.418549][T16904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.418570][T16904] ? clear_bhb_loop+0x60/0xb0 [ 329.418596][T16904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.418617][T16904] RIP: 0033:0x7f4d03f8f6c9 [ 329.418636][T16904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.418654][T16904] RSP: 002b:00007f4d04e5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 329.418675][T16904] RAX: ffffffffffffffda RBX: 00007f4d041e5fa0 RCX: 00007f4d03f8f6c9 [ 329.418690][T16904] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 329.418711][T16904] RBP: 00007f4d04e5b090 R08: 0000000000000000 R09: 0000000000000000 [ 329.418727][T16904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.418739][T16904] R13: 00007f4d041e6038 R14: 00007f4d041e5fa0 R15: 00007fff5eea5c88 [ 329.418775][T16904] [ 329.443873][T16740] hsr_slave_0: entered promiscuous mode [ 329.732556][T16740] hsr_slave_1: entered promiscuous mode [ 329.739323][T16740] debugfs: 'hsr0' already exists in 'hsr' [ 329.745119][T16740] Cannot create hsr debugfs directory [ 330.200119][T16925] bond1: entered allmulticast mode [ 330.228673][T16940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3392'. [ 330.284999][ T996] hsr_slave_0: left promiscuous mode [ 330.293566][ T996] hsr_slave_1: left promiscuous mode [ 330.321820][ T996] pim6reg527 (unregistering): left allmulticast mode [ 330.905556][ T3503] smc: removing ib device syz2 [ 331.271198][ T5147] Bluetooth: hci5: command tx timeout [ 331.275871][T16950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.604474][T16958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3400'. [ 331.957217][T16972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.964559][T16972] IPv6: NLM_F_CREATE should be set when creating new route [ 332.241591][T16987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.803459][T16740] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 332.810737][T17001] sctp: [Deprecated]: syz.3.3416 (pid 17001) Use of int in max_burst socket option. [ 332.810737][T17001] Use struct sctp_assoc_value instead [ 333.060878][T16740] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 333.123773][T16740] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 333.148393][T17013] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 333.211015][T16740] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 333.237141][T17017] __nla_validate_parse: 7 callbacks suppressed [ 333.237165][T17017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3421'. [ 333.346870][T17027] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3423'. [ 333.358854][ T5147] Bluetooth: hci5: command tx timeout [ 333.393469][T17027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.836995][ T996] IPVS: stop unused estimator thread 0... [ 333.838806][T17041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3428'. [ 333.852940][T16740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.953061][T16740] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.975692][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.982999][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.001229][T17054] netlink: del zone limit has 4 unknown bytes [ 334.052182][ T996] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.059414][ T996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.096796][T17058] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 334.104136][T17058] IPv6: NLM_F_CREATE should be set when creating new route [ 334.333591][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3436'. [ 334.508317][T17078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3440'. [ 334.577649][T16740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.672504][T16740] veth0_vlan: entered promiscuous mode [ 334.678857][T17080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3441'. [ 334.722788][T16740] veth1_vlan: entered promiscuous mode [ 334.836333][T16740] veth0_macvtap: entered promiscuous mode [ 334.872312][T16740] veth1_macvtap: entered promiscuous mode [ 334.942673][T17092] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 334.950088][T17092] IPv6: NLM_F_CREATE should be set when creating new route [ 334.985314][T16740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.037823][T16740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.101556][ T6551] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.121982][ T6551] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.151691][ T6551] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.167439][ T6551] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.200572][T17103] netlink: 'syz.1.3450': attribute type 83 has an invalid length. [ 335.373542][T17107] sctp: [Deprecated]: syz.1.3451 (pid 17107) Use of int in max_burst socket option deprecated. [ 335.373542][T17107] Use struct sctp_assoc_value instead [ 335.401172][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.422416][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.503498][T17114] x_tables: duplicate underflow at hook 3 [ 335.598029][T17118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3455'. [ 335.631007][ T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.641371][T17110] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3453'. [ 335.651618][T17110] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 335.661478][T17110] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 335.674574][ T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.706947][T17121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3457'. [ 335.739735][T17123] netlink: 9712 bytes leftover after parsing attributes in process `syz.1.3456'. [ 335.803789][T17125] netlink: 'syz.3.3458': attribute type 1 has an invalid length. [ 335.846369][T17125] netlink: 'syz.3.3458': attribute type 3 has an invalid length. [ 335.860806][T17125] NCSI netlink: No device for ifindex 813332851 [ 335.900650][T17130] netlink: 'syz.0.3327': attribute type 6 has an invalid length. [ 335.950588][T17130] netlink: 'syz.0.3327': attribute type 6 has an invalid length. [ 335.976404][T17134] FAULT_INJECTION: forcing a failure. [ 335.976404][T17134] name failslab, interval 1, probability 0, space 0, times 0 [ 336.056262][T17134] CPU: 1 UID: 0 PID: 17134 Comm: syz.1.3460 Not tainted syzkaller #0 PREEMPT(full) [ 336.056292][T17134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.056305][T17134] Call Trace: [ 336.056314][T17134] [ 336.056323][T17134] dump_stack_lvl+0x189/0x250 [ 336.056359][T17134] ? __pfx____ratelimit+0x10/0x10 [ 336.056388][T17134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.056417][T17134] ? __pfx__printk+0x10/0x10 [ 336.056445][T17134] ? __lock_acquire+0xab9/0xd20 [ 336.056475][T17134] should_fail_ex+0x414/0x560 [ 336.056513][T17134] should_failslab+0xa8/0x100 [ 336.056538][T17134] kmem_cache_alloc_noprof+0x74/0x6e0 [ 336.056574][T17134] ? skb_clone+0x212/0x3a0 [ 336.056603][T17134] skb_clone+0x212/0x3a0 [ 336.056632][T17134] __netlink_deliver_tap+0x404/0x850 [ 336.056666][T17134] ? netlink_deliver_tap+0x2e/0x1b0 [ 336.056689][T17134] netlink_deliver_tap+0x19c/0x1b0 [ 336.056711][T17134] netlink_unicast+0x7fa/0x9e0 [ 336.056752][T17134] ? __pfx_netlink_unicast+0x10/0x10 [ 336.056785][T17134] ? netlink_sendmsg+0x642/0xb30 [ 336.056804][T17134] ? skb_put+0x11b/0x210 [ 336.056828][T17134] netlink_sendmsg+0x805/0xb30 [ 336.056860][T17134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.056885][T17134] ? aa_sock_msg_perm+0xf1/0x1d0 [ 336.056918][T17134] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 336.056938][T17134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.056961][T17134] __sock_sendmsg+0x21c/0x270 [ 336.057001][T17134] ____sys_sendmsg+0x505/0x830 [ 336.057031][T17134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.057065][T17134] ? import_iovec+0x74/0xa0 [ 336.057096][T17134] ___sys_sendmsg+0x21f/0x2a0 [ 336.057121][T17134] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.057185][T17134] ? __fget_files+0x2a/0x420 [ 336.057204][T17134] ? __fget_files+0x3a0/0x420 [ 336.057236][T17134] __x64_sys_sendmsg+0x19b/0x260 [ 336.057263][T17134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.057297][T17134] ? __pfx_ksys_write+0x10/0x10 [ 336.057331][T17134] ? do_syscall_64+0xbe/0xfa0 [ 336.057366][T17134] do_syscall_64+0xfa/0xfa0 [ 336.057393][T17134] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.057422][T17134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.057443][T17134] ? clear_bhb_loop+0x60/0xb0 [ 336.057468][T17134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.057488][T17134] RIP: 0033:0x7fb02018f6c9 [ 336.057507][T17134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.057525][T17134] RSP: 002b:00007fb020fe5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.057546][T17134] RAX: ffffffffffffffda RBX: 00007fb0203e5fa0 RCX: 00007fb02018f6c9 [ 336.057561][T17134] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 336.057574][T17134] RBP: 00007fb020fe5090 R08: 0000000000000000 R09: 0000000000000000 [ 336.057586][T17134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.057598][T17134] R13: 00007fb0203e6038 R14: 00007fb0203e5fa0 R15: 00007fffaa514dc8 [ 336.057634][T17134] [ 336.598202][T17142] FAULT_INJECTION: forcing a failure. [ 336.598202][T17142] name failslab, interval 1, probability 0, space 0, times 0 [ 336.682880][T17142] CPU: 0 UID: 0 PID: 17142 Comm: syz.1.3465 Not tainted syzkaller #0 PREEMPT(full) [ 336.682918][T17142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.682931][T17142] Call Trace: [ 336.682940][T17142] [ 336.682948][T17142] dump_stack_lvl+0x189/0x250 [ 336.682982][T17142] ? __pfx____ratelimit+0x10/0x10 [ 336.683011][T17142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.683040][T17142] ? __pfx__printk+0x10/0x10 [ 336.683065][T17142] ? __pfx___might_resched+0x10/0x10 [ 336.683087][T17142] ? fs_reclaim_acquire+0x7d/0x100 [ 336.683125][T17142] should_fail_ex+0x414/0x560 [ 336.683167][T17142] should_failslab+0xa8/0x100 [ 336.683190][T17142] __kmalloc_cache_noprof+0x6f/0x6f0 [ 336.683221][T17142] ? inet6_rtm_newroute+0x7f3/0x18c0 [ 336.683254][T17142] inet6_rtm_newroute+0x7f3/0x18c0 [ 336.683285][T17142] ? kmem_cache_free+0x19b/0x690 [ 336.683321][T17142] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 336.683348][T17142] ? __local_bh_enable_ip+0x12d/0x1c0 [ 336.683387][T17142] ? __dev_queue_xmit+0x27b/0x3b50 [ 336.683413][T17142] ? __dev_queue_xmit+0x1d79/0x3b50 [ 336.683434][T17142] ? kasan_save_track+0x3e/0x80 [ 336.683461][T17142] ? __kasan_slab_alloc+0x6c/0x80 [ 336.683526][T17142] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 336.683556][T17142] rtnetlink_rcv_msg+0x7cf/0xb70 [ 336.683591][T17142] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 336.683621][T17142] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 336.683650][T17142] ? ref_tracker_free+0x63a/0x7d0 [ 336.683672][T17142] ? __asan_memcpy+0x40/0x70 [ 336.683698][T17142] ? __pfx_ref_tracker_free+0x10/0x10 [ 336.683730][T17142] netlink_rcv_skb+0x208/0x470 [ 336.683751][T17142] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 336.683784][T17142] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 336.683816][T17142] ? netlink_deliver_tap+0x2e/0x1b0 [ 336.683845][T17142] netlink_unicast+0x82f/0x9e0 [ 336.683885][T17142] ? __pfx_netlink_unicast+0x10/0x10 [ 336.683928][T17142] ? netlink_sendmsg+0x642/0xb30 [ 336.683946][T17142] ? skb_put+0x11b/0x210 [ 336.683970][T17142] netlink_sendmsg+0x805/0xb30 [ 336.684001][T17142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.684025][T17142] ? aa_sock_msg_perm+0xf1/0x1d0 [ 336.684057][T17142] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 336.684078][T17142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.684099][T17142] __sock_sendmsg+0x21c/0x270 [ 336.684131][T17142] ____sys_sendmsg+0x52d/0x830 [ 336.684159][T17142] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.684192][T17142] ? import_iovec+0x74/0xa0 [ 336.684222][T17142] ___sys_sendmsg+0x21f/0x2a0 [ 336.684247][T17142] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.684308][T17142] ? __fget_files+0x2a/0x420 [ 336.684327][T17142] ? __fget_files+0x3a0/0x420 [ 336.684357][T17142] __sys_sendmmsg+0x227/0x430 [ 336.684386][T17142] ? __pfx___sys_sendmmsg+0x10/0x10 [ 336.684420][T17142] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 336.684471][T17142] ? ksys_write+0x22a/0x250 [ 336.684502][T17142] ? __pfx_ksys_write+0x10/0x10 [ 336.684536][T17142] __x64_sys_sendmmsg+0xa0/0xc0 [ 336.684561][T17142] do_syscall_64+0xfa/0xfa0 [ 336.684590][T17142] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.684618][T17142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.684638][T17142] ? clear_bhb_loop+0x60/0xb0 [ 336.684663][T17142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.684683][T17142] RIP: 0033:0x7fb02018f6c9 [ 336.684702][T17142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.684719][T17142] RSP: 002b:00007fb020fe5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 336.684741][T17142] RAX: ffffffffffffffda RBX: 00007fb0203e5fa0 RCX: 00007fb02018f6c9 [ 336.684756][T17142] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 336.684770][T17142] RBP: 00007fb020fe5090 R08: 0000000000000000 R09: 0000000000000000 [ 336.684782][T17142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.684793][T17142] R13: 00007fb0203e6038 R14: 00007fb0203e5fa0 R15: 00007fffaa514dc8 [ 336.684835][T17142] [ 337.346242][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.404998][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.419962][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.430781][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.444204][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.663954][T17166] FAULT_INJECTION: forcing a failure. [ 337.663954][T17166] name failslab, interval 1, probability 0, space 0, times 0 [ 337.677064][T17166] CPU: 0 UID: 0 PID: 17166 Comm: syz.3.3471 Not tainted syzkaller #0 PREEMPT(full) [ 337.677092][T17166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 337.677105][T17166] Call Trace: [ 337.677113][T17166] [ 337.677122][T17166] dump_stack_lvl+0x189/0x250 [ 337.677155][T17166] ? __pfx____ratelimit+0x10/0x10 [ 337.677184][T17166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.677213][T17166] ? __pfx__printk+0x10/0x10 [ 337.677238][T17166] ? skb_network_protocol+0x508/0x760 [ 337.677277][T17166] should_fail_ex+0x414/0x560 [ 337.677316][T17166] should_failslab+0xa8/0x100 [ 337.677339][T17166] kmem_cache_alloc_noprof+0x74/0x6e0 [ 337.677366][T17166] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 337.677385][T17166] ? skb_clone+0x212/0x3a0 [ 337.677414][T17166] skb_clone+0x212/0x3a0 [ 337.677440][T17166] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 337.677463][T17166] dev_queue_xmit_nit+0x416/0xcc0 [ 337.677484][T17166] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 337.677517][T17166] dev_hard_start_xmit+0x1be/0x830 [ 337.677560][T17166] __dev_queue_xmit+0x1b8d/0x3b50 [ 337.677589][T17166] ? kasan_save_track+0x3e/0x80 [ 337.677616][T17166] ? __kasan_slab_alloc+0x6c/0x80 [ 337.677644][T17166] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 337.677686][T17166] ? __dev_queue_xmit+0x27b/0x3b50 [ 337.677730][T17166] ? __pfx___dev_queue_xmit+0x10/0x10 [ 337.677770][T17166] ? __copy_skb_header+0xa7/0x550 [ 337.677794][T17166] ? __asan_memcpy+0x40/0x70 [ 337.677843][T17166] ? skb_clone+0x246/0x3a0 [ 337.677870][T17166] __netlink_deliver_tap+0x5ad/0x850 [ 337.677905][T17166] ? netlink_deliver_tap+0x2e/0x1b0 [ 337.677928][T17166] netlink_deliver_tap+0x19c/0x1b0 [ 337.677950][T17166] netlink_unicast+0x7fa/0x9e0 [ 337.677995][T17166] ? __pfx_netlink_unicast+0x10/0x10 [ 337.678026][T17166] ? netlink_sendmsg+0x642/0xb30 [ 337.678044][T17166] ? skb_put+0x11b/0x210 [ 337.678068][T17166] netlink_sendmsg+0x805/0xb30 [ 337.678100][T17166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.678124][T17166] ? aa_sock_msg_perm+0xf1/0x1d0 [ 337.678157][T17166] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 337.678177][T17166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.678199][T17166] __sock_sendmsg+0x21c/0x270 [ 337.678232][T17166] ____sys_sendmsg+0x505/0x830 [ 337.678261][T17166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.678294][T17166] ? import_iovec+0x74/0xa0 [ 337.678326][T17166] ___sys_sendmsg+0x21f/0x2a0 [ 337.678351][T17166] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.678415][T17166] ? __fget_files+0x2a/0x420 [ 337.678434][T17166] ? __fget_files+0x3a0/0x420 [ 337.678465][T17166] __x64_sys_sendmsg+0x19b/0x260 [ 337.678496][T17166] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 337.678531][T17166] ? __pfx_ksys_write+0x10/0x10 [ 337.678564][T17166] ? do_syscall_64+0xbe/0xfa0 [ 337.678598][T17166] do_syscall_64+0xfa/0xfa0 [ 337.678626][T17166] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.678654][T17166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.678675][T17166] ? clear_bhb_loop+0x60/0xb0 [ 337.678705][T17166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.678725][T17166] RIP: 0033:0x7f4d03f8f6c9 [ 337.678743][T17166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.678761][T17166] RSP: 002b:00007f4d04e5b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.678783][T17166] RAX: ffffffffffffffda RBX: 00007f4d041e5fa0 RCX: 00007f4d03f8f6c9 [ 337.678797][T17166] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 337.678809][T17166] RBP: 00007f4d04e5b090 R08: 0000000000000000 R09: 0000000000000000 [ 337.678822][T17166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.678833][T17166] R13: 00007f4d041e6038 R14: 00007f4d041e5fa0 R15: 00007fff5eea5c88 [ 337.678869][T17166] [ 338.128310][T17169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 338.180765][T17174] FAULT_INJECTION: forcing a failure. [ 338.180765][T17174] name failslab, interval 1, probability 0, space 0, times 0 [ 338.232563][T17174] CPU: 1 UID: 0 PID: 17174 Comm: syz.0.3474 Not tainted syzkaller #0 PREEMPT(full) [ 338.232592][T17174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 338.232605][T17174] Call Trace: [ 338.232613][T17174] [ 338.232622][T17174] dump_stack_lvl+0x189/0x250 [ 338.232657][T17174] ? __pfx____ratelimit+0x10/0x10 [ 338.232685][T17174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.232713][T17174] ? __pfx__printk+0x10/0x10 [ 338.232737][T17174] ? __pfx___might_resched+0x10/0x10 [ 338.232761][T17174] ? fs_reclaim_acquire+0x7d/0x100 [ 338.232805][T17174] should_fail_ex+0x414/0x560 [ 338.232843][T17174] should_failslab+0xa8/0x100 [ 338.232865][T17174] __kmalloc_cache_noprof+0x6f/0x6f0 [ 338.232896][T17174] ? rtnl_newlink+0xfb/0x1c80 [ 338.232927][T17174] ? kasan_save_track+0x4f/0x80 [ 338.232961][T17174] rtnl_newlink+0xfb/0x1c80 [ 338.232990][T17174] ? netlink_deliver_tap+0x19c/0x1b0 [ 338.233008][T17174] ? netlink_unicast+0x7fa/0x9e0 [ 338.233035][T17174] ? netlink_sendmsg+0x805/0xb30 [ 338.233053][T17174] ? __sock_sendmsg+0x21c/0x270 [ 338.233078][T17174] ? ____sys_sendmsg+0x505/0x830 [ 338.233097][T17174] ? ___sys_sendmsg+0x21f/0x2a0 [ 338.233116][T17174] ? __x64_sys_sendmsg+0x19b/0x260 [ 338.233136][T17174] ? do_syscall_64+0xfa/0xfa0 [ 338.233163][T17174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.233190][T17174] ? __pfx_rtnl_newlink+0x10/0x10 [ 338.233249][T17174] ? kasan_quarantine_put+0xdd/0x220 [ 338.233278][T17174] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.233314][T17174] ? nlmon_xmit+0xb0/0x100 [ 338.233338][T17174] ? kmem_cache_free+0x19b/0x690 [ 338.233378][T17174] ? __local_bh_enable_ip+0x12d/0x1c0 [ 338.233400][T17174] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.233431][T17174] ? __local_bh_enable_ip+0x12d/0x1c0 [ 338.233452][T17174] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 338.233479][T17174] ? __dev_queue_xmit+0x27b/0x3b50 [ 338.233504][T17174] ? __dev_queue_xmit+0x27b/0x3b50 [ 338.233525][T17174] ? __dev_queue_xmit+0x27b/0x3b50 [ 338.233550][T17174] ? __dev_queue_xmit+0x1d79/0x3b50 [ 338.233572][T17174] ? kasan_save_track+0x3e/0x80 [ 338.233602][T17174] ? __kasan_slab_alloc+0x6c/0x80 [ 338.233637][T17174] ? __lock_acquire+0xab9/0xd20 [ 338.233685][T17174] ? __pfx_rtnl_newlink+0x10/0x10 [ 338.233715][T17174] rtnetlink_rcv_msg+0x7cf/0xb70 [ 338.233750][T17174] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 338.233780][T17174] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 338.233816][T17174] ? ref_tracker_free+0x63a/0x7d0 [ 338.233837][T17174] ? __asan_memcpy+0x40/0x70 [ 338.233863][T17174] ? __pfx_ref_tracker_free+0x10/0x10 [ 338.233895][T17174] netlink_rcv_skb+0x208/0x470 [ 338.233915][T17174] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 338.233949][T17174] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 338.233981][T17174] ? netlink_deliver_tap+0x2e/0x1b0 [ 338.234010][T17174] netlink_unicast+0x82f/0x9e0 [ 338.234049][T17174] ? __pfx_netlink_unicast+0x10/0x10 [ 338.234082][T17174] ? netlink_sendmsg+0x642/0xb30 [ 338.234100][T17174] ? skb_put+0x11b/0x210 [ 338.234125][T17174] netlink_sendmsg+0x805/0xb30 [ 338.234155][T17174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.234180][T17174] ? aa_sock_msg_perm+0xf1/0x1d0 [ 338.234213][T17174] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 338.234233][T17174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.234255][T17174] __sock_sendmsg+0x21c/0x270 [ 338.234286][T17174] ____sys_sendmsg+0x505/0x830 [ 338.234314][T17174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.234347][T17174] ? import_iovec+0x74/0xa0 [ 338.234378][T17174] ___sys_sendmsg+0x21f/0x2a0 [ 338.234402][T17174] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.234464][T17174] ? __fget_files+0x2a/0x420 [ 338.234482][T17174] ? __fget_files+0x3a0/0x420 [ 338.234513][T17174] __x64_sys_sendmsg+0x19b/0x260 [ 338.234539][T17174] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 338.234571][T17174] ? __pfx_ksys_write+0x10/0x10 [ 338.234605][T17174] ? do_syscall_64+0xbe/0xfa0 [ 338.234638][T17174] do_syscall_64+0xfa/0xfa0 [ 338.234666][T17174] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.234695][T17174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.234715][T17174] ? clear_bhb_loop+0x60/0xb0 [ 338.234740][T17174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.234760][T17174] RIP: 0033:0x7f10e838f6c9 [ 338.234778][T17174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.234801][T17174] RSP: 002b:00007f10e9278038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.234824][T17174] RAX: ffffffffffffffda RBX: 00007f10e85e5fa0 RCX: 00007f10e838f6c9 [ 338.234839][T17174] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 338.234851][T17174] RBP: 00007f10e9278090 R08: 0000000000000000 R09: 0000000000000000 [ 338.234864][T17174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.234876][T17174] R13: 00007f10e85e6038 R14: 00007f10e85e5fa0 R15: 00007ffed13ffc58 [ 338.234911][T17174] [ 338.817954][T17153] chnl_net:caif_netlink_parms(): no params data found [ 338.905231][T17178] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 339.039628][T17153] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.046913][T17153] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.052535][T17194] __nla_validate_parse: 7 callbacks suppressed [ 339.052558][T17194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3480'. [ 339.075994][T17153] bridge_slave_0: entered allmulticast mode [ 339.084365][T17153] bridge_slave_0: entered promiscuous mode [ 339.094626][T17153] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.102328][T17153] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.110737][T17153] bridge_slave_1: entered allmulticast mode [ 339.118672][T17153] bridge_slave_1: entered promiscuous mode [ 339.162906][T17190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3481'. [ 339.244632][T17153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.276190][T17206] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 339.283532][T17206] IPv6: NLM_F_CREATE should be set when creating new route [ 339.311601][T17153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.444385][T17153] team0: Port device team_slave_0 added [ 339.451280][T17208] FAULT_INJECTION: forcing a failure. [ 339.451280][T17208] name failslab, interval 1, probability 0, space 0, times 0 [ 339.467503][T17153] team0: Port device team_slave_1 added [ 339.473846][T17208] CPU: 1 UID: 0 PID: 17208 Comm: syz.2.3486 Not tainted syzkaller #0 PREEMPT(full) [ 339.473873][T17208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 339.473885][T17208] Call Trace: [ 339.473893][T17208] [ 339.473901][T17208] dump_stack_lvl+0x189/0x250 [ 339.473934][T17208] ? __pfx____ratelimit+0x10/0x10 [ 339.473962][T17208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.473989][T17208] ? __pfx__printk+0x10/0x10 [ 339.474015][T17208] ? __pfx___might_resched+0x10/0x10 [ 339.474042][T17208] should_fail_ex+0x414/0x560 [ 339.474080][T17208] should_failslab+0xa8/0x100 [ 339.474102][T17208] kmem_cache_alloc_node_noprof+0x77/0x710 [ 339.474132][T17208] ? __alloc_skb+0x112/0x2d0 [ 339.474158][T17208] __alloc_skb+0x112/0x2d0 [ 339.474181][T17208] netlink_ack+0x146/0xa50 [ 339.474210][T17208] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 339.474239][T17208] ? ref_tracker_free+0x63a/0x7d0 [ 339.474260][T17208] ? __asan_memcpy+0x40/0x70 [ 339.474286][T17208] ? __pfx_ref_tracker_free+0x10/0x10 [ 339.474317][T17208] netlink_rcv_skb+0x28c/0x470 [ 339.474338][T17208] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 339.474371][T17208] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.474404][T17208] ? netlink_deliver_tap+0x2e/0x1b0 [ 339.474432][T17208] netlink_unicast+0x82f/0x9e0 [ 339.474470][T17208] ? __pfx_netlink_unicast+0x10/0x10 [ 339.474501][T17208] ? netlink_sendmsg+0x642/0xb30 [ 339.474519][T17208] ? skb_put+0x11b/0x210 [ 339.474542][T17208] netlink_sendmsg+0x805/0xb30 [ 339.474571][T17208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.474595][T17208] ? aa_sock_msg_perm+0xf1/0x1d0 [ 339.474626][T17208] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 339.474647][T17208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.474668][T17208] __sock_sendmsg+0x21c/0x270 [ 339.474698][T17208] ____sys_sendmsg+0x505/0x830 [ 339.474726][T17208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.474759][T17208] ? import_iovec+0x74/0xa0 [ 339.474788][T17208] ___sys_sendmsg+0x21f/0x2a0 [ 339.474849][T17208] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.474910][T17208] ? __fget_files+0x2a/0x420 [ 339.474928][T17208] ? __fget_files+0x3a0/0x420 [ 339.474959][T17208] __x64_sys_sendmsg+0x19b/0x260 [ 339.474984][T17208] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 339.475017][T17208] ? __pfx_ksys_write+0x10/0x10 [ 339.475050][T17208] ? do_syscall_64+0xbe/0xfa0 [ 339.475082][T17208] do_syscall_64+0xfa/0xfa0 [ 339.475109][T17208] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.475136][T17208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.475156][T17208] ? clear_bhb_loop+0x60/0xb0 [ 339.475181][T17208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.475200][T17208] RIP: 0033:0x7fbb63b8f6c9 [ 339.475217][T17208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.475234][T17208] RSP: 002b:00007fbb64ac5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.475255][T17208] RAX: ffffffffffffffda RBX: 00007fbb63de5fa0 RCX: 00007fbb63b8f6c9 [ 339.475269][T17208] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 339.475281][T17208] RBP: 00007fbb64ac5090 R08: 0000000000000000 R09: 0000000000000000 [ 339.475292][T17208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.475303][T17208] R13: 00007fbb63de6038 R14: 00007fbb63de5fa0 R15: 00007ffc228073a8 [ 339.475337][T17208] [ 339.477140][T17210] team0: Cannot enslave team device to itself [ 339.546356][ T5147] Bluetooth: hci1: command tx timeout [ 339.599495][T17214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3488'. [ 339.711128][T17219] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3491'. [ 339.924089][T17153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.952126][T17153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.029934][T17153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.054610][T17153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.075408][T17153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.117372][T17232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3493'. [ 340.120079][T17153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.175871][T17224] syzkaller1: entered promiscuous mode [ 340.182461][T17224] syzkaller1: entered allmulticast mode [ 340.347591][T17243] veth0_to_bond: entered allmulticast mode [ 340.386656][T17153] hsr_slave_0: entered promiscuous mode [ 340.402521][T17153] hsr_slave_1: entered promiscuous mode [ 340.413734][T17153] debugfs: 'hsr0' already exists in 'hsr' [ 340.427189][T17153] Cannot create hsr debugfs directory [ 340.448776][T17243] batadv_slave_1: entered promiscuous mode [ 340.467124][T17245] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3496'. [ 340.497911][T17250] netlink: 'syz.0.3499': attribute type 21 has an invalid length. [ 340.519695][T17243] batadv_slave_1: left promiscuous mode [ 340.536869][T17250] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3499'. [ 340.599491][T17250] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3499'. [ 340.639654][T17250] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3499'. [ 340.693492][T17250] gretap1: entered promiscuous mode [ 340.698773][T17250] gretap1: entered allmulticast mode [ 340.883495][T17275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3504'. [ 340.923408][T17269] syzkaller1: entered promiscuous mode [ 340.929046][T17269] syzkaller1: entered allmulticast mode [ 341.000699][T17279] SET target dimension over the limit! [ 341.163813][T17282] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 341.197340][T17282] bond2: (slave lo): Enslaving as a backup interface with an up link [ 341.208924][T17282] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 341.308228][T17291] xt_hashlimit: size too large, truncated to 1048576 [ 341.325019][T17153] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.358053][T17153] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.573438][T17153] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.607801][T17153] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.635114][T17297] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 341.642487][T17297] IPv6: NLM_F_CREATE should be set when creating new route [ 341.668426][T17293] syzkaller1: entered promiscuous mode [ 341.676065][T17293] syzkaller1: entered allmulticast mode [ 341.679243][ T5147] Bluetooth: hci1: command tx timeout [ 341.748580][T17306] veth0_to_bond: left allmulticast mode [ 341.834584][T17153] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.869202][T17153] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.946204][T17316] netlink: 'syz.1.3514': attribute type 2 has an invalid length. [ 342.027130][T17153] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.044080][T17153] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.077306][T17321] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 342.111075][T17321] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.120693][T17321] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.518860][T17153] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 342.585890][T17153] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 342.626103][T17153] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 342.663280][T17353] bond0: (slave rose0): Error: Device can not be enslaved while up [ 342.679005][T17353] netlink: 'syz.2.3524': attribute type 13 has an invalid length. [ 342.681253][T17153] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 342.740904][T17353] netlink: 'syz.2.3524': attribute type 13 has an invalid length. [ 342.755994][ T60] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.768837][ T60] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.817771][ T60] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.838117][ T60] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.922557][T17369] syzkaller0: entered promiscuous mode [ 342.928230][T17369] syzkaller0: entered allmulticast mode [ 343.038927][T17378] netlink: 'syz.0.3532': attribute type 1 has an invalid length. [ 343.274369][T17386] netlink: 'syz.0.3536': attribute type 83 has an invalid length. [ 343.759510][ T5147] Bluetooth: hci1: command tx timeout [ 344.923313][T17404] __nla_validate_parse: 10 callbacks suppressed [ 344.923335][T17404] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3542'. [ 344.944843][T17404] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3542'. [ 345.061652][T17153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.164450][T17153] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.179017][T17419] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3545'. [ 345.201397][T17419] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3545'. [ 345.244597][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.251864][ T6551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.283752][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.291027][ T6551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.702622][T17153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.774719][T17446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3551'. [ 345.795985][T17446] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3551'. [ 345.827410][T17446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3551'. [ 345.836846][ T5147] Bluetooth: hci1: command tx timeout [ 346.282714][T17466] syzkaller1: entered promiscuous mode [ 346.299326][T17466] syzkaller1: entered allmulticast mode [ 346.319019][T17455] veth0: entered promiscuous mode [ 346.381772][T17467] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 346.396970][T17467] bond1 (unregistering): Released all slaves [ 346.407392][T17462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3555'. [ 346.578430][T17153] veth0_vlan: entered promiscuous mode [ 346.623573][T17153] veth1_vlan: entered promiscuous mode [ 346.663941][T17476] netlink: 'syz.0.3559': attribute type 1 has an invalid length. [ 346.788460][T17153] veth0_macvtap: entered promiscuous mode [ 346.827382][T17153] veth1_macvtap: entered promiscuous mode [ 346.895828][T17153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.902129][T17486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3563'. [ 346.932985][T17153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.967288][T17487] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3562'. [ 346.983208][ T6551] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.004561][ T6551] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.033690][ T6551] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.064127][ T6551] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.225310][ T6551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.252370][ T6551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.297170][ T6551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.308014][ T6551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.488530][T17510] netlink: 'syz.4.3464': attribute type 6 has an invalid length. [ 347.913280][ T5147] Bluetooth: hci1: command tx timeout [ 348.703328][T17592] netlink: 'syz.1.3590': attribute type 1 has an invalid length. [ 348.765261][T17592] bond2: entered promiscuous mode [ 348.772873][T17592] bond2: entered allmulticast mode [ 348.778899][T17592] 8021q: adding VLAN 0 to HW filter on device bond2 [ 348.854238][T17597] bond2: entered promiscuous mode [ 348.859884][T17597] bond2: entered allmulticast mode [ 348.865647][T17597] 8021q: adding VLAN 0 to HW filter on device bond2 [ 348.899829][T17603] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 349.135597][T17618] ip6erspan0: entered promiscuous mode [ 349.141501][T17618] ip6erspan0: entered allmulticast mode [ 349.541769][T17637] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 350.149865][T17681] __nla_validate_parse: 6 callbacks suppressed [ 350.149884][T17681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3622'. [ 350.395376][T17691] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3624'. [ 350.421709][T17693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3628'. [ 350.489538][T17698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3629'. [ 350.610268][T17704] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3632'. [ 350.611658][T17702] netlink: 'syz.1.3631': attribute type 1 has an invalid length. [ 350.653504][T17702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3631'. [ 350.665704][T17702] netlink: 'syz.1.3631': attribute type 3 has an invalid length. [ 350.680932][T17706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 350.804038][T17711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.857210][T17721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3638'. [ 350.950754][ T5147] Bluetooth: hci0: command tx timeout [ 351.136194][T17730] netlink: 'syz.4.3641': attribute type 13 has an invalid length. [ 351.153436][T17728] netem: change failed [ 351.517691][T17750] Bluetooth: hci0: no memory for command (opcode 0x0c1a) [ 351.537832][T17750] Bluetooth: hci0: Opcode 0x0c1a failed: -12 [ 351.555922][T17749] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3647'. [ 351.624937][T17753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3648'. [ 351.679866][T17755] netlink: 'syz.4.3649': attribute type 1 has an invalid length. [ 351.716868][T17755] netlink: 'syz.4.3649': attribute type 1 has an invalid length. [ 351.725815][T17755] netlink: 'syz.4.3649': attribute type 2 has an invalid length. [ 351.734380][T17755] netlink: 'syz.4.3649': attribute type 1 has an invalid length. [ 351.743435][T17755] netlink: 'syz.4.3649': attribute type 1 has an invalid length. [ 351.810381][T17755] netlink: 'syz.4.3649': attribute type 2 has an invalid length. [ 351.827308][T17762] syzkaller0: entered promiscuous mode [ 351.839824][T17762] syzkaller0: entered allmulticast mode [ 352.180726][T17777] netlink: 'syz.2.3655': attribute type 6 has an invalid length. [ 352.186190][T17774] FAULT_INJECTION: forcing a failure. [ 352.186190][T17774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.190312][T17777] netlink: 'syz.2.3655': attribute type 6 has an invalid length. [ 352.230218][T17774] CPU: 1 UID: 0 PID: 17774 Comm: syz.4.3656 Not tainted syzkaller #0 PREEMPT(full) [ 352.230247][T17774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 352.230259][T17774] Call Trace: [ 352.230267][T17774] [ 352.230277][T17774] dump_stack_lvl+0x189/0x250 [ 352.230316][T17774] ? __pfx____ratelimit+0x10/0x10 [ 352.230345][T17774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.230373][T17774] ? __pfx__printk+0x10/0x10 [ 352.230395][T17774] ? __might_fault+0xb0/0x130 [ 352.230432][T17774] should_fail_ex+0x414/0x560 [ 352.230469][T17774] _copy_from_user+0x2d/0xb0 [ 352.230497][T17774] ___sys_sendmsg+0x158/0x2a0 [ 352.230523][T17774] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.230583][T17774] ? __fget_files+0x2a/0x420 [ 352.230602][T17774] ? __fget_files+0x3a0/0x420 [ 352.230632][T17774] __x64_sys_sendmsg+0x19b/0x260 [ 352.230657][T17774] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 352.230696][T17774] ? __pfx_ksys_write+0x10/0x10 [ 352.230730][T17774] ? do_syscall_64+0xbe/0xfa0 [ 352.230763][T17774] do_syscall_64+0xfa/0xfa0 [ 352.230789][T17774] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.230817][T17774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.230838][T17774] ? clear_bhb_loop+0x60/0xb0 [ 352.230862][T17774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.230882][T17774] RIP: 0033:0x7fbfd1b8f6c9 [ 352.230901][T17774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.230919][T17774] RSP: 002b:00007fbfd2ac1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.230940][T17774] RAX: ffffffffffffffda RBX: 00007fbfd1de5fa0 RCX: 00007fbfd1b8f6c9 [ 352.230955][T17774] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000006 [ 352.230968][T17774] RBP: 00007fbfd2ac1090 R08: 0000000000000000 R09: 0000000000000000 [ 352.230980][T17774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.230992][T17774] R13: 00007fbfd1de6038 R14: 00007fbfd1de5fa0 R15: 00007ffd1d682ee8 [ 352.231026][T17774] [ 352.559641][T17785] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 352.597952][T17785] FAULT_INJECTION: forcing a failure. [ 352.597952][T17785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.615362][T17785] CPU: 1 UID: 0 PID: 17785 Comm: syz.3.3659 Not tainted syzkaller #0 PREEMPT(full) [ 352.615391][T17785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 352.615404][T17785] Call Trace: [ 352.615412][T17785] [ 352.615421][T17785] dump_stack_lvl+0x189/0x250 [ 352.615456][T17785] ? __pfx____ratelimit+0x10/0x10 [ 352.615486][T17785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.615514][T17785] ? __pfx__printk+0x10/0x10 [ 352.615558][T17785] should_fail_ex+0x414/0x560 [ 352.615596][T17785] _copy_to_user+0x31/0xb0 [ 352.615625][T17785] simple_read_from_buffer+0xe1/0x170 [ 352.615662][T17785] proc_fail_nth_read+0x1b3/0x220 [ 352.615692][T17785] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 352.615723][T17785] ? rw_verify_area+0x2a6/0x4d0 [ 352.615751][T17785] ? __lock_acquire+0xab9/0xd20 [ 352.615769][T17785] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 352.615796][T17785] vfs_read+0x200/0xa30 [ 352.615824][T17785] ? fdget_pos+0x247/0x320 [ 352.615849][T17785] ? __pfx___mutex_lock+0x10/0x10 [ 352.615881][T17785] ? __pfx_vfs_read+0x10/0x10 [ 352.615912][T17785] ? __fget_files+0x2a/0x420 [ 352.615936][T17785] ? __fget_files+0x3a0/0x420 [ 352.615953][T17785] ? __fget_files+0x2a/0x420 [ 352.615980][T17785] ksys_read+0x145/0x250 [ 352.616010][T17785] ? __pfx_ksys_read+0x10/0x10 [ 352.616040][T17785] ? do_syscall_64+0xbe/0xfa0 [ 352.616073][T17785] do_syscall_64+0xfa/0xfa0 [ 352.616098][T17785] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.616125][T17785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.616145][T17785] ? clear_bhb_loop+0x60/0xb0 [ 352.616170][T17785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.616190][T17785] RIP: 0033:0x7f4d03f8e0dc [ 352.616209][T17785] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 352.616227][T17785] RSP: 002b:00007f4d04e5b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 352.616248][T17785] RAX: ffffffffffffffda RBX: 00007f4d041e5fa0 RCX: 00007f4d03f8e0dc [ 352.616263][T17785] RDX: 000000000000000f RSI: 00007f4d04e5b0a0 RDI: 0000000000000003 [ 352.616275][T17785] RBP: 00007f4d04e5b090 R08: 0000000000000000 R09: 0000000000000000 [ 352.616288][T17785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.616299][T17785] R13: 00007f4d041e6038 R14: 00007f4d041e5fa0 R15: 00007fff5eea5c88 [ 352.616335][T17785] [ 352.986106][T17787] netlink: 'syz.0.3660': attribute type 1 has an invalid length. [ 353.026536][T17787] netlink: 'syz.0.3660': attribute type 1 has an invalid length. [ 353.047641][T17794] macsec1: entered promiscuous mode [ 353.134457][T17796] IPVS: length: 100 != 8 [ 353.335771][T17803] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3666'. [ 353.463283][T17809] 8021q: adding VLAN 0 to HW filter on device bond4 [ 353.483878][T17809] bond3: (slave bond4): making interface the new active one [ 353.495052][T17809] bond3: (slave bond4): Enslaving as an active interface with an up link [ 353.507828][T17822] 8021q: adding VLAN 0 to HW filter on device bond3 [ 353.550319][T17809] xt_bpf: check failed: parse error [ 353.929614][ T3503] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.956744][ T3503] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.980677][ T6552] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.017673][ T6552] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.238164][T17863] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.246122][T17863] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.424170][T17871] veth0: entered promiscuous mode [ 354.460184][T17870] veth0: left promiscuous mode [ 354.629361][ T5147] Bluetooth: hci0: command tx timeout [ 355.086948][T17909] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 355.458725][T17934] __nla_validate_parse: 17 callbacks suppressed [ 355.458749][T17934] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3712'. [ 355.481260][T17934] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3712'. [ 355.540854][T17936] veth0_to_batadv: entered allmulticast mode [ 355.778714][T17953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.841831][T17956] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3724'. [ 355.932006][T17965] FAULT_INJECTION: forcing a failure. [ 355.932006][T17965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.946029][T17965] CPU: 0 UID: 0 PID: 17965 Comm: syz.2.3725 Not tainted syzkaller #0 PREEMPT(full) [ 355.946057][T17965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 355.946069][T17965] Call Trace: [ 355.946078][T17965] [ 355.946086][T17965] dump_stack_lvl+0x189/0x250 [ 355.946120][T17965] ? __pfx____ratelimit+0x10/0x10 [ 355.946148][T17965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.946176][T17965] ? __pfx__printk+0x10/0x10 [ 355.946197][T17965] ? __might_fault+0xb0/0x130 [ 355.946238][T17965] should_fail_ex+0x414/0x560 [ 355.946273][T17965] _copy_from_iter+0x1de/0x1790 [ 355.946303][T17965] ? rcu_is_watching+0x15/0xb0 [ 355.946330][T17965] ? kmalloc_reserve+0xbd/0x290 [ 355.946350][T17965] ? __pfx__copy_from_iter+0x10/0x10 [ 355.946384][T17965] ? __build_skb_around+0x262/0x3f0 [ 355.946419][T17965] ? netlink_sendmsg+0x642/0xb30 [ 355.946437][T17965] ? skb_put+0x11b/0x210 [ 355.946460][T17965] netlink_sendmsg+0x6b2/0xb30 [ 355.946490][T17965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.946513][T17965] ? aa_sock_msg_perm+0xf1/0x1d0 [ 355.946546][T17965] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 355.946565][T17965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.946586][T17965] __sock_sendmsg+0x21c/0x270 [ 355.946616][T17965] ____sys_sendmsg+0x505/0x830 [ 355.946645][T17965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.946677][T17965] ? import_iovec+0x74/0xa0 [ 355.946707][T17965] ___sys_sendmsg+0x21f/0x2a0 [ 355.946732][T17965] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.946792][T17965] ? __fget_files+0x2a/0x420 [ 355.946810][T17965] ? __fget_files+0x3a0/0x420 [ 355.946840][T17965] __x64_sys_sendmsg+0x19b/0x260 [ 355.946865][T17965] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 355.946898][T17965] ? __pfx_ksys_write+0x10/0x10 [ 355.946931][T17965] ? do_syscall_64+0xbe/0xfa0 [ 355.946964][T17965] do_syscall_64+0xfa/0xfa0 [ 355.946991][T17965] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.947021][T17965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.947042][T17965] ? clear_bhb_loop+0x60/0xb0 [ 355.947066][T17965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.947086][T17965] RIP: 0033:0x7fbb63b8f6c9 [ 355.947105][T17965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.947122][T17965] RSP: 002b:00007fbb64ac5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.947144][T17965] RAX: ffffffffffffffda RBX: 00007fbb63de5fa0 RCX: 00007fbb63b8f6c9 [ 355.947159][T17965] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000006 [ 355.947173][T17965] RBP: 00007fbb64ac5090 R08: 0000000000000000 R09: 0000000000000000 [ 355.947186][T17965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.947197][T17965] R13: 00007fbb63de6038 R14: 00007fbb63de5fa0 R15: 00007ffc228073a8 [ 355.947232][T17965] [ 355.987970][T17967] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3727'. [ 356.243476][T17967] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3727'. [ 356.364210][T17977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.750665][T17999] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3737'. [ 356.770302][T17999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3737'. [ 356.810242][T17999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3737'. [ 356.976787][T18012] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20000 [ 357.133868][T18024] Cannot find map_set index 0 as target [ 357.141435][T18024] validate_nla: 5 callbacks suppressed [ 357.141454][T18024] netlink: 'syz.0.3747': attribute type 63 has an invalid length. [ 357.320660][T18027] netlink: 'syz.3.3748': attribute type 6 has an invalid length. [ 357.340024][T18027] netlink: 'syz.3.3748': attribute type 6 has an invalid length. [ 357.685887][T18048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3757'. [ 358.052262][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3763'. [ 358.094637][T18078] dvmrp0: entered allmulticast mode [ 358.178229][T18078] netlink: 'syz.4.3765': attribute type 3 has an invalid length. [ 358.697040][T18097] syz.0.3771 (18097) used greatest stack depth: 17832 bytes left [ 358.865112][T18110] netlink: 'syz.0.3776': attribute type 5 has an invalid length. [ 358.901046][T18116] pimreg3: entered allmulticast mode [ 359.094370][T18128] tipc: Enabled bearer , priority 0 [ 359.105889][T18128] syzkaller0: entered promiscuous mode [ 359.113377][T18128] syzkaller0: entered allmulticast mode [ 359.161269][T18132] netlink: 'syz.3.3784': attribute type 1 has an invalid length. [ 359.254277][T18132] 8021q: adding VLAN 0 to HW filter on device bond3 [ 359.273267][T18138] tipc: Resetting bearer [ 359.316404][T18124] tipc: Resetting bearer [ 359.400648][T18124] tipc: Disabling bearer [ 359.453271][T18144] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.460637][T18144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.468463][T18144] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.475871][T18144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.528670][T18144] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 359.661712][T18154] netlink: 'syz.1.3790': attribute type 23 has an invalid length. [ 360.111954][T18187] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 360.353155][T18197] netlink: 'syz.2.3803': attribute type 21 has an invalid length. [ 360.361740][T18197] netlink: 'syz.2.3803': attribute type 21 has an invalid length. [ 360.473757][T18203] __nla_validate_parse: 43 callbacks suppressed [ 360.473781][T18203] netlink: 576 bytes leftover after parsing attributes in process `syz.0.3806'. [ 360.514566][T18205] FAULT_INJECTION: forcing a failure. [ 360.514566][T18205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.556680][T18205] CPU: 1 UID: 0 PID: 18205 Comm: syz.3.3804 Not tainted syzkaller #0 PREEMPT(full) [ 360.556708][T18205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.556722][T18205] Call Trace: [ 360.556731][T18205] [ 360.556740][T18205] dump_stack_lvl+0x189/0x250 [ 360.556775][T18205] ? __pfx____ratelimit+0x10/0x10 [ 360.556804][T18205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.556833][T18205] ? __pfx__printk+0x10/0x10 [ 360.556854][T18205] ? __might_fault+0xb0/0x130 [ 360.556895][T18205] should_fail_ex+0x414/0x560 [ 360.556932][T18205] _copy_from_user+0x2d/0xb0 [ 360.556960][T18205] ___sys_sendmsg+0x158/0x2a0 [ 360.556986][T18205] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.557048][T18205] ? __fget_files+0x2a/0x420 [ 360.557066][T18205] ? __fget_files+0x3a0/0x420 [ 360.557104][T18205] __x64_sys_sendmsg+0x19b/0x260 [ 360.557129][T18205] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 360.557161][T18205] ? __pfx_ksys_write+0x10/0x10 [ 360.557194][T18205] ? do_syscall_64+0xbe/0xfa0 [ 360.557228][T18205] do_syscall_64+0xfa/0xfa0 [ 360.557256][T18205] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.557285][T18205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.557305][T18205] ? clear_bhb_loop+0x60/0xb0 [ 360.557330][T18205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.557351][T18205] RIP: 0033:0x7f4d03f8f6c9 [ 360.557368][T18205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.557386][T18205] RSP: 002b:00007f4d04e5b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.557409][T18205] RAX: ffffffffffffffda RBX: 00007f4d041e5fa0 RCX: 00007f4d03f8f6c9 [ 360.557423][T18205] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 360.557436][T18205] RBP: 00007f4d04e5b090 R08: 0000000000000000 R09: 0000000000000000 [ 360.557449][T18205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.557460][T18205] R13: 00007f4d041e6038 R14: 00007f4d041e5fa0 R15: 00007fff5eea5c88 [ 360.557495][T18205] [ 360.963936][T18216] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3809'. [ 361.227375][T18232] netlink: 'syz.2.3814': attribute type 6 has an invalid length. [ 361.322139][T18227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3813'. [ 361.882304][T18249] FAULT_INJECTION: forcing a failure. [ 361.882304][T18249] name failslab, interval 1, probability 0, space 0, times 0 [ 361.895541][T18251] Cannot find del_set index 0 as target [ 361.907961][T18249] CPU: 0 UID: 0 PID: 18249 Comm: syz.0.3820 Not tainted syzkaller #0 PREEMPT(full) [ 361.907990][T18249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 361.908002][T18249] Call Trace: [ 361.908011][T18249] [ 361.908019][T18249] dump_stack_lvl+0x189/0x250 [ 361.908053][T18249] ? __pfx____ratelimit+0x10/0x10 [ 361.908081][T18249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.908108][T18249] ? __pfx__printk+0x10/0x10 [ 361.908136][T18249] ? __pfx___might_resched+0x10/0x10 [ 361.908157][T18249] ? fs_reclaim_acquire+0x7d/0x100 [ 361.908194][T18249] should_fail_ex+0x414/0x560 [ 361.908231][T18249] should_failslab+0xa8/0x100 [ 361.908263][T18249] kmem_cache_alloc_node_noprof+0x77/0x710 [ 361.908292][T18249] ? __alloc_skb+0x112/0x2d0 [ 361.908317][T18249] __alloc_skb+0x112/0x2d0 [ 361.908341][T18249] netlink_sendmsg+0x5c6/0xb30 [ 361.908371][T18249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.908396][T18249] ? aa_sock_msg_perm+0xf1/0x1d0 [ 361.908429][T18249] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 361.908448][T18249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.908470][T18249] __sock_sendmsg+0x21c/0x270 [ 361.908502][T18249] ____sys_sendmsg+0x505/0x830 [ 361.908531][T18249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.908563][T18249] ? import_iovec+0x74/0xa0 [ 361.908593][T18249] ___sys_sendmsg+0x21f/0x2a0 [ 361.908619][T18249] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.908681][T18249] ? __fget_files+0x2a/0x420 [ 361.908700][T18249] ? __fget_files+0x3a0/0x420 [ 361.908730][T18249] __x64_sys_sendmsg+0x19b/0x260 [ 361.908757][T18249] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 361.908790][T18249] ? __pfx_ksys_write+0x10/0x10 [ 361.908825][T18249] ? do_syscall_64+0xbe/0xfa0 [ 361.908858][T18249] do_syscall_64+0xfa/0xfa0 [ 361.908906][T18249] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.908935][T18249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.908956][T18249] ? clear_bhb_loop+0x60/0xb0 [ 361.908982][T18249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.909002][T18249] RIP: 0033:0x7f10e838f6c9 [ 361.909022][T18249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.909040][T18249] RSP: 002b:00007f10e9278038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.909063][T18249] RAX: ffffffffffffffda RBX: 00007f10e85e5fa0 RCX: 00007f10e838f6c9 [ 361.909095][T18249] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 361.909109][T18249] RBP: 00007f10e9278090 R08: 0000000000000000 R09: 0000000000000000 [ 361.909126][T18249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.909137][T18249] R13: 00007f10e85e6038 R14: 00007f10e85e5fa0 R15: 00007ffed13ffc58 [ 361.909169][T18249] [ 362.220314][T18257] wg0: Caught tx_queue_len zero misconfig [ 362.626520][T18272] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3827'. [ 362.655501][T18276] openvswitch: netlink: IP tunnel dst address not specified [ 362.676770][T18272] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3827'. [ 362.712760][T18272] validate_nla: 1 callbacks suppressed [ 362.712778][T18272] netlink: 'syz.1.3827': attribute type 5 has an invalid length. [ 362.756916][T18272] netlink: 'syz.1.3827': attribute type 6 has an invalid length. [ 362.771066][T18272] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3827'. [ 363.051078][T18296] netlink: 'syz.1.3835': attribute type 21 has an invalid length. [ 363.072900][T18296] netlink: 'syz.1.3835': attribute type 6 has an invalid length. [ 363.100196][T18296] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3835'. [ 363.147258][T18308] netlink: 'syz.0.3841': attribute type 2 has an invalid length. [ 363.183246][T18307] tipc: Started in network mode [ 363.189821][T18307] tipc: Node identity 36786b7593f3, cluster identity 4711 [ 363.197180][T18307] tipc: Enabled bearer , priority 0 [ 363.345789][T18323] sctp: [Deprecated]: syz.2.3846 (pid 18323) Use of int in maxseg socket option. [ 363.345789][T18323] Use struct sctp_assoc_value instead [ 363.348794][T18307] syzkaller0: entered promiscuous mode [ 363.377492][T18307] syzkaller0: entered allmulticast mode [ 363.386319][T18307] tipc: Resetting bearer [ 363.421763][T18327] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 363.433617][T18327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3848'. [ 363.600122][ T6552] tipc: Resetting bearer [ 363.650887][T18305] tipc: Resetting bearer [ 363.702950][T18327] xt_hashlimit: overflow, try lower: 3/0 [ 363.786589][T18342] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 363.792768][ T5888] IPVS: starting estimator thread 0... [ 363.889423][T18344] IPVS: using max 28 ests per chain, 67200 per kthread [ 365.144928][T18305] tipc: Disabling bearer [ 365.167583][ T5888] tipc: Node number set to 2777377653 [ 365.524326][T18360] syzkaller1: entered promiscuous mode [ 365.538675][T18360] syzkaller1: entered allmulticast mode [ 365.546638][T18360] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 365.558455][T18360] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3859'. [ 365.680232][T18370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3863'. [ 366.101517][T18396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3872'. [ 366.257380][T18405] netlink: 'syz.3.3876': attribute type 10 has an invalid length. [ 366.268174][T18408] netlink: 'syz.3.3876': attribute type 10 has an invalid length. [ 366.287332][T18405] batadv0: entered allmulticast mode [ 366.289425][T18408] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3876'. [ 366.323646][T18411] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3877'. [ 366.337331][T18405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.380094][T18405] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 366.428161][T18408] batadv0: entered promiscuous mode [ 366.464506][T18408] bond0: (slave batadv0): Releasing backup interface [ 366.499076][T18408] bridge0: port 3(batadv0) entered blocking state [ 366.520498][T18408] bridge0: port 3(batadv0) entered disabled state [ 366.642351][T18417] sctp: [Deprecated]: syz.2.3879 (pid 18417) Use of struct sctp_assoc_value in delayed_ack socket option. [ 366.642351][T18417] Use struct sctp_sack_info instead [ 366.666849][T18417] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 366.725824][T18422] veth1: entered promiscuous mode [ 366.949631][ T7084] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 366.960981][ T7084] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 367.004635][T18442] FAULT_INJECTION: forcing a failure. [ 367.004635][T18442] name failslab, interval 1, probability 0, space 0, times 0 [ 367.047352][T18442] CPU: 0 UID: 0 PID: 18442 Comm: syz.2.3887 Not tainted syzkaller #0 PREEMPT(full) [ 367.047384][T18442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 367.047397][T18442] Call Trace: [ 367.047405][T18442] [ 367.047413][T18442] dump_stack_lvl+0x189/0x250 [ 367.047448][T18442] ? __pfx____ratelimit+0x10/0x10 [ 367.047477][T18442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.047505][T18442] ? __pfx__printk+0x10/0x10 [ 367.047529][T18442] ? __pfx___might_resched+0x10/0x10 [ 367.047552][T18442] ? fs_reclaim_acquire+0x7d/0x100 [ 367.047589][T18442] should_fail_ex+0x414/0x560 [ 367.047626][T18442] should_failslab+0xa8/0x100 [ 367.047650][T18442] __kmalloc_cache_noprof+0x6f/0x6f0 [ 367.047680][T18442] ? nfnetlink_rcv+0xf97/0x2590 [ 367.047707][T18442] ? __nla_parse+0x40/0x60 [ 367.047734][T18442] nfnetlink_rcv+0xf97/0x2590 [ 367.047802][T18442] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 367.047854][T18442] ? ref_tracker_free+0x63a/0x7d0 [ 367.047912][T18442] ? __netlink_deliver_tap+0x807/0x850 [ 367.047934][T18442] ? netlink_deliver_tap+0x2e/0x1b0 [ 367.047975][T18442] netlink_unicast+0x82f/0x9e0 [ 367.048014][T18442] ? __pfx_netlink_unicast+0x10/0x10 [ 367.048047][T18442] ? netlink_sendmsg+0x642/0xb30 [ 367.048065][T18442] ? skb_put+0x11b/0x210 [ 367.048090][T18442] netlink_sendmsg+0x805/0xb30 [ 367.048121][T18442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.048146][T18442] ? aa_sock_msg_perm+0xf1/0x1d0 [ 367.048179][T18442] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 367.048200][T18442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.048221][T18442] __sock_sendmsg+0x21c/0x270 [ 367.048253][T18442] ____sys_sendmsg+0x505/0x830 [ 367.048282][T18442] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.048316][T18442] ? import_iovec+0x74/0xa0 [ 367.048347][T18442] ___sys_sendmsg+0x21f/0x2a0 [ 367.048372][T18442] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.048435][T18442] ? __fget_files+0x2a/0x420 [ 367.048454][T18442] ? __fget_files+0x3a0/0x420 [ 367.048485][T18442] __x64_sys_sendmsg+0x19b/0x260 [ 367.048510][T18442] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 367.048567][T18442] ? __pfx_ksys_write+0x10/0x10 [ 367.048600][T18442] ? do_syscall_64+0xbe/0xfa0 [ 367.048633][T18442] do_syscall_64+0xfa/0xfa0 [ 367.048661][T18442] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.048689][T18442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.048710][T18442] ? clear_bhb_loop+0x60/0xb0 [ 367.048734][T18442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.048755][T18442] RIP: 0033:0x7fbb63b8f6c9 [ 367.048774][T18442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.048792][T18442] RSP: 002b:00007fbb64ac5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.048815][T18442] RAX: ffffffffffffffda RBX: 00007fbb63de5fa0 RCX: 00007fbb63b8f6c9 [ 367.048829][T18442] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 367.048842][T18442] RBP: 00007fbb64ac5090 R08: 0000000000000000 R09: 0000000000000000 [ 367.048853][T18442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.048865][T18442] R13: 00007fbb63de6038 R14: 00007fbb63de5fa0 R15: 00007ffc228073a8 [ 367.048907][T18442] [ 367.409736][T18443] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3885'. [ 367.665367][T18452] tipc: Enabled bearer , priority 0 [ 367.709048][T18448] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20002 [ 367.731060][T18453] syzkaller0: entered promiscuous mode [ 367.765655][T18453] syzkaller0: entered allmulticast mode [ 367.823066][T18460] tipc: Resetting bearer [ 367.853869][T18447] tipc: Resetting bearer [ 367.900243][T18447] tipc: Disabling bearer [ 367.994609][T18481] tipc: Enabling of bearer rejected, failed to enable media [ 368.586286][T18525] netlink: 'syz.4.3911': attribute type 6 has an invalid length. [ 368.609398][T18525] netlink: 'syz.4.3911': attribute type 6 has an invalid length. [ 368.709934][ T5147] Bluetooth: hci0: command tx timeout [ 369.234958][T18553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3919'. [ 369.529273][T18574] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3926'. [ 369.818363][T18591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3930'. [ 370.819500][T18627] netlink: 'syz.3.3941': attribute type 1 has an invalid length. [ 370.970788][T18635] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3945'. [ 371.020166][T18635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.229012][T18647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.308898][T18653] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3950'. [ 371.751835][T18683] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3962'. [ 371.792635][T18683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.035189][T18699] tipc: Started in network mode [ 372.052761][T18699] tipc: Node identity cee07a18f7f3, cluster identity 4711 [ 372.096459][T18699] tipc: Enabled bearer , priority 0 [ 372.108651][T18695] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3969'. [ 372.113557][T18710] bond0: Caught tx_queue_len zero misconfig [ 372.139587][T18710] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 372.221624][T18699] tipc: Disabling bearer [ 372.351507][T18720] netlink: 'syz.3.3977': attribute type 10 has an invalid length. [ 372.376529][T18720] veth0_virt_wifi: entered allmulticast mode [ 372.431441][T18720] team0: Port device veth0_virt_wifi added [ 372.478657][T18718] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 372.511319][T18717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.522627][T18729] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3980'. [ 372.545093][T18729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.578137][T18730] netlink: 'syz.2.3979': attribute type 28 has an invalid length. [ 372.596347][T18730] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3979'. [ 372.736755][T18738] netlink: 'syz.1.3983': attribute type 15 has an invalid length. [ 372.765949][T18737] delete_channel: no stack [ 372.986481][T18757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3987'. [ 373.017626][T18756] tipc: Started in network mode [ 373.027744][T18756] tipc: Node identity cea8af5250e1, cluster identity 4711 [ 373.037934][T18756] tipc: Enabled bearer , priority 0 [ 373.050236][T18756] syzkaller0: entered promiscuous mode [ 373.055879][T18756] syzkaller0: entered allmulticast mode [ 373.130954][T18756] tipc: Resetting bearer [ 373.174154][T18755] tipc: Resetting bearer [ 373.182641][T18763] netlink: 'syz.4.3992': attribute type 13 has an invalid length. [ 373.245777][T18755] tipc: Disabling bearer [ 373.337923][T18774] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 373.355309][T18763] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.362620][T18763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.370283][T18763] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.377593][T18763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.671584][T18763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 373.716065][T18766] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3993'. [ 373.762165][T18766] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.158085][T18785] syzkaller0: entered promiscuous mode [ 374.182754][T18785] syzkaller0: entered allmulticast mode [ 374.208287][T18796] 8021q: VLANs not supported on ip_vti0 [ 374.657483][T18819] netlink: 'syz.1.4005': attribute type 21 has an invalid length. [ 374.678422][T18819] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4005'. [ 375.354815][ T5147] Bluetooth: hci0: command tx timeout [ 375.535636][T18835] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4012'. [ 376.410069][T18818] lo: entered promiscuous mode [ 376.424442][T18818] tunl0: entered promiscuous mode [ 376.451463][T18818] gre0: entered promiscuous mode [ 376.501237][T18818] gretap0: entered promiscuous mode [ 376.514041][T18818] erspan0: entered promiscuous mode [ 376.533960][T18818] ip_vti0: entered promiscuous mode [ 376.577795][T18841] netlink: 'syz.3.4014': attribute type 1 has an invalid length. [ 376.622301][T18841] gretap1: entered promiscuous mode [ 376.632327][T18841] bond4: (slave gretap1): making interface the new active one [ 376.641535][T18841] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 376.690388][T18841] macvlan2: entered promiscuous mode [ 376.695753][T18841] macvlan2: entered allmulticast mode [ 376.713290][T18841] bond4: entered promiscuous mode [ 376.741451][T18841] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 376.775630][T18850] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4016'. [ 376.785346][T18841] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 376.829535][T18855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4019'. [ 376.833021][T18841] bond4: left promiscuous mode [ 376.852099][T18859] IPVS: set_ctl: invalid protocol: 65 0.0.0.0:21 [ 377.205055][T18870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4022'. [ 377.232711][T18870] netlink: 'syz.2.4022': attribute type 1 has an invalid length. [ 377.269778][T18870] netlink: 'syz.2.4022': attribute type 2 has an invalid length. [ 377.298803][T18880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4025'. [ 377.301302][T18875] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 377.325552][T18882] netlink: 'syz.1.4021': attribute type 63 has an invalid length. [ 377.352492][T18870] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4022'. [ 377.498917][T18887] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4028'. [ 377.525021][T18887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.577230][T18888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4027'. [ 377.602816][T18888] hsr_slave_0: left promiscuous mode [ 377.624868][T18888] hsr_slave_1: left promiscuous mode [ 378.418378][T18938] tipc: Enabled bearer , priority 0 [ 378.443097][T18938] syzkaller0: entered promiscuous mode [ 378.448649][T18938] syzkaller0: entered allmulticast mode [ 378.478134][T18938] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 378.529945][T18949] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4049'. [ 378.545860][T18938] tipc: Resetting bearer [ 378.553452][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.571447][T18949] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 378.575355][T18937] tipc: Resetting bearer [ 378.617722][T18937] tipc: Disabling bearer [ 378.771365][T18957] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4053'. [ 379.069386][T18976] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4057'. [ 379.467986][T18999] netlink: 'syz.3.4065': attribute type 33 has an invalid length. [ 380.061619][T19034] tipc: New replicast peer: 255.255.255.255 [ 380.068551][T19034] tipc: Enabled bearer , priority 10 [ 380.255031][T19041] syzkaller1: entered promiscuous mode [ 380.279893][T19041] syzkaller1: entered allmulticast mode [ 380.739747][T19069] hsr_slave_0: left promiscuous mode [ 380.760303][T19069] hsr_slave_1: left promiscuous mode [ 381.125041][T19085] netlink: 'syz.2.4100': attribute type 6 has an invalid length. [ 381.150627][T19085] netlink: 'syz.2.4100': attribute type 6 has an invalid length. [ 381.179624][T15140] tipc: Node number set to 2655629138 [ 381.788618][T19132] __nla_validate_parse: 12 callbacks suppressed [ 381.795594][T19132] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4114'. [ 381.808145][T19133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4115'. [ 381.899007][T19137] netlink: 'syz.4.4117': attribute type 1 has an invalid length. [ 382.206193][T19158] netlink: 'syz.2.4122': attribute type 6 has an invalid length. [ 382.246935][T19158] netlink: 'syz.2.4122': attribute type 6 has an invalid length. [ 382.347379][T19142] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 382.563037][T19173] netlink: 'syz.3.4124': attribute type 10 has an invalid length. [ 382.589722][T19173] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.603808][T19173] bridge_slave_1: left allmulticast mode [ 382.630344][T19173] bridge_slave_1: left promiscuous mode [ 382.659017][T19173] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.720858][T19175] netlink: 'syz.3.4124': attribute type 1 has an invalid length. [ 382.728661][T19175] netlink: 'syz.3.4124': attribute type 4 has an invalid length. [ 382.752662][T19175] netlink: 9491 bytes leftover after parsing attributes in process `syz.3.4124'. [ 382.755669][T19173] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 382.766179][T19177] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4126'. [ 383.242072][T19201] netlink: 'syz.0.4137': attribute type 6 has an invalid length. [ 383.264071][T19201] netlink: 'syz.0.4137': attribute type 6 has an invalid length. [ 383.621146][T19213] bridge0: port 3(batadv0) entered blocking state [ 383.628316][T19213] bridge0: port 3(batadv0) entered forwarding state [ 383.640655][T19213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.668991][T19213] batadv0: left allmulticast mode [ 383.686806][T19213] batadv0: left promiscuous mode [ 383.695230][T19213] bridge0: port 3(batadv0) entered disabled state [ 383.785798][T19220] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4145'. [ 383.825857][T19220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.846447][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.111448][T19237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.148533][T19242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4151'. [ 384.684291][T19276] x_tables: unsorted entry at hook 2 [ 385.712928][T19309] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4172'. [ 385.961439][T19326] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4178'. [ 385.982942][T19326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.064046][T19331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4177'. [ 386.115241][T19334] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 386.155292][T19337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4177'. [ 386.189221][T19337] nbd: device at index 64 is going down [ 386.226591][T19336] validate_nla: 1 callbacks suppressed [ 386.226612][T19336] netlink: 'syz.4.4181': attribute type 23 has an invalid length. [ 386.283874][T19343] team0: Device gtp0 is of different type [ 386.607982][T19358] netlink: 'syz.0.4189': attribute type 12 has an invalid length. [ 386.630808][T19362] syzkaller1: entered promiscuous mode [ 386.636486][T19362] syzkaller1: entered allmulticast mode [ 386.646768][T19362] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 386.654090][T19362] IPv6: NLM_F_CREATE should be set when creating new route [ 386.661462][T19362] IPv6: NLM_F_CREATE should be set when creating new route [ 386.668748][T19362] IPv6: NLM_F_CREATE should be set when creating new route [ 386.680867][T19362] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 386.862494][T19368] macvtap1: entered allmulticast mode [ 386.878305][T19368] veth0_macvtap: entered allmulticast mode [ 386.941725][T19374] syzkaller0: entered promiscuous mode [ 386.969588][T19374] syzkaller0: entered allmulticast mode [ 387.317379][T19381] tipc: Enabled bearer , priority 0 [ 387.658267][T19403] __nla_validate_parse: 1 callbacks suppressed [ 387.658289][T19403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4203'. [ 387.766039][T19372] tipc: Resetting bearer [ 387.874497][T19372] tipc: Disabling bearer [ 388.792365][T19431] netlink: 'syz.0.4212': attribute type 21 has an invalid length. [ 388.832371][T19436] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4213'. [ 388.837853][T19431] netlink: 'syz.0.4212': attribute type 1 has an invalid length. [ 388.878694][T19437] netlink: 'syz.2.4214': attribute type 6 has an invalid length. [ 388.889616][T19437] netlink: 'syz.2.4214': attribute type 6 has an invalid length. [ 389.119673][T19448] syzkaller1: entered promiscuous mode [ 389.125210][T19448] syzkaller1: entered allmulticast mode [ 389.187076][T19451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.251233][T19455] ªªªªªªZ7nz>RAÌ: renamed from lo (while UP) [ 389.417192][T19465] netlink: 'syz.1.4225': attribute type 11 has an invalid length. [ 389.426142][T19465] netlink: 'syz.1.4225': attribute type 11 has an invalid length. [ 389.435788][T19465] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4225'. [ 389.458400][T19462] Bluetooth: MGMT ver 1.23 [ 389.641063][T15140] hid-generic 0005:0B57:1001.0002: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 389.948016][T19494] netlink: 'syz.0.4231': attribute type 33 has an invalid length. [ 389.973505][T19494] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4231'. [ 390.017007][T19497] netlink: 'syz.2.4232': attribute type 6 has an invalid length. [ 390.068500][T19497] netlink: 'syz.2.4232': attribute type 6 has an invalid length. [ 390.172680][T19503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4234'. [ 390.254237][T19501] netlink: 'syz.3.4233': attribute type 1 has an invalid length. [ 390.372135][T19509] af_packet: tpacket_rcv: packet too big, clamped from 1628 to 4294967272. macoff=96 [ 390.420703][T19515] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4236'. [ 390.830692][T19535] syzkaller1: entered promiscuous mode [ 390.846744][T19535] syzkaller1: entered allmulticast mode [ 390.855442][T19540] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.4244'. [ 391.254993][T19564] validate_nla: 2 callbacks suppressed [ 391.255014][T19564] netlink: 'syz.2.4251': attribute type 83 has an invalid length. [ 391.420095][T19569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4253'. [ 391.468017][T19572] netlink: 'syz.1.4256': attribute type 1 has an invalid length. [ 391.567305][T19572] bond3 (unregistering): Released all slaves [ 391.571735][T19580] netlink: 'syz.0.4253': attribute type 21 has an invalid length. [ 391.581747][T19580] IPv6: NLM_F_CREATE should be specified when creating new route [ 391.643401][T19581] ip6tnl1: entered promiscuous mode [ 391.657732][T19581] ip6tnl1: entered allmulticast mode [ 391.947655][T19597] syzkaller1: entered promiscuous mode [ 391.968295][T19597] syzkaller1: entered allmulticast mode [ 391.985445][T19601] netlink: 'syz.3.4263': attribute type 6 has an invalid length. [ 392.342098][T19617] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4267'. [ 392.364494][T19617] A link change request failed with some changes committed already. Interface ªªªªªªZ7nz>RAÌ may have been left with an inconsistent configuration, please check. [ 392.382915][T19614] tipc: Enabling of bearer rejected, failed to enable media [ 392.921308][T19650] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4280'. [ 392.935572][T19650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 392.981180][T19657] syzkaller1: entered promiscuous mode [ 392.986745][T19657] syzkaller1: entered allmulticast mode [ 393.003137][T19647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4277'. [ 393.046197][T19647] geneve2: entered promiscuous mode [ 393.154016][T19654] syzkaller0: entered promiscuous mode [ 393.162695][T19654] syzkaller0: entered allmulticast mode [ 393.176776][T19661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4282'. [ 393.406849][T19677] ieee802154 phy1 wpan1: encryption failed: -22 [ 393.645465][T19690] netlink: 'syz.0.4288': attribute type 1 has an invalid length. [ 393.871509][T19699] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4292'. [ 393.903612][T19699] A link change request failed with some changes committed already. Interface ªªªªªªZ7nz>RAÌ may have been left with an inconsistent configuration, please check. [ 394.129020][T19712] ip6gre0: entered promiscuous mode [ 394.342825][T19724] netlink: 'syz.1.4300': attribute type 4 has an invalid length. [ 394.369735][T19724] netlink: 'syz.1.4300': attribute type 4 has an invalid length. [ 394.516280][T19734] syzkaller1: entered promiscuous mode [ 394.538574][T19734] syzkaller1: entered allmulticast mode [ 394.826792][T19744] netlink: 'syz.0.4308': attribute type 8 has an invalid length. [ 395.010179][T19758] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4312'. [ 395.039006][T19758] ipt_REJECT: TCP_RESET invalid for non-tcp [ 395.163871][T19764] syzkaller1: entered promiscuous mode [ 395.170798][T19764] syzkaller1: entered allmulticast mode [ 395.304553][T19766] wg1 speed is unknown, defaulting to 1000 [ 395.318897][T19766] wg1 speed is unknown, defaulting to 1000 [ 395.330628][T19766] wg1 speed is unknown, defaulting to 1000 [ 395.344137][T19766] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 395.390987][T19766] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 395.517394][T19766] wg1 speed is unknown, defaulting to 1000 [ 395.534543][T19766] wg1 speed is unknown, defaulting to 1000 [ 395.555317][T19766] wg1 speed is unknown, defaulting to 1000 [ 395.578785][T19766] wg1 speed is unknown, defaulting to 1000 [ 395.603494][T19766] wg1 speed is unknown, defaulting to 1000 [ 395.649729][T19766] wg1 speed is unknown, defaulting to 1000 [ 395.671823][T19766] wg1 speed is unknown, defaulting to 1000 [ 395.948186][T19809] syzkaller1: entered promiscuous mode [ 395.954161][T19809] syzkaller1: entered allmulticast mode [ 395.975005][T19812] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 396.055609][T19820] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4334'. [ 396.490990][T19844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4345'. [ 396.610764][T19851] syzkaller1: entered promiscuous mode [ 396.616385][T19851] syzkaller1: entered allmulticast mode [ 396.769047][T19857] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4348'. [ 396.782101][T19857] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.797989][T19855] : renamed from hsr0 (while UP) [ 397.403100][T19880] ip6t_REJECT: ECHOREPLY is not supported [ 398.645576][T19886] syzkaller1: entered promiscuous mode [ 398.663363][T19886] syzkaller1: entered allmulticast mode [ 398.855584][T19900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4361'. [ 398.867110][T19897] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4362'. [ 398.894552][T19900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.052834][T19910] netlink: 'syz.3.4367': attribute type 6 has an invalid length. [ 399.062867][T19910] netlink: 'syz.3.4367': attribute type 6 has an invalid length. [ 399.526276][T19932] syzkaller1: entered promiscuous mode [ 399.534845][T19932] syzkaller1: entered allmulticast mode [ 399.588805][T19936] netlink: 'syz.2.4375': attribute type 10 has an invalid length. [ 399.607611][T19936] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4375'. [ 399.617427][T19936] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4375'. [ 399.646267][T19940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4377'. [ 399.663469][T19940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4377'. [ 399.759900][T19943] openvswitch: netlink: Flow actions attr not present in new flow. [ 399.787000][T19946] tipc: Invalid UDP bearer configuration [ 399.787058][T19946] tipc: Enabling of bearer rejected, failed to enable media [ 399.996085][T19955] netlink: 'syz.0.4383': attribute type 6 has an invalid length. [ 400.032968][T19955] netlink: 'syz.0.4383': attribute type 6 has an invalid length. [ 400.063959][T19959] tipc: Enabled bearer , priority 0 [ 400.237233][T19959] tipc: Disabling bearer [ 400.553638][T19986] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4395'. [ 400.573029][T19986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.628780][T19987] [ 400.631177][T19987] ====================================================== [ 400.638312][T19987] WARNING: possible circular locking dependency detected [ 400.645462][T19987] syzkaller #0 Not tainted [ 400.649898][T19987] ------------------------------------------------------ [ 400.657019][T19987] syz.2.4394/19987 is trying to acquire lock: [ 400.663094][T19987] ffffffff8f4263b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 400.673386][T19987] [ 400.673386][T19987] but task is already holding lock: [ 400.680764][T19987] ffffffff8f426358 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 400.690491][T19987] [ 400.690491][T19987] which lock already depends on the new lock. [ 400.690491][T19987] [ 400.700909][T19987] [ 400.700909][T19987] the existing dependency chain (in reverse order) is: [ 400.710021][T19987] [ 400.710021][T19987] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 400.717961][T19987] lock_acquire+0x120/0x360 [ 400.723001][T19987] _raw_spin_lock_bh+0x36/0x50 [ 400.728307][T19987] nr_rt_ioctl+0x390/0xd50 [ 400.733402][T19987] sock_do_ioctl+0xdc/0x300 [ 400.738528][T19987] sock_ioctl+0x576/0x790 [ 400.743390][T19987] __se_sys_ioctl+0xfc/0x170 [ 400.748519][T19987] do_syscall_64+0xfa/0xfa0 [ 400.753561][T19987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.760017][T19987] [ 400.760017][T19987] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 400.768127][T19987] lock_acquire+0x120/0x360 [ 400.773198][T19987] _raw_spin_lock_bh+0x36/0x50 [ 400.778516][T19987] nr_rt_ioctl+0x193/0xd50 [ 400.783477][T19987] sock_do_ioctl+0xdc/0x300 [ 400.788521][T19987] sock_ioctl+0x576/0x790 [ 400.793386][T19987] __se_sys_ioctl+0xfc/0x170 [ 400.798508][T19987] do_syscall_64+0xfa/0xfa0 [ 400.803553][T19987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.809975][T19987] [ 400.809975][T19987] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 400.817821][T19987] validate_chain+0xb9b/0x2140 [ 400.823115][T19987] __lock_acquire+0xab9/0xd20 [ 400.828399][T19987] lock_acquire+0x120/0x360 [ 400.833450][T19987] _raw_spin_lock_bh+0x36/0x50 [ 400.838809][T19987] nr_rt_device_down+0xa9/0x720 [ 400.844200][T19987] nr_device_event+0x137/0x150 [ 400.849502][T19987] notifier_call_chain+0x1b6/0x3e0 [ 400.855232][T19987] netif_close_many+0x29c/0x410 [ 400.860712][T19987] netif_close+0x158/0x210 [ 400.865678][T19987] dev_close+0x10a/0x220 [ 400.870449][T19987] bpq_device_event+0x377/0x6a0 [ 400.875842][T19987] notifier_call_chain+0x1b6/0x3e0 [ 400.881497][T19987] netif_close_many+0x29c/0x410 [ 400.887063][T19987] netif_close+0x158/0x210 [ 400.892013][T19987] dev_close+0x10a/0x220 [ 400.896785][T19987] bond_setup_by_slave+0x5f/0x3f0 [ 400.902347][T19987] bond_enslave+0x6ca/0x38a0 [ 400.907477][T19987] bond_do_ioctl+0x635/0x9b0 [ 400.912634][T19987] bond_siocdevprivate+0x17e/0x350 [ 400.918292][T19987] dev_ifsioc+0xb57/0xf00 [ 400.923161][T19987] dev_ioctl+0x84c/0x1150 [ 400.928026][T19987] sock_ioctl+0x719/0x790 [ 400.932976][T19987] __se_sys_ioctl+0xfc/0x170 [ 400.938110][T19987] do_syscall_64+0xfa/0xfa0 [ 400.943162][T19987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.949625][T19987] [ 400.949625][T19987] other info that might help us debug this: [ 400.949625][T19987] [ 400.959860][T19987] Chain exists of: [ 400.959860][T19987] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 400.959860][T19987] [ 400.973701][T19987] Possible unsafe locking scenario: [ 400.973701][T19987] [ 400.981163][T19987] CPU0 CPU1 [ 400.986539][T19987] ---- ---- [ 400.991920][T19987] lock(nr_neigh_list_lock); [ 400.996611][T19987] lock(&nr_node->node_lock); [ 401.004000][T19987] lock(nr_neigh_list_lock); [ 401.011393][T19987] lock(nr_node_list_lock); [ 401.015995][T19987] [ 401.015995][T19987] *** DEADLOCK *** [ 401.015995][T19987] [ 401.024230][T19987] 2 locks held by syz.2.4394/19987: [ 401.029437][T19987] #0: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 401.038291][T19987] #1: ffffffff8f426358 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 401.048413][T19987] [ 401.048413][T19987] stack backtrace: [ 401.054323][T19987] CPU: 0 UID: 0 PID: 19987 Comm: syz.2.4394 Not tainted syzkaller #0 PREEMPT(full) [ 401.054345][T19987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 401.054356][T19987] Call Trace: [ 401.054363][T19987] [ 401.054370][T19987] dump_stack_lvl+0x189/0x250 [ 401.054398][T19987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.054420][T19987] ? __pfx__printk+0x10/0x10 [ 401.054437][T19987] ? print_lock_name+0xde/0x100 [ 401.054460][T19987] print_circular_bug+0x2ee/0x310 [ 401.054482][T19987] check_noncircular+0x134/0x160 [ 401.054505][T19987] validate_chain+0xb9b/0x2140 [ 401.054526][T19987] ? rt6_disable_ip+0x6b3/0x720 [ 401.054555][T19987] ? __lock_acquire+0xab9/0xd20 [ 401.054571][T19987] __lock_acquire+0xab9/0xd20 [ 401.054589][T19987] ? nr_rt_device_down+0xa9/0x720 [ 401.054607][T19987] lock_acquire+0x120/0x360 [ 401.054622][T19987] ? nr_rt_device_down+0xa9/0x720 [ 401.054645][T19987] ? nr_rt_device_down+0xa9/0x720 [ 401.054663][T19987] _raw_spin_lock_bh+0x36/0x50 [ 401.054684][T19987] ? nr_rt_device_down+0xa9/0x720 [ 401.054703][T19987] nr_rt_device_down+0xa9/0x720 [ 401.054722][T19987] ? do_raw_spin_unlock+0x122/0x240 [ 401.054747][T19987] nr_device_event+0x137/0x150 [ 401.054765][T19987] notifier_call_chain+0x1b6/0x3e0 [ 401.054787][T19987] netif_close_many+0x29c/0x410 [ 401.054814][T19987] ? __pfx_netif_close_many+0x10/0x10 [ 401.054839][T19987] ? bond_netdev_event+0x227/0xe80 [ 401.054862][T19987] netif_close+0x158/0x210 [ 401.054885][T19987] ? __pfx_netif_close+0x10/0x10 [ 401.054908][T19987] ? __pfx___neigh_ifdown+0x10/0x10 [ 401.054929][T19987] ? macsec_notify+0x104/0x660 [ 401.054952][T19987] dev_close+0x10a/0x220 [ 401.054968][T19987] bpq_device_event+0x377/0x6a0 [ 401.054986][T19987] notifier_call_chain+0x1b6/0x3e0 [ 401.055008][T19987] netif_close_many+0x29c/0x410 [ 401.055033][T19987] ? __pfx_netif_close_many+0x10/0x10 [ 401.055061][T19987] netif_close+0x158/0x210 [ 401.055083][T19987] ? __pfx_netif_close+0x10/0x10 [ 401.055105][T19987] ? do_raw_spin_lock+0x121/0x290 [ 401.055128][T19987] ? __local_bh_enable_ip+0x12d/0x1c0 [ 401.055146][T19987] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.055170][T19987] dev_close+0x10a/0x220 [ 401.055185][T19987] bond_setup_by_slave+0x5f/0x3f0 [ 401.055212][T19987] bond_enslave+0x6ca/0x38a0 [ 401.055235][T19987] ? __lock_acquire+0xab9/0xd20 [ 401.055257][T19987] ? finish_task_switch+0x266/0x950 [ 401.055281][T19987] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.055304][T19987] ? __pfx_bond_enslave+0x10/0x10 [ 401.055332][T19987] ? apparmor_capable+0x137/0x1b0 [ 401.055350][T19987] ? full_name_hash+0x92/0xe0 [ 401.055369][T19987] ? netdev_name_node_lookup+0xdf/0x120 [ 401.055390][T19987] bond_do_ioctl+0x635/0x9b0 [ 401.055409][T19987] ? __pfx_bond_do_ioctl+0x10/0x10 [ 401.055428][T19987] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 401.055457][T19987] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 401.055481][T19987] ? rcu_is_watching+0x15/0xb0 [ 401.055502][T19987] bond_siocdevprivate+0x17e/0x350 [ 401.055521][T19987] ? __pfx_bond_siocdevprivate+0x10/0x10 [ 401.055542][T19987] ? full_name_hash+0x92/0xe0 [ 401.055560][T19987] ? netdev_name_node_lookup+0xdf/0x120 [ 401.055580][T19987] dev_ifsioc+0xb57/0xf00 [ 401.055608][T19987] dev_ioctl+0x84c/0x1150 [ 401.055633][T19987] sock_ioctl+0x719/0x790 [ 401.055654][T19987] ? __pfx_sock_ioctl+0x10/0x10 [ 401.055675][T19987] ? __fget_files+0x3a0/0x420 [ 401.055689][T19987] ? __fget_files+0x2a/0x420 [ 401.055704][T19987] ? bpf_lsm_file_ioctl+0x9/0x20 [ 401.055723][T19987] ? __pfx_sock_ioctl+0x10/0x10 [ 401.055742][T19987] __se_sys_ioctl+0xfc/0x170 [ 401.055764][T19987] do_syscall_64+0xfa/0xfa0 [ 401.055787][T19987] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.055809][T19987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.055825][T19987] ? clear_bhb_loop+0x60/0xb0 [ 401.055843][T19987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.055859][T19987] RIP: 0033:0x7fbb63b8f6c9 [ 401.055874][T19987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.055889][T19987] RSP: 002b:00007fbb64aa4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.055906][T19987] RAX: ffffffffffffffda RBX: 00007fbb63de6090 RCX: 00007fbb63b8f6c9 [ 401.055918][T19987] RDX: 0000200000000180 RSI: 00000000000089f0 RDI: 0000000000000004 [ 401.055929][T19987] RBP: 00007fbb63c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 401.055939][T19987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.055948][T19987] R13: 00007fbb63de6128 R14: 00007fbb63de6090 R15: 00007ffc228073a8 [ 401.055967][T19987] [ 401.531030][T19987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.542159][T19987] bond0: (slave rose0): Enslaving as an active interface with an up link [ 401.555329][T19987] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 401.564065][T19987] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 401.584337][T19987] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 401.599756][T19987] bond0: (slave rose0): Error: Device is in use and cannot be enslaved