last executing test programs: 5m45.922075992s ago: executing program 1 (id=2933): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="f78d9ca38fff48f3be52163448412ba8", 0xf14f2eaa}, {&(0x7f0000000500)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f0000000580)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000017010000020000000000000064ce19f72f887ac0a5c79b244f180a791d47669bf575ecbd9169944b8eb6cc122e8f08bf3cedc791704d00f08d5a013b31564be6d4c395da349124079c7e8d7b55583ab5aa015878b4247944a0a2354fcf7ecb04f2bfcccda560304fd87caf12bb4a42fa3ecdf5fb708c60e360eede31749c03923a4739b060cd0f69c5350624a4cbfe7027fa54bc6aa4c61aab9d99aa579d00"], 0x3}], 0x1, 0x10004810) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)=""/81, 0x7ffff000}, {&(0x7f0000000980)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x1c1342, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000000100001042cbd70001010000000000000", @ANYRES32=0x0, @ANYBLOB="99800300040000002c0012800e00010069703665727370616e00000018000280040012000500160001000000080015009af9f2"], 0x4c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000bc0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c40)={'syzkaller0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r9, @ANYBLOB="24002d80080002000300000005000100960000000500040000000000080002000000000031f8af7c485bb1f0410812c0219f64eef8d24ee5deb75b3ae70bb9f32ce9a59c3f3c5f70846c24c7828b75c2a56a349fe1fab488500b541b052c554f83188f59e5"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0x2, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000e80)={'syzkaller0\x00', @multicast}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xa, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r11) sendmsg$nl_generic(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x0) recvmmsg(r11, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)=""/145, 0x91}, {&(0x7f0000000fc0)=""/238, 0xee}, {&(0x7f00000010c0)=""/62, 0x3e}, {&(0x7f0000001100)=""/4092, 0xffc}], 0x4}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x900000}], 0x3, 0x2, 0x0) setsockopt$packet_tx_ring(r10, 0x107, 0x5, &(0x7f0000002100)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002140)={0x6, 0x3, &(0x7f0000002200)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) 5m40.85748291s ago: executing program 1 (id=2946): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000008000000000000000200000d02000000030000000200000000000000000000000600000000000004010000000000005f20002e"], 0x0, 0x48}, 0x28) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0x7}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80180002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x200003, {0x0, 0x0, 0x0, r5, 0x42024, 0xad85}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040014}, 0x20008848) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x104, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40805}, 0x4001) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r7, 0x3c2d6000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000400)=ANY=[@ANYRES32], 0x42) getsockopt$inet_tcp_int(r7, 0x6, 0x1, &(0x7f0000000380), &(0x7f00000005c0)=0x4) 5m39.231644998s ago: executing program 1 (id=2951): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) (async) listen(r2, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x2, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}]}}}}}}}, 0x0) (async) write(r1, &(0x7f0000000040)="4c00000011000e14001100020000060002000000200000", 0x17) setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) 5m38.906214128s ago: executing program 1 (id=2953): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0xb0, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x84, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7f}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4002, 0xffffffff}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfa59, 0x80}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x7}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xa, 0x10000}}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f00000004c0)=""/30, 0x1e, 0x0, &(0x7f0000000500)=""/188, 0xbc}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x1c, 0x24, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffff00}}, @jmp={0x5, 0x1, 0xb, 0x3, 0x3, 0xfffffffffffffff8, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}, @generic={0x9, 0x9, 0x1, 0x5, 0x1ff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x7, 0xa3, &(0x7f0000000200)=""/163, 0x40f00, 0x30, '\x00', r4, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x4, 0x6, 0xff}, 0x10, r5, 0xffffffffffffffff, 0x6, &(0x7f0000000640)=[r0, 0x1, r0, r1], &(0x7f0000000680)=[{0x4, 0x5, 0x10, 0x2}, {0x0, 0x3, 0xd, 0x7}, {0x4, 0x1, 0x2, 0x2}, {0x4, 0x2, 0x6, 0x9}, {0x5, 0x3, 0xd, 0x8}, {0x2, 0x1, 0xf}], 0x10, 0xebb}, 0x94) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x2000}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f00000008c0)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x9, 0x1000, &(0x7f0000000980)=""/4096, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x56}, 0x94) 5m38.152733596s ago: executing program 1 (id=2956): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5a5f1900, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000045e4d344b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) 5m37.801934886s ago: executing program 1 (id=2957): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xca02}) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="030000000400000004"], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x76dc) (async) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000400), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000440)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) (async, rerun: 64) recvmmsg(r1, &(0x7f0000000480)=[{{&(0x7f00000004c0)=@xdp, 0x0, &(0x7f0000000540)=[{&(0x7f00000005c0)=""/138}, {&(0x7f0000000680)=""/122}, {&(0x7f0000000700)=""/60}, {&(0x7f0000000740)=""/48}, {&(0x7f0000000a40)=""/4086}]}, 0x100}], 0xefac5e4abd76da, 0x0, 0x0) (async, rerun: 64) sendto$inet6(r1, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = socket$kcm(0x29, 0x2, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f00000007c0)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, 0x0, &(0x7f0000001a40)) (async) sendmsg$kcm(r2, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000340)}, {&(0x7f00000008c0)="2eaae0d24e0dd2f58423bfbac16f1d8f2a2b9359ce87fe475f22610770e50a1ff24f1977e149ea4c651b14ef9d3b2556aa6a3ac73c6dab466d8546f8d7f54e12e739411fe3e4234e7457ff699039077e25a440c73b6b544786f0478081890ec272af56f2e68455e15f67e64e552254f683f83642a5e3a73dd2f3c6dd29ba93597712e88acb", 0x85}, {&(0x7f0000000980)="db8eb3b393761901446ef390e6a8695b461ff9fad1d5971350d77937302b306008", 0x21}, {&(0x7f0000001a40)}, {&(0x7f0000001ac0)="f91c162f910160655ca32bd6c564133638359061e36f1f1a71360fdae6b2845220a90df43bed6e88f774183ed2e28c06a42a0336f9ed2441670f485341cbb3562f41cef700188ba44ce538144b761b3661591f83de2d13bbb5c9f7ed3447012646b161b28ea6e39b597a3c4938881f92db0ede213dc49365b79e383680696ae7484c28842ff84b0a7e7efac3e64ed4f15f5ca22183d88851a24dcf0a748713a27628a9d107c144e678fbbc3f43252c95b74e27ce02dea76492e582e0073dec2211c2bf71565f4cea12fc5ab79151bb59ebfca52c63884c96993e8c52f0ae7d323da4d5763c4e03f2be7989a3770e736b20ea", 0xf2}, {&(0x7f0000001bc0)="4d1bb1c812ba8eb01f09ca79d47a18876074eb4b72fd0a47e06f754a49a47006cf08d8b4ca266fbd34833a25b8c6fabcda4c6cf2dcad5510fa33390f09ab2befea12c4857343aecc7eb7204f3ddc371d02772d213df5b5bc72e941db84b8574100aa1d26390d92f86e81e20acd4f2999afb94d045be1109da1f0fb30faa1978979eecdb9d4", 0x85}, {&(0x7f0000001c80)="1c2def631efd991d9b0ceca4d41048ab4a791f02d69369d0e313577afdc38e17ed7561828ca7804c33eeeafc4018214dd6e799d020087c", 0x37}, {&(0x7f0000001cc0)="396b9cba7701b342bcc0e3e2819d89ddefc3b5478951ec470b1460dc36529f4a994f2d104955cc77110456376d68d03492041f848529e5fc8f1976e5f45a217251661679f234b116f291c52b5eeef0a16338b9593b0f3a2ecb3c292a6cff0bb5564ab3594b5f693466f84280e616ea7645aaa890039977c7dcb138a150c6e6af6e48809060e98714347d7dfd3b1198546e0ba46c", 0x94}, {&(0x7f0000001d80)="15ca7026b614684832d836ebfaf612b365e25df1b44959a16506c15110d2f70ca4ba179b2f3298b9c92a841435c7c221f410a43eefdc84f802e642d112cefbc422d21a6654f78642dd73fcec2752135ea0a960d1ce94815b87603cb2120e043223d6bba11085ad60eea4b4f32e4c694efc2d4a32d3972203b0eeb4a8e6f3ff21451eca9e041f4530ef948dfcebc7f3bcd48f583ce40b2e9daac8174af1f69729bed6", 0xa2}], 0x9}, 0x84) (async, rerun: 32) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000001a80)=0xffff1884, 0x4) (async, rerun: 32) setsockopt(r1, 0x3, 0x0, &(0x7f0000000780)="8ba3df05d9cce352761da6d1b9866616ba52a1ac7468f1e41fa36d28e7dbb1c4c4ced1db50", 0x25) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/14, 0xe}], 0x27, 0x0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000026060000fddbdfa56d000000"], 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x4000000) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f8ffffff00000000000000000000000300000000000000000000004e8686bf7bd00037385589cd0d0875e37f08a0ce4301150f61b608fd7723df19774616"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000fcffffff000000008000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) 5m22.407697962s ago: executing program 32 (id=2957): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xca02}) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="030000000400000004"], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x76dc) (async) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000400), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000440)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) (async, rerun: 64) recvmmsg(r1, &(0x7f0000000480)=[{{&(0x7f00000004c0)=@xdp, 0x0, &(0x7f0000000540)=[{&(0x7f00000005c0)=""/138}, {&(0x7f0000000680)=""/122}, {&(0x7f0000000700)=""/60}, {&(0x7f0000000740)=""/48}, {&(0x7f0000000a40)=""/4086}]}, 0x100}], 0xefac5e4abd76da, 0x0, 0x0) (async, rerun: 64) sendto$inet6(r1, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = socket$kcm(0x29, 0x2, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f00000007c0)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, 0x0, &(0x7f0000001a40)) (async) sendmsg$kcm(r2, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000340)}, {&(0x7f00000008c0)="2eaae0d24e0dd2f58423bfbac16f1d8f2a2b9359ce87fe475f22610770e50a1ff24f1977e149ea4c651b14ef9d3b2556aa6a3ac73c6dab466d8546f8d7f54e12e739411fe3e4234e7457ff699039077e25a440c73b6b544786f0478081890ec272af56f2e68455e15f67e64e552254f683f83642a5e3a73dd2f3c6dd29ba93597712e88acb", 0x85}, {&(0x7f0000000980)="db8eb3b393761901446ef390e6a8695b461ff9fad1d5971350d77937302b306008", 0x21}, {&(0x7f0000001a40)}, {&(0x7f0000001ac0)="f91c162f910160655ca32bd6c564133638359061e36f1f1a71360fdae6b2845220a90df43bed6e88f774183ed2e28c06a42a0336f9ed2441670f485341cbb3562f41cef700188ba44ce538144b761b3661591f83de2d13bbb5c9f7ed3447012646b161b28ea6e39b597a3c4938881f92db0ede213dc49365b79e383680696ae7484c28842ff84b0a7e7efac3e64ed4f15f5ca22183d88851a24dcf0a748713a27628a9d107c144e678fbbc3f43252c95b74e27ce02dea76492e582e0073dec2211c2bf71565f4cea12fc5ab79151bb59ebfca52c63884c96993e8c52f0ae7d323da4d5763c4e03f2be7989a3770e736b20ea", 0xf2}, {&(0x7f0000001bc0)="4d1bb1c812ba8eb01f09ca79d47a18876074eb4b72fd0a47e06f754a49a47006cf08d8b4ca266fbd34833a25b8c6fabcda4c6cf2dcad5510fa33390f09ab2befea12c4857343aecc7eb7204f3ddc371d02772d213df5b5bc72e941db84b8574100aa1d26390d92f86e81e20acd4f2999afb94d045be1109da1f0fb30faa1978979eecdb9d4", 0x85}, {&(0x7f0000001c80)="1c2def631efd991d9b0ceca4d41048ab4a791f02d69369d0e313577afdc38e17ed7561828ca7804c33eeeafc4018214dd6e799d020087c", 0x37}, {&(0x7f0000001cc0)="396b9cba7701b342bcc0e3e2819d89ddefc3b5478951ec470b1460dc36529f4a994f2d104955cc77110456376d68d03492041f848529e5fc8f1976e5f45a217251661679f234b116f291c52b5eeef0a16338b9593b0f3a2ecb3c292a6cff0bb5564ab3594b5f693466f84280e616ea7645aaa890039977c7dcb138a150c6e6af6e48809060e98714347d7dfd3b1198546e0ba46c", 0x94}, {&(0x7f0000001d80)="15ca7026b614684832d836ebfaf612b365e25df1b44959a16506c15110d2f70ca4ba179b2f3298b9c92a841435c7c221f410a43eefdc84f802e642d112cefbc422d21a6654f78642dd73fcec2752135ea0a960d1ce94815b87603cb2120e043223d6bba11085ad60eea4b4f32e4c694efc2d4a32d3972203b0eeb4a8e6f3ff21451eca9e041f4530ef948dfcebc7f3bcd48f583ce40b2e9daac8174af1f69729bed6", 0xa2}], 0x9}, 0x84) (async, rerun: 32) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000001a80)=0xffff1884, 0x4) (async, rerun: 32) setsockopt(r1, 0x3, 0x0, &(0x7f0000000780)="8ba3df05d9cce352761da6d1b9866616ba52a1ac7468f1e41fa36d28e7dbb1c4c4ced1db50", 0x25) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/14, 0xe}], 0x27, 0x0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000026060000fddbdfa56d000000"], 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x4000000) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f8ffffff00000000000000000000000300000000000000000000004e8686bf7bd00037385589cd0d0875e37f08a0ce4301150f61b608fd7723df19774616"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000fcffffff000000008000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) 6.936919168s ago: executing program 2 (id=4311): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000280)='blkio.bfq.empty_time\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, 0x0, 0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)='GPL\x00', 0x5, 0x1f6, &(0x7f0000000740)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000980), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000a00)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xfff3}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_matchall={{0x7}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000cc0)={0x5, 0x4, 0x845, 0x7, 0x9, 0x7, 0x4, 0x8}, &(0x7f0000000d00)={0x2, 0x100000001, 0xd01, 0x2, 0x100000000, 0x3, 0xff, 0x7}, 0x0, &(0x7f0000000d40)={0x0, 0x2710}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d80), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="307bd408", @ANYRES16=r9, @ANYBLOB="01022cbd7000fcdbdf250100000000000000014100000014001700000017000000076574683a77673200"], 0x30}, 0x1, 0x0, 0x0, 0x48efd1b6685ca43b}, 0x40090) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r10, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)={0x5c, r11, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dvmrp1\x00'}]}, 0x5c}, 0x1, 0x40030000000000, 0x0, 0x40408c0}, 0x80) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0100001000050000000000000000007f0000010000000000000000000000007f0000010000000000000000000000001f90ffff1f90ffff0200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000012343c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000da9344f0f87653c01ece14a2000000000000000000000000000000000000000000000200040000000000000000004c001200726663343130362867636d2861657326290000000000000000000000000000000000000010db9b83b734cdaa9f36c6cce47af24800"/244], 0x13c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) r12 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r12, &(0x7f0000000440), 0x10) 3.774023291s ago: executing program 3 (id=4322): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e, 0x0, 0x2}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf61000000000000070100000400000085000000c2000000bf610000010300000701000004000000850000005d000000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0xa, 0x1000, &(0x7f0000001180)=""/4096, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.694847891s ago: executing program 4 (id=4324): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000002000000020000001000000000000000000000010500000010000000"], 0x0, 0x53}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.692890272s ago: executing program 2 (id=4325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) (async) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'macvlan0\x00', 0x2000}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000001380), &(0x7f00000013c0)=0x4) (async) write$tun(r5, &(0x7f0000001440)=ANY=[@ANYBLOB="0000001c0180c20000010180c200000e810000006000dd6a9616bb7d904e58a1875b4dd79b6619b0c2fc491439b59c58cfb3dea3218b32cc0c218ce9b86eb802a102a6e79b79f1932e165a5e138bda730df0a331ec9b1cc345698fc5f2b63dda1b02087d02921922e1f2fbb4a6601e7aff931ca5b3aa74ef18abeae72a4fb21df08e887aaba32d5b02c554bc005b6c53"], 0x90) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000180)={0x0, 'vlan1\x00', {}, 0x31fb}) connect$inet6(r4, &(0x7f0000001300)={0xa, 0x4e23, 0x8, @remote}, 0x1c) (async) getsockopt$SO_NETNS_COOKIE(r6, 0x1, 0x47, &(0x7f0000000240), &(0x7f0000000280)=0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000007feffff720af0ff0000020071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61142000000000001d430000000000007a0a00fe0000001f6114380000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_256={{0x304, 0x36}, "00257059cb008000", "8b3de2aabceef22f419e59f30000000004000000000200", "07350080", "000000d900"}, 0x38) setsockopt$inet6_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "b398a992143a240d", "d036788c4aaf9c6ef96dda7201d2d2a5", "1a13ecde", "0597b7f1463f0f33"}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000a64080c0f88ba933f7a0e7f8", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, 0x0, 0x0) (async) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x220080c1, &(0x7f0000000040)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c) (async) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/212, 0xd4, 0x1, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) sendmsg$sock(r3, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x4000000) 3.598691256s ago: executing program 3 (id=4326): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000800)={0x9, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @remote, 0x40}}}, 0x108) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000940)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000980)={0x0, 0x1c, &(0x7f00000009c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000a00)=0x10) unshare(0x22020600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000bc0)='memory.current\x00', 0x275a, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000a40)=""/214, &(0x7f0000000b40)=0xd6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x200) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0}, &(0x7f0000000b80)=0x14) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000010c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001080)={&(0x7f0000000e40)={0x1fc, 0x12, 0x2, 0x70bd29, 0x25dfdbfd, {0x2a, 0x0, 0x5, 0x4, {0x4e23, 0x4e22, [0x8, 0xff, 0x4341, 0x4], [0x7, 0x36e9, 0x8, 0x1], r5, [0xad, 0xc]}, 0xc3, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "4eb6f02ce295936697eaad62dc8c1f27b4fba8cc8838a3ca961355c08bd0c2d19a8a622a3448637d2a7a5881add166b8fb997142195bae2934c03fc22e1c785f9608d23bc4c72964e0f5a0efd43c59692d3a2e297e83a8669901e9a58633e7526dc222d700f3976e198ea3bf1aa573869b3f35943a44c99e9a50fa71cc4312b18541229a3d159a01000000d8236fbee349ee0d229198c737efb1f5"}, @INET_DIAG_REQ_BYTECODE={0x3a, 0x1, "a1e667db7741927d1ef6512accf65ca336d731af1ac3b9ab382d1eaa02bdd37a47378dc570daf7e306e54944ea5d54a8b535bef12dd9"}, @INET_DIAG_REQ_BYTECODE={0xd3, 0x1, "909acd797b97b4522efbe982cabdc4be0ac573376278df4f2b00ba917fa9d4e12d24619ea22ce31beead6c47d1614536125680c0dbfded192c753625f24fcacb1fdacbac1822b2c5131db1c43d7fd9fee007e3cffcd69d0cc9e44ae77b8e28e4c7e8d7af0e3f7e1b8f346cb618b704c9dbfc44a51f6c7289a60e0fb8f702cf038ade418ebd53a6d212c03e020c607ad145ddb1df947637a4ab9f17c8161758579a9e618cb8a80ed3d3f1a739862aecb16c40bda06ca5f6d6bb00df6bfb381633cc70ab587cdec9bf81580f674f132f"}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8a953da2a2e35145}, 0x20000000) syz_emit_ethernet(0x7e, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c221000086dd6015690900482f00fc020000000000000000000000000000ff020000000000000000000000000001242088a8000000020006000000000800000086dd88a888be0800970f"], 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) close(0x4) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000280)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r8, 0x0, 0xf3a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0c00180000000000ad0ea00034200000340000000a0000"], &(0x7f00000003c0)=""/28, 0x56, 0x1c, 0x1}, 0x28) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @value=r8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$VFAT_IOCTL_READDIR_SHORT(r10, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.378393578s ago: executing program 0 (id=4328): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x18, &(0x7f0000000900)=ANY=[@ANYBLOB="180000008d008e0000000000c50e000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf0920000000000055090100ffffffff950000000000000085000000ad00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f00000009c0)='GPL\x00', 0xf, 0x1002, &(0x7f0000000a00)=""/4098, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002540)) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x34}}, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x98, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x60, 0x2, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x8000, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x98}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @remote}, &(0x7f0000000440)=0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r7, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r5], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x7, 0x20, 0x8001, 0xfffffffc, {{0x9, 0x4, 0x1, 0x3a, 0x24, 0x64, 0x0, 0x9, 0x2f, 0x0, @remote, @local, {[@ssrr={0x89, 0xf, 0xb3, [@empty, @local, @private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x7f, 0x0, 0x0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x1, 0xd29, 0x2}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'veth0_to_team\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001b80)={'syztnl0\x00', &(0x7f00000023c0)={'erspan0\x00', 0x0, 0x8, 0x7800, 0x2, 0x1, {{0x50, 0x4, 0x0, 0x8, 0x140, 0x68, 0x0, 0x1, 0x29, 0x0, @local, @empty, {[@timestamp_prespec={0x44, 0x24, 0xcf, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0xf}, 0xff}, {@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffa}, {@multicast2, 0xc0000000}]}, @cipso={0x86, 0x63, 0x3, [{0x2, 0xa, "a3a672ab48586b2a"}, {0x2, 0xa, "b962aeadd747471b"}, {0x1, 0xd, "8bcd936b9a199f218b7b0c"}, {0x1, 0xb, "2a40bf8057913fc9d3"}, {0x0, 0x4, "1288"}, {0x1, 0x12, "ac8dc25c98ff425ec7a5dad0be716b87"}, {0x6, 0xc, "4fc1f9237000142cd6aa"}, {0x7, 0x5, "d0c254"}, {0x1, 0x8, "5bfed20a1ca8"}, {0x6, 0x2}]}, @noop, @noop, @timestamp_prespec={0x44, 0x1c, 0xc1, 0x3, 0x9, [{@remote, 0x5}, {@private=0xa010100, 0xebbf}, {@loopback, 0x4}]}, @ssrr={0x89, 0x23, 0xf6, [@remote, @multicast2, @multicast2, @rand_addr=0x64010100, @remote, @local, @remote, @private=0xa010100]}, @cipso={0x86, 0x44, 0x3, [{0x2, 0xa, "9cd6ed19036353f8"}, {0x1, 0x2}, {0x7, 0xe, "c191edd7f5fe66420dcc7798"}, {0x5, 0x9, "8764e50781a37d"}, {0x7, 0x12, "67474ed2a3b83ccb6d380c294901eaaf"}, {0x5, 0x9, "6e6a11c24738ac"}]}, @cipso={0x86, 0x16, 0x0, [{0x7, 0xb, "7d992665ccc25cddee"}, {0x0, 0x5, "9abd3e"}]}, @generic={0x82, 0xa, "0ecd5915852138b6"}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001c00)=0x14) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000001c40)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d40)={0x3, 0xc, &(0x7f0000001e00)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000001e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) sendmsg$nl_route_sched(r13, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001f40)=@newtfilter={0x40, 0x2c, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0xfffa, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8, 0x6, r16}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x40}}, 0x0) r17 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r17, 0x8933, &(0x7f0000001f80)={'vcan0\x00', 0x0}) bind$can_j1939(r17, &(0x7f0000001fc0)={0x1d, r18}, 0x18) connect$can_j1939(r17, &(0x7f0000002000)={0x1d, r18}, 0x18) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002740)=ANY=[@ANYBLOB="64010000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fddbdf25020000004400018008000100", @ANYRES32=r3, @ANYBLOB="080003000200000014000200726f736530000000000000000000000014000200626f6e645f736c6176655f310000000008000100", @ANYRES32=r4, @ANYBLOB="3c00018008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="1400020067656e6576653000000000000000000014000200766c616e3100000000000000000000003800018008000300020000000800030002000000080003000300000008000100", @ANYRES32=r9, @ANYBLOB="1400020076657468315f746f5f62617461647600280001800800030002000000080003000300000014000200626f6e645f736c6176655f310000000038000180140002000000000000000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000180ac6e3616575eaa0d74067a122848625d1f8fa5d606a04b43860000000000000000", @ANYRES32=0x0, @ANYBLOB="3800018008000100", @ANYRES32=r12, @ANYBLOB="140002006e723000000000000000000000000000080003000100000008000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r18, @ANYBLOB], 0x164}, 0x1, 0x0, 0x0, 0x4004000}, 0x8840) 2.538913335s ago: executing program 5 (id=4330): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000a40)={0x1, 0xfff, 0x0, 0xa5d, 0x1, 0x0, [{0x8000, 0xfffffffffffffff9, 0x0, '\x00', 0x800}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000700)=ANY=[@ANYBLOB="180007fb9f4c5a5a480b00000104000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000480000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000185400000f000000000000000000000018290000", @ANYRES32=r0, @ANYBLOB="0000000007000000bf91000000000000b7020000010000008500000001000000b7000000000000009500000000000000"], &(0x7f0000000800)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x18, r0, 0x8, &(0x7f0000000840)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0xf, 0xfffffff7, 0x6}, 0x10, 0x1ffaf, 0xffffffffffffffff, 0x3, &(0x7f00000008c0)=[r0, r0], &(0x7f0000000900)=[{0x2, 0x3, 0xf, 0x6}, {0x2, 0x5, 0xe, 0x9}, {0x3, 0x5, 0xb, 0xc}], 0x10, 0x8f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYRES8], &(0x7f0000000080)='GPL\x00', 0x8ec, 0xbe, &(0x7f0000000580)=""/190, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x1, 0x200000000180], 0x11, 0x0, 0x0}, 0x1a6) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000000540)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x6, 0x22, 0x6, 0xd, 0xff, 0x0, 0xf0, 0x0, 0x5}, 0xe) r3 = accept4(r0, &(0x7f0000000140)=@l2={0x1f, 0x0, @none}, &(0x7f00000001c0)=0x80, 0x100000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) accept4(r5, 0x0, 0x0, 0x40800) connect$pppl2tp(r5, &(0x7f0000000a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) connect(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @multicast1}, 0x0, 0x3, 0x3, 0x2}}, 0x80) shutdown(r1, 0x0) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r8}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x10, @mcast2, 0x7fff}, 0x1c) 2.295037512s ago: executing program 0 (id=4331): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6400000010003704030000000300000000000000", @ANYRES32=0x0, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32=0x0, @ANYBLOB="14000600fe8000000000000000000000000000bb140007000000000000000000000003"], 0x64}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6400000010003704030000000300000000000000", @ANYRES32=0x0, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32=0x0, @ANYBLOB="14000600fe8000000000000000000000000000bb140007000000000000000000000003"], 0x64}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a42804000000000014003500626f6e643000000000e216ffff00000008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x8000) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f00000002c0)={&(0x7f0000000280)=[{0x1, 0x0, 0x4, 0x8, 0x7, 0x9, 0xffffffffffff0fd5, 0x9}], 0x1, 0x38, 0x0, 0x3ff}) (async) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f00000002c0)={&(0x7f0000000280)=[{0x1, 0x0, 0x4, 0x8, 0x7, 0x9, 0xffffffffffff0fd5, 0x9}], 0x1, 0x38, 0x0, 0x3ff}) socket$l2tp6(0xa, 0x2, 0x73) (async) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000680)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f00000006c0)=0x2014, 0x4) sendmsg$inet6(r5, &(0x7f0000000700)={&(0x7f0000000740)={0xa, 0x4e23, 0x180000, @dev={0xfe, 0x80, '\x00', 0x43}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="b000000000000000290000003b0000002b1300000000000005020000ff8ac206278a35c9135c9b1451b74aac1f01025e9228bcdbe19e8fe57b257ff337b864dc41e00c937e033dcd9042bf9d12aff9abae64f17ad086973fe2c1e64f8043a0c1935e8c321e6c4e9a50bd69728c2e7bf3994a19186686aff2db579a31b86552407df1c6afd0d3aff5b2111f9353fa9d5419b26f730690ff6132623818fa1ec562a077fb7a77f19b3210d4fa2169643d0d2d0a0106000000000000180000000000000029000000360000002c00000000000000400000000000000029000000360000003a0400000000f64ddd00000001000401090401030718000000020403340b030000200000000000000000000000000000000000900000000000000029000000040000006c0e0000000000000738000000000c07ff0706000000000000000400000000000000bf0000000000000006000000000000000400000000000000910b000000000000c910fc010000000000000000000000000000c910fe880000000000000000000000000301c910ff0100000000000000000000000000010001000000683cc767fd71b0c46818c1b1d6b6e595325de47bd9bde4bc444d5888ea"], 0x198}, 0x340880c4) (async) sendmsg$inet6(r5, &(0x7f0000000700)={&(0x7f0000000740)={0xa, 0x4e23, 0x180000, @dev={0xfe, 0x80, '\x00', 0x43}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x198}, 0x340880c4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x16, 0x1c}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) (async) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x16, 0x1c}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r8 = socket$inet6(0xa, 0x3, 0xff) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000007c0)={0x0, 0x10, &(0x7f0000000800)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000840)=0x10) setsockopt(r9, 0x84, 0x80, &(0x7f0000000880)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async) setsockopt(r9, 0x84, 0x80, &(0x7f0000000880)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f00000008c0)={r11, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) socket$inet(0xa, 0x801, 0x84) (async) r12 = socket$inet(0xa, 0x801, 0x84) connect$inet(r12, &(0x7f0000000980)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r12, 0x8) (async) listen(r12, 0x8) r13 = accept4(r12, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r13, 0x84, 0x10, &(0x7f00000009c0)=@assoc_value={r11, 0x24}, 0x8) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r13, 0x84, 0x10, &(0x7f00000009c0)=@assoc_value={r11, 0x24}, 0x8) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) 2.208854974s ago: executing program 4 (id=4332): r0 = gettid() r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYRES32=0x0, @ANYRES32=r1], 0x24}}, 0x0) (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00') (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) 1.894201196s ago: executing program 3 (id=4333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1.813095977s ago: executing program 5 (id=4334): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4008094) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f00000001c0)=[{{&(0x7f0000000200)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2004c805) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000a80)={0x0, 0xfffffffffffffeec, 0x0, 0x1, 0x0, 0x0, 0x4004850}, 0x4040040) socket$inet6_sctp(0xa, 0xf70ac11da8525773, 0x84) syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="578d2dbd7000fbdbdf250200000014000180080003007f0000010600010002"], 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000bc0), 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000c00), &(0x7f0000000c40)=0x8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000d00)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000d40)='./cgroup/cgroup.procs\x00', &(0x7f0000000d80)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000dc0)={r6, 0x83, &(0x7f0000000e00)={0x0, 0x0, 0x0, &(0x7f0000000e40)=""/194, 0xc2}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x11}, 0x20) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000ea0000"], 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) 1.789765752s ago: executing program 4 (id=4335): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0xb, 0x0, 0x0, 0x2000}, 0x50) pselect6(0x40, &(0x7f0000000a40)={0x81, 0x3, 0x1, 0x1, 0x1, 0x6, 0xba1, 0xe}, 0x0, 0x0, &(0x7f0000000540)={0x77359400}, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000340)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000003c0)='P', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000480)='i', 0x1}], 0x1}}], 0x2, 0x8010) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0)={0x0, 0x4}, &(0x7f0000000500)=0x8) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000800)=r3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000940)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r4, 0x5, 0x50, 0x0, &(0x7f0000000a00)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1.586513501s ago: executing program 3 (id=4336): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000045e4d344b7030000000000008500000083000000bf0900000000010255090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) 1.582841137s ago: executing program 2 (id=4337): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000009, 0x3032, 0xffffffffffffffff, 0xc6dd5000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000ffd0000000000040000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000010000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x2, 0xb019, &(0x7f0000000340)=""/234}, 0x78) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x4, 0x16, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="050000000c0000004300000040000000c0"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000d00)=[{0x1, 0x2, 0x2, 0x7}], 0x10, 0xffff4fb5}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80), &(0x7f0000000dc0), 0x10f0, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40), &(0x7f0000000e80), 0x16c5, r3}, 0x38) ppoll(&(0x7f0000000700)=[{r0, 0x8202}, {r1, 0x4000}, {r1, 0x200}, {r0, 0x11}, {r1, 0x83}, {0xffffffffffffffff, 0x8622}], 0x6, &(0x7f0000000740)={0x77359400}, &(0x7f0000000780)={[0x200]}, 0x8) close(0x3) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000840)={r1, r4, 0x14, 0x0, @void}, 0x10) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r2, 0xe0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000f00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000f40)=[0x0, 0x0], &(0x7f0000000f80)=[0x0, 0x0, 0x0], 0x0, 0xbd, &(0x7f0000000fc0)=[{}, {}], 0x10, 0x10, &(0x7f0000001000), &(0x7f0000001040), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000001080)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001200)={r5, 0x0, 0x25, 0x12, @val=@tracing={r7, 0x4}}, 0x20) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000540)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000600)=0x84) sendmmsg$inet_sctp(r5, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) r10 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f0000000880)=r10, 0x4) sendmsg$inet(r10, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x20040044) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f00000007c0)=r9, 0x4) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)="ca", 0x1) poll(&(0x7f0000000700), 0x55, 0x2) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000006c0)=ANY=[@ANYRES32=r8, @ANYBLOB="a58854f1"], 0x8) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000c00000018000180140002006c6f00000000000000000000000000001c000380080002002000000008000500fffbffff08000400fffbfffff82b776dcff2f787ff39f5ac77134c04948c2ae65c6a80dbc1a9d245b0cef3c4212475664832aa65353d50e9f8db089c22901f6ec4b57aa92681ab04957e33835f8fa02319dfa01cf3dab48212442dee9f818fe7a8aa2790bb5d24eef93d13d75bfddbbf638806a65e2e1585c850e6da2ee41930c305c0a26e751d9e8e8616618486946b9fd81bdcb2a12541304a372ff549e864e27f7b07f0bb8b29e00bbbbce9e20cad7f1373462b30879908"], 0x48}}, 0x0) 1.517891036s ago: executing program 5 (id=4338): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) 1.386429488s ago: executing program 4 (id=4339): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e, 0x0, 0x2}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf61000000000000070100000400000085000000c2000000bf610000000700000701000004000000850000005d000000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0xa, 0x1000, &(0x7f0000001180)=""/4096, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.238475252s ago: executing program 0 (id=4340): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x7c, 0x16, 0xa, 0xb03, 0x0, 0x0, {0x5dec70745607dcf4, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc0}}, 0x0) 1.238095502s ago: executing program 5 (id=4341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x4, 0x4, 0x7, 0x3, 0x101, 0xffffffff, 0x5, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x9, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'syzkaller0\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000003000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.20947728s ago: executing program 3 (id=4342): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x68, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x8c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x8c}}, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000580)='ping\x00', 0x5, 0x0, &(0x7f00000005c0)={0xa, 0x1f90, 0x0, @loopback}, 0x1c) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x38}}, 0x880) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010010000000ffdbdf2500000000", @ANYRES32=r8, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000f0002000000080005"], 0x44}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x48) syz_emit_ethernet(0xfef3, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010020641100fe8000000000000000000002000000bbfe8000000000000000000000000000aa4e200e2200", @ANYRES32], 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000008000023bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xff53, 0x0, &(0x7f0000000380)="b88fd8698b791f9cea0efaca8a7ffabf40a1540000c96029998161373610748d37213bed8a8e4f51effc55512a3d645d1d691c04f669e9c78189c8", 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.079244818s ago: executing program 4 (id=4343): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x18}, 0x1, 0x0, 0x0, 0x240008d5}, 0x40000) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x4) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000340), 0x3) getsockopt$bt_hci(r5, 0x11a, 0x5, 0x0, &(0x7f0000000380)=0x57) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14300}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_LINK={0x8}]}, 0x64}}, 0x800) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e401efebae5cd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x0, &(0x7f0000000200)={0x11, 0x7, r3, 0x1, 0x7, 0x6, @local}, 0x14) 938.225272ms ago: executing program 0 (id=4344): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, 0x0, 0x80) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000d40)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x15, @loopback}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) 930.965257ms ago: executing program 2 (id=4345): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x21) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000180)={r0, &(0x7f0000000080)='\x00', 0x2202, &(0x7f00000000c0)={@_ha_fsid={[0x2, 0x80000000]}, {0x3, 0x1d, 0x1, 0x1}}, 0xe31, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_out(r2, 0x5462, &(0x7f0000000440)) unshare(0x20400) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/net\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x70bd27, 0x25dfdbff, {0x2, 0x20, 0x5, 0x3, r7}, [@IFA_LABEL={0x14, 0x3, 'netpci0\x00'}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x34}}, 0x4000000) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x8000) write$tun(r1, &(0x7f0000000240)={@void, @val={0x1, 0x1, 0x8001, 0x4, 0x3, 0x30}, @eth={@random="ba1c7769c818", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@can={0xc, {{0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "8970c48af2dc00de"}}}}}, 0x28) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r8, 0x11, 0x1, &(0x7f0000000480)=0x7, 0x4) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 919.582093ms ago: executing program 3 (id=4346): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002580)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x400000}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x4}]}}]}, 0x44}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002900)={r0, 0xe0, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000002640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000026c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe9, &(0x7f0000002700)=[{}, {}], 0x10, 0x10, &(0x7f0000002740), &(0x7f0000002780), 0x8, 0x72, 0x8, 0x8, &(0x7f00000027c0)}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000002940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002980)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000002940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002980)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002a40)={'syztnl1\x00', &(0x7f00000029c0)={'syztnl1\x00', 0x0, 0x8000, 0x7, 0x800, 0x80000000, {{0xe, 0x4, 0x0, 0x0, 0x38, 0x68, 0x1, 0x8, 0x2f, 0x0, @remote, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x43, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x85}, {@rand_addr=0x64010102, 0x4}]}, @ssrr={0x89, 0xf, 0xc4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @local]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002a40)={'syztnl1\x00', &(0x7f00000029c0)={'syztnl1\x00', 0x0, 0x8000, 0x7, 0x800, 0x80000000, {{0xe, 0x4, 0x0, 0x0, 0x38, 0x68, 0x1, 0x8, 0x2f, 0x0, @remote, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x43, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x85}, {@rand_addr=0x64010102, 0x4}]}, @ssrr={0x89, 0xf, 0xc4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @local]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002b00)={0xffffffffffffffff, 0x58, &(0x7f0000002a80)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002b00)={0xffffffffffffffff, 0x58, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) recvfrom$packet(0xffffffffffffffff, &(0x7f00000030c0)=""/164, 0xa4, 0x142, &(0x7f0000003180)={0x11, 0x10, r2, 0x1, 0xd4}, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002c00)={'sit0\x00', &(0x7f0000002b40)={'syztnl2\x00', 0x0, 0x7, 0x10, 0x3, 0x3, {{0x1b, 0x4, 0x0, 0x8, 0x6c, 0x64, 0x0, 0xc, 0x4, 0x0, @remote, @private=0xa010100, {[@timestamp_addr={0x44, 0x54, 0xbc, 0x1, 0x8, [{@remote, 0xffff}, {@loopback, 0x6}, {@multicast1, 0x3}, {@multicast2, 0x469}, {@loopback, 0x3}, {@loopback, 0xfffffbff}, {@multicast1, 0x3}, {@private=0xa010101, 0x2}, {@empty, 0x6}, {@empty, 0x5}]}, @ra={0x94, 0x4}]}}}}}) socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000002c40)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000002d00)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x2}, @TCA_CAKE_MEMORY={0x8}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000002d00)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x2}, @TCA_CAKE_MEMORY={0x8}]}}]}, 0x44}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002dc0)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000003080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003040)={&(0x7f0000002e00)={0x224, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x11}, 0x9d2c459f72db922a) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000001440), 0x0) close(r11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x3, 0x4, &(0x7f0000001540)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000003240)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006010000000044000500000000000000000000000000000000cdbe0000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000003340)={0x40000000, 0x0, &(0x7f0000003380)={&(0x7f00000033c0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r14 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r14, &(0x7f0000003400)={&(0x7f0000003440)={0xa, 0x2f, 0x3, @mcast2}, 0x1c, 0x0}, 0x30048b88) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000015c0)={@fallback=r11, r0, 0x2f}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0xc, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000002440)='syzkaller\x00'}, 0x48) (async) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0xc, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000002440)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002480)={r15, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000002500)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000000308010200000000000000000300000605000300060000001400048008000b"], 0x30}, 0x1, 0x0, 0x0, 0x24000010}, 0x80c0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000000308010200000000000000000300000605000300060000001400048008000b"], 0x30}, 0x1, 0x0, 0x0, 0x24000010}, 0x80c0) 716.39496ms ago: executing program 5 (id=4347): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x80}, @in6=@mcast2, 0x0, 0x10, 0xffff, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x7, 0xfffffffffffffffe, 0x5, 0x9, 0x400000004271, 0x3, 0x0, 0x3}, {0x0, 0x0, 0x6, 0x1}, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in6=@loopback, 0x4d3, 0x33}, 0x2, @in=@multicast1, 0x0, 0x4, 0x0, 0xb7, 0x0, 0x7fbfffd}}, 0xe8) (async, rerun: 32) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) (rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 626.901708ms ago: executing program 0 (id=4348): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x2}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PLPMTUD_PROBE_INTERVAL(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x8000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}, 0x100}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4624, 0xe, @ipv4={'\x00', '\xff\xff', @loopback}}}}, &(0x7f0000000280)=0x84) sendto(r0, &(0x7f0000000000)=' \x00\n\x00\x00\x00', 0x6, 0x440c1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "d1a5a6f0fb8ed0d25f99570830eb6888"}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 618.323477ms ago: executing program 2 (id=4349): unshare(0x28000600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r0}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x80000) r3 = epoll_create1(0x0) unshare(0x6020400) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x10000000}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, 0x0, &(0x7f0000000300)=""/16}, 0x20) 289.658745ms ago: executing program 4 (id=4350): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x12}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010014000000000000028c00000008000300", @ANYRES32=r2], 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0xc, 0x4, 0x8, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x40, 0x240, 0x3}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x60074}, 0x40000) sendmsg$nl_route(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) sendmsg$inet(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0)="11947190b0798e8d4ced7be5efc0c82958a696e694c9b708306e6fba3ec687b8372808ee14134c987289ab953d8b62728820d299cd61528154435bfbf3386a338b390323dbe9436de67b9378c6d7979737f41cfa911b6b221380cb27872cbb1e040257581522d23afdb8a5ae07bc9b6932da6c17823ec3b100daa9fef465e0d63b08b536470eb549afa7a91ead76830ed8bf79938377ef0b9bdc249563f380cc7e518f0836215543b7c5b8f3694a2e1df894f394a0387531cde17479c5a2ecfc0f35491725f5c8d122f97bf7eb0fe6e7", 0xd0}, {&(0x7f00000002c0)="26f81dbf502a54daa92c96b7107c7a3974b046e2b1cc74271bcbf877c96565dac378187b03f9449a582a5f015b4759b7ff8f10fd4e46617530928c836aa088eef62ffd8d358d62b5866dd6a8fa2207db8251370366cab980db68722d03d909a33ac7aabe178028deb8878082a3ea677c8a66f9605df183aac03d094e3b2efab649a19ff50b2eb75a74d993805ca926f4acf9c412900264778ab06a60361737a35c9b805c22d0db89089e0ba796a73896f8b767a62555bb91b89f81c352d1bac81a2c6c8f6458fe2df49b", 0xca}, {&(0x7f0000000500)="a5460a779010d3c7474f34ed7a83f002efc5961a4df302f3f4e3c1034e09f381df34513e663542a42a3aabc6d01edb031e7cc718d082a2ba2eba1716238a03ff481fd3b136684d1c47664b9a177c8236c85224d9469d9763cb90859e22387e3a7f13560d136b94a12758178c371757f1ec5680df21d5abccc042356d9e93e8977f291c16cd7b154d8fb25fada678bb423af1a14bee2b4491d76f791210f212c01a", 0xa1}, {&(0x7f00000005c0)="429ddb9a3b9964f9969d6348df7fcb609dac3d95500ae7724977da60cf9f8b67c2302d41f9aa9d4a35a2bcd802400d8876b0cc43ff721eb6503822975f2026b870e818ceab7b71c793007d30b67ad1635909e8fa69b1b685f109b54e8cd4dda4036fda75e0eb76f3cb33b4a695c2409b92fb32e6471277bc1a36a2f504461eac", 0x80}, {&(0x7f0000000640)="00ab9a92c8c0e973265b4c4cd47d29e7437ed4399f2cb1f4170cd3b30f2786cb5161d8d9c58ca699dcbfc1b25728", 0x2e}, {&(0x7f0000000680)}], 0x6, &(0x7f0000000b80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x33}, @local}}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @broadcast, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @loopback, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}, @ip_retopts={{0x80, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0x44, 0x58, 0x3, 0xe, [{@empty, 0x821}, {@remote, 0x25fb}, {@private=0xa010100}, {@empty, 0x5}, {@multicast1, 0x81}, {@remote}, {@local, 0x5}, {@remote, 0x9}]}, @timestamp={0x44, 0x10, 0x99, 0x0, 0xa, [0x9, 0xfffffffa, 0x0]}, @timestamp={0x44, 0x18, 0x1f, 0x0, 0x3, [0x1, 0x3, 0x2, 0x3, 0x3]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}], 0x170}, 0x20040000) 225.045585ms ago: executing program 5 (id=4351): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@deltfilter={0x530, 0x2d, 0x800, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xe}, {0x5, 0xfff7}, {0xb, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xe}}, @filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @broadcast}]}}, @TCA_CHAIN={0x8, 0xb, 0x100}, @TCA_RATE={0x6, 0x5, {0x1, 0x40}}, @filter_kind_options=@f_route={{0xa}, {0x438, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x8, 0x7}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff1, 0xfff3}}, @TCA_ROUTE4_IIF={0x8, 0x4, r0}, @TCA_ROUTE4_POLICE={0x41c, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x2, 0x347, 0x6, 0x7fff, 0x7f, 0x8, 0x27, 0x101, 0x101, 0x8001, 0x65, 0x3, 0x8, 0xe, 0x8, 0xa8, 0x4, 0x7, 0x3, 0x6, 0x380, 0x2, 0x3, 0x9, 0x800, 0x1, 0x7, 0xa0, 0x5ff6, 0x9, 0x6, 0x800, 0x3, 0xfffeffff, 0x7, 0x1, 0x7, 0x9, 0x2, 0x2, 0x8000, 0x8, 0x0, 0x4, 0x2cfd, 0x101, 0x3, 0x9, 0x0, 0xf, 0x2, 0x5, 0x4, 0x7fff, 0x7ff, 0x3, 0x7, 0x7fff, 0xcea, 0xbb5e, 0xd, 0x4, 0x7, 0x4, 0xd, 0x241, 0x6, 0x3, 0x3ff, 0x6675, 0x5, 0x1, 0x3, 0x7f, 0x3, 0x3ff, 0x0, 0x400, 0x4, 0x1, 0x736, 0x8001, 0x0, 0x6, 0x2, 0x4, 0x9, 0xff, 0x4, 0x6, 0x1, 0x2, 0x10000, 0x100, 0x0, 0x1000, 0x7, 0xf9bb, 0x1, 0x6, 0xffd, 0x5, 0x0, 0x3, 0x8, 0x0, 0x30000, 0x0, 0x101, 0x2, 0x9, 0x0, 0xd4, 0x9, 0x3, 0x9b99, 0x400, 0x1, 0x0, 0x0, 0x1, 0xfd7, 0x0, 0x1, 0x10000, 0x3, 0x2, 0x5, 0x4, 0x4, 0x9, 0x8001, 0x2, 0x5, 0xf, 0x1ff, 0x5, 0x90, 0x86, 0x80000001, 0xd811, 0x6, 0x4, 0x0, 0x570, 0x7808, 0x3, 0x9, 0x80000001, 0x882d, 0x2, 0x401, 0x7ff, 0x7, 0x80, 0xf7a3, 0x40, 0x3ff, 0x1e6180, 0x8, 0xffffffff, 0x8, 0x9, 0x10001, 0x2fd, 0x6, 0xffff, 0x4, 0x800, 0x1000, 0x8, 0x0, 0x5, 0x3, 0x7, 0x5, 0x101, 0x0, 0x7, 0x6, 0xfffffff7, 0x9, 0x21e5, 0x9, 0x5, 0xfff, 0xfffffffd, 0x40, 0x0, 0x6, 0x800, 0x2b2f, 0x1, 0x5b7, 0x6, 0x883, 0x69, 0xfffffe01, 0x3, 0x6, 0x6, 0x9, 0x0, 0x1, 0x7fff, 0x768d, 0xd, 0x4, 0x9, 0x200, 0xf5, 0x8000, 0x9, 0x5, 0xfff, 0x10000, 0xfffffff1, 0x8000, 0x1, 0x7ff, 0x6, 0x9, 0x8, 0x6, 0x9, 0xefd, 0x4, 0x9, 0x101, 0x1, 0x0, 0x3ff, 0xc, 0x69d, 0x5, 0xffffff7f, 0xfffffffb, 0x9, 0x4, 0x4, 0x2c18, 0x4, 0x2, 0x3, 0x5, 0x4, 0x86b0, 0x80, 0xb, 0xb, 0x2, 0x1, 0x1, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0x0, 0xffffffff, 0xffffff00]}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x1000}, @TCA_FLOWER_KEY_UDP_DST={0x6}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0xa}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0xd5}, @TCA_FLOWER_INDEV={0x14, 0x2, 'bond0\x00'}]}}, @filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xa5}, @TCA_U32_CLASSID={0x8, 0x1, {0xd45071679077dee3, 0x14}}]}}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x530}, 0x1, 0x0, 0x0, 0x8001}, 0x86011) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1c099}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x86b87}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002c40)={0x3c, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}]}, 0x3c}}, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000002cc0), 0xffffffffffffffff) (rerun: 64) sendmsg$NFC_CMD_GET_SE(r3, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x14, r6, 0x2, 0x70bd28, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x20000000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 79.08952ms ago: executing program 0 (id=4352): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @any, 0x0, 0x3}, 0xe) listen(r0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000100)={0x50, r2, 0x1, 0x21, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x34, 0xe, [@link_id={0x65, 0x12, {@initial, @broadcast}}, @ht={0x2d, 0x1a, {0x80, 0x2, 0x2, 0x0, {0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x8, 0x0, 0x9}}]}]}, 0x50}}, 0x4014080) 0s ago: executing program 2 (id=4353): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000214010023bd7000fddbdf080800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x60408a0}, 0x8c0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000700000000000000800000000400000010ff0000c600feff0000000a9500"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x92, &(0x7f0000000240)=""/146, 0x0, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) (rerun: 64) kernel console output (not intermixed with test programs): 9][T19292] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3136'. [ 558.683509][T11862] bond0: (slave bond_slave_0): interface is now down [ 558.683535][T11862] bond0: (slave bond_slave_1): interface is now down [ 559.203038][T18987] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.203077][T18987] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.301126][T19327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3143'. [ 559.301154][T19327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3143'. [ 559.599760][T19306] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 559.599789][T19306] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 559.847088][T11598] IPVS: stop unused estimator thread 0... [ 560.451822][T19306] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 560.451847][T19306] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 560.659646][T19306] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 560.659673][T19306] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 560.677766][T18987] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.677803][T18987] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.241822][T11598] bond0: (slave bond_slave_0): interface is now down [ 561.241848][T11598] bond0: (slave bond_slave_1): interface is now down [ 561.338230][T18987] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.338270][T18987] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.564038][T19306] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 561.564063][T19306] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 561.752009][T18987] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.752050][T18987] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.296441][T19380] Bluetooth: MGMT ver 1.23 [ 563.791341][T11598] bond0: (slave bond_slave_0): interface is now down [ 563.791368][T11598] bond0: (slave bond_slave_1): interface is now down [ 564.146585][T19419] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3159'. [ 564.146647][T19419] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3159'. [ 564.262452][T19419] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3159'. [ 564.262520][T19419] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3159'. [ 566.354760][T11598] bond0: (slave bond_slave_0): interface is now down [ 566.354797][T11598] bond0: (slave bond_slave_1): interface is now down [ 566.917786][T19420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.918027][T19420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.942963][T19420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.943208][T19420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.220509][T19442] x_tables: duplicate underflow at hook 3 [ 567.572390][T19452] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3165'. [ 567.619775][T18987] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 567.713132][T18987] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 567.716170][T18987] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 567.776191][T18987] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 567.777811][T18987] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 567.806361][T18987] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 567.808717][T18987] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 567.838671][T18987] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 567.862942][T19465] FAULT_INJECTION: forcing a failure. [ 567.862942][T19465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.862974][T19465] CPU: 0 UID: 0 PID: 19465 Comm: syz.5.3167 Not tainted syzkaller #0 PREEMPT(full) [ 567.862997][T19465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 567.863010][T19465] Call Trace: [ 567.863019][T19465] [ 567.863027][T19465] dump_stack_lvl+0xe8/0x150 [ 567.863070][T19465] should_fail_ex+0x3eb/0x540 [ 567.863102][T19465] _copy_from_iter+0x1d3/0x1680 [ 567.863140][T19465] ? __pfx__copy_from_iter+0x10/0x10 [ 567.863168][T19465] ? aa_file_perm+0x18b/0x15f0 [ 567.863196][T19465] ? skb_put+0x112/0x210 [ 567.863234][T19465] hci_sock_sendmsg+0x426/0xfd0 [ 567.863342][T19465] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 567.863371][T19465] ? apparmor_socket_sendmsg+0x98/0x360 [ 567.863398][T19465] ? lock_acquire+0x115/0x350 [ 567.863426][T19465] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 567.863448][T19465] sock_sendmsg_nosec+0x14e/0x190 [ 567.863480][T19465] sock_write_iter+0x2de/0x3e0 [ 567.863509][T19465] ? __pfx_sock_write_iter+0x10/0x10 [ 567.863544][T19465] ? bpf_lsm_file_permission+0x9/0x20 [ 567.863583][T19465] ? security_file_permission+0x75/0x260 [ 567.863620][T19465] vfs_write+0x612/0xba0 [ 567.863658][T19465] ? __pfx_vfs_write+0x10/0x10 [ 567.863689][T19465] ? __fget_files+0x3a2/0x420 [ 567.863713][T19465] ? __fget_files+0x2a/0x420 [ 567.863743][T19465] ? fdget+0x1ac/0x250 [ 567.863783][T19465] ksys_write+0x150/0x270 [ 567.863813][T19465] ? __pfx_ksys_write+0x10/0x10 [ 567.863854][T19465] do_syscall_64+0x166/0x520 [ 567.863878][T19465] ? trace_irq_disable+0x3b/0x140 [ 567.863905][T19465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.863927][T19465] ? clear_bhb_loop+0x70/0xc0 [ 567.863953][T19465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.863974][T19465] RIP: 0033:0x7f36df19fb19 [ 567.863994][T19465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.864013][T19465] RSP: 002b:00007f36e0022028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 567.864037][T19465] RAX: ffffffffffffffda RBX: 00007f36df426090 RCX: 00007f36df19fb19 [ 567.864052][T19465] RDX: 0000000000000007 RSI: 0000200000000600 RDI: 0000000000000004 [ 567.864066][T19465] RBP: 00007f36e0022090 R08: 0000000000000000 R09: 0000000000000000 [ 567.864079][T19465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.864091][T19465] R13: 00007f36df426128 R14: 00007f36df426090 R15: 00007ffeaab295f8 [ 567.864126][T19465] [ 568.756649][T18987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.826894][T19493] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3171'. [ 568.826925][T19493] openvswitch: netlink: EtherType 0 is less than min 600 [ 568.913531][ T13] bond0: (slave bond_slave_0): interface is now down [ 568.913558][ T13] bond0: (slave bond_slave_1): interface is now down [ 568.918836][T19497] ip_tables: iptables: counters copy to user failed while replacing table [ 568.920682][T18987] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.960310][T19497] syzkaller1: entered promiscuous mode [ 568.960333][T19497] syzkaller1: entered allmulticast mode [ 568.985968][T19489] macvtap0: entered promiscuous mode [ 569.112681][T11862] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.112803][T11862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.143158][T19492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3169'. [ 569.365233][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.365360][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.966941][T11860] IPVS: starting estimator thread 0... [ 570.051943][T19520] IPVS: using max 25 ests per chain, 60000 per kthread [ 570.061446][T19516] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3174'. [ 570.614904][T19541] netlink: 296 bytes leftover after parsing attributes in process `syz.5.3179'. [ 570.735323][T19541] netlink: 'syz.5.3179': attribute type 9 has an invalid length. [ 570.737988][T19541] ip_tables: iptables: counters copy to user failed while replacing table [ 571.264886][T19555] syzkaller0: entered promiscuous mode [ 571.264922][T19555] syzkaller0: entered allmulticast mode [ 571.387882][T19555] TC_ACT_REPEAT abuse ? [ 571.471110][T11598] bond0: (slave bond_slave_0): interface is now down [ 571.471137][T11598] bond0: (slave bond_slave_1): interface is now down [ 572.319083][T19577] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3185'. [ 572.436924][T18987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.484053][T19580] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3185'. [ 572.842346][T18987] veth0_vlan: entered promiscuous mode [ 573.008071][T18987] veth1_vlan: entered promiscuous mode [ 573.160721][T19589] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3189'. [ 573.160752][T19589] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3189'. [ 573.217933][T18987] veth0_macvtap: entered promiscuous mode [ 573.326176][T18987] veth1_macvtap: entered promiscuous mode [ 573.533095][T18987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.604649][T18987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.712191][T19603] FAULT_INJECTION: forcing a failure. [ 573.712191][T19603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.712223][T19603] CPU: 1 UID: 0 PID: 19603 Comm: syz.4.3191 Not tainted syzkaller #0 PREEMPT(full) [ 573.712246][T19603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 573.712267][T19603] Call Trace: [ 573.712276][T19603] [ 573.712286][T19603] dump_stack_lvl+0xe8/0x150 [ 573.712329][T19603] should_fail_ex+0x3eb/0x540 [ 573.712362][T19603] _copy_to_user+0x31/0xb0 [ 573.712393][T19603] simple_read_from_buffer+0xe1/0x170 [ 573.712496][T19603] proc_fail_nth_read+0x1bb/0x230 [ 573.712594][T19603] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 573.712629][T19603] ? rw_verify_area+0x24a/0x4c0 [ 573.712657][T19603] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 573.712687][T19603] vfs_read+0x213/0xa80 [ 573.712719][T19603] ? __pfx___mutex_lock+0x10/0x10 [ 573.712748][T19603] ? __pfx_vfs_read+0x10/0x10 [ 573.712774][T19603] ? __fget_files+0x2a/0x420 [ 573.712797][T19603] ? __fget_files+0x3a2/0x420 [ 573.712820][T19603] ? __fget_files+0x2a/0x420 [ 573.712847][T19603] ? fdget+0x1ac/0x250 [ 573.712881][T19603] ksys_read+0x150/0x270 [ 573.712909][T19603] ? __pfx_ksys_read+0x10/0x10 [ 573.712948][T19603] do_syscall_64+0x166/0x520 [ 573.712971][T19603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.712994][T19603] ? clear_bhb_loop+0x70/0xc0 [ 573.713024][T19603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.713044][T19603] RIP: 0033:0x7f81b456034e [ 573.713064][T19603] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 573.713082][T19603] RSP: 002b:00007f81b553bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 573.713105][T19603] RAX: ffffffffffffffda RBX: 00007f81b553c6c0 RCX: 00007f81b456034e [ 573.713120][T19603] RDX: 000000000000000f RSI: 00007f81b553c0a0 RDI: 0000000000000004 [ 573.713133][T19603] RBP: 00007f81b553c090 R08: 0000000000000000 R09: 0000000000000000 [ 573.713146][T19603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.713158][T19603] R13: 00007f81b4826038 R14: 00007f81b4825fa0 R15: 00007ffe59fd1348 [ 573.713194][T19603] [ 573.739667][T11858] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.741454][T11598] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.752179][ T1173] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.992029][T11884] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.048452][T11875] bond0: (slave bond_slave_0): interface is now down [ 574.048480][T11875] bond0: (slave bond_slave_1): interface is now down [ 574.322889][T19599] Set syz1 is full, maxelem 2076 reached [ 574.459463][T19571] netlink: 'syz.0.3184': attribute type 9 has an invalid length. [ 574.807904][T11875] IPVS: starting estimator thread 0... [ 574.902018][T19622] IPVS: using max 26 ests per chain, 62400 per kthread [ 575.072981][T19619] xt_REDIRECT: bad rangesize 26624. [ 575.163963][T11876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.163989][T11876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.303745][T11850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.303770][T11850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.709482][T19639] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3196'. [ 575.724317][T19639] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3196'. [ 576.592655][T11598] bond0: (slave bond_slave_0): interface is now down [ 576.592682][T11598] bond0: (slave bond_slave_1): interface is now down [ 577.086959][T19682] tipc: Enabling of bearer rejected, failed to enable media [ 577.207206][T19644] netlink: 'syz.0.3198': attribute type 4 has an invalid length. [ 577.285630][T19687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3206'. [ 577.319492][T19694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3207'. [ 577.435738][T19689] tipc: Started in network mode [ 577.435770][T19689] tipc: Node identity be259849557b, cluster identity 4711 [ 577.436004][T19689] tipc: Enabled bearer , priority 10 [ 578.056069][T19681] tipc: Resetting bearer [ 578.473488][T19681] tipc: Disabling bearer [ 578.589593][T10214] tipc: Node number set to 3948845129 [ 578.944342][ T5648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 578.963013][ T5648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 578.964145][ T5648] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 578.986047][ T5648] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 579.006064][ T5648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 579.152861][T11884] bond0: (slave bond_slave_0): interface is now down [ 579.152888][T11884] bond0: (slave bond_slave_1): interface is now down [ 579.253858][T11884] bond0: now running without any active interface! [ 579.866321][T19738] netlink: 'syz.3.3213': attribute type 10 has an invalid length. [ 580.036183][T19741] netlink: 'syz.3.3213': attribute type 10 has an invalid length. [ 580.060925][T19738] dummy0: left promiscuous mode [ 580.217874][T19738] team0: Port device dummy0 added [ 580.258888][T19741] team0: Port device dummy0 removed [ 580.826032][T19721] rxe_eth0 speed is unknown, defaulting to 1000 [ 581.081577][ T5641] Bluetooth: hci2: command tx timeout [ 581.675816][T19721] wlan1 speed is unknown, defaulting to 1000 [ 581.882238][T19781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3224'. [ 581.882331][T19781] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3224'. [ 582.114131][T19788] netlink: 'syz.3.3226': attribute type 6 has an invalid length. [ 583.162447][ T5641] Bluetooth: hci2: command tx timeout [ 583.328845][T19818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3231'. [ 584.030189][T19845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3236'. [ 584.287017][T19721] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.287616][T19721] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.288023][T19721] bridge_slave_0: entered allmulticast mode [ 584.290787][T19721] bridge_slave_0: entered promiscuous mode [ 584.312736][T19721] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.313232][T19721] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.313595][T19721] bridge_slave_1: entered allmulticast mode [ 584.316428][T19721] bridge_slave_1: entered promiscuous mode [ 584.856910][T19721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.879154][T19721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.997996][T19865] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 585.041763][T19721] team0: Port device team_slave_0 added [ 585.045147][T19721] team0: Port device team_slave_1 added [ 585.090406][T19721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.090426][T19721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.090453][T19721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.150813][T19721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.150834][T19721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.153457][T19721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.231188][ T5641] Bluetooth: hci2: command tx timeout [ 585.518523][T19721] hsr_slave_0: entered promiscuous mode [ 585.530364][T19721] hsr_slave_1: entered promiscuous mode [ 585.540054][T19721] debugfs: 'hsr0' already exists in 'hsr' [ 585.540079][T19721] Cannot create hsr debugfs directory [ 586.458610][T19721] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.679798][T19721] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.818666][T19721] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.972297][T19845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 587.199778][T19896] netlink: 'syz.4.3243': attribute type 4 has an invalid length. [ 587.321844][ T5641] Bluetooth: hci2: command tx timeout [ 587.754889][T19908] x_tables: duplicate underflow at hook 2 [ 588.167130][T19921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3249'. [ 588.187016][T19721] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 588.593526][T19935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3250'. [ 588.674554][T19721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 588.707571][T19919] tipc: Enabled bearer , priority 10 [ 588.849751][T19721] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 588.890293][T19721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 588.899714][T19721] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 588.969165][T19721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 588.988437][T19925] tipc: Enabled bearer , priority 0 [ 589.000481][T19914] tipc: Resetting bearer [ 589.235021][T19914] tipc: Disabling bearer [ 589.273612][T19721] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 589.289813][T19721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 589.381263][T19923] tipc: Resetting bearer [ 589.530742][T19923] tipc: Disabling bearer [ 589.936845][T19721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.010166][T19721] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.048090][T11598] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.048225][T11598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.339145][T19721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 590.339172][T19721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 590.476400][T19982] netlink: 'syz.5.3258': attribute type 1 has an invalid length. [ 590.570777][T11850] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.571006][T11850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.123728][T19993] nbd: socks must be embedded in a SOCK_ITEM attr [ 591.729659][T20002] syzkaller0: entered promiscuous mode [ 591.729689][T20002] syzkaller0: entered allmulticast mode [ 591.873550][ T5641] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 592.477161][T20024] netlink: 'syz.5.3262': attribute type 1 has an invalid length. [ 592.560047][T20026] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3262'. [ 596.487464][T20024] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 596.499038][T20023] ipvlan2: entered allmulticast mode [ 596.499070][T20023] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode [ 596.509398][T20025] ipvlan3: entered allmulticast mode [ 597.497544][T20072] netlink: 'syz.3.3271': attribute type 1 has an invalid length. [ 597.657022][T20072] 8021q: adding VLAN 0 to HW filter on device bond2 [ 597.690296][T20072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3271'. [ 597.705439][T20076] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 597.823996][T20072] bridge1: entered promiscuous mode [ 597.874703][T20072] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 598.109905][T19721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.399776][T20088] syzkaller0: entered promiscuous mode [ 598.399814][T20088] syzkaller0: entered allmulticast mode [ 599.071557][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 602.353898][T20105] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3278'. [ 602.353925][T20105] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 602.357799][T20115] syzkaller0: entered promiscuous mode [ 602.357822][T20115] syzkaller0: entered allmulticast mode [ 602.373769][T20128] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 602.633434][T19721] veth0_vlan: entered promiscuous mode [ 602.693380][T19721] veth1_vlan: entered promiscuous mode [ 603.056950][T19721] veth0_macvtap: entered promiscuous mode [ 603.095023][T19721] veth1_macvtap: entered promiscuous mode [ 603.267981][T19721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.363523][T20157] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3284'. [ 603.366973][T19721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.201480][T11876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.359225][T11598] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.360115][T11598] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.396442][T20173] xt_CT: You must specify a L4 protocol and not use inversions on it [ 604.487929][T20172] syzkaller0: entered promiscuous mode [ 604.487958][T20172] syzkaller0: entered allmulticast mode [ 604.632653][T11598] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.671358][T20177] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3290'. [ 604.671829][T20179] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3290'. [ 607.986434][T11875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.986460][T11875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.132827][T11875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.132851][T11875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.242010][T20203] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3292'. [ 608.630612][T20219] ip_tables: iptables: counters copy to user failed while replacing table [ 608.714908][T20224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3298'. [ 609.431439][T20237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3300'. [ 609.436185][T20238] geneve2: entered allmulticast mode [ 609.500145][T20237] bridge0: port 3(veth0) entered blocking state [ 609.509722][T20237] bridge0: port 3(veth0) entered disabled state [ 609.510043][T20237] veth0: entered allmulticast mode [ 609.553478][T20237] veth0: entered promiscuous mode [ 609.558629][T20237] bridge0: port 3(veth0) entered blocking state [ 609.558761][T20237] bridge0: port 3(veth0) entered forwarding state [ 610.362148][T20262] syzkaller0: entered promiscuous mode [ 610.362173][T20262] syzkaller0: entered allmulticast mode [ 610.472117][T20266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3309'. [ 610.472503][T20266] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3309'. [ 610.549840][T20270] tipc: Enabled bearer , priority 0 [ 610.888562][T20282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3312'. [ 610.930549][T20282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3312'. [ 611.114773][T20260] tipc: Resetting bearer [ 611.159584][T20260] tipc: Disabling bearer [ 611.279726][T20296] IPv6: Can't replace route, no match found [ 611.475716][T20290] syzkaller0: entered promiscuous mode [ 611.475740][T20290] syzkaller0: entered allmulticast mode [ 611.784373][T20312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3318'. [ 612.061693][T20312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3318'. [ 612.110717][T20312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3318'. [ 612.179003][T11876] IPVS: starting estimator thread 0... [ 612.214255][T20322] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 612.219720][T20322] bond1 (unregistering): Released all slaves [ 612.271341][T20331] IPVS: using max 28 ests per chain, 67200 per kthread [ 612.331863][T20313] tipc: Started in network mode [ 612.331896][T20313] tipc: Node identity be183b36a6b4, cluster identity 4711 [ 612.332536][T20313] tipc: Enabled bearer , priority 0 [ 612.392712][T20335] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3322'. [ 612.412733][T20306] tipc: Resetting bearer [ 612.663230][T20306] tipc: Disabling bearer [ 612.663377][T20342] ip_tables: iptables: counters copy to user failed while replacing table [ 614.043624][T20377] netlink: 'syz.2.3331': attribute type 1 has an invalid length. [ 614.169166][T20354] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 614.217379][T20354] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 614.977877][T20377] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 615.573099][T20404] __nla_validate_parse: 1 callbacks suppressed [ 615.573124][T20404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3335'. [ 615.933785][T20409] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 616.563356][T20436] x_tables: duplicate underflow at hook 3 [ 616.590226][T20429] rxe_eth0 speed is unknown, defaulting to 1000 [ 617.080009][T20448] syzkaller0: entered promiscuous mode [ 617.080241][T20448] syzkaller0: entered allmulticast mode [ 617.272963][T20448] vti0: entered promiscuous mode [ 617.272987][T20448] vti0: entered allmulticast mode [ 617.474669][T20404] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3335'. [ 617.850038][T20429] wlan1 speed is unknown, defaulting to 1000 [ 618.797778][T20472] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 618.926316][T20496] x_tables: duplicate underflow at hook 3 [ 619.040453][T20499] : entered promiscuous mode [ 619.176737][T20502] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 619.846445][T20502] bond3 (unregistering): Released all slaves [ 620.229635][T20506] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 620.276402][T20506] bond3 (unregistering): Released all slaves [ 620.837516][T20520] rxe_eth0 speed is unknown, defaulting to 1000 [ 621.080433][T20546] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3362'. [ 621.080677][T20546] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3362'. [ 621.086662][T20546] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3362'. [ 621.086894][T20546] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3362'. [ 621.089381][T20546] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3362'. [ 621.089585][T20546] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3362'. [ 621.089796][T20546] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3362'. [ 621.090005][T20546] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3362'. [ 621.090206][T20546] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3362'. [ 621.092919][T20546] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3362'. [ 622.874999][T20576] bridge_slave_1: left allmulticast mode [ 622.875030][T20576] bridge_slave_1: left promiscuous mode [ 622.875407][T20576] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.914626][T20576] bridge_slave_0: left allmulticast mode [ 622.914657][T20576] bridge_slave_0: left promiscuous mode [ 622.920500][T20576] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.160971][T20594] x_tables: duplicate underflow at hook 3 [ 623.226686][T20520] wlan1 speed is unknown, defaulting to 1000 [ 624.328352][T20625] ip_tables: iptables: counters copy to user failed while replacing table [ 625.664973][T20640] syzkaller0: entered promiscuous mode [ 625.665002][T20640] syzkaller0: entered allmulticast mode [ 626.091451][T20677] x_tables: duplicate underflow at hook 3 [ 626.210594][T20683] netlink: 'syz.2.3390': attribute type 4 has an invalid length. [ 626.299520][T20685] netlink: 'syz.2.3390': attribute type 4 has an invalid length. [ 626.669846][T20697] __nla_validate_parse: 62 callbacks suppressed [ 626.669868][T20697] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3391'. [ 630.352905][T20721] x_tables: duplicate underflow at hook 3 [ 630.910659][T20741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3398'. [ 633.756952][T20741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 634.023123][T20770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3405'. [ 634.060726][T20770] FAULT_INJECTION: forcing a failure. [ 634.060726][T20770] name failslab, interval 1, probability 0, space 0, times 0 [ 634.060758][T20770] CPU: 0 UID: 0 PID: 20770 Comm: syz.0.3405 Not tainted syzkaller #0 PREEMPT(full) [ 634.060781][T20770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 634.060793][T20770] Call Trace: [ 634.060801][T20770] [ 634.060809][T20770] dump_stack_lvl+0xe8/0x150 [ 634.060851][T20770] should_fail_ex+0x3eb/0x540 [ 634.060882][T20770] should_failslab+0xa8/0x100 [ 634.060912][T20770] __kmalloc_noprof+0xf9/0x710 [ 634.060935][T20770] ? nft_pernet+0x23/0x240 [ 634.061063][T20770] ? nf_tables_newrule+0x1524/0x28a0 [ 634.061113][T20770] ? nf_tables_newrule+0x1524/0x28a0 [ 634.061146][T20770] nf_tables_newrule+0x1524/0x28a0 [ 634.061190][T20770] ? __pfx_nf_tables_newrule+0x10/0x10 [ 634.061214][T20770] ? lock_acquire+0x115/0x350 [ 634.061240][T20770] ? nfnl_pernet+0x23/0x240 [ 634.061282][T20770] ? __nla_parse+0x40/0x60 [ 634.061314][T20770] nfnetlink_rcv+0x1288/0x28c0 [ 634.061381][T20770] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 634.061456][T20770] ? skb_clone+0x246/0x3a0 [ 634.061497][T20770] ? netlink_deliver_tap+0x2e/0x1b0 [ 634.061528][T20770] ? netlink_deliver_tap+0x2e/0x1b0 [ 634.061561][T20770] netlink_unicast+0x8ef/0xa80 [ 634.061606][T20770] netlink_sendmsg+0x7f0/0xb20 [ 634.061641][T20770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.061665][T20770] ? do_user_addr_fault+0xc7c/0x1480 [ 634.061706][T20770] ? aa_sock_msg_perm+0x144/0x210 [ 634.061733][T20770] ? apparmor_socket_sendmsg+0x98/0x360 [ 634.061763][T20770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.061788][T20770] sock_sendmsg_nosec+0x14e/0x190 [ 634.061816][T20770] ____sys_sendmsg+0x54e/0x850 [ 634.061844][T20770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.061877][T20770] ? import_iovec+0x73/0xa0 [ 634.061905][T20770] ___sys_sendmsg+0x2a5/0x360 [ 634.061923][T20770] ? __lock_acquire+0x747/0x2de0 [ 634.061962][T20770] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.062028][T20770] ? __fget_files+0x3a2/0x420 [ 634.062050][T20770] ? __fget_files+0x2a/0x420 [ 634.062082][T20770] __x64_sys_sendmsg+0x1b1/0x290 [ 634.062107][T20770] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 634.062154][T20770] do_syscall_64+0x166/0x520 [ 634.062177][T20770] ? trace_irq_disable+0x3b/0x140 [ 634.062202][T20770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.062229][T20770] ? clear_bhb_loop+0x70/0xc0 [ 634.062254][T20770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.062274][T20770] RIP: 0033:0x7f5aeeb9fb19 [ 634.062294][T20770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.062310][T20770] RSP: 002b:00007f5aecdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.062334][T20770] RAX: ffffffffffffffda RBX: 00007f5aeee25fa0 RCX: 00007f5aeeb9fb19 [ 634.062350][T20770] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 634.062363][T20770] RBP: 00007f5aecdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 634.062375][T20770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 634.062387][T20770] R13: 00007f5aeee26038 R14: 00007f5aeee25fa0 R15: 00007fff412145b8 [ 634.062424][T20770] [ 636.160360][T20777] syzkaller0: entered promiscuous mode [ 636.164380][T20777] syzkaller0: entered allmulticast mode [ 636.284605][T11884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.284628][T11884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.516880][T20797] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 636.536642][T20800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3410'. [ 636.536670][T20800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3410'. [ 637.072123][T20819] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3411'. [ 637.128957][T20821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3415'. [ 638.251700][T20837] netlink: 'syz.4.3417': attribute type 10 has an invalid length. [ 638.251729][T20837] openvswitch: netlink: Flow key attr not present in new flow. [ 638.428769][T20851] netlink: 'syz.4.3417': attribute type 10 has an invalid length. [ 638.428795][T20851] openvswitch: netlink: Flow key attr not present in new flow. [ 638.608463][T20849] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 638.692150][T20849] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3419'. [ 639.996065][T20889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3424'. [ 640.022853][T20889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3424'. [ 640.060817][T20821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 640.726899][T20907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3429'. [ 641.078587][T20915] tipc: Failed to remove unknown binding: 66,0,0/0:3674053942/3674053944 [ 641.078636][T20915] tipc: Failed to remove unknown binding: 66,0,0/0:3674053942/3674053943 [ 641.096802][T20915] tipc: Failed to remove unknown binding: 66,0,0/0:3674053942/3674053944 [ 641.096832][T20915] tipc: Failed to remove unknown binding: 66,0,0/0:3674053942/3674053943 [ 641.522896][T20927] netlink: 'syz.3.3433': attribute type 1 has an invalid length. [ 641.614998][T20931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3433'. [ 641.873495][T20927] 8021q: adding VLAN 0 to HW filter on device bond3 [ 642.040087][T20948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3435'. [ 642.267702][T20954] netlink: 'syz.2.3436': attribute type 21 has an invalid length. [ 645.281198][T20934] bond3: (slave bridge0): making interface the new active one [ 645.283820][T20934] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 645.322327][T20948] vlan2: entered allmulticast mode [ 645.322355][T20948] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode [ 645.326841][T20948] batman_adv: batadv0: Adding interface: vlan2 [ 645.326858][T20948] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.327002][T20948] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 645.361214][T20954] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3436'. [ 645.637058][T20966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3437'. [ 646.210698][T20995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3442'. [ 646.210741][T20995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3442'. [ 646.338444][T21002] ip_tables: iptables: counters copy to user failed while replacing table [ 648.064683][T21016] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3445'. [ 648.098703][T21016] veth5: entered promiscuous mode [ 648.508369][T20966] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 648.964603][T21032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3451'. [ 649.002758][T21032] netlink: 'syz.0.3451': attribute type 6 has an invalid length. [ 649.020455][T21032] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3451'. [ 649.074749][T21031] xt_hashlimit: size too large, truncated to 1048576 [ 649.912103][T21058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3454'. [ 652.670408][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3460'. [ 652.681136][T21103] netlink: 'syz.2.3461': attribute type 1 has an invalid length. [ 652.860063][T21113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3461'. [ 652.878134][T21103] bond2: entered promiscuous mode [ 652.880410][T21103] 8021q: adding VLAN 0 to HW filter on device bond2 [ 653.377811][T21109] 8021q: adding VLAN 0 to HW filter on device bond2 [ 653.420943][T21109] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 653.420983][T21109] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 653.512721][T21109] bond2: (slave gre1): making interface the new active one [ 653.512749][T21109] gre1: entered promiscuous mode [ 653.514308][T21109] bond2: (slave gre1): Enslaving as an active interface with an up link [ 653.613286][T21113] bond2 (unregistering): (slave gre1): Releasing backup interface [ 653.613317][T21113] gre1: left promiscuous mode [ 653.619281][T21113] bond2 (unregistering): Released all slaves [ 654.346237][T21150] ip_tables: iptables: counters copy to user failed while replacing table [ 654.369169][T21150] IPv6: addrconf: prefix option has invalid lifetime [ 654.638908][T11857] IPVS: starting estimator thread 0... [ 654.721872][T21160] IPVS: using max 24 ests per chain, 57600 per kthread [ 655.529735][T21093] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 658.633475][T21136] syzkaller1: entered promiscuous mode [ 658.633501][T21136] syzkaller1: entered allmulticast mode [ 659.228724][T21195] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3476'. [ 659.458579][T21201] xt_CT: You must specify a L4 protocol and not use inversions on it [ 659.825169][T21213] x_tables: duplicate underflow at hook 3 [ 660.103024][T21217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3483'. [ 660.156940][T21224] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 661.063890][T21256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3490'. [ 662.798074][T21297] ip_tables: iptables: counters copy to user failed while replacing table [ 662.958501][T21217] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 663.348491][T21307] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3494'. [ 663.468435][T21312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3497'. [ 664.137656][T21335] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 664.577961][T21347] netlink: 'syz.5.3505': attribute type 11 has an invalid length. [ 664.697982][T21355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3508'. [ 665.052915][T21370] netlink: 'syz.0.3510': attribute type 1 has an invalid length. [ 665.182933][T21370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 665.453353][T21370] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 665.905336][T21393] x_tables: duplicate underflow at hook 3 [ 666.267459][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.300754][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.451438][T11884] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.463134][T11875] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.463212][T11875] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.463249][T11875] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.735843][T21405] xt_CT: You must specify a L4 protocol and not use inversions on it [ 666.979338][T21408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3518'. [ 667.119989][T21411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3518'. [ 667.143327][T21342] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 667.610218][T21422] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3519'. [ 670.104183][T21417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 670.183059][T21426] syzkaller1: entered promiscuous mode [ 670.183254][T21426] syzkaller1: entered allmulticast mode [ 670.277194][T21439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3523'. [ 670.577358][T21446] x_tables: duplicate underflow at hook 3 [ 671.226894][T21438] netlink: 'syz.3.3523': attribute type 17 has an invalid length. [ 671.226931][T21438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3523'. [ 671.226956][T21438] bond0: option all_slaves_active: invalid value (48) [ 672.345718][T21494] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 672.854028][T21509] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3533'. [ 672.905132][T21503] rxe_eth0 speed is unknown, defaulting to 1000 [ 673.014301][T21512] FAULT_INJECTION: forcing a failure. [ 673.014301][T21512] name failslab, interval 1, probability 0, space 0, times 0 [ 673.014334][T21512] CPU: 1 UID: 0 PID: 21512 Comm: syz.5.3536 Not tainted syzkaller #0 PREEMPT(full) [ 673.014357][T21512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 673.014369][T21512] Call Trace: [ 673.014377][T21512] [ 673.014386][T21512] dump_stack_lvl+0xe8/0x150 [ 673.014425][T21512] should_fail_ex+0x3eb/0x540 [ 673.014454][T21512] should_failslab+0xa8/0x100 [ 673.014485][T21512] __kmalloc_node_noprof+0xfb/0x720 [ 673.014508][T21512] ? __get_vm_area_node+0x200/0x2f0 [ 673.014561][T21512] ? __get_vm_area_node+0x283/0x2f0 [ 673.014580][T21512] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 673.014600][T21512] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 673.014630][T21512] __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 673.014659][T21512] ? __lock_acquire+0x747/0x2de0 [ 673.014699][T21512] ? hook_capable+0x1c3/0x5e0 [ 673.014736][T21512] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 673.014768][T21512] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 673.014794][T21512] __vmalloc_noprof+0xd2/0x120 [ 673.014824][T21512] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 673.014848][T21512] bpf_prog_alloc_no_stats+0x47/0x550 [ 673.014866][T21512] ? bpf_prog_alloc+0x2a/0x1a0 [ 673.014889][T21512] bpf_prog_alloc+0x3c/0x1a0 [ 673.014911][T21512] bpf_prog_load+0x7f8/0x1c60 [ 673.014945][T21512] ? __pfx_bpf_prog_load+0x10/0x10 [ 673.014981][T21512] ? __might_fault+0xaf/0x130 [ 673.015011][T21512] __sys_bpf+0xd86/0xe00 [ 673.015040][T21512] ? __pfx___sys_bpf+0x10/0x10 [ 673.015072][T21512] ? __fget_files+0x2a/0x420 [ 673.015115][T21512] ? ksys_write+0x242/0x270 [ 673.015142][T21512] ? __pfx_ksys_write+0x10/0x10 [ 673.015173][T21512] __x64_sys_bpf+0xba/0xd0 [ 673.015208][T21512] do_syscall_64+0x166/0x520 [ 673.015231][T21512] ? trace_irq_disable+0x3b/0x140 [ 673.015257][T21512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.015278][T21512] ? clear_bhb_loop+0x70/0xc0 [ 673.015303][T21512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.015323][T21512] RIP: 0033:0x7f36df19fb19 [ 673.015343][T21512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.015360][T21512] RSP: 002b:00007f36e0043028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 673.015383][T21512] RAX: ffffffffffffffda RBX: 00007f36df425fa0 RCX: 00007f36df19fb19 [ 673.015398][T21512] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 673.015411][T21512] RBP: 00007f36e0043090 R08: 0000000000000000 R09: 0000000000000000 [ 673.015424][T21512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.015436][T21512] R13: 00007f36df426038 R14: 00007f36df425fa0 R15: 00007ffeaab295f8 [ 673.015491][T21512] [ 673.111316][T21512] syz.5.3536: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 673.111391][T21512] CPU: 0 UID: 0 PID: 21512 Comm: syz.5.3536 Not tainted syzkaller #0 PREEMPT(full) [ 673.111412][T21512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 673.111424][T21512] Call Trace: [ 673.111431][T21512] [ 673.111439][T21512] dump_stack_lvl+0xe8/0x150 [ 673.111474][T21512] warn_alloc+0x24d/0x270 [ 673.111503][T21512] ? __pfx_warn_alloc+0x10/0x10 [ 673.111531][T21512] ? __kmalloc_node_noprof+0x4d2/0x720 [ 673.111551][T21512] ? __get_vm_area_node+0x200/0x2f0 [ 673.111568][T21512] ? __get_vm_area_node+0x283/0x2f0 [ 673.111584][T21512] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 673.111602][T21512] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 673.111629][T21512] __vmalloc_node_range_noprof+0xa10/0x16f0 [ 673.111655][T21512] ? __lock_acquire+0x747/0x2de0 [ 673.111703][T21512] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 673.111732][T21512] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 673.111749][T21512] __vmalloc_noprof+0xd2/0x120 [ 673.111768][T21512] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 673.111789][T21512] bpf_prog_alloc_no_stats+0x47/0x550 [ 673.111805][T21512] ? bpf_prog_alloc+0x2a/0x1a0 [ 673.111824][T21512] bpf_prog_alloc+0x3c/0x1a0 [ 673.111846][T21512] bpf_prog_load+0x7f8/0x1c60 [ 673.111879][T21512] ? __pfx_bpf_prog_load+0x10/0x10 [ 673.111917][T21512] ? __might_fault+0xaf/0x130 [ 673.111944][T21512] __sys_bpf+0xd86/0xe00 [ 673.111974][T21512] ? __pfx___sys_bpf+0x10/0x10 [ 673.112007][T21512] ? __fget_files+0x2a/0x420 [ 673.112051][T21512] ? ksys_write+0x242/0x270 [ 673.112079][T21512] ? __pfx_ksys_write+0x10/0x10 [ 673.112111][T21512] __x64_sys_bpf+0xba/0xd0 [ 673.112144][T21512] do_syscall_64+0x166/0x520 [ 673.112168][T21512] ? trace_irq_disable+0x3b/0x140 [ 673.112195][T21512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.112215][T21512] ? clear_bhb_loop+0x70/0xc0 [ 673.112246][T21512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.112264][T21512] RIP: 0033:0x7f36df19fb19 [ 673.112283][T21512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.112299][T21512] RSP: 002b:00007f36e0043028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 673.112319][T21512] RAX: ffffffffffffffda RBX: 00007f36df425fa0 RCX: 00007f36df19fb19 [ 673.112332][T21512] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 673.112344][T21512] RBP: 00007f36e0043090 R08: 0000000000000000 R09: 0000000000000000 [ 673.112356][T21512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.112367][T21512] R13: 00007f36df426038 R14: 00007f36df425fa0 R15: 00007ffeaab295f8 [ 673.112398][T21512] [ 673.112405][T21512] Mem-Info: [ 673.112414][T21512] active_anon:8257 inactive_anon:0 isolated_anon:0 [ 673.112414][T21512] active_file:2 inactive_file:43752 isolated_file:0 [ 673.112414][T21512] unevictable:0 dirty:207 writeback:0 [ 673.112414][T21512] slab_reclaimable:12079 slab_unreclaimable:134246 [ 673.112414][T21512] mapped:32818 shmem:1226 pagetables:1532 [ 673.112414][T21512] sec_pagetables:0 bounce:0 [ 673.112414][T21512] kernel_misc_reclaimable:0 [ 673.112414][T21512] free:1241269 free_pcp:11046 free_cma:0 [ 673.112461][T21512] Node 0 active_anon:33028kB inactive_anon:0kB active_file:8kB inactive_file:174808kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131272kB dirty:828kB writeback:0kB shmem:4904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15964kB pagetables:5968kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 673.112511][T21512] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 673.112556][T21512] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 673.112607][T21512] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 673.112641][T21512] Node 0 DMA32 free:1014196kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:33028kB inactive_anon:0kB active_file:8kB inactive_file:174808kB unevictable:0kB writepending:828kB zspages:0kB present:3129332kB managed:2523116kB mlocked:0kB bounce:0kB free_pcp:39688kB local_pcp:19876kB free_cma:0kB [ 673.112694][T21512] lowmem_reserve[]: 0 0 1 1 1 [ 673.112725][T21512] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:20kB free_cma:0kB [ 673.112773][T21512] lowmem_reserve[]: 0 0 0 0 0 [ 673.112803][T21512] Node 1 Normal free:3935508kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:4472kB local_pcp:0kB free_cma:0kB [ 673.112854][T21512] lowmem_reserve[]: 0 0 0 0 0 [ 673.112884][T21512] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 673.112989][T21512] Node 0 DMA32: 764*4kB (UME) 417*8kB (UME) 305*16kB (UME) 256*32kB (UME) 61*64kB (UM) 306*128kB (UM) 385*256kB (UME) 200*512kB (UME) 97*1024kB (UME) 14*2048kB (UME) 152*4096kB (UM) = 1014088kB [ 673.113133][T21512] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 673.113232][T21512] Node 1 Normal: 2*4kB (M) 2*8kB (UM) 1*16kB (M) 3*32kB (UM) 3*64kB (UM) 2*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3935560kB [ 673.113389][T21512] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 673.113404][T21512] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 673.113418][T21512] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 673.113432][T21512] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 673.113447][T21512] 44976 total pagecache pages [ 673.113454][T21512] 0 pages in swap cache [ 673.113460][T21512] Free swap = 124996kB [ 673.113468][T21512] Total swap = 124996kB [ 673.113475][T21512] 2097051 pages RAM [ 673.113495][T21512] 0 pages HighMem/MovableOnly [ 673.113502][T21512] 434241 pages reserved [ 673.113509][T21512] 0 pages cma reserved [ 673.265551][T21505] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3535'. [ 674.162666][T21518] netlink: 65 bytes leftover after parsing attributes in process `syz.2.3537'. [ 674.274997][T21522] ip6erspan0: entered allmulticast mode [ 674.500543][T21528] veth1_to_team: entered promiscuous mode [ 674.550290][T21528] veth1_to_team: left promiscuous mode [ 676.655647][T21503] wlan1 speed is unknown, defaulting to 1000 [ 677.212036][T21557] ip6gretap0: entered promiscuous mode [ 677.397527][T21557] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3545'. [ 680.055343][T21617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3557'. [ 681.179274][T21630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3560'. [ 681.379231][T21645] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3564'. [ 681.448964][T21641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3561'. [ 681.470831][T21643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3563'. [ 681.685440][T21639] veth0_to_bridge: entered promiscuous mode [ 681.687647][T21639] macvtap1: entered allmulticast mode [ 681.687666][T21639] veth0_to_bridge: entered allmulticast mode [ 681.721589][T21648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3563'. [ 681.745283][T21639] veth0_to_bridge: left allmulticast mode [ 681.745735][T21639] veth0_to_bridge: left promiscuous mode [ 682.022765][T11875] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.028971][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.029021][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.042666][T11858] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.148731][T21656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3565'. [ 682.550663][T21671] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 683.065004][T21681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3572'. [ 683.913009][T21703] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 683.989994][T21711] netlink: 'syz.2.3574': attribute type 1 has an invalid length. [ 684.129045][T21712] sctp: [Deprecated]: syz.4.3576 (pid 21712) Use of struct sctp_assoc_value in delayed_ack socket option. [ 684.129045][T21712] Use struct sctp_sack_info instead [ 684.528615][T21721] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3577'. [ 684.899058][T21725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3580'. [ 684.969321][T21731] Cannot find set identified by id 0 to match [ 685.968551][T21681] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 686.315195][T21749] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3585'. [ 686.362522][T21746] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3585'. [ 686.772835][T21764] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3591'. [ 686.817035][T21766] x_tables: duplicate underflow at hook 3 [ 687.139101][T21780] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 687.176071][T21778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3595'. [ 687.294438][T21780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3596'. [ 687.492495][T21780] 8021q: adding VLAN 0 to HW filter on device bond1 [ 687.521920][T21787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3597'. [ 690.343872][T21787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 692.097101][T21879] syzkaller1: entered promiscuous mode [ 692.097342][T21879] syzkaller1: entered allmulticast mode [ 692.169554][T21891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3614'. [ 692.190627][T21903] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3617'. [ 692.223386][T21890] tipc: Enabled bearer , priority 0 [ 692.292899][T21889] tipc: Resetting bearer [ 692.538486][T21889] tipc: Disabling bearer [ 692.916518][T21916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3619'. [ 692.982500][T21913] batman_adv: batadv0: Adding interface: veth0 [ 692.982521][T21913] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.982552][T21913] batman_adv: batadv0: Interface activated: veth0 [ 692.983303][T21914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.114988][T21914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.195104][T21914] batman_adv: batadv0: Interface deactivated: veth0 [ 693.195130][T21914] batman_adv: batadv0: Removing interface: veth0 [ 693.624869][T21926] vlan2: entered promiscuous mode [ 693.624895][T21926] bond0: entered promiscuous mode [ 693.624909][T21926] bond_slave_0: entered promiscuous mode [ 693.626015][T21926] bond_slave_1: entered promiscuous mode [ 693.718691][T21929] netlink: 'syz.5.3622': attribute type 12 has an invalid length. [ 693.726394][T21932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'. [ 693.726420][T21932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3623'. [ 693.947714][T21938] netlink: 'syz.0.3625': attribute type 4 has an invalid length. [ 694.148484][T21948] Bluetooth: hci0: unsupported parameter 5135 [ 694.148509][T21948] Bluetooth: hci0: unsupported parameter 8192 [ 694.148535][T21948] Bluetooth: hci0: unsupported parameter 5135 [ 694.148547][T21948] Bluetooth: hci0: unsupported parameter 8192 [ 694.175289][T21949] Bluetooth: hci0: unsupported parameter 5135 [ 694.176466][T21949] Bluetooth: hci0: unsupported parameter 8192 [ 694.176484][T21949] Bluetooth: hci0: unsupported parameter 5135 [ 694.176496][T21949] Bluetooth: hci0: unsupported parameter 8192 [ 694.306853][T21929] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3622'. [ 694.372690][T21956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3629'. [ 694.491585][T21944] syzkaller1: entered promiscuous mode [ 694.491612][T21944] syzkaller1: entered allmulticast mode [ 694.538001][T21929] ip6erspan1: entered allmulticast mode [ 694.736932][T21961] batman_adv: batadv0: Adding interface: macvlan2 [ 694.736954][T21961] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.736989][T21961] batman_adv: batadv0: Interface activated: macvlan2 [ 694.740372][T21964] syzkaller0: entered promiscuous mode [ 694.740599][T21964] syzkaller0: entered allmulticast mode [ 694.819671][T21961] tipc: Enabled bearer , priority 0 [ 694.957252][T21961] tipc: Resetting bearer [ 695.630812][T21959] tipc: Resetting bearer [ 697.973324][T21959] tipc: Disabling bearer [ 698.315294][T10207] tipc: Node number set to 692657219 [ 698.562922][T22026] netlink: 'syz.0.3639': attribute type 2 has an invalid length. [ 698.617966][T22026] !: entered promiscuous mode [ 698.870693][T22026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3639'. [ 698.950326][T22038] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3639'. [ 699.776297][T22060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3646'. [ 701.003422][T22084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3651'. [ 701.126800][T22080] NFSD: Failed to start, no listeners configured. [ 701.293020][T22093] TC_ACT_REPEAT abuse ? [ 701.532845][T22104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3655'. [ 701.532874][T22104] openvswitch: netlink: Invalid VLAN frame [ 701.667776][T22109] FAULT_INJECTION: forcing a failure. [ 701.667776][T22109] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 701.667809][T22109] CPU: 1 UID: 0 PID: 22109 Comm: syz.4.3658 Not tainted syzkaller #0 PREEMPT(full) [ 701.667832][T22109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 701.667844][T22109] Call Trace: [ 701.667854][T22109] [ 701.667863][T22109] dump_stack_lvl+0xe8/0x150 [ 701.667910][T22109] should_fail_ex+0x3eb/0x540 [ 701.667942][T22109] prepare_alloc_pages+0x21e/0x5f0 [ 701.667977][T22109] __alloc_frozen_pages_noprof+0x17c/0x410 [ 701.668003][T22109] ? __lock_acquire+0x747/0x2de0 [ 701.668032][T22109] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 701.668068][T22109] ? policy_nodemask+0x31b/0x980 [ 701.668105][T22109] alloc_pages_mpol+0x21e/0x390 [ 701.668142][T22109] alloc_pages_noprof+0xb1/0x2b0 [ 701.668182][T22109] get_free_pages_noprof+0xf/0x80 [ 701.668209][T22109] __kasan_populate_vmalloc+0x38/0x1c0 [ 701.668233][T22109] ? do_raw_spin_unlock+0xf5/0x200 [ 701.668258][T22109] alloc_vmap_area+0xd10/0x1410 [ 701.668294][T22109] ? __pfx_alloc_vmap_area+0x10/0x10 [ 701.668311][T22109] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 701.668337][T22109] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 701.668360][T22109] ? __get_vm_area_node+0x155/0x2f0 [ 701.668386][T22109] __get_vm_area_node+0x200/0x2f0 [ 701.668415][T22109] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 701.668439][T22109] ? bpf_check+0x14ae/0x34e0 [ 701.668499][T22109] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 701.668521][T22109] ? __kasan_kmalloc+0x93/0xb0 [ 701.668550][T22109] ? __kmalloc_cache_noprof+0x31c/0x600 [ 701.668574][T22109] ? __kmalloc_cache_noprof+0x148/0x600 [ 701.668595][T22109] ? bpf_diag_init+0x87/0x140 [ 701.668647][T22109] ? bpf_diag_init+0x87/0x140 [ 701.668676][T22109] ? bpf_check+0x14ae/0x34e0 [ 701.668693][T22109] __vmalloc_noprof+0xd2/0x120 [ 701.668715][T22109] ? bpf_check+0x14ae/0x34e0 [ 701.668739][T22109] bpf_check+0x14ae/0x34e0 [ 701.668771][T22109] ? ktime_get_with_offset+0x93/0x2d0 [ 701.668805][T22109] ? ktime_get_with_offset+0x93/0x2d0 [ 701.668832][T22109] ? __pfx_bpf_check+0x10/0x10 [ 701.668856][T22109] ? bpf_obj_name_cpy+0x194/0x1e0 [ 701.668885][T22109] bpf_prog_load+0x14da/0x1c60 [ 701.668919][T22109] ? __pfx_bpf_prog_load+0x10/0x10 [ 701.668955][T22109] ? __might_fault+0xaf/0x130 [ 701.668983][T22109] __sys_bpf+0xd86/0xe00 [ 701.669011][T22109] ? __pfx___sys_bpf+0x10/0x10 [ 701.669043][T22109] ? __fget_files+0x2a/0x420 [ 701.669087][T22109] ? ksys_write+0x242/0x270 [ 701.669115][T22109] ? __pfx_ksys_write+0x10/0x10 [ 701.669160][T22109] __x64_sys_bpf+0xba/0xd0 [ 701.669191][T22109] do_syscall_64+0x166/0x520 [ 701.669219][T22109] ? trace_irq_disable+0x3b/0x140 [ 701.669246][T22109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.669269][T22109] ? clear_bhb_loop+0x70/0xc0 [ 701.669294][T22109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.669316][T22109] RIP: 0033:0x7f81b459fb19 [ 701.669336][T22109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.669354][T22109] RSP: 002b:00007f81b553c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 701.669378][T22109] RAX: ffffffffffffffda RBX: 00007f81b4825fa0 RCX: 00007f81b459fb19 [ 701.669393][T22109] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 701.669407][T22109] RBP: 00007f81b553c090 R08: 0000000000000000 R09: 0000000000000000 [ 701.669420][T22109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 701.669433][T22109] R13: 00007f81b4826038 R14: 00007f81b4825fa0 R15: 00007ffe59fd1348 [ 701.669467][T22109] [ 701.670708][T22109] syz.4.3658: vmalloc error: size 3000, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 701.670774][T22109] CPU: 1 UID: 0 PID: 22109 Comm: syz.4.3658 Not tainted syzkaller #0 PREEMPT(full) [ 701.670795][T22109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 701.670807][T22109] Call Trace: [ 701.670818][T22109] [ 701.670826][T22109] dump_stack_lvl+0xe8/0x150 [ 701.670860][T22109] warn_alloc+0x24d/0x270 [ 701.670887][T22109] ? lockdep_hardirqs_on+0x7b/0x110 [ 701.670913][T22109] ? __pfx_warn_alloc+0x10/0x10 [ 701.670937][T22109] ? kfree+0x1c5/0x650 [ 701.670965][T22109] ? __get_vm_area_node+0x219/0x2f0 [ 701.670994][T22109] __vmalloc_node_range_noprof+0x396/0x16f0 [ 701.671055][T22109] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 701.671078][T22109] ? __kasan_kmalloc+0x93/0xb0 [ 701.671107][T22109] ? __kmalloc_cache_noprof+0x31c/0x600 [ 701.671133][T22109] ? __kmalloc_cache_noprof+0x148/0x600 [ 701.671165][T22109] ? bpf_diag_init+0x87/0x140 [ 701.671190][T22109] ? bpf_diag_init+0x87/0x140 [ 701.671220][T22109] ? bpf_check+0x14ae/0x34e0 [ 701.671239][T22109] __vmalloc_noprof+0xd2/0x120 [ 701.671261][T22109] ? bpf_check+0x14ae/0x34e0 [ 701.671285][T22109] bpf_check+0x14ae/0x34e0 [ 701.671319][T22109] ? ktime_get_with_offset+0x93/0x2d0 [ 701.671347][T22109] ? ktime_get_with_offset+0x93/0x2d0 [ 701.671375][T22109] ? __pfx_bpf_check+0x10/0x10 [ 701.671400][T22109] ? bpf_obj_name_cpy+0x194/0x1e0 [ 701.671430][T22109] bpf_prog_load+0x14da/0x1c60 [ 701.671464][T22109] ? __pfx_bpf_prog_load+0x10/0x10 [ 701.671503][T22109] ? __might_fault+0xaf/0x130 [ 701.671529][T22109] __sys_bpf+0xd86/0xe00 [ 701.671557][T22109] ? __pfx___sys_bpf+0x10/0x10 [ 701.671589][T22109] ? __fget_files+0x2a/0x420 [ 701.671630][T22109] ? ksys_write+0x242/0x270 [ 701.671656][T22109] ? __pfx_ksys_write+0x10/0x10 [ 701.671686][T22109] __x64_sys_bpf+0xba/0xd0 [ 701.671717][T22109] do_syscall_64+0x166/0x520 [ 701.671737][T22109] ? trace_irq_disable+0x3b/0x140 [ 701.671761][T22109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.671781][T22109] ? clear_bhb_loop+0x70/0xc0 [ 701.671807][T22109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.671826][T22109] RIP: 0033:0x7f81b459fb19 [ 701.671845][T22109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.671862][T22109] RSP: 002b:00007f81b553c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 701.671883][T22109] RAX: ffffffffffffffda RBX: 00007f81b4825fa0 RCX: 00007f81b459fb19 [ 701.671898][T22109] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 701.671911][T22109] RBP: 00007f81b553c090 R08: 0000000000000000 R09: 0000000000000000 [ 701.671924][T22109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 701.671937][T22109] R13: 00007f81b4826038 R14: 00007f81b4825fa0 R15: 00007ffe59fd1348 [ 701.671970][T22109] [ 701.772598][T22109] Mem-Info: [ 701.772613][T22109] active_anon:7568 inactive_anon:0 isolated_anon:0 [ 701.772613][T22109] active_file:2 inactive_file:43762 isolated_file:0 [ 701.772613][T22109] unevictable:0 dirty:183 writeback:0 [ 701.772613][T22109] slab_reclaimable:12159 slab_unreclaimable:134322 [ 701.772613][T22109] mapped:29683 shmem:525 pagetables:1568 [ 701.772613][T22109] sec_pagetables:0 bounce:0 [ 701.772613][T22109] kernel_misc_reclaimable:0 [ 701.772613][T22109] free:1278240 free_pcp:11349 free_cma:0 [ 701.772896][T22109] Node 0 active_anon:30272kB inactive_anon:0kB active_file:8kB inactive_file:174848kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118732kB dirty:732kB writeback:0kB shmem:2100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15952kB pagetables:6112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 701.772947][T22109] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 701.772992][T22109] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 701.773045][T22109] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 701.773080][T22109] Node 0 DMA32 free:1163288kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:30272kB inactive_anon:0kB active_file:8kB inactive_file:174848kB unevictable:0kB writepending:732kB zspages:0kB present:3129332kB managed:2523116kB mlocked:0kB bounce:0kB free_pcp:39644kB local_pcp:20160kB free_cma:0kB [ 701.773134][T22109] lowmem_reserve[]: 0 0 1 1 1 [ 701.773167][T22109] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:20kB free_cma:0kB [ 701.773224][T22109] lowmem_reserve[]: 0 0 0 0 0 [ 701.773254][T22109] Node 1 Normal free:3934300kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:5728kB local_pcp:3524kB free_cma:0kB [ 701.773306][T22109] lowmem_reserve[]: 0 0 0 0 0 [ 701.773337][T22109] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 701.773444][T22109] Node 0 DMA32: 1878*4kB (UME) 2166*8kB (UM) 439*16kB (UME) 447*32kB (UME) 77*64kB (UME) 263*128kB (UE) 381*256kB (UME) 198*512kB (UM) 97*1024kB (UME) 13*2048kB (UME) 184*4096kB (UM) = 1163288kB [ 701.773588][T22109] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 701.780553][T22109] Node 1 Normal: 5*4kB (UM) 1*8kB (M) 2*16kB (UM) 3*32kB (UM) 3*64kB (UM) 2*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 959*4096kB (M) = 3934300kB [ 701.780696][T22109] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 701.780711][T22109] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 701.780726][T22109] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 701.780740][T22109] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 701.780754][T22109] 44285 total pagecache pages [ 701.780761][T22109] 0 pages in swap cache [ 701.780768][T22109] Free swap = 124996kB [ 701.780775][T22109] Total swap = 124996kB [ 701.780782][T22109] 2097051 pages RAM [ 701.780789][T22109] 0 pages HighMem/MovableOnly [ 701.780796][T22109] 434241 pages reserved [ 701.780802][T22109] 0 pages cma reserved [ 702.814471][T22093] gre2: entered promiscuous mode [ 703.126503][T22119] xt_CT: You must specify a L4 protocol and not use inversions on it [ 705.351404][T22175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 705.520282][T22182] netlink: 5716 bytes leftover after parsing attributes in process `syz.5.3675'. [ 705.520349][T22182] netlink: 5716 bytes leftover after parsing attributes in process `syz.5.3675'. [ 705.645076][T22181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3675'. [ 705.645109][T22181] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3675'. [ 705.711299][ T5641] Bluetooth: hci2: command tx timeout [ 707.185950][T22205] xt_CT: You must specify a L4 protocol and not use inversions on it [ 710.231778][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'. [ 710.232593][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'. [ 710.264786][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'. [ 710.265519][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'. [ 710.290053][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'. [ 710.304749][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'. [ 710.525197][T22255] __nla_validate_parse: 17 callbacks suppressed [ 710.525238][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'. [ 710.558138][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'. [ 710.559261][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'. [ 710.587437][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'. [ 710.603694][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'. [ 710.618573][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'. [ 710.633000][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'. [ 710.635482][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'. [ 710.636145][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'. [ 710.658792][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'. [ 711.274046][T22282] xt_CT: You must specify a L4 protocol and not use inversions on it [ 711.295034][T22283] netlink: 'syz.4.3694': attribute type 4 has an invalid length. [ 712.124259][T22304] netlink: 'syz.5.3701': attribute type 10 has an invalid length. [ 712.307073][T22304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 712.338657][T22304] team0: Port device netdevsim1 added [ 712.483506][T22317] pim6reg: entered allmulticast mode [ 712.496586][T22317] pim6reg: left allmulticast mode [ 713.366140][T22328] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 713.367163][T22334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 713.504765][T22347] xt_CT: You must specify a L4 protocol and not use inversions on it [ 715.092678][T10207] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 715.153115][T10207] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 715.412362][T22407] xt_CT: You must specify a L4 protocol and not use inversions on it [ 715.843187][T22417] __nla_validate_parse: 78 callbacks suppressed [ 715.843211][T22417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3723'. [ 716.043138][T11858] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 716.070478][T22421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3724'. [ 716.641968][T22433] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.642665][T22433] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.890118][T22438] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3729'. [ 716.958299][T22438] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3729'. [ 717.082211][T11858] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 717.082478][T11858] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 717.208387][T22456] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3733'. [ 717.354742][T22451] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3732'. [ 717.483718][T10207] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 717.539129][T22469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3736'. [ 717.776085][T22464] netlink: 'syz.0.3734': attribute type 4 has an invalid length. [ 718.187102][T22475] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3737'. [ 718.336489][T22475] veth3: entered allmulticast mode [ 718.687177][T22489] syzkaller0: entered promiscuous mode [ 718.687202][T22489] syzkaller0: entered allmulticast mode [ 719.240380][T22506] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 719.362412][T22506] syzkaller0: entered promiscuous mode [ 719.362439][T22506] syzkaller0: entered allmulticast mode [ 719.423019][T22513] ip_tables: iptables: counters copy to user failed while replacing table [ 719.887757][T22523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3748'. [ 719.994979][T22529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3749'. [ 720.015934][T11857] IPVS: starting estimator thread 0... [ 720.020548][T22519] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 720.102620][T22530] IPVS: using max 31 ests per chain, 74400 per kthread [ 721.082781][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 721.439299][T22584] __nla_validate_parse: 3 callbacks suppressed [ 721.439324][T22584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3762'. [ 721.645062][T22588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3763'. [ 721.688850][T22584] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 721.744542][T22593] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3765'. [ 721.786008][T22592] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3764'. [ 721.795875][T22593] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3765'. [ 722.947788][T22624] netlink: 'syz.4.3771': attribute type 1 has an invalid length. [ 722.947816][T22624] netlink: 'syz.4.3771': attribute type 2 has an invalid length. [ 723.253436][T22605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3767'. [ 724.067559][T22664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3781'. [ 724.141785][T22665] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 724.246083][T22664] team0: Port device team_slave_0 removed [ 724.599289][T22684] netlink: zone id is out of range [ 724.599691][T22684] netlink: zone id is out of range [ 724.600170][T22684] netlink: zone id is out of range [ 724.600282][T22684] netlink: zone id is out of range [ 724.603512][T22684] netlink: zone id is out of range [ 724.638513][T22684] netlink: set zone limit has 4 unknown bytes [ 724.942224][T22698] x_tables: duplicate underflow at hook 3 [ 725.065954][T22695] netlink: 852 bytes leftover after parsing attributes in process `syz.2.3786'. [ 725.244390][T22711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3790'. [ 725.783054][T22725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3792'. [ 726.043324][T22732] netlink: 'syz.3.3792': attribute type 4 has an invalid length. [ 726.043550][T22732] netlink: 'syz.3.3792': attribute type 4 has an invalid length. [ 726.043753][T22732] netlink: 'syz.3.3792': attribute type 4 has an invalid length. [ 726.043960][T22732] netlink: 'syz.3.3792': attribute type 4 has an invalid length. [ 726.113030][T22732] netlink: 'syz.3.3792': attribute type 4 has an invalid length. [ 726.113292][T22732] netlink: 'syz.3.3792': attribute type 4 has an invalid length. [ 726.113494][T22732] netlink: 'syz.3.3792': attribute type 4 has an invalid length. [ 726.113700][T22732] netlink: 'syz.3.3792': attribute type 4 has an invalid length. [ 726.887920][T22752] x_tables: duplicate underflow at hook 3 [ 727.109970][T22756] __nla_validate_parse: 2 callbacks suppressed [ 727.109992][T22756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3800'. [ 727.278219][T22758] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3801'. [ 727.883517][T22766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3803'. [ 728.227325][T22781] validate_nla: 48 callbacks suppressed [ 728.227373][T22781] netlink: 'syz.5.3804': attribute type 1 has an invalid length. [ 728.282104][T22787] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3804'. [ 728.372678][T22781] 8021q: adding VLAN 0 to HW filter on device bond1 [ 728.412088][T22791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3807'. [ 728.412241][T22791] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3807'. [ 728.991215][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 729.564831][T22807] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3809'. [ 729.564868][T22807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3809'. [ 730.157531][T22816] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 730.243969][T22818] syzkaller0: entered promiscuous mode [ 730.243992][T22818] syzkaller0: entered allmulticast mode [ 730.263369][T11857] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.264474][T11857] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.264518][T11857] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.264552][T11857] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.738891][T22766] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 732.055389][T22870] IPv6: Can't replace route, no match found [ 732.061995][T22864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3823'. [ 732.305618][T22883] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3827'. [ 732.305651][T22883] openvswitch: netlink: Missing key (keys=40, expected=80) [ 733.589315][T22916] tipc: Enabled bearer , priority 10 [ 733.589767][T22919] tipc: Enabling of bearer rejected, already enabled [ 733.766108][T22914] netlink: 'syz.5.3831': attribute type 1 has an invalid length. [ 734.084457][T22909] tipc: Resetting bearer [ 734.215004][T22909] tipc: Disabling bearer [ 734.863336][T22960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3839'. [ 735.291809][T22979] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3842'. [ 735.975456][T22997] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 736.388800][T23011] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 736.903664][T23031] netlink: 'syz.5.3852': attribute type 1 has an invalid length. [ 737.386734][T23031] 8021q: adding VLAN 0 to HW filter on device bond2 [ 737.509046][T23046] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 737.836326][ C1] vcan0: j1939_tp_rxtimer: 0xffff888047b75800: rx timeout, send abort [ 738.336455][ C1] vcan0: j1939_tp_rxtimer: 0xffff888047b75800: abort rx timeout. Force session deactivation [ 738.338164][ C1] vcan0: j1939_tp_rxtimer: 0xffff888047b76000: rx timeout, send abort [ 738.827445][T23058] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.3858'. [ 738.827560][T23058] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 738.829861][T23058] 0ªX¹¦Dö»: entered allmulticast mode [ 738.845440][ C1] vcan0: j1939_tp_rxtimer: 0xffff888047b76000: abort rx timeout. Force session deactivation [ 738.962746][T23062] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3858'. [ 739.207098][T23002] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 739.208847][T23025] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3851'. [ 739.670196][T23068] tipc: Enabled bearer , priority 0 [ 739.695430][T23067] tipc: Resetting bearer [ 739.750129][T23067] tipc: Disabling bearer [ 739.776292][T23078] netlink: 'syz.4.3862': attribute type 9 has an invalid length. [ 739.964263][T23080] FAULT_INJECTION: forcing a failure. [ 739.964263][T23080] name failslab, interval 1, probability 0, space 0, times 0 [ 739.964295][T23080] CPU: 1 UID: 0 PID: 23080 Comm: syz.3.3864 Not tainted syzkaller #0 PREEMPT(full) [ 739.964317][T23080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 739.964330][T23080] Call Trace: [ 739.964339][T23080] [ 739.964347][T23080] dump_stack_lvl+0xe8/0x150 [ 739.964386][T23080] should_fail_ex+0x3eb/0x540 [ 739.964418][T23080] should_failslab+0xa8/0x100 [ 739.964446][T23080] ? dst_alloc+0x105/0x170 [ 739.964475][T23080] kmem_cache_alloc_noprof+0x9c/0x600 [ 739.964500][T23080] ? __pfx_find_exception+0x10/0x10 [ 739.964598][T23080] ? dst_alloc+0x105/0x170 [ 739.964624][T23080] ? fib_lookup+0x76/0x440 [ 739.964683][T23080] dst_alloc+0x105/0x170 [ 739.964715][T23080] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 739.964748][T23080] ? ip_route_output_key_hash+0xd8/0x2a0 [ 739.964773][T23080] ip_route_output_key_hash+0x18d/0x2a0 [ 739.964800][T23080] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 739.964819][T23080] ? __asan_memset+0x22/0x50 [ 739.964861][T23080] tcp_v4_connect+0x873/0x1b20 [ 739.964937][T23080] ? __pfx_tcp_v4_connect+0x10/0x10 [ 739.964975][T23080] mptcp_connect+0x4e9/0x870 [ 739.965024][T23080] __inet_stream_connect+0x28c/0xf50 [ 739.965064][T23080] ? rcu_is_watching+0x16/0xb0 [ 739.965102][T23080] ? __pfx___inet_stream_connect+0x10/0x10 [ 739.965125][T23080] ? __kasan_kmalloc+0x93/0xb0 [ 739.965155][T23080] ? __kmalloc_cache_noprof+0x31c/0x600 [ 739.965180][T23080] ? __kmalloc_cache_noprof+0x148/0x600 [ 739.965203][T23080] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 739.965266][T23080] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 739.965298][T23080] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 739.965330][T23080] mptcp_sendmsg_fastopen+0x17b/0x540 [ 739.965389][T23080] mptcp_sendmsg+0x1a4a/0x1cf0 [ 739.965444][T23080] ? __lock_acquire+0x747/0x2de0 [ 739.965481][T23080] ? __lock_acquire+0x747/0x2de0 [ 739.965510][T23080] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 739.965535][T23080] ? aa_sock_msg_perm+0xfc/0x210 [ 739.965563][T23080] ? inet_sendmsg+0x298/0x320 [ 739.965587][T23080] ? __pfx_inet_sendmsg+0x10/0x10 [ 739.965608][T23080] sock_sendmsg_nosec+0x10f/0x190 [ 739.965640][T23080] ____sys_sendmsg+0x54e/0x850 [ 739.965670][T23080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 739.965703][T23080] ? import_iovec+0x73/0xa0 [ 739.965733][T23080] ___sys_sendmsg+0x2a5/0x360 [ 739.965753][T23080] ? __lock_acquire+0x747/0x2de0 [ 739.965783][T23080] ? __pfx____sys_sendmsg+0x10/0x10 [ 739.965849][T23080] ? __fget_files+0x3a2/0x420 [ 739.965871][T23080] ? __fget_files+0x2a/0x420 [ 739.965907][T23080] __x64_sys_sendmsg+0x1b1/0x290 [ 739.965939][T23080] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 739.965987][T23080] do_syscall_64+0x166/0x520 [ 739.966010][T23080] ? trace_irq_disable+0x3b/0x140 [ 739.966036][T23080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.966057][T23080] ? clear_bhb_loop+0x70/0xc0 [ 739.966082][T23080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.966102][T23080] RIP: 0033:0x7fd4bd19fb19 [ 739.966122][T23080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.966139][T23080] RSP: 002b:00007fd4be10f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 739.966162][T23080] RAX: ffffffffffffffda RBX: 00007fd4bd425fa0 RCX: 00007fd4bd19fb19 [ 739.966177][T23080] RDX: 0000000030004001 RSI: 0000200000000180 RDI: 0000000000000005 [ 739.966190][T23080] RBP: 00007fd4be10f090 R08: 0000000000000000 R09: 0000000000000000 [ 739.966203][T23080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.966215][T23080] R13: 00007fd4bd426038 R14: 00007fd4bd425fa0 R15: 00007ffe15e1a808 [ 739.966250][T23080] [ 740.412128][T23083] IPVS: set_ctl: invalid protocol: 103 172.20.20.34:20003 [ 740.597910][T23076] bond3: option fail_over_mac: invalid value (127) [ 740.623359][T23076] bond3 (unregistering): Released all slaves [ 740.728373][T23093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3866'. [ 740.966184][T23109] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3866'. [ 741.505185][T23120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3870'. [ 741.918455][T23131] ip6tnl1: entered promiscuous mode [ 741.918480][T23131] ip6tnl1: entered allmulticast mode [ 741.918786][T23146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3879'. [ 742.225667][T23135] rxe_eth0 speed is unknown, defaulting to 1000 [ 742.615589][T23167] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3883'. [ 742.615618][T23167] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3883'. [ 743.661509][T23135] wlan1 speed is unknown, defaulting to 1000 [ 743.721082][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 744.269912][T23200] ip6tnl1: entered promiscuous mode [ 744.272354][T23200] ip6tnl1: entered allmulticast mode [ 744.566083][T23221] tipc: Enabling of bearer rejected, failed to enable media [ 744.626584][T23221] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3899'. [ 744.727621][T23227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3901'. [ 744.750768][T23223] IPv6: Can't replace route, no match found [ 744.761940][ T5641] block nbd4: Receive control failed (result -32) [ 744.954860][T23236] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3902'. [ 745.092551][T23242] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3903'. [ 745.107741][T23244] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3903'. [ 745.168443][T23245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3904'. [ 745.168480][T23245] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3904'. [ 745.168495][T23245] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3904'. [ 745.226406][T23232] bridge3: entered promiscuous mode [ 745.226432][T23232] bridge3: entered allmulticast mode [ 745.243397][T23232] team0: Port device bridge3 added [ 745.246804][T23236] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3902'. [ 746.003406][T23257] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3907'. [ 747.814582][T23305] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 748.738902][T23334] tipc: Started in network mode [ 748.738936][T23334] tipc: Node identity 364d502c7c55, cluster identity 4711 [ 748.739141][T23334] tipc: Enabled bearer , priority 0 [ 748.766341][T23322] tipc: Resetting bearer [ 748.893639][T23322] tipc: Disabling bearer [ 749.208345][T23349] IPv6: Can't replace route, no match found [ 749.325703][T23356] IPv6: Can't replace route, no match found [ 749.825600][T23379] batman_adv: batadv0: Adding interface: veth0 [ 749.825620][T23379] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.825650][T23379] batman_adv: batadv0: Interface activated: veth0 [ 749.875611][T23379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 749.875639][T23379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 749.927640][T23378] __nla_validate_parse: 2 callbacks suppressed [ 749.927661][T23378] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3935'. [ 749.975005][T23379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.975265][T23379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.019630][T23379] batman_adv: batadv0: Removing interface: vlan2 [ 750.088692][T23379] batman_adv: batadv0: Interface deactivated: macvlan2 [ 750.088931][T23379] batman_adv: batadv0: Removing interface: macvlan2 [ 750.108537][T23379] batman_adv: batadv0: Interface deactivated: veth0 [ 750.108771][T23379] batman_adv: batadv0: Removing interface: veth0 [ 751.044627][T23407] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3940'. [ 751.685531][T23387] tipc: Failed to remove unknown binding: 66,1,1/0:2730451084/2730451086 [ 752.236580][T23436] veth0: entered promiscuous mode [ 752.298735][T23439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3947'. [ 752.387749][T23446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3947'. [ 753.394670][T23458] 8021q: adding VLAN 0 to HW filter on device bond3 [ 753.400468][T23471] syzkaller1: entered promiscuous mode [ 753.400492][T23471] syzkaller1: entered allmulticast mode [ 753.449099][T23478] tipc: Enabled bearer , priority 0 [ 753.454052][T23478] tipc: Disabling bearer [ 754.057567][T23500] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3959'. [ 754.316029][T23507] netlink: 'syz.0.3961': attribute type 11 has an invalid length. [ 754.316057][T23507] netlink: 'syz.0.3961': attribute type 5 has an invalid length. [ 754.512334][T23515] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3964'. [ 754.524767][T23515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3964'. [ 754.557456][T23515] veth1_to_team: entered promiscuous mode [ 754.568074][T23515] veth1_to_team: left promiscuous mode [ 754.656841][T23525] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3964'. [ 755.327176][T23545] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3970'. [ 755.336900][T23545] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3970'. [ 755.336927][T23545] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3970'. [ 755.337775][T23540] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3969'. [ 755.337799][T23540] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3969'. [ 755.357483][T23540] netlink: 204252 bytes leftover after parsing attributes in process `syz.2.3969'. [ 755.406624][T23545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3970'. [ 755.406653][T23545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3970'. [ 756.020676][T23582] IPv6: Can't replace route, no match found [ 756.073935][T23574] can: request_module (can-proto-0) failed. [ 756.301941][T23588] netlink: 'syz.5.3976': attribute type 4 has an invalid length. [ 756.301968][T23588] netlink: 3581 bytes leftover after parsing attributes in process `syz.5.3976'. [ 756.580730][T23593] IPv6: Can't replace route, no match found [ 757.245873][T23605] x_tables: duplicate underflow at hook 1 [ 758.006136][T23638] netlink: 'syz.5.3983': attribute type 1 has an invalid length. [ 758.006162][T23638] netlink: 248 bytes leftover after parsing attributes in process `syz.5.3983'. [ 758.191036][ T5641] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 758.219873][T23646] x_tables: duplicate underflow at hook 2 [ 758.738532][T23642] geneve0: entered promiscuous mode [ 758.944938][T23653] sit0: entered promiscuous mode [ 759.006454][T23653] netlink: 'syz.2.3985': attribute type 1 has an invalid length. [ 759.156697][T23657] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 760.778589][T23711] SET target dimension over the limit! [ 760.883992][T23711] SET target dimension over the limit! [ 761.031379][T23725] IPv6: Can't replace route, no match found [ 761.421461][T23735] __nla_validate_parse: 3 callbacks suppressed [ 761.421484][T23735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4006'. [ 761.421498][T23735] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4006'. [ 761.733097][T23746] sctp: [Deprecated]: syz.3.4009 (pid 23746) Use of int in max_burst socket option. [ 761.733097][T23746] Use struct sctp_assoc_value instead [ 762.957608][T23776] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4013'. [ 764.336210][T23776] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 764.506845][T23791] netlink: 'syz.4.4014': attribute type 4 has an invalid length. [ 764.638793][T23798] IPv6: Can't replace route, no match found [ 764.949082][T23816] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4017'. [ 765.010868][T23813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4018'. [ 765.332349][T23808] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 765.366011][T23808] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 765.443293][T23833] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4020'. [ 765.571660][T23833] ip6tnl2: entered promiscuous mode [ 765.812464][T23808] vda: unable to read partition table [ 766.085040][T23847] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4024'. [ 766.085304][T23847] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4024'. [ 766.346455][T23847] IPv6: Can't replace route, no match found [ 766.424018][T23858] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4028'. [ 766.583513][T23853] xt_hashlimit: size too large, truncated to 1048576 [ 766.583729][T23853] xt_hashlimit: max too large, truncated to 1048576 [ 766.667911][T23856] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 766.798825][T23869] netlink: 'syz.3.4031': attribute type 9 has an invalid length. [ 766.823663][T23865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4026'. [ 768.749526][T23914] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 768.784291][T23914] netlink: 558 bytes leftover after parsing attributes in process `syz.4.4041'. [ 769.169011][T23926] netlink: 'syz.2.4042': attribute type 1 has an invalid length. [ 770.057558][T23946] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4047'. [ 770.164056][T23953] syzkaller0: entered promiscuous mode [ 770.164085][T23953] syzkaller0: entered allmulticast mode [ 770.249707][T23960] syzkaller0: entered promiscuous mode [ 770.249746][T23960] syzkaller0: entered allmulticast mode [ 770.636535][T23970] ip_tables: iptables: counters copy to user failed while replacing table [ 770.974611][T23984] xt_nfacct: accounting object `' does not exist [ 771.322488][T23986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4052'. [ 772.518763][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 774.173579][T23992] Set syz1 is full, maxelem 2076 reached [ 777.035334][T23972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.043382][T23984] netlink: 'syz.5.4052': attribute type 2 has an invalid length. [ 777.092447][T23996] veth0_macvtap: left promiscuous mode [ 777.571216][T24003] smc: net device lo applied user defined pnetid SYZ2 [ 777.580771][T24007] smc: net device lo erased user defined pnetid SYZ2 [ 777.721563][T24001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4055'. [ 777.721589][T24001] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4055'. [ 777.881800][T24029] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4059'. [ 778.153604][T24044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4063'. [ 778.189992][T24048] xt_CT: You must specify a L4 protocol and not use inversions on it [ 778.777805][T24046] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 778.876494][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.876559][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.876595][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.876629][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.873882][T24099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4073'. [ 779.900663][ T5297] veth0_macvtap: entered promiscuous mode [ 779.913087][T24096] TCP: TCP_TX_DELAY enabled [ 780.417026][T24116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4075'. [ 780.417064][T24116] netlink: 'syz.2.4075': attribute type 20 has an invalid length. [ 780.417077][T24116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4075'. [ 780.489960][T24112] ip6erspan2: entered allmulticast mode [ 780.501318][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.501380][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.501416][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.501688][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.568399][T24112] netlink: 'syz.5.4076': attribute type 5 has an invalid length. [ 780.629713][T24122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4079'. [ 780.629760][T24122] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4079'. [ 780.629776][T24122] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4079'. [ 780.837761][T24118] netlink: 'syz.5.4076': attribute type 39 has an invalid length. [ 780.838527][T24124] netlink: 'syz.5.4076': attribute type 39 has an invalid length. [ 781.568884][T24142] IPv6: Can't replace route, no match found [ 781.866016][T24149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 782.663501][T24163] bond4: Removing last arp target with arp_interval on [ 782.663528][T24163] bond4: Removing last ns target with arp_interval on [ 783.343559][T24172] __nla_validate_parse: 1 callbacks suppressed [ 783.343581][T24172] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4092'. [ 783.559916][T24184] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 783.566800][T24184] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 783.908753][T24193] tap0: tun_chr_ioctl cmd 2148553947 [ 784.248817][T24203] bridge0: entered allmulticast mode [ 784.310392][T24203] pim6reg: entered allmulticast mode [ 784.530018][T24207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4100'. [ 784.699535][T24213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4101'. [ 784.738048][T24213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4101'. [ 784.932539][T24219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.006347][T24246] syzkaller1: entered promiscuous mode [ 786.006589][T24246] syzkaller1: entered allmulticast mode [ 786.810666][T24273] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4114'. [ 787.622364][T24312] netlink: 'syz.4.4125': attribute type 1 has an invalid length. [ 788.014855][T24317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 788.398645][T24324] netlink: 'syz.4.4128': attribute type 3 has an invalid length. [ 788.398669][T24324] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4128'. [ 788.690459][T24306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4123'. [ 788.972930][T24337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4129'. [ 790.011492][T24363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4134'. [ 790.336489][T24369] tipc: Enabling of bearer rejected, failed to enable media [ 790.356372][ T5297] veth0_macvtap: left promiscuous mode [ 790.533615][T24383] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 791.149083][T24399] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4141'. [ 791.480661][T24410] tipc: Enabling of bearer rejected, failed to enable media [ 791.633606][T24411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4142'. [ 791.640453][T24411] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4142'. [ 791.717276][T24417] ip6gretap0: entered promiscuous mode [ 791.840319][T24406] syzkaller1: entered promiscuous mode [ 791.840556][T24406] syzkaller1: entered allmulticast mode [ 792.148858][T24436] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 792.382453][ T29] audit: type=1804 audit(1793838647.030:13): pid=24439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4150" name="/newroot/189/cgroup.controllers" dev="tmpfs" ino=993 res=1 errno=0 [ 792.382512][ T29] audit: type=1800 audit(1793838647.030:14): pid=24439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4150" name="cgroup.controllers" dev="tmpfs" ino=993 res=0 errno=-22 [ 795.150918][ T5641] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 796.193134][T24481] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 796.265759][T24518] netlink: 'syz.2.4162': attribute type 1 has an invalid length. [ 796.265784][T24518] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4162'. [ 796.664239][T24549] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 796.664259][T24549] IPv6: NLM_F_CREATE should be set when creating new route [ 796.664308][T24549] IPv6: NLM_F_CREATE should be set when creating new route [ 797.030990][T24559] TC_ACT_REPEAT abuse ? [ 797.114450][T24564] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4175'. [ 797.143798][T24564] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4175'. [ 797.357095][T24577] ip6tnl3: entered allmulticast mode [ 797.459713][T24581] tipc: Enabled bearer , priority 0 [ 797.480613][T24579] tipc: Resetting bearer [ 797.724508][T24579] tipc: Disabling bearer [ 798.232867][T24602] netlink: 'syz.3.4183': attribute type 1 has an invalid length. [ 798.433524][T24602] bond5: entered promiscuous mode [ 798.434077][T24602] 8021q: adding VLAN 0 to HW filter on device bond5 [ 799.576706][T24636] netlink: 'syz.3.4190': attribute type 61 has an invalid length. [ 799.591048][T24639] netlink: 'syz.3.4190': attribute type 9 has an invalid length. [ 799.716046][T24639] bridge2: entered promiscuous mode [ 799.826561][T24645] syzkaller0: left promiscuous mode [ 799.826587][T24645] syzkaller0: left allmulticast mode [ 799.859441][T24645] tipc: Enabled bearer , priority 0 [ 799.934895][T24642] netlink: 'syz.0.4192': attribute type 1 has an invalid length. [ 799.935589][T24642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4192'. [ 799.935621][T24642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4192'. [ 800.712904][T24672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4199'. [ 801.096846][T24688] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4203'. [ 801.187002][T24681] ip6tnl1: entered promiscuous mode [ 801.187028][T24681] ip6tnl1: entered allmulticast mode [ 801.749685][T24693] syzkaller1: entered promiscuous mode [ 801.749711][T24693] syzkaller1: entered allmulticast mode [ 801.972203][T24725] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4209'. [ 802.227611][T24734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4212'. [ 802.348284][T24737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4211'. [ 802.499014][T24752] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4215'. [ 802.572989][T24749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4214'. [ 802.736525][T24749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4214'. [ 803.618150][T24778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4222'. [ 804.545139][T24820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4228'. [ 804.545165][T24820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4228'. [ 804.579186][T24812] 8021q: adding VLAN 0 to HW filter on device bond3 [ 804.745374][T24820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.768140][T24820] bond3: (slave bond0): making interface the new active one [ 804.796315][T24820] bond3: (slave bond0): Enslaving as an active interface with an up link [ 804.985475][T24813] syzkaller0: entered promiscuous mode [ 804.985817][T24813] syzkaller0: entered allmulticast mode [ 805.078702][T24836] netlink: 'syz.2.4233': attribute type 21 has an invalid length. [ 805.602327][T24856] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4237'. [ 805.752548][T24867] ip_tables: iptables: counters copy to user failed while replacing table [ 806.983203][T24958] __nla_validate_parse: 1 callbacks suppressed [ 806.983225][T24958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4246'. [ 806.983241][T24958] openvswitch: netlink: Flow actions attr not present in new flow. [ 807.072075][T24934] x_tables: duplicate underflow at hook 1 [ 808.012681][T25002] tipc: Enabled bearer , priority 0 [ 808.206576][T25002] syzkaller0: entered promiscuous mode [ 808.206606][T25002] syzkaller0: entered allmulticast mode [ 808.211670][T25002] tipc: Resetting bearer [ 808.334467][T25000] tipc: Resetting bearer [ 808.972244][T25014] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4254'. [ 809.125182][T25017] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4254'. [ 809.680367][T25024] netlink: 'syz.5.4257': attribute type 9 has an invalid length. [ 813.056020][T25000] tipc: Disabling bearer [ 813.080707][T25008] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 813.129538][T10207] tipc: Node number set to 1243107372 [ 813.191041][T25027] ip6gre1: entered allmulticast mode [ 813.214831][T25040] tipc: Resetting bearer [ 813.589751][T25040] tipc: Disabling bearer [ 813.643105][T11858] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.643173][T11858] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.643211][T11858] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.643248][T11858] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.958240][T25056] vlan4: entered promiscuous mode [ 813.958396][T25056] hsr0: entered promiscuous mode [ 813.974555][T25056] vlan4: entered allmulticast mode [ 813.974579][T25056] hsr0: entered allmulticast mode [ 813.974592][T25056] hsr_slave_0: entered allmulticast mode [ 813.974609][T25056] hsr_slave_1: entered allmulticast mode [ 814.020448][T25063] tipc: Enabled bearer , priority 0 [ 814.044759][T25042] tipc: Disabling bearer [ 814.235486][T25046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4261'. [ 814.237467][T25046] hsr_slave_0: left promiscuous mode [ 814.261626][T25046] hsr_slave_1: left promiscuous mode [ 814.795281][T25081] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 815.245781][T25108] ip_tables: iptables: counters copy to user failed while replacing table [ 815.545949][T25118] tipc: Enabled bearer , priority 0 [ 815.674098][T25121] syzkaller0: entered promiscuous mode [ 815.674127][T25121] syzkaller0: entered allmulticast mode [ 815.675072][T25121] tipc: Resetting bearer [ 815.758336][T25109] tipc: Resetting bearer [ 816.015125][T25131] IPv6: NLM_F_CREATE should be specified when creating new route [ 817.873130][T25166] netlink: 'syz.4.4278': attribute type 1 has an invalid length. [ 820.284169][T25109] tipc: Disabling bearer [ 820.604349][T25166] bond4 (unregistering): Released all slaves [ 820.894217][T25175] veth0: entered promiscuous mode [ 821.014913][T25175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4281'. [ 821.018818][T25173] veth0: left promiscuous mode [ 821.219411][T25182] sctp: [Deprecated]: syz.4.4283 (pid 25182) Use of int in max_burst socket option. [ 821.219411][T25182] Use struct sctp_assoc_value instead [ 821.337018][T25189] sctp: [Deprecated]: syz.4.4283 (pid 25189) Use of int in max_burst socket option. [ 821.337018][T25189] Use struct sctp_assoc_value instead [ 821.473005][T25185] syz.2.4284: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 821.473100][T25185] CPU: 1 UID: 0 PID: 25185 Comm: syz.2.4284 Not tainted syzkaller #0 PREEMPT(full) [ 821.473125][T25185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 821.473138][T25185] Call Trace: [ 821.473147][T25185] [ 821.473157][T25185] dump_stack_lvl+0xe8/0x150 [ 821.473200][T25185] warn_alloc+0x24d/0x270 [ 821.473227][T25185] ? stack_depot_save_flags+0x33/0x810 [ 821.473320][T25185] ? __pfx_warn_alloc+0x10/0x10 [ 821.473342][T25185] ? kasan_save_track+0x4f/0x80 [ 821.473370][T25185] ? __kasan_kmalloc+0x93/0xb0 [ 821.473398][T25185] ? xsk_init_queue+0x8a/0xe0 [ 821.473422][T25185] ? xsk_setsockopt+0x52a/0x960 [ 821.473444][T25185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.473482][T25185] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 821.473537][T25185] ? rcu_is_watching+0x16/0xb0 [ 821.473576][T25185] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 821.473598][T25185] ? __kmalloc_cache_noprof+0x31c/0x600 [ 821.473623][T25185] ? __kmalloc_cache_noprof+0x148/0x600 [ 821.473648][T25185] ? xskq_create+0x56/0x220 [ 821.473675][T25185] xskq_create+0x148/0x220 [ 821.473697][T25185] ? xsk_init_queue+0x8a/0xe0 [ 821.473721][T25185] xsk_init_queue+0x8a/0xe0 [ 821.473745][T25185] xsk_setsockopt+0x52a/0x960 [ 821.473769][T25185] ? __pfx_xsk_setsockopt+0x10/0x10 [ 821.473791][T25185] ? __pfx_aa_sk_perm+0x10/0x10 [ 821.473835][T25185] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 821.473862][T25185] ? __pfx_xsk_setsockopt+0x10/0x10 [ 821.473885][T25185] do_sock_setsockopt+0x17c/0x1b0 [ 821.473914][T25185] __x64_sys_setsockopt+0x13d/0x1b0 [ 821.473942][T25185] do_syscall_64+0x166/0x520 [ 821.473967][T25185] ? trace_irq_disable+0x3b/0x140 [ 821.473994][T25185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.474015][T25185] ? clear_bhb_loop+0x70/0xc0 [ 821.474042][T25185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.474062][T25185] RIP: 0033:0x7fa692d9fb19 [ 821.474091][T25185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.474109][T25185] RSP: 002b:00007fa693c94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 821.474132][T25185] RAX: ffffffffffffffda RBX: 00007fa693025fa0 RCX: 00007fa692d9fb19 [ 821.474148][T25185] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 821.474161][T25185] RBP: 00007fa692e37b70 R08: 0000000000000004 R09: 0000000000000000 [ 821.474174][T25185] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 821.474187][T25185] R13: 00007fa693026038 R14: 00007fa693025fa0 R15: 00007ffeb7ff4e78 [ 821.474223][T25185] [ 821.474231][T25185] Mem-Info: [ 821.474241][T25185] active_anon:7523 inactive_anon:0 isolated_anon:0 [ 821.474241][T25185] active_file:2 inactive_file:43873 isolated_file:0 [ 821.474241][T25185] unevictable:0 dirty:109 writeback:0 [ 821.474241][T25185] slab_reclaimable:12479 slab_unreclaimable:141088 [ 821.474241][T25185] mapped:29675 shmem:534 pagetables:1515 [ 821.474241][T25185] sec_pagetables:0 bounce:0 [ 821.474241][T25185] kernel_misc_reclaimable:0 [ 821.474241][T25185] free:1230599 free_pcp:14267 free_cma:0 [ 821.474294][T25185] Node 0 active_anon:30092kB inactive_anon:0kB active_file:8kB inactive_file:175292kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118700kB dirty:436kB writeback:0kB shmem:2136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16160kB pagetables:5900kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 821.474350][T25185] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 821.474402][T25185] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 821.474460][T25185] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 821.577387][T25185] Node 0 DMA32 free:980904kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:30092kB inactive_anon:0kB active_file:8kB inactive_file:175292kB unevictable:0kB writepending:436kB zspages:0kB present:3129332kB managed:2523116kB mlocked:0kB bounce:0kB free_pcp:43292kB local_pcp:22328kB free_cma:0kB [ 821.577461][T25185] lowmem_reserve[]: 0 0 1 1 1 [ 821.577497][T25185] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:4kB free_cma:0kB [ 821.577557][T25185] lowmem_reserve[]: 0 0 0 0 0 [ 821.577594][T25185] Node 1 Normal free:3926120kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:13824kB local_pcp:7036kB free_cma:0kB [ 821.577652][T25185] lowmem_reserve[]: 0 0 0 0 0 [ 821.577688][T25185] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 821.577809][T25185] Node 0 DMA32: 1712*4kB (UME) 1089*8kB (UME) 626*16kB (UME) 298*32kB (UME) 59*64kB (UME) 38*128kB (UM) 371*256kB (UM) 197*512kB (UM) 94*1024kB (UM) 13*2048kB (UME) 151*4096kB (UM) = 980968kB [ 821.577984][T25185] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 821.578109][T25185] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 4*16kB (UM) 4*32kB (UM) 1*64kB (M) 3*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 957*4096kB (M) = 3926172kB [ 821.578280][T25185] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 821.578297][T25185] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 821.578314][T25185] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 821.578330][T25185] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 821.578346][T25185] 44405 total pagecache pages [ 821.578354][T25185] 0 pages in swap cache [ 821.578362][T25185] Free swap = 124996kB [ 821.578369][T25185] Total swap = 124996kB [ 821.578377][T25185] 2097051 pages RAM [ 821.578385][T25185] 0 pages HighMem/MovableOnly [ 821.578392][T25185] 434241 pages reserved [ 821.578399][T25185] 0 pages cma reserved [ 822.684695][T25219] tipc: Enabled bearer , priority 0 [ 823.153955][T25220] syzkaller0: entered promiscuous mode [ 823.153984][T25220] syzkaller0: entered allmulticast mode [ 823.155391][T25220] tipc: Resetting bearer [ 823.663364][T25248] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4296'. [ 823.663399][T25248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4296'. [ 825.602890][T25206] tipc: Resetting bearer [ 829.088712][T25206] tipc: Disabling bearer [ 829.194567][T10207] tipc: Node number set to 2144529532 [ 829.409812][T25274] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 829.424640][T25272] lo speed is unknown, defaulting to 1000 [ 829.424802][T25272] lo speed is unknown, defaulting to 1000 [ 829.427295][T25272] lo speed is unknown, defaulting to 1000 [ 829.428353][T25272] smbdirect: ib_dev[!!0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 829.428389][T25272] smbdirect: ib_dev[!!0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 829.428469][T25272] smbdirect: ib_dev[!!0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 829.701450][T25272] lo speed is unknown, defaulting to 1000 [ 829.708720][T25272] lo speed is unknown, defaulting to 1000 [ 829.722864][T25272] lo speed is unknown, defaulting to 1000 [ 829.730749][T25272] lo speed is unknown, defaulting to 1000 [ 829.740221][T25272] lo speed is unknown, defaulting to 1000 [ 829.767880][T25272] lo speed is unknown, defaulting to 1000 [ 829.800260][T25272] lo speed is unknown, defaulting to 1000 [ 829.838791][T25272] lo speed is unknown, defaulting to 1000 [ 829.857271][T25272] lo speed is unknown, defaulting to 1000 [ 830.627354][T25305] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4308'. [ 830.974109][T25325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4311'. [ 831.132599][T25334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4315'. [ 831.393715][T25336] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4311'. [ 831.735868][T25342] syzkaller0: entered promiscuous mode [ 831.735894][T25342] syzkaller0: entered allmulticast mode [ 831.871984][T25354] ip_tables: iptables: counters copy to user failed while replacing table [ 831.949436][T25354] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4319'. [ 833.581540][T25311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 834.369426][T25391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4328'. [ 834.369460][T25391] bond0: Unable to set down delay as MII monitoring is disabled [ 834.592958][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 835.445762][T25411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4331'. [ 835.463820][T25409] ip6gre1: entered promiscuous mode [ 835.463843][T25409] ip6gre1: entered allmulticast mode [ 835.669538][T25407] bond3: (slave bond0): Releasing active interface [ 835.775375][T25419] sctp: [Deprecated]: syz.0.4331 (pid 25419) Use of struct sctp_assoc_value in delayed_ack socket option. [ 835.775375][T25419] Use struct sctp_sack_info instead [ 835.787125][T25420] sctp: [Deprecated]: syz.0.4331 (pid 25420) Use of struct sctp_assoc_value in delayed_ack socket option. [ 835.787125][T25420] Use struct sctp_sack_info instead [ 835.811980][T25409] vlan2: entered promiscuous mode [ 835.812003][T25409] macvlan0: entered promiscuous mode [ 835.990485][T25411] vlan2: entered promiscuous mode [ 836.436037][T25441] IPVS: rr: UDP [::1]:8080 - no destination available [ 836.436794][T25438] tipc: Enabled bearer , priority 0 [ 836.469829][T25437] tipc: Resetting bearer [ 836.566128][T25437] tipc: Disabling bearer [ 836.968145][T25455] ip6tnl1: entered promiscuous mode [ 836.968170][T25455] ip6tnl1: entered allmulticast mode [ 837.188093][T25453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4346'. [ 837.208444][T25467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4346'. [ 837.489857][T25472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4350'. [ 837.508072][T25472] netlink: 'syz.4.4350': attribute type 1 has an invalid length. [ 837.649275][T25476] nbd5: detected capacity change from 0 to 63 [ 837.690791][T25476] nbd6: detected capacity change from 0 to 63 [ 837.692035][T25476] nbd7: detected capacity change from 0 to 63 [ 837.698492][T25476] nbd8: detected capacity change from 0 to 63 [ 837.728788][T25476] nbd9: detected capacity change from 0 to 63 [ 837.781460][T25476] nbd10: detected capacity change from 0 to 63 [ 837.807778][T25476] nbd11: detected capacity change from 0 to 63 [ 837.809071][T25476] nbd12: detected capacity change from 0 to 63 [ 837.827119][T25476] nbd13: detected capacity change from 0 to 63 [ 837.831054][T25476] nbd14: detected capacity change from 0 to 63 [ 837.889018][T25476] [ 837.891394][T25476] ====================================================== [ 837.898474][T25476] WARNING: possible circular locking dependency detected [ 837.905510][T25476] syzkaller #0 Not tainted [ 837.909934][T25476] ------------------------------------------------------ [ 837.916988][T25476] syz.5.4351/25476 is trying to acquire lock: [ 837.923070][T25476] ffff888075d79b18 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x2f0 [ 837.932038][T25476] [ 837.932038][T25476] but task is already holding lock: [ 837.939421][T25476] ffff888029cdf548 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 837.948934][T25476] [ 837.948934][T25476] which lock already depends on the new lock. [ 837.948934][T25476] [ 837.959365][T25476] [ 837.959365][T25476] the existing dependency chain (in reverse order) is: [ 837.968398][T25476] [ 837.968398][T25476] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 837.976319][T25476] __mutex_lock+0x197/0x15a0 [ 837.981468][T25476] elevator_change+0x1af/0x480 [ 837.986794][T25476] elevator_set_none+0xb5/0x140 [ 837.992198][T25476] blk_mq_update_nr_hw_queues+0x5ef/0x19e0 [ 837.998665][T25476] nbd_start_device+0x189/0xb30 [ 838.004125][T25476] nbd_genl_connect+0x167d/0x1cd0 [ 838.009746][T25476] genl_family_rcv_msg_doit+0x233/0x340 [ 838.015837][T25476] genl_rcv_msg+0x614/0x7a0 [ 838.020889][T25476] netlink_rcv_skb+0x226/0x4a0 [ 838.026209][T25476] genl_rcv+0x28/0x40 [ 838.030739][T25476] netlink_unicast+0x8ef/0xa80 [ 838.036054][T25476] netlink_sendmsg+0x7f0/0xb20 [ 838.041373][T25476] sock_sendmsg_nosec+0x14e/0x190 [ 838.046948][T25476] ____sys_sendmsg+0x54e/0x850 [ 838.052254][T25476] ___sys_sendmsg+0x2a5/0x360 [ 838.057470][T25476] __x64_sys_sendmsg+0x1b1/0x290 [ 838.062966][T25476] do_syscall_64+0x166/0x520 [ 838.068119][T25476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.074574][T25476] [ 838.074574][T25476] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 838.083229][T25476] blk_alloc_queue+0x544/0x690 [ 838.088606][T25476] __blk_mq_alloc_disk+0x194/0x390 [ 838.094260][T25476] nbd_dev_add+0x494/0xb60 [ 838.099227][T25476] nbd_init+0x168/0x1f0 [ 838.104046][T25476] do_one_initcall+0x250/0x870 [ 838.109353][T25476] do_initcall_level+0x10a/0x1a0 [ 838.114899][T25476] do_initcalls+0x59/0xa0 [ 838.119785][T25476] kernel_init_freeable+0x29d/0x3e0 [ 838.125516][T25476] kernel_init+0x22/0x1d0 [ 838.130381][T25476] ret_from_fork+0x514/0xb70 [ 838.135530][T25476] ret_from_fork_asm+0x1a/0x30 [ 838.140835][T25476] [ 838.140835][T25476] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 838.148064][T25476] fs_reclaim_acquire+0x71/0x100 [ 838.153534][T25476] __kmalloc_cache_node_noprof+0x66/0x620 [ 838.159783][T25476] create_worker+0x112/0x7c0 [ 838.164907][T25476] workqueue_prepare_cpu+0xe4/0x170 [ 838.170635][T25476] cpuhp_invoke_callback+0x434/0x810 [ 838.176455][T25476] _cpu_up+0x2ce/0x5b0 [ 838.181050][T25476] cpu_up+0x1d2/0x220 [ 838.185556][T25476] cpuhp_bringup_mask+0xb2/0x1a0 [ 838.191099][T25476] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 838.197433][T25476] bringup_nonboot_cpus+0x17/0x30 [ 838.202985][T25476] smp_init+0x32/0x110 [ 838.207608][T25476] kernel_init_freeable+0x27f/0x3e0 [ 838.213332][T25476] kernel_init+0x22/0x1d0 [ 838.218186][T25476] ret_from_fork+0x514/0xb70 [ 838.223296][T25476] ret_from_fork_asm+0x1a/0x30 [ 838.228579][T25476] [ 838.228579][T25476] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 838.236310][T25476] cpus_read_lock+0x3d/0x160 [ 838.241426][T25476] static_key_slow_inc+0x12/0x30 [ 838.246896][T25476] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 838.253205][T25476] nbd_genl_foreach_sock+0x265/0x450 [ 838.259011][T25476] nbd_genl_reconfigure+0xbbb/0x1040 [ 838.264844][T25476] genl_family_rcv_msg_doit+0x233/0x340 [ 838.270926][T25476] genl_rcv_msg+0x614/0x7a0 [ 838.275993][T25476] netlink_rcv_skb+0x226/0x4a0 [ 838.281287][T25476] genl_rcv+0x28/0x40 [ 838.285796][T25476] netlink_unicast+0x8ef/0xa80 [ 838.291086][T25476] netlink_sendmsg+0x7f0/0xb20 [ 838.296377][T25476] sock_sendmsg_nosec+0x14e/0x190 [ 838.301927][T25476] ____sys_sendmsg+0x54e/0x850 [ 838.307219][T25476] ___sys_sendmsg+0x2a5/0x360 [ 838.312416][T25476] __x64_sys_sendmsg+0x1b1/0x290 [ 838.317876][T25476] do_syscall_64+0x166/0x520 [ 838.322989][T25476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.329404][T25476] [ 838.329404][T25476] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 838.337053][T25476] __mutex_lock+0x197/0x15a0 [ 838.342166][T25476] nbd_queue_rq+0x373/0xff0 [ 838.347190][T25476] blk_mq_dispatch_rq_list+0x499/0x1990 [ 838.353314][T25476] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 838.360170][T25476] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 838.366673][T25476] blk_mq_run_work_fn+0x167/0x2f0 [ 838.372223][T25476] process_scheduled_works+0xc3d/0x1630 [ 838.378297][T25476] worker_thread+0xa47/0xfb0 [ 838.383418][T25476] kthread+0x38b/0x480 [ 838.388009][T25476] ret_from_fork+0x514/0xb70 [ 838.393119][T25476] ret_from_fork_asm+0x1a/0x30 [ 838.398402][T25476] [ 838.398402][T25476] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 838.405617][T25476] __mutex_lock+0x197/0x15a0 [ 838.410731][T25476] nbd_queue_rq+0xc1/0xff0 [ 838.415668][T25476] blk_mq_dispatch_rq_list+0x499/0x1990 [ 838.421741][T25476] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 838.428592][T25476] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 838.435874][T25476] blk_mq_run_work_fn+0x167/0x2f0 [ 838.441423][T25476] process_scheduled_works+0xc3d/0x1630 [ 838.447495][T25476] worker_thread+0xa47/0xfb0 [ 838.452609][T25476] kthread+0x38b/0x480 [ 838.457197][T25476] ret_from_fork+0x514/0xb70 [ 838.462305][T25476] ret_from_fork_asm+0x1a/0x30 [ 838.467590][T25476] [ 838.467590][T25476] -> #0 (set->srcu){.+.+}-{0:0}: [ 838.474714][T25476] __lock_acquire+0x164c/0x2de0 [ 838.480086][T25476] lock_sync+0xb3/0x130 [ 838.484761][T25476] __synchronize_srcu+0xca/0x2f0 [ 838.490222][T25476] elevator_switch+0x1e8/0x7b0 [ 838.495508][T25476] elevator_change+0x2fa/0x480 [ 838.500800][T25476] elevator_set_default+0x375/0x440 [ 838.506526][T25476] blk_register_queue+0x404/0x4f0 [ 838.512067][T25476] __add_disk+0x6b8/0xdb0 [ 838.516970][T25476] add_disk_fwnode+0x100/0x3a0 [ 838.522252][T25476] nbd_dev_add+0x733/0xb60 [ 838.527188][T25476] nbd_genl_connect+0x96c/0x1cd0 [ 838.532649][T25476] genl_family_rcv_msg_doit+0x233/0x340 [ 838.538722][T25476] genl_rcv_msg+0x614/0x7a0 [ 838.543744][T25476] netlink_rcv_skb+0x226/0x4a0 [ 838.549037][T25476] genl_rcv+0x28/0x40 [ 838.553559][T25476] netlink_unicast+0x8ef/0xa80 [ 838.558851][T25476] netlink_sendmsg+0x7f0/0xb20 [ 838.564147][T25476] sock_sendmsg_nosec+0x14e/0x190 [ 838.569706][T25476] ____sys_sendmsg+0x54e/0x850 [ 838.574996][T25476] ___sys_sendmsg+0x2a5/0x360 [ 838.580198][T25476] __x64_sys_sendmsg+0x1b1/0x290 [ 838.585655][T25476] do_syscall_64+0x166/0x520 [ 838.590776][T25476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.597197][T25476] [ 838.597197][T25476] other info that might help us debug this: [ 838.597197][T25476] [ 838.607419][T25476] Chain exists of: [ 838.607419][T25476] set->srcu --> &q->q_usage_counter(io)#49 --> &q->elevator_lock [ 838.607419][T25476] [ 838.621071][T25476] Possible unsafe locking scenario: [ 838.621071][T25476] [ 838.628569][T25476] CPU0 CPU1 [ 838.633926][T25476] ---- ---- [ 838.639287][T25476] lock(&q->elevator_lock); [ 838.643879][T25476] lock(&q->q_usage_counter(io)#49); [ 838.651774][T25476] lock(&q->elevator_lock); [ 838.658884][T25476] sync(set->srcu); [ 838.662776][T25476] [ 838.662776][T25476] *** DEADLOCK *** [ 838.662776][T25476] [ 838.670911][T25476] locks held by syz.5.4351/25476: 6, last CPU#1: [ 838.677309][T25476] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 838.685493][T25476] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 838.694453][T25476] #2: ffff888066fc6978 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 838.704819][T25476] #3: ffff888029cdf5d0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4f0 [ 838.714672][T25476] #4: ffff888029cdf058 (&q->q_usage_counter(queue)#55){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 838.725586][T25476] #5: ffff888029cdf548 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 838.735442][T25476] [ 838.735442][T25476] stack backtrace: [ 838.741339][T25476] CPU: 1 UID: 0 PID: 25476 Comm: syz.5.4351 Not tainted syzkaller #0 PREEMPT(full) [ 838.750707][T25476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 838.760769][T25476] Call Trace: [ 838.764062][T25476] [ 838.766995][T25476] dump_stack_lvl+0xe8/0x150 [ 838.771603][T25476] print_circular_bug+0x2e2/0x300 [ 838.776636][T25476] check_noncircular+0x12f/0x150 [ 838.781587][T25476] __lock_acquire+0x164c/0x2de0 [ 838.786457][T25476] ? lockdep_unlock+0x5c/0xd0 [ 838.791137][T25476] ? __lock_acquire+0x1511/0x2de0 [ 838.796168][T25476] lock_sync+0xb3/0x130 [ 838.800326][T25476] ? __synchronize_srcu+0xb6/0x2f0 [ 838.805441][T25476] ? __synchronize_srcu+0xb6/0x2f0 [ 838.810565][T25476] __synchronize_srcu+0xca/0x2f0 [ 838.815506][T25476] ? __pfx___synchronize_srcu+0x10/0x10 [ 838.821054][T25476] ? do_raw_spin_lock+0x12b/0x2f0 [ 838.826082][T25476] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 838.831888][T25476] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 838.837453][T25476] ? synchronize_srcu+0x20c/0x270 [ 838.842482][T25476] elevator_switch+0x1e8/0x7b0 [ 838.847254][T25476] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 838.852713][T25476] elevator_change+0x2fa/0x480 [ 838.857490][T25476] ? do_raw_spin_unlock+0xf5/0x200 [ 838.862603][T25476] elevator_set_default+0x375/0x440 [ 838.867807][T25476] ? __pfx_elevator_set_default+0x10/0x10 [ 838.873536][T25476] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 838.880613][T25476] ? blk_crypto_sysfs_register+0x11c/0x170 [ 838.886474][T25476] blk_register_queue+0x404/0x4f0 [ 838.891505][T25476] __add_disk+0x6b8/0xdb0 [ 838.895840][T25476] add_disk_fwnode+0x100/0x3a0 [ 838.900606][T25476] nbd_dev_add+0x733/0xb60 [ 838.905026][T25476] ? __pfx_nbd_dev_add+0x10/0x10 [ 838.909969][T25476] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 838.915778][T25476] ? security_capable+0x7e/0x2c0 [ 838.920756][T25476] nbd_genl_connect+0x96c/0x1cd0 [ 838.925718][T25476] ? __pfx_nbd_genl_connect+0x10/0x10 [ 838.931101][T25476] ? rcu_is_watching+0x16/0xb0 [ 838.935872][T25476] ? trace_kmalloc+0x2a/0xf0 [ 838.940467][T25476] ? __kmalloc_noprof+0x387/0x710 [ 838.945495][T25476] ? __nla_parse+0x40/0x60 [ 838.949919][T25476] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 838.956293][T25476] genl_family_rcv_msg_doit+0x233/0x340 [ 838.961843][T25476] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 838.967922][T25476] ? __lock_acquire+0x747/0x2de0 [ 838.972875][T25476] genl_rcv_msg+0x614/0x7a0 [ 838.977397][T25476] ? __pfx_genl_rcv_msg+0x10/0x10 [ 838.982425][T25476] ? __pfx_nbd_genl_connect+0x10/0x10 [ 838.987818][T25476] netlink_rcv_skb+0x226/0x4a0 [ 838.992589][T25476] ? __pfx_genl_rcv_msg+0x10/0x10 [ 838.997615][T25476] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 839.002913][T25476] ? down_read+0x2b9/0x320 [ 839.007339][T25476] genl_rcv+0x28/0x40 [ 839.011321][T25476] netlink_unicast+0x8ef/0xa80 [ 839.016095][T25476] netlink_sendmsg+0x7f0/0xb20 [ 839.020871][T25476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.026163][T25476] ? aa_sock_msg_perm+0x144/0x210 [ 839.031188][T25476] ? apparmor_socket_sendmsg+0x98/0x360 [ 839.036745][T25476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.042036][T25476] sock_sendmsg_nosec+0x14e/0x190 [ 839.047068][T25476] ____sys_sendmsg+0x54e/0x850 [ 839.051835][T25476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 839.057123][T25476] ? import_iovec+0x73/0xa0 [ 839.061630][T25476] ___sys_sendmsg+0x2a5/0x360 [ 839.066309][T25476] ? __lock_acquire+0x747/0x2de0 [ 839.071251][T25476] ? __pfx____sys_sendmsg+0x10/0x10 [ 839.076459][T25476] ? futex_wait+0x2a2/0x390 [ 839.081006][T25476] ? __fget_files+0x3a2/0x420 [ 839.085692][T25476] ? __fget_files+0x2a/0x420 [ 839.090291][T25476] __x64_sys_sendmsg+0x1b1/0x290 [ 839.095236][T25476] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 839.100710][T25476] do_syscall_64+0x166/0x520 [ 839.105303][T25476] ? trace_irq_disable+0x3b/0x140 [ 839.110333][T25476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.116398][T25476] ? clear_bhb_loop+0x70/0xc0 [ 839.121082][T25476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.126974][T25476] RIP: 0033:0x7f36df19fb19 [ 839.131394][T25476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.151002][T25476] RSP: 002b:00007f36e0043028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 839.159420][T25476] RAX: ffffffffffffffda RBX: 00007f36df425fa0 RCX: 00007f36df19fb19 [ 839.167391][T25476] RDX: 0000000000000010 RSI: 0000200000002bc0 RDI: 0000000000000005 [ 839.175362][T25476] RBP: 00007f36df237b70 R08: 0000000000000000 R09: 0000000000000000 [ 839.183331][T25476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.191302][T25476] R13: 00007f36df426038 R14: 00007f36df425fa0 R15: 00007ffeaab295f8 [ 839.199281][T25476] [ 839.236680][ T5641] block nbd5: Receive control failed (result -104) [ 839.236762][T23586] block nbd6: Receive control failed (result -32) [ 839.236819][ T5648] block nbd7: Receive control failed (result -32) [ 839.236874][ T956] block nbd14: Receive control failed (result -32) [ 839.236944][T25494] block nbd8: Receive control failed (result -32) [ 839.237000][T25498] block nbd10: Receive control failed (result -32) [ 839.237053][T25502] block nbd11: Receive control failed (result -32) [ 839.237104][T25503] block nbd15: Receive control failed (result -32) [ 839.237156][ T953] block nbd13: Receive control failed (result -32) [ 839.237214][T25504] block nbd64: Receive control failed (result -32) [ 839.237297][ T1981] block nbd9: Send control failed (result -32) [ 839.237314][ T1981] block nbd9: Request send failed, requeueing [ 839.237378][ T1981] block nbd10: Dead connection, failed to find a fallback [ 839.237394][ T1981] block nbd10: shutting down sockets [ 839.237408][ T1981] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 839.237434][ T1981] Buffer I/O error on dev nbd10, logical block 0, async page read [ 839.237450][ T1981] Buffer I/O error on dev nbd10, logical block 1, async page read [ 839.237464][ T1981] Buffer I/O error on dev nbd10, logical block 2, async page read [ 839.237489][ T1981] Buffer I/O error on dev nbd10, logical block 3, async page read [ 839.237537][ T1981] block nbd9: Dead connection, failed to find a fallback [ 839.237551][ T1981] block nbd9: shutting down sockets [ 839.237562][ T1981] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 839.237584][ T1981] Buffer I/O error on dev nbd9, logical block 0, async page read [ 839.237597][ T1981] Buffer I/O error on dev nbd9, logical block 1, async page read [ 839.237611][ T1981] Buffer I/O error on dev nbd9, logical block 2, async page read [ 839.237625][ T1981] Buffer I/O error on dev nbd9, logical block 3, async page read [ 839.248334][ T1981] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 839.248368][ T1981] Buffer I/O error on dev nbd9, logical block 0, async page read [ 839.248384][ T1981] Buffer I/O error on dev nbd9, logical block 1, async page read [ 839.248431][ T1981] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 839.250294][ T1981] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 839.250352][ T1981] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 839.250562][ T1981] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 839.250611][ T1981] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 839.250892][ T1981] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 839.250942][ T1981] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 839.251612][T25511] ldm_validate_partition_table(): Disk read failed. [ 839.251693][T25515] ldm_validate_partition_table(): Disk read failed. [ 839.252378][T25511] Dev nbd9: unable to read RDB block 0 [ 839.252462][T25515] Dev nbd10: unable to read RDB block 0 [ 839.253639][T25511] nbd9: unable to read partition table [ 839.255253][T25515] nbd10: unable to read partition table [ 839.340615][ T950] block nbd12: Receive control failed (result -32) [ 839.565801][ T1981] block nbd14: Dead connection, failed to find a fallback [ 839.565827][ T1981] block nbd14: shutting down sockets [ 839.577078][T25511] ldm_validate_partition_table(): Disk read failed. [ 839.577173][T25521] ldm_validate_partition_table(): Disk read failed. [ 839.577662][T25515] ldm_validate_partition_table(): Disk read failed. [ 839.578666][T25511] Dev nbd9: unable to read RDB block 0 [ 839.578831][T25521] Dev nbd14: unable to read RDB block 0 [ 839.579299][T25515] Dev nbd10: unable to read RDB block 0 [ 839.580145][T25521] nbd14: unable to read partition table [ 839.581801][T25511] nbd9: unable to read partition table [ 839.584792][T25515] nbd10: unable to read partition table [ 839.598516][T25521] ldm_validate_partition_table(): Disk read failed. [ 839.599148][T25521] Dev nbd14: unable to read RDB block 0 [ 839.599670][T25521] nbd14: unable to read partition table [ 839.627296][ T2008] block nbd11: Dead connection, failed to find a fallback [ 839.627320][ T2008] block nbd11: shutting down sockets [ 839.627378][ T2008] block nbd12: Dead connection, failed to find a fallback [ 839.627392][ T2008] block nbd12: shutting down sockets [ 839.627440][ T2008] block nbd13: Dead connection, failed to find a fallback [ 839.627454][ T2008] block nbd13: shutting down sockets [ 839.627500][ T2008] block nbd15: Dead connection, failed to find a fallback [ 839.627514][ T2008] block nbd15: shutting down sockets [ 839.627557][ T2008] block nbd64: Dead connection, failed to find a fallback [ 839.627571][ T2008] block nbd64: shutting down sockets [ 839.661789][T25483] 8021q: adding VLAN 0 to HW filter on device bond5 [ 839.663036][T25483] bond4: (slave bond5): making interface the new active one [ 839.663440][T25483] bond4: (slave bond5): Enslaving as an active interface with an up link [ 839.977353][T25488] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 840.301585][T25517] ldm_validate_partition_table(): Disk read failed. [ 840.301726][T25519] ldm_validate_partition_table(): Disk read failed. [ 840.301812][T25520] ldm_validate_partition_table(): Disk read failed. [ 840.301895][T25522] ldm_validate_partition_table(): Disk read failed. [ 840.301981][T25524] ldm_validate_partition_table(): Disk read failed. [ 840.451072][T25517] Dev nbd11: unable to read RDB block 0 [ 840.451236][T25519] Dev nbd12: unable to read RDB block 0 [ 840.451372][T25520] Dev nbd13: unable to read RDB block 0 [ 840.451496][T25522] Dev nbd15: unable to read RDB block 0 [ 840.451653][T25524] Dev nbd64: unable to read RDB block 0 [ 840.538937][T25517] nbd11: unable to read partition table [ 840.540560][T25519] nbd12: unable to read partition table [ 840.542260][T25520] nbd13: unable to read partition table [ 840.543894][T25522] nbd15: unable to read partition table [ 840.545521][T25524] nbd64: unable to read partition table [ 840.557461][T25519] ldm_validate_partition_table(): Disk read failed. [ 840.557548][T25517] ldm_validate_partition_table(): Disk read failed. [ 840.558221][T25517] Dev nbd11: unable to read RDB block 0 [ 840.558302][T25519] Dev nbd12: unable to read RDB block 0 [ 840.559196][T25517] nbd11: unable to read partition table [ 840.560652][T25519] nbd12: unable to read partition table [ 840.653219][T25520] ldm_validate_partition_table(): Disk read failed. [ 840.653325][T25522] ldm_validate_partition_table(): Disk read failed. [ 840.653404][T25524] ldm_validate_partition_table(): Disk read failed. [ 840.665697][T25520] Dev nbd13: unable to read RDB block 0 [ 840.665791][T25522] Dev nbd15: unable to read RDB block 0 [ 840.665860][T25524] Dev nbd64: unable to read RDB block 0 [ 840.671789][T25520] nbd13: unable to read partition table [ 840.673115][T25522] nbd15: unable to read partition table [ 840.674550][T25524] nbd64: unable to read partition table [ 844.831984][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!