last executing test programs: 2m15.081537428s ago: executing program 3 (id=3800): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, 0x0) 2m14.632243994s ago: executing program 3 (id=3806): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x1c, &(0x7f0000000840)=ANY=[@ANYBLOB="18080000b0ff0011000000001100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400f0ffb7030000000000008500000005000000bf0900000000000035080100000040009500000000000000b7020000000000007b9af8ff000000007509fdff030000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000006e98f0ff0000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000940)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) 2m14.056991599s ago: executing program 3 (id=3811): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001b00)={0x0, @multicast2, @private}, &(0x7f0000001b40)=0xc) sendmsg$inet6(r0, &(0x7f0000001f40)={&(0x7f0000000040)={0xa, 0x4e20, 0x8, @loopback, 0x2}, 0x1c, &(0x7f0000001a40)=[{&(0x7f0000000380)="6ed3e08c2f6b1e0d828bb4c7da249aeb3af412daf1ed4848f9c7f1c93778783a5d25a32035bc9ee93911cea26e9486f67bed6f4c79aa4b0730f027704279bbdb0b166f324b91533f93d9baa9683de1ed48dc164a306c6b6e40dae28f749e59b0b1a7d444334cc3266e84c7a59a3a4090752e28ae5446ef6845d1e281bac22305a37833fe463efa82d32b2e80ec96d523801577b191e854723951149e74a6d0d52b2db2746cd9789e927f", 0xaa}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="b2bb3b3c3bcb59fc69847b5001ab24ba3a1f4f77f237c5e68d43fe1cf468da532d1399d6d008c88c13154b2acc2fb7687dc8b92152c7ab472c672ad40c5cfbb3e3c5c0fd1f104a753397247f32f25621f06aeebd3382de69b1429f51859c43155842243c362959577b50d9e8713eae1899d21516169dc32cc990ebd2f2e2677102d6d21f99cfaf139f51e95f67fe3f2094686c2d1f626c7389f9c2890e21e131976e10bc7ce5108158af4801453929aacb314aa62cdb6f95e9d5d6b6283e296458", 0xc1}, {&(0x7f0000001640)="5ab3e21a8c5a3d39147443139ac3155c27dc600b6ef92e3c1f2d24065a99fd77dcb970407c16e40307af82c856fd77e2febfd9a9ab23aad2c0c54050b96a970176584ae003eac20c4fd65246d0b53dbff5a3c14e420a2038d492212138cd705f412df234aac96965b2c24f7d4a1e90cbd81215ef5d95f2b96898340380fcf149c8c9b65a7acf6580005d90d450493b2138d8f9a8e3e3e8fec4aacb5e4c31ce5be94164764631c5898ee38315fb18071316b44f7a0deeb8690a59650d1891224083212954222b352eef252e5cc26655bac26bd5969cb11c8b9548df", 0xdb}, {&(0x7f0000001740)="ede1e5a967", 0x5}, {&(0x7f0000001780)}, {&(0x7f00000017c0)="cad9a350012c0605cb7cda945d89a2a0aede159ea0f3521c52813c6e015c410ec27648b2018b710a2f632c92509223f7d4ccf24b2fffa8da8bf03d1ef0a5547e0d5253ff60214700bada54632d4c781916d51f0b574398ed855de707501c5be96d012dc57ccb709c98", 0x69}, {&(0x7f0000001840)="ef47c76ea23b4936598122cbc0aa219c141ff90a8481f1b647b418e52c1744dc345c8b085d171a0c5f3bcd2474ffc266e2f678704076332d2a410364627c38d8ac60fc50911e438f8b8576ed92d5632c5f34e9aae864057d9ca8c093ae27f2ba454dbaf16936b12894eed81bdf40639058198598c2c1e3", 0x77}, {&(0x7f00000018c0)="75072f6956bb4cff428bead91221836475ca0de1082ec1304f7deb6ad0d428c22064c41318644359335eace031e6743e62305e23f72a6e46fbe04ec778e7b3b709f0df7e4bcd59d44e247633781e85212440ba42037e7baffa2237f5615bb75d1f0a46fe7937e079b4765f3feac10f1c9d2c113b3203ab2e91b243c0a05056fd6f735c1a46bdde06449a13d25ace4b5725237fb2ab70b5285b3bb1b6d50c4bb5a8fe2ccc181bca503f272f8bdb8bb4bf90d2", 0xb2}, {&(0x7f0000001980)="5bc037633b8a256d188341398dfd1eaae611b5b73eb090309dc42cb85caf4280229ab8afd3a2d8eef8cd4b7a1aaee1186d4c97087ccb099cd3eefbe9ee85e3d2bb24aa007d41e781d0b960c7ea30ce9df88312811ecdc541dfc81b7b3ebe89e32521cdff9f1bbf295b5da59d4dc4b5c4ec16bff5f94949b601a283ac61c93a594a2acce816e2c1db4aed8755177fd931e6e2d7", 0x93}], 0xa, &(0x7f0000001b80)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x3a, 0xc, 0x0, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast2, @mcast2, @private1, @dev={0xfe, 0x80, '\x00', 0x1f}, @empty]}}}, @rthdr={{0x78, 0x29, 0x39, {0x6c, 0xc, 0x0, 0x5, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @empty, @mcast2, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @dstopts_2292={{0xb0, 0x29, 0x4, {0x1, 0x12, '\x00', [@generic={0x1, 0x8a, "3bacfbbf4baca9d0c1a738517910a931c45b1c2ebeebe525fb026d9f253fdd55ac6934c9507bc5ba6f696227520eec0e4879ef163bc4cf7d2c8d45a28dfdbcc0e48806e11606c9bf0618b0b35e945cf4e10b86843ceaf23580effc82c19400f26c21cc7fddbbf66190851e1d91be5e4eb5e0d4922f2327e12320ff69dd5d4fc752aa63165b89bbf59e97"}, @jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x1, [0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2, r2}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @hoplimit={{0x14, 0x29, 0x34, 0x3ff}}, @dstopts={{0x30, 0x29, 0x37, {0x29, 0x3, '\x00', [@pad1, @hao={0xc9, 0x10, @loopback}, @pad1]}}}, @hopopts_2292={{0x168, 0x29, 0x36, {0x2c, 0x29, '\x00', [@padn={0x1, 0x1, [0x0]}, @generic={0x6, 0x45, "808da1153ed6892e1d07094012f84d99f9403f65e11c68448b3b897a0a7d7efd1d988b2ac1abfdfb57266900b9632bfed63368a1cb8374962f8d644399584a28d187dfad7c"}, @generic={0x59, 0xcb, "8f8bd932a304024708b2f79aaca1048e58480326366f98c59ed908e4f85afd22ed4307ddea487dcc6cd119d84774a318d937839a25803e7beb3e83027477234514825a95d94635a73a3352c49eb799d9282e203b19fc4935f1c069ad571c015bee40103b942ebb297b35e6fa22b64e94529b3e5b76194998610039cd63a3d001b0d303f4dbed9c81853dd85709fccc38bdb9f3799611ba75e52e6d77c0511fe137cfa6350b9560dae3cd7b63d319dbd5cac74134d4f6b2c22ee2513accd68c7f67c459be87f81627dd757a"}, @hao={0xc9, 0x10, @private2}, @calipso={0x7, 0x20, {0x1, 0x6, 0x5, 0x3, [0x7, 0x5, 0x6]}}]}}}], 0x390}, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB="3215000000000000807debbc8ceb9700d2667be38a0929ec6d925188976c8aacf14ee906d1718db590310b29352ea34a76dc01ff3a98a463d4478aab6e6a71fec51cecd0afeafb7c0fa466a9c2b0153e996af1c5185b7e83e321c56b13e682ffb4be8378778b6324916c687abc40c48f692f4022bd437b1c83fc6fed38d912a2ce52f522852a710728000000030801050000000000000000000c00000000000000ff0f00000000000010000000000000000000000000000079f0a071fd49d210aad19f800c0431897effff"], 0xb8) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x45, &(0x7f0000000080)=0x5, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newnexthop={0x2c, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}, @NHA_OIF={0x8}]}, 0x2c}}, 0x40000) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001c0001000000000000000000000000005e3fa37a8f554fb90000000000000009cca51ead4fbaff517d00056c1b7bc500000000000000045383779e25e86bd17aa2fbf0851f70f5f50dc5f8aa77db70a2c7bf66129871eda4efc6a69fa816fa787dcf8a2707262e0cb40116d32ddd37a08f9ed9e961410552e50c905a94344b010e6e6fdf", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001f80)={0x1f, 0x3, &(0x7f0000002040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000002080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000020c0)=0x14) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f00000023c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000002400)=0x2, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r10, 0x6, 0x15, &(0x7f0000002440), 0x4) sendmsg$nl_route(r7, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002180)=ANY=[@ANYBLOB="340000001400b59527bd7000000000000a400000", @ANYRES32=r9, @ANYBLOB="1400020000000000000000000000ffff"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002280), r8) sendmsg$NL80211_CMD_TDLS_MGMT(r11, &(0x7f0000002380)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x5c, r12, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x81}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xfffffffe}, @NL80211_ATTR_STATUS_CODE={0xfffffffffffffdc5, 0x48, 0x5c}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xfc}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x2011) 2m13.719904381s ago: executing program 3 (id=3815): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x78, r1, 0x1, 0x70bd2a, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x64, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x48, 0x3, 0x1b, 0x3, 0x36, 0x31, 0x30, 0x9]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x2, 0x5}, {0x0, 0xa}, {0x6}, {0x7}, {0x0, 0x6}, {0x4}, {0x7, 0x1}, {0x6, 0x2}, {0x1, 0x6}, {0x5, 0x7}, {0x0, 0x6}, {0x2, 0x2}, {0x1, 0x9}, {0x6, 0x1}, {0x6}, {0x6, 0x1}, {0x0, 0x5}, {0x0, 0x6}, {0x1, 0x9}, {0x3, 0x1}, {0x1, 0x6}, {0x4, 0x7}, {0x7, 0x2}, {0x1, 0xa}, {0x5, 0x7}, {0x4, 0x1}, {0x0, 0x2}, {0x2, 0x4}, {0x5, 0x7}, {0x7, 0x1}, {0x0, 0xa}, {0x1, 0x4}, {0x6, 0x3}, {0x1, 0x7}, {0x1, 0x8}, {0x3, 0x6}, {0x6, 0x7}, {0x3, 0x8}, {0x0, 0x3}, {0x6}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x6}, {0x7, 0x3}, {0x7, 0x8}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0x2}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x5}, {0x5, 0x5}, {0x0, 0x6}, {0x3, 0x7}, {0x2, 0x8}, {0x2, 0xa}, {0x3, 0x3}, {0x0, 0x5}, {0x7, 0x5}, {0x6, 0x3}, {0x1, 0x6}, {0x6, 0xa}, {0x4, 0xa}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0x4}, {0x0, 0x9}, {0x6, 0x8}, {0x1, 0x3}, {0x4, 0xa}, {0x4, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x6, 0x2}]}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 2m13.162537203s ago: executing program 3 (id=3818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r1 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 32) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000240)={0x11, 0xf5, 0x0, 0x1, 0x11, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @empty, 0xf5}, 0x1c) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) (async) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4002, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x10}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @remote}) (async) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 2m11.209506801s ago: executing program 3 (id=3834): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@arena={0x21, 0x0, 0x0, 0x22, 0x400, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x582}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000600)={{0xffffffffffffffff, &(0x7f0000000400)='):\x00', 0x100, &(0x7f0000000440)={@align=0x83, {0xfffa, 0x400, 0x5f, 0xd}}, 0x4, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0x5}, {[0x10, 0x3, 0x7, 0xded3]}, 0x504, 0xec, &(0x7f0000000500)=""/236}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x20, &(0x7f0000000840)={&(0x7f0000000700)=""/62, 0x3e, 0x0, &(0x7f0000000740)=""/203, 0xcb}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x24, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf3f, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @generic={0xfd, 0x3, 0x8, 0x0, 0x20000}, @ldst={0x2, 0x2, 0x4, 0xb, 0x3, 0x18, 0x8}, @jmp={0x5, 0x0, 0x3, 0x2, 0x7, 0x2, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='syzkaller\x00', 0x10000, 0x6d, &(0x7f0000000a40)=""/109, 0x1e00, 0x7a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000b00)={0x5, 0x7, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000b40)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b80)=[{0x5, 0x1, 0xa, 0x2}], 0x10, 0xf039}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x0, 0x3, 0x144, 0x3, 0x2, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d80)={0x1, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)={0x1b, 0x0, 0x0, 0x100, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5125, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x17, 0x22, &(0x7f0000000180)=@raw=[@map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x800}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0xa, 0xa, 0x3, 0xfffffffffffffff0, 0x8}, @jmp={0x5, 0x0, 0x2, 0x2, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffc}, @ldst={0x3, 0x2, 0x0, 0x4, 0x2, 0xc, 0xffffffffffffffff}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0xa3}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}], &(0x7f00000002c0)='syzkaller\x00', 0x4e3f84d9, 0xc8, &(0x7f0000000300)=""/200, 0x41000, 0x4, '\x00', 0x0, @fallback=0x35, r4, 0x8, &(0x7f0000000680)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x2, 0xe9, 0xee8}, 0x10, r5, r6, 0x5, &(0x7f0000000ec0)=[r7, r8, r9, r10, r11], &(0x7f0000000f00)=[{0x2, 0x4, 0x6, 0x6}, {0x3, 0x2, 0xc, 0x1}, {0x1, 0x5, 0x0, 0xa}, {0x4, 0x3, 0x4, 0x7}, {0x1, 0x1, 0xe, 0xc}], 0x10, 0x7}, 0x94) sendmsg$AUDIT_MAKE_EQUIV(r11, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x28, 0x3f7, 0x20, 0x70bd2a, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc010}, 0x0) sendfile(r0, r11, &(0x7f0000001140)=0x7, 0x8) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000001180)=r6, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000012c0)={r7, &(0x7f00000011c0)="09a369cfe676c1af725bfa372560afd276c41963dfef5164e4c5e482b18e2b387b9632960056518e476683bfc26e317c92888c994b024ca809980c6785ba18a3ee0d00d0a51f04b551e0be183708", &(0x7f0000001240)=""/92}, 0x20) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000001300)=0x9c) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), r4) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000001540)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001500)={&(0x7f00000013c0)={0x138, r13, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5ea1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffff9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x24}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xbad5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x41}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xdea}]}, 0x138}, 0x1, 0x0, 0x0, 0x801}, 0x4008001) r14 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_SEND(r14, 0x40489426, &(0x7f00000015c0)={{r0}, 0x1, &(0x7f0000001580)=[0x101], 0x240, 0xc}) ioctl$BTRFS_IOC_FS_INFO(r12, 0x8400941f, &(0x7f0000001640)) r15 = accept$inet(r4, &(0x7f0000001a40)={0x2, 0x0, @broadcast}, &(0x7f0000001a80)=0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0xc0c89425, &(0x7f0000001ac0)={"88fcf1e5b2d08ea3fe73320ecea221c6", 0x0, 0x0, {0x10001, 0x4}, {0xfffffffffffffffc, 0x9}, 0xffffffffffffffff, [0x200, 0x7ff, 0x2, 0xc, 0xd55d, 0x4, 0x1ff, 0xffffffff, 0x9, 0x6, 0x8000000000000001, 0xffffffffffffffa4, 0x4, 0x1, 0x2, 0x200]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000001c40)={{r15}, r16, 0x0, @inherit={0x68, &(0x7f0000001bc0)={0x0, 0x4, 0x8, 0x7, {0x1, 0x7, 0xe, 0x4, 0x8}, [0x10, 0x5, 0x5, 0x2]}}, @name="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"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002c40)={0xffffffffffffffff}) recvmsg$unix(r17, &(0x7f0000003180)={&(0x7f0000002c80)=@abs, 0x6e, &(0x7f0000003000)=[{&(0x7f0000002d00)=""/124, 0x7c}, {&(0x7f0000002d80)=""/28, 0x1c}, {&(0x7f0000002dc0)=""/156, 0x9c}, {&(0x7f0000002e80)=""/246, 0xf6}, {&(0x7f0000002f80)=""/15, 0xf}, {&(0x7f0000002fc0)=""/3, 0x3}], 0x6, &(0x7f0000003080)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}, 0x42) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000031c0)={0x0, 0x1000, "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"}, &(0x7f0000004200)=0x1008) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r18, 0x84, 0x71, &(0x7f0000004240)={r19, 0x3}, &(0x7f0000004280)=0x8) 1m56.055046522s ago: executing program 32 (id=3834): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@arena={0x21, 0x0, 0x0, 0x22, 0x400, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x582}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000600)={{0xffffffffffffffff, &(0x7f0000000400)='):\x00', 0x100, &(0x7f0000000440)={@align=0x83, {0xfffa, 0x400, 0x5f, 0xd}}, 0x4, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0x5}, {[0x10, 0x3, 0x7, 0xded3]}, 0x504, 0xec, &(0x7f0000000500)=""/236}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x20, &(0x7f0000000840)={&(0x7f0000000700)=""/62, 0x3e, 0x0, &(0x7f0000000740)=""/203, 0xcb}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x24, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf3f, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @generic={0xfd, 0x3, 0x8, 0x0, 0x20000}, @ldst={0x2, 0x2, 0x4, 0xb, 0x3, 0x18, 0x8}, @jmp={0x5, 0x0, 0x3, 0x2, 0x7, 0x2, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='syzkaller\x00', 0x10000, 0x6d, &(0x7f0000000a40)=""/109, 0x1e00, 0x7a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000b00)={0x5, 0x7, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000b40)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b80)=[{0x5, 0x1, 0xa, 0x2}], 0x10, 0xf039}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x0, 0x3, 0x144, 0x3, 0x2, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d80)={0x1, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)={0x1b, 0x0, 0x0, 0x100, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5125, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x17, 0x22, &(0x7f0000000180)=@raw=[@map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x800}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0xa, 0xa, 0x3, 0xfffffffffffffff0, 0x8}, @jmp={0x5, 0x0, 0x2, 0x2, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffc}, @ldst={0x3, 0x2, 0x0, 0x4, 0x2, 0xc, 0xffffffffffffffff}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0xa3}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}], &(0x7f00000002c0)='syzkaller\x00', 0x4e3f84d9, 0xc8, &(0x7f0000000300)=""/200, 0x41000, 0x4, '\x00', 0x0, @fallback=0x35, r4, 0x8, &(0x7f0000000680)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x2, 0xe9, 0xee8}, 0x10, r5, r6, 0x5, &(0x7f0000000ec0)=[r7, r8, r9, r10, r11], &(0x7f0000000f00)=[{0x2, 0x4, 0x6, 0x6}, {0x3, 0x2, 0xc, 0x1}, {0x1, 0x5, 0x0, 0xa}, {0x4, 0x3, 0x4, 0x7}, {0x1, 0x1, 0xe, 0xc}], 0x10, 0x7}, 0x94) sendmsg$AUDIT_MAKE_EQUIV(r11, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x28, 0x3f7, 0x20, 0x70bd2a, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc010}, 0x0) sendfile(r0, r11, &(0x7f0000001140)=0x7, 0x8) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000001180)=r6, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000012c0)={r7, &(0x7f00000011c0)="09a369cfe676c1af725bfa372560afd276c41963dfef5164e4c5e482b18e2b387b9632960056518e476683bfc26e317c92888c994b024ca809980c6785ba18a3ee0d00d0a51f04b551e0be183708", &(0x7f0000001240)=""/92}, 0x20) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000001300)=0x9c) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), r4) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000001540)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001500)={&(0x7f00000013c0)={0x138, r13, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5ea1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffff9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x24}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xbad5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x41}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xdea}]}, 0x138}, 0x1, 0x0, 0x0, 0x801}, 0x4008001) r14 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_SEND(r14, 0x40489426, &(0x7f00000015c0)={{r0}, 0x1, &(0x7f0000001580)=[0x101], 0x240, 0xc}) ioctl$BTRFS_IOC_FS_INFO(r12, 0x8400941f, &(0x7f0000001640)) r15 = accept$inet(r4, &(0x7f0000001a40)={0x2, 0x0, @broadcast}, &(0x7f0000001a80)=0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0xc0c89425, &(0x7f0000001ac0)={"88fcf1e5b2d08ea3fe73320ecea221c6", 0x0, 0x0, {0x10001, 0x4}, {0xfffffffffffffffc, 0x9}, 0xffffffffffffffff, [0x200, 0x7ff, 0x2, 0xc, 0xd55d, 0x4, 0x1ff, 0xffffffff, 0x9, 0x6, 0x8000000000000001, 0xffffffffffffffa4, 0x4, 0x1, 0x2, 0x200]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000001c40)={{r15}, r16, 0x0, @inherit={0x68, &(0x7f0000001bc0)={0x0, 0x4, 0x8, 0x7, {0x1, 0x7, 0xe, 0x4, 0x8}, [0x10, 0x5, 0x5, 0x2]}}, @name="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"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002c40)={0xffffffffffffffff}) recvmsg$unix(r17, &(0x7f0000003180)={&(0x7f0000002c80)=@abs, 0x6e, &(0x7f0000003000)=[{&(0x7f0000002d00)=""/124, 0x7c}, {&(0x7f0000002d80)=""/28, 0x1c}, {&(0x7f0000002dc0)=""/156, 0x9c}, {&(0x7f0000002e80)=""/246, 0xf6}, {&(0x7f0000002f80)=""/15, 0xf}, {&(0x7f0000002fc0)=""/3, 0x3}], 0x6, &(0x7f0000003080)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}, 0x42) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000031c0)={0x0, 0x1000, "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"}, &(0x7f0000004200)=0x1008) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r18, 0x84, 0x71, &(0x7f0000004240)={r19, 0x3}, &(0x7f0000004280)=0x8) 3.464536722s ago: executing program 5 (id=5057): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) accept(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000000d1401022abd7000fbd9df2508000100000000000800038000000000bf82"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3.253344384s ago: executing program 5 (id=5061): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'virt_wifi0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010428bd70000001000000000000", @ANYRES32=0x0, @ANYBLOB="0386000000000000140012800b0001006970766c616e00000eff028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="cc2256a127c04e4cdf3de093f296f398bb0e6ebac467f09b487984dcee8b6e04e1da5d130e2de14ad573a93449490bc834df52b13f9b2926ba9cee88bbebe60e3156f36530f18f0556108a900638c83d4a13762069a6c9546d4e5b209382adf204779000"/113], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000009c0), 0x40000000000009f, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000440)={@mcast1, 0xf}) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x119, 0x487, 0x0, &(0x7f0000000b80)) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000980)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c0002800800074000000000080003400000001608000140000000120800024000000000080004"], 0x150}}, 0x48041) sendmsg$NFT_BATCH(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000400)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000f0ffffff0000f76c5cf70000000041f1d0d6000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r8, &(0x7f0000000740)="f4618300", 0x4, 0x4094, &(0x7f0000000780)={0x2, 0x0, @empty}, 0x10) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x1, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000007be9540501000080000000000000000a20000000000a0500000000000000000005000000090000030a01010000000004000000050000000900010073797a30000000000900030073795f90ca1d77a36eb1b3d67a300000000048000000060a01040000000000000089d69e0248314cec3a9d40a9000500000008000b40000000002c000480dac58a05efcdaa3e667764001c6bc8e3ef8e482d73692e17000280080002400000080d0800014000000016080003400000000a1400000011000100"], 0xbc}}, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000d40)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) sendmsg$NL80211_CMD_GET_MPATH(r10, &(0x7f0000000d80)={0x0, 0x24, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) 2.769689067s ago: executing program 5 (id=5064): r0 = socket(0xa, 0x3, 0x4) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="d8a7232ee29d23bd1505a1b4b22009ba76a0032283e566823a09394827c4f1c9ee3b561738c251bdd6fad373eed730086f6e74fb92e4df6bf9d694770ee43ca860d0f2d5a6203de9a9c7935dac9bb46f99427b965c01a8e998b3619467c995f5ba704b256d40f5639dc56b97cfbbf9cbad113dbab156198d79bab6e8d21eed181f23bd0b170d24d95c57f521c1180b2527b38ebb24f6a6093796af97aef02a40eb0231d81976c9e839c8d2"], 0x14}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000140)='bridge0\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000900), 0x12) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000940), 0x12) close(r4) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e24, 0xf34, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7fff}}, 0x0, 0x0, 0x20, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bff16d2ccd00"}, 0xd8) sendto$inet6(r5, &(0x7f0000000540)='q', 0x1, 0x20008045, &(0x7f0000000580)={0xa, 0x2, 0x28, @loopback}, 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r6, &(0x7f00000001c0)=';', 0x1, 0x20008005, &(0x7f0000000200)={0x2, 0x4e20}, 0x10) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x12220801}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r8, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040010) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd00000000000003ff00000800090002"], 0x34}}, 0x20) 2.251707681s ago: executing program 0 (id=5072): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x80, 0x80000) recvmsg$can_raw(r1, &(0x7f0000000600)={&(0x7f00000002c0)=@nfc, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/189, 0xbd}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000500)=""/97, 0x61}], 0x3, &(0x7f00000005c0)=""/57, 0x39}, 0x2040) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="c4c0c8b8f27d4c146880c4d546112977d3bc3449ab6cfa6b8ed199481fa100cc49c12694ffc686cfcc57e0cea67cef539c365b3b4d94aaa8aa503e13c6ba4e99ccbabd2701df776e3ac5ca5c562a0d9da1cf381278a574b7baaf825a88a6dbfe801ed513c13ce40aead3e3f0ff8141b0768c6201f0ee5acb29674b9942c8116045b08c69a0c88ba4abe9a246559c8a583f928a2e0ccac5290e079a8ae9d1e8c27de85991f8a5d968e7050ed48e747ba061c5c7815fbbdb5c8affdc056b225393456122b13e9a1a6eb112e06e4853234910a31971f661f036a0a490bc62256d4c9d1d3ee2c89a3acf1bf3fd04dbd54dfae7934c6b", @ANYRESOCT=0x0, @ANYRES8=r0], 0x30}, 0x1, 0x0, 0x0, 0x400009c}, 0x40892) 2.165111632s ago: executing program 0 (id=5073): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b0}]}]}]}, 0x34}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000200), &(0x7f00000002c0)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) 2.041064764s ago: executing program 0 (id=5076): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="047a664fa24f41aefb3d5243f3a35e5e0dea51584c184ff9daadf97f0f12db6a7b5cfd37000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000020000801040000000000000000030000060600024088840000140004800800c1fa000000060800024000000800050003002f0000000900010073797a31000000008b8842d53e6ac04a8a1ec530605077c1194fa700c2b7f423ddf465ab82b5692f63799ee78d27a6a7b6fc11004485d30e2fc0bac94420f848785f595fee0817657d616869b87b7d3e9369ad116e7594506c98cff1d9518ab09ad0ea3aec3c8730a80cfb3eacf5360547022e1fa7e81e440a9ee89e33bc2fe2286c2a921cef8b01"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendto$inet(r0, 0x0, 0x38, 0x20000800, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) 1.742554018s ago: executing program 5 (id=5080): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000840)={0xa, 0x0, 0x2, @mcast2, 0x5}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000980)="8000102e7577d401", 0x8}, {0x0}], 0x2, &(0x7f0000000a80)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x1, 0x40000080) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFINDEX(r1, 0x400454da, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYBLOB="953a04"], 0x24}, 0x1, 0x0, 0x0, 0x40895}, 0x0) (async) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1c13, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000700)={r5, &(0x7f00000006c0)="d3834daa428eba9dda5fe1838da9ff02d652f1c55436c774a9a996360098f1a265cc70"}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)={0x44, r7, 0x801, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x28, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x80}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x3b8307137d5b9469}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r8) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x30, r9, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}]}]}, 0x30}}, 0x880) (async, rerun: 32) recvmmsg$unix(r2, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/184, 0xb8}, {&(0x7f0000001f40)=""/264, 0x108}, {&(0x7f0000000e80)=""/4126, 0x101e}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x18}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2c410}]}, &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x3d}, 0x94) (async) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 1.737512793s ago: executing program 1 (id=5081): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x2dfc}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r1, 0x749}, &(0x7f0000000100)=0x8) close(r0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex=0x0, 0x13, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0xc, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup=r0, r0, 0x2a, 0x28, 0x0, @void, @void, @void, @value=r4, r3}, 0x20) setsockopt$inet_group_source_req(r0, 0x0, 0x72f9cde95b9a407a, &(0x7f00000005c0)={0x400, {{0x2, 0x4e24, @rand_addr=0x64010102}}, {{0x2, 0x4e21, @broadcast}}}, 0x108) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r6 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000700)={0x20000010}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r6, 0xf505, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000740)=r0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000780)=@assoc_value, &(0x7f00000007c0)=0x8) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f0000000800)={0x0, 0x4, 0x0, 0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000c00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000001000)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f0000001400)={0x8, 0x6, {0x7, @usage=0xfffffffffffff2a2, r7, 0xf, 0xaf, 0x42801f71, 0x1960f75, 0xb34, 0x409, @struct={0x0, 0x6}, 0x7, 0x101, [0x4, 0x9423, 0x9, 0x4, 0x3b, 0xb]}, {0xa9, @struct={0x6, 0xfffffff7}, r8, 0x7fff, 0xf, 0x8, 0x9, 0x3, 0x445, @usage=0x1, 0x21d, 0x80, [0xd, 0x7f, 0x7ff, 0x10, 0x6, 0x1]}, {0x23d2, @usage=0x70, r9, 0x4, 0x6, 0xcc9d, 0x3, 0x7e, 0x2, @struct={0x5, 0x3}, 0x6, 0x8, [0x9, 0x8, 0xfffffffffffffff9, 0xfff0000000, 0x3ff, 0xffffffff]}, {0x9, 0x8, 0x9}}) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000001800)) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000018c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000001a80)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a40)={&(0x7f0000001900)={0x10c, r10, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xdd, 0x5b, "de8fbc1db8d0c063d364da2aa2595928ad1a40f2a3192482a16fb5bb3622a48dc5b86d2d4e6a07c33044ed1235ab2b1974a09125552ee63a9d471fea6119539f66f158f8891e9cc026a45eea2397f21b75ee59f06ad50fbd14e778c27c2331e8d4f6d4baaa6ca6b44b2833d74d79daf3211cb1b47091e96349a34bfbd99cef0e9f3061003500fffbcc910403ea01eb0ee06831102497db9d8416450e47ea43cf1c11d6b2497e4f656f343ff125b26b02ce5e711409ee0b719b223d373dd02091bf8a6b2b041aa55bc33e02685f22125532f464b6c8059cf3c8"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x401}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfffc}]}, 0x10c}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000000) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), r0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x58, r12, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x40040) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000001c40)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001cc0)={0x0, @multicast1, @multicast2}, &(0x7f0000001d00)=0xc) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001e00)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x74, r12, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc000}, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001e40)={'xfrm0\x00', 0x200}) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$binder_nlctrl_getfamily(r14, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x20, 0x10, 0x1, 0x0, 0x0, {}, {0xb}}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.682034094s ago: executing program 4 (id=5082): r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000140)) (async) splice(r0, 0x0, r2, 0x0, 0xf3c, 0x0) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1a, 0x0, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbfbc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x4, 0x28}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 1.58215424s ago: executing program 1 (id=5083): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x3ffffd, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) (async, rerun: 32) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x1, 0x8}, &(0x7f00000000c0)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000640)={'tunl0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newsa={0x15c, 0x1a, 0x713, 0x0, 0x25dfdbff, {{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in=@local, 0x104d2, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x38}, {0x5, 0x0, 0x800, 0xe91, 0xffffffff00000001, 0x10000000, 0x80000001, 0x543}, {0x1000000000004, 0x7fffffffffffffff, 0x100, 0xc}, {}, 0x70bd26, 0x3505, 0xa, 0x4, 0x40, 0x54}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) (async, rerun: 64) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f00000001c0)=""/176, &(0x7f0000000280)=0xb0) (async, rerun: 32) r8 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000180)=0x10, 0x4) (rerun: 64) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r3, 0x4) r9 = socket$pptp(0x18, 0x1, 0x2) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000880)) (async) ioctl$SIOCSIFHWADDR(r10, 0x8b26, &(0x7f00000008c0)={'wlan1\x00', @random="09fe000500"}) (async, rerun: 64) r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100000a0900010073797a30000000000900030073617a30000000006c000000060a010400000000000000000100fffe08000b40000000003c0004803800018008000100636d70002c0002800800014000000004080002400000000010000380090001002a8e27e2fa00000008000140000000140900010073797a30"], 0xe0}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r9, 0xc0389424, &(0x7f0000000300)={0x7ae, 0x30, '\x00', 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 1.516972789s ago: executing program 4 (id=5084): pipe(&(0x7f0000001c00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0008000000bdaa4c77e2304c73583015790435d7fc0ba367b3dac2369e72f446b2b06f76c5d198c380", @ANYRES16, @ANYBLOB="000426bd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000c880) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), r1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000001cc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001c80)={&(0x7f0000001e80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010000000080ffffffff85a55c0a"], 0x14}}, 0x24004801) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) syz_emit_ethernet(0x4e, &(0x7f0000001740)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa0700000000000000d5834eddd1bba5dd6000021000183a00fe80000000e5ffffff000000000000bbff0200000000000000000000000000018800907800e5ff00ff020000"], 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="9feb01000c00000002000000000000000000c500000000000000"], 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x11, 0x3, &(0x7f0000001900)=ANY=[@ANYBLOB="1800110000000049c4fc9b42ed0b05386800000008000000"], &(0x7f0000001940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0xc, &(0x7f0000001980), 0xfff1}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r5) recvmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000001500)='0', 0x1}], 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000019c0)={0x1, &(0x7f0000001a00)=[{0x6}]}, 0x10) bind$bt_hci(r6, &(0x7f0000001a40)={0x1f, 0xffff, 0x2}, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f00000015c0)=""/8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001600)={0xd, 0x4, &(0x7f00000016c0)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0xc6e9f000) mmap(&(0x7f000074a000/0x2000)=nil, 0x2000, 0x1000001, 0x718863a5f1116839, r4, 0xed7d4000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x8, 0x13, r0, 0xffffe000) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000280)=0xffffffff, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)={0x68, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x43}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4020) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r2, 0x100000000) 1.294592511s ago: executing program 2 (id=5085): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0x1bc, 0x13, 0x101, 0x0, 0x0, {{@in6=@private1, @in6=@remote, 0x4e20, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x3, 0x5, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0x8}, [@tmpl={0x104, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000009}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x0, 0x2, 0x48, 0x4, 0x8000, 0x5}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x6}, {{@in=@multicast2, 0x4d4, 0x2b}, 0xa, @in=@rand_addr=0x64010100, 0x0, 0x1, 0x0, 0x3, 0xfffffff9, 0x103ff, 0xd9}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff0200000000000000fffd0000000001"], 0xfdef) 1.288644975s ago: executing program 4 (id=5086): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c001a800800028004000180080004"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_OKEY={0x8, 0x18}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) 1.179463739s ago: executing program 1 (id=5087): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x20000, 0x0, &(0x7f00000004c0)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff000000003900000008000300", @ANYRES32=r3, @ANYBLOB="18005a801400018005000a"], 0x34}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000000680)=""/4107, &(0x7f00000016c0)=0x100b) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000046000901fefffffffeffffff017c00000c0003804e2c", @ANYRESDEC], 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004050) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r8, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'fwd\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x15}, 0x11) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000aac0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000800003807c00008078000b80100001800b0001006f626a7265660000100001800c00010062697477697365004800018008000100667764003c00028008000340516d3944e58ac4e72649a1c7418a362ba4ea0800034000000002080002400000000f080001400000001508000240000000040800024000000000020c0001800700010063740000140000001100010000000000000000000100000a"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x4, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000001e40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001e80), 0x0, 0x10, &(0x7f0000001ec0), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f00)={r9, 0x702, 0xe, 0x0, &(0x7f0000001f80)="e46033449fdd0200000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380180000800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0) 1.125592783s ago: executing program 0 (id=5088): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) read(r0, &(0x7f0000002540)=""/7, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @remote}}}, 0x84) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000010010000010000000000100100000000000000000004000000007a7efe75c77bd70f87a007a1872941454f18bb73ef1caa84b2a35baf4d77ed9ac28da2cb96e0f753651cdaacdf4cd0f3999c647bc11eac62"], 0x30}, 0xfc40) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname(r5, &(0x7f0000000540)=@nfc, &(0x7f00000005c0)=0x80) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x90, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r4, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x5c, 0x3, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x27a, 0x7fff, 0x6, 0x4, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) 1.078589227s ago: executing program 4 (id=5089): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x3, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000018c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000400), &(0x7f0000000440)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x34, 0x0, 0x7, 0x401, 0x0, 0x0, {}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x808}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x3, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000018c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000400), &(0x7f0000000440)=r2}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0}, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x34, 0x0, 0x7, 0x401, 0x0, 0x0, {}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x808}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (async) 1.061415237s ago: executing program 1 (id=5090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, 0x0, 0x44) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000100)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x15, 0x9, 0x5, 0xa05d, 0x24, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'xfrm0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r5, 0x3e}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000400)=';', 0x1}], 0x1}, 0x40851) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x1f3, 0x8, 0x9, 0x40000, r2, 0x400000, '\x00', r5, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0xa4e4, @empty, 0x3}, 0x1c) shutdown(r1, 0x1) r6 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r6, 0x6b9) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x2, 0x2, 0x5, 0x0, 0x0, {0x6, 0x0, 0x7}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4005}, 0x880) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000300)=0xd, 0x4) 1.0135539s ago: executing program 2 (id=5091): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="60040000", @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff020000000000020000000000000000000000000064003104000004043381", @ANYRES32=r2], 0x460}}, 0x0) 936.130831ms ago: executing program 2 (id=5092): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000001c0), 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200), &(0x7f00000002c0)=0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$802154_dgram(r2, &(0x7f0000000040)={0x0, 0x48, &(0x7f0000000080)={&(0x7f00000000c0)="05000000b92ba9e375f3d5a1fc0751577daff448fb417eb76377c3075661e57f6a1ad88443faf85a902e03e4c4e68c258b10a733e428ae2cd65cf9e52e6a23541f4bc6970df209050bf052c6624effea5f1e99ad3d96ed78ff3f524af2c90d5643d563b4f469a937cccad6efa449da086721a42a6616eb56afdf6e1e977964a59a007754d9a22bf26ddb67fb3cd24af531bb3a42a0532ff51473993bd4fb62b7fae1a02f982796fe3df1f080196ff1db13e62950561bf6330ce41dde70f59450a43a0e5678b45689b989d46e9e242cc89f34cd04c4e22e5cc1f1035c5010fd47be95ca79f9a85bf56011d8397d00"/253, 0x1}}, 0x20000855) syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYBLOB="500f963d9e08bfe0963e899ad7a922a4ca38ed6a659dc9a501350f8f219a774acd2c4be8945bb8cedf948ed82ce36924f823a959e80d209837", @ANYRES64=r2, @ANYRES64=r2, @ANYBLOB="23330eda8ad32015f5050b3be73530c13ceea796eff6bb7f3c89e28d4f4ef4fd232ceb58bb2ebd378d05becb84f69bdf14c196ad8b5e6ade8856806e7adccf1871f8bbb45f3c82cb6f267bf33b17c7c7c652d603ac50d284937839e201c83eec553f57d0e0037b348b01163596a200dd33606349e1f9e73fdfd281d456898b88d2a45d4910d06ffcfbd6acae9f77416b88f2747f2d592988b5dbc7640c64f75816580659acd31da178919cfe064966e5", @ANYRES32=r1, @ANYRESDEC=r2], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x28, 0x2c, 0xff, @remote, @local, {[@routing={0x89, 0x0, 0x2, 0x1}, @hopopts={0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}]}]}}}}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f00000001c0), 0xe) (async) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200), &(0x7f00000002c0)=0x4) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) sendmsg$802154_dgram(r2, &(0x7f0000000040)={0x0, 0x48, &(0x7f0000000080)={&(0x7f00000000c0)="05000000b92ba9e375f3d5a1fc0751577daff448fb417eb76377c3075661e57f6a1ad88443faf85a902e03e4c4e68c258b10a733e428ae2cd65cf9e52e6a23541f4bc6970df209050bf052c6624effea5f1e99ad3d96ed78ff3f524af2c90d5643d563b4f469a937cccad6efa449da086721a42a6616eb56afdf6e1e977964a59a007754d9a22bf26ddb67fb3cd24af531bb3a42a0532ff51473993bd4fb62b7fae1a02f982796fe3df1f080196ff1db13e62950561bf6330ce41dde70f59450a43a0e5678b45689b989d46e9e242cc89f34cd04c4e22e5cc1f1035c5010fd47be95ca79f9a85bf56011d8397d00"/253, 0x1}}, 0x20000855) (async) syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYBLOB="500f963d9e08bfe0963e899ad7a922a4ca38ed6a659dc9a501350f8f219a774acd2c4be8945bb8cedf948ed82ce36924f823a959e80d209837", @ANYRES64=r2, @ANYRES64=r2, @ANYBLOB="23330eda8ad32015f5050b3be73530c13ceea796eff6bb7f3c89e28d4f4ef4fd232ceb58bb2ebd378d05becb84f69bdf14c196ad8b5e6ade8856806e7adccf1871f8bbb45f3c82cb6f267bf33b17c7c7c652d603ac50d284937839e201c83eec553f57d0e0037b348b01163596a200dd33606349e1f9e73fdfd281d456898b88d2a45d4910d06ffcfbd6acae9f77416b88f2747f2d592988b5dbc7640c64f75816580659acd31da178919cfe064966e5", @ANYRES32=r1, @ANYRESDEC=r2], 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x28, 0x2c, 0xff, @remote, @local, {[@routing={0x89, 0x0, 0x2, 0x1}, @hopopts={0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}]}]}}}}}, 0x0) (async) 921.321874ms ago: executing program 0 (id=5093): openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2b, 'pids'}]}, 0x6) (async) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2b, 'pids'}]}, 0x6) recvfrom$binder_report(0xffffffffffffffff, &(0x7f0000000080)={""/44, 0x0}, 0x80, 0x40010002, 0x0, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/user\x00') (async) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/user\x00') r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='io.stat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={0x0, 0xffffffbc}, &(0x7f00000001c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={0x0, 0xffffffbc}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e23, 0x1, @mcast1, 0x101}}, 0x2, 0x81}, 0x90) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000002c0)={r4, 0xe090}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000300)={r0, 0x3, 0xfffffffffffffffe, 0x4}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000340)={0xffffffffffffffff, r5}, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r7, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x50}, 0x1, 0x0, 0x0, 0x1800}, 0x1800) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000500)=0xffffffffffffffff, 0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x2000010, r8, 0x4fdad000) socket$inet6_tcp(0xa, 0x1, 0x0) bind$bt_hci(r3, &(0x7f0000000540)={0x1f, 0x2, 0x1}, 0x6) (async) bind$bt_hci(r3, &(0x7f0000000540)={0x1f, 0x2, 0x1}, 0x6) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000600)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000640)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r9, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x30}, 0x1, 0x0, 0x0, 0x88040}, 0x840) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r12, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0xe028040}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r7, 0xa00, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x40000) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, r13, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '/@%-'}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, 'nl802154\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd78}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004015}, 0x801) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r6) (async) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r6) sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r14, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40008d4) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r14, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40008d4) sendmsg$NFC_CMD_SE_IO(r12, &(0x7f0000000e00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b40)={0x26c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_SE_APDU={0x4f, 0x19, "cdb416831d66dd2b5b08239e697e4a96f12be97d00446589fbcaaa7c4b928c52c5ae58060c68b12dc5b7eed9c946df3aafc1d03bd1ca88151442330d72522008df1d04bc0a95e1427755ec"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x32, 0x19, "71093317a451e219fa3dbf70276dc04a7546af561973203d73b115a3f5c67aff2c98880aeb09085f8ba0a4e432af"}, @NFC_ATTR_SE_APDU={0xea, 0x19, "d56844d3242676f20f85d9ac1b1c0605220da8ddc8f91535f2fad2e0f05a459bb2f6404d1927c524ee042323c739f58af4714ad2a294ec134f71fff2ff518474958778f4ab7b7ab022fcec5bc35b7e86325b1d2f87ba3b811f2d958fa785a9ce02af9cdc6ea1284b724cf1df176c15b380100e9dbdbbdd23647c8080d7e9e37df3ee3126e4764c4d5f3f0e1766099be6ed81b4aaf00a1701cc835343215766d81e6f4047de907fc7d1f577cdc95538af85c74270afeff602bdcccf769a521c575e98cb581d6e18bfde9bcfcd26c38d43cc1bbc1a9d8831948f7c95c796a3ba335e4146d12459"}, @NFC_ATTR_SE_APDU={0xd8, 0x19, "f05a3ee674cc3fc5c88d6f19ccdd26139c7965fdfdfe5e7281a55cba983b58367bbb389cba376bc3b9d98afbb201c431826ee8202f84e284fa428b1ee13f63107753d837fec3521e4b555984d271f12b52cb1595e06527ba180be2fa6c7f76fa07bdb4ab1d4779cf9ef7818a1add708916a2e07ad6402a35d92e338cdb8cfed0169df41209b676904f9e70bae9bfabfd181f245be29ebc8100dc90eb9cc6c2a6d4a8cca6c80eb6b062c73ed31d58f5bc55a1198c4b22c106b75b69bc0be4530aadab0efe0623aeff552fb165d536cd7fcaaffe2d"}]}, 0x26c}}, 0x4084841) (async) sendmsg$NFC_CMD_SE_IO(r12, &(0x7f0000000e00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b40)={0x26c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_SE_APDU={0x4f, 0x19, "cdb416831d66dd2b5b08239e697e4a96f12be97d00446589fbcaaa7c4b928c52c5ae58060c68b12dc5b7eed9c946df3aafc1d03bd1ca88151442330d72522008df1d04bc0a95e1427755ec"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x32, 0x19, "71093317a451e219fa3dbf70276dc04a7546af561973203d73b115a3f5c67aff2c98880aeb09085f8ba0a4e432af"}, @NFC_ATTR_SE_APDU={0xea, 0x19, "d56844d3242676f20f85d9ac1b1c0605220da8ddc8f91535f2fad2e0f05a459bb2f6404d1927c524ee042323c739f58af4714ad2a294ec134f71fff2ff518474958778f4ab7b7ab022fcec5bc35b7e86325b1d2f87ba3b811f2d958fa785a9ce02af9cdc6ea1284b724cf1df176c15b380100e9dbdbbdd23647c8080d7e9e37df3ee3126e4764c4d5f3f0e1766099be6ed81b4aaf00a1701cc835343215766d81e6f4047de907fc7d1f577cdc95538af85c74270afeff602bdcccf769a521c575e98cb581d6e18bfde9bcfcd26c38d43cc1bbc1a9d8831948f7c95c796a3ba335e4146d12459"}, @NFC_ATTR_SE_APDU={0xd8, 0x19, "f05a3ee674cc3fc5c88d6f19ccdd26139c7965fdfdfe5e7281a55cba983b58367bbb389cba376bc3b9d98afbb201c431826ee8202f84e284fa428b1ee13f63107753d837fec3521e4b555984d271f12b52cb1595e06527ba180be2fa6c7f76fa07bdb4ab1d4779cf9ef7818a1add708916a2e07ad6402a35d92e338cdb8cfed0169df41209b676904f9e70bae9bfabfd181f245be29ebc8100dc90eb9cc6c2a6d4a8cca6c80eb6b062c73ed31d58f5bc55a1198c4b22c106b75b69bc0be4530aadab0efe0623aeff552fb165d536cd7fcaaffe2d"}]}, 0x26c}}, 0x4084841) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000e80)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e24, @remote}, {0x2, 0x4e21, @private=0xa010101}, 0x200, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000e40)='virt_wifi0\x00', 0x200, 0xa5, 0xe3}) (async) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000e80)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e24, @remote}, {0x2, 0x4e21, @private=0xa010101}, 0x200, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000e40)='virt_wifi0\x00', 0x200, 0xa5, 0xe3}) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r14, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000089}, 0x10000801) (async) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r14, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000089}, 0x10000801) 823.952653ms ago: executing program 1 (id=5094): write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @le_add_to_resolv_list={{0x2027, 0x27}, {0x7a, @none, "faa2dac47c8c54cd7b68b38b87b9bf90", "b99ac17899083e747e197ac5a9fef76a"}}}, 0x2b) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x20, 0x8000, 0x5, 0x6, {{0x8, 0x4, 0x0, 0x19, 0x20, 0x66, 0x0, 0x9, 0x29, 0x0, @multicast2, @local, {[@lsrr={0x83, 0x7, 0x85, [@remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r1}, 0x14) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='ipvlan0\x00') getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000140)={'security\x00', 0xa6, "89c536c21775ee224a0764228e7cf890ba4f0a068f7b720525e36e6c657bda307ae23f3ac9710b8dd3b031db4ef3b6ca183cd187d21f3826fc4df228c20c079908abeb961fd4473942acf04fb967cc7ff277c95cf0a87eceb8c5cbdf8bf66768c1adbfd1c526d6f89b48f9a7464ee98a4d456e2aee7ea1bfb0a028aca29dd9794a25bf85fde09c6eaa657008ba0c2e61ce34fd1d178293c37ad09508119f99663ad54840da04"}, &(0x7f0000000240)=0xca) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'team_slave_1\x00', 0x0}) r6 = accept$inet6(r0, 0x0, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000340), &(0x7f0000000380)=0x4) getsockopt$bt_hci(r6, 0x0, 0x3, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=0x1000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001400), r4) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001480)=@filter={'filter\x00', 0xe, 0x4, 0x310, 0xffffffff, 0x0, 0xe8, 0x1e0, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, &(0x7f0000001440), {[{{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xffffffff, 'team_slave_0\x00', 'nicvf0\x00', {}, {0x17e}, 0x3, 0x1, 0x45}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ah={{0x30}, {[0x7, 0x8], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x12, "cd8f"}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x8, 0x9, [0x30, 0x3e, 0x2c, 0x31, 0x36, 0x3, 0x18, 0x7, 0x35, 0x40, 0x27, 0x14, 0x27, 0x40, 0xa, 0x18], 0x0, 0xfffffff7, 0x2}}}, {{@ip={@private=0xa010102, @broadcast, 0xff0000ff, 0xff000000, 'ip6erspan0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x73, 0x2, 0x5}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x3, 0x5, 0xfff9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) getsockname$packet(r2, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001840)=0x14) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448e4, &(0x7f0000001880)="58bf3c5f6c9890ece6") r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r9, 0x80489439, &(0x7f00000018c0)) bind$bt_hci(r8, &(0x7f0000001940)={0x1f, 0x3, 0x4}, 0x6) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000019c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r7, r6, 0x4, 0x4}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001a40)=@o_path={&(0x7f0000001980)='./file0\x00', r10}, 0x18) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000001a80)='ns/pid\x00') ioctl$NS_GET_NSTYPE(r11, 0xb703, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000001ac0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001b00)={r0}) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r12, &(0x7f0000001fc0)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001f80)={&(0x7f0000001e00)={0x148, r13, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x40}, 0x8) 822.136914ms ago: executing program 4 (id=5095): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0x1f, 0x0, 0xfd8b) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x18, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f0000000700)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0x113, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000000000000081, 0x0, &(0x7f0000000880)=[0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, 0x8, 0x0, 0x0}}, 0x10) unshare(0x2a020400) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d008d0f61"], &(0x7f0000000900)=""/223, 0x3e, 0xdf, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af8", @ANYRES32, @ANYBLOB="0000000000002000b70500f7ffffff0085000000a5000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x1, 0x93, &(0x7f0000000b40)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000c00)=[{0x3ffff, 0x1, 0x2000007}, {0x5, 0x4, 0xf, 0xa}, {0x5, 0x2, 0xe, 0x9}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0x7}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000d00)={0xffffffffffffffff, 0x0, &(0x7f0000000d40), &(0x7f0000000d80), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00), &(0x7f0000000e40), 0x2000006c, r3}, 0x38) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000001100010000000000000000000500000a0000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x24000080) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x9, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000300)={r5, &(0x7f0000000340), &(0x7f00000004c0)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r5, &(0x7f0000000580), &(0x7f00000005c0)=@tcp6, 0x1}, 0x20) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) readv(r5, &(0x7f0000000340)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x47, 0x13, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0xa5, 0x8, "e4b92bf48792a9adbeafb07f367dde49f245536f4c71a72dcb54fff829b76e305c4e00b32de7bb3f23eed50d0aed77b119df4079f94506cf87d273aeef0ad3c7b72b1cbb74125c796b44a487367180c3c3823ec5959684c306270b778e417c0ba23bb0fba2aa8e7890646930e7d30a3e485d3e984d111d02fa417453eb9c949a32103be3d5a80acfbc82c0811468f987de57f18e4b0af94dfb035dab9baa7300c2"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000480d}, 0x800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet6_buf(r0, 0x29, 0x1f, 0x0, 0xfd8b) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x18, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f0000000700)='GPL\x00'}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0x113, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000000000000081, 0x0, &(0x7f0000000880)=[0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, 0x8, 0x0, 0x0}}, 0x10) (async) unshare(0x2a020400) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d008d0f61"], &(0x7f0000000900)=""/223, 0x3e, 0xdf, 0x1}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af8", @ANYRES32, @ANYBLOB="0000000000002000b70500f7ffffff0085000000a5000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x1, 0x93, &(0x7f0000000b40)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000c00)=[{0x3ffff, 0x1, 0x2000007}, {0x5, 0x4, 0xf, 0xa}, {0x5, 0x2, 0xe, 0x9}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0x7}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000d00)={0xffffffffffffffff, 0x0, &(0x7f0000000d40), &(0x7f0000000d80), 0x800, r3}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00), &(0x7f0000000e40), 0x2000006c, r3}, 0x38) (async) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000001100010000000000000000000500000a0000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x24000080) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x9, 0x10001, 0x9, 0x1}, 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000300)={r5, &(0x7f0000000340), &(0x7f00000004c0)=""/109}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r5, &(0x7f0000000580), &(0x7f00000005c0)=@tcp6, 0x1}, 0x20) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) readv(r5, &(0x7f0000000340)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1) (async) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x47, 0x13, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0xa5, 0x8, "e4b92bf48792a9adbeafb07f367dde49f245536f4c71a72dcb54fff829b76e305c4e00b32de7bb3f23eed50d0aed77b119df4079f94506cf87d273aeef0ad3c7b72b1cbb74125c796b44a487367180c3c3823ec5959684c306270b778e417c0ba23bb0fba2aa8e7890646930e7d30a3e485d3e984d111d02fa417453eb9c949a32103be3d5a80acfbc82c0811468f987de57f18e4b0af94dfb035dab9baa7300c2"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000480d}, 0x800) (async) 821.401206ms ago: executing program 2 (id=5096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg(r1, &(0x7f0000000040)=[{{&(0x7f00000000c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x10}}], 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[], 0xf0}}, 0x0) 732.106757ms ago: executing program 1 (id=5097): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000600)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000000000000007004000"], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r2}, 0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={0x0, @can={0x1d, r2}, @hci={0x1f, 0x2, 0x2}, @vsock={0x28, 0x0, 0xffffffff, @my=0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000300)='veth0_vlan\x00', 0x240000000, 0xffff, 0x2}) write(r0, &(0x7f0000000640)="4c80", 0x2) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000680)) 677.233088ms ago: executing program 5 (id=5098): r0 = socket(0x21, 0x4, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)={0x38, r3, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000014c0), r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x50, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x29}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x18}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x65d800de}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xad1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xcbd}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x200048c4) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x46c, 0x1000, "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"}, 0x1008) sendto$x25(r0, &(0x7f0000000100)="afed80b4a1d28a4a", 0x8, 0x24000000, &(0x7f0000000180)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 529.452514ms ago: executing program 2 (id=5099): syz_emit_ethernet(0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000200000000010027424203000007"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) 503.446065ms ago: executing program 4 (id=5100): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x3, 0x100951, 0x5775, 0xa, 0x9, 0x5, 0x346, 0x5}}) (async) read(r0, &(0x7f0000000140)=""/180, 0xb4) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x1c}}, 0x0) 385.14582ms ago: executing program 0 (id=5101): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r2, &(0x7f0000000040)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x64, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4038050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}]}]}, 0x64}}, 0x0) 316.56958ms ago: executing program 2 (id=5102): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="60040000", @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff020000000000020000000000000000000000000064003104000004043381", @ANYRES32=r2], 0x460}}, 0x0) 0s ago: executing program 5 (id=5103): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000004000000e25f000001"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000015c0), 0xfffffedf, 0x10, &(0x7f0000001600), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001640)={r2, 0xe72, 0x10, 0x0, &(0x7f00000016c0)="63eced8e46dc3fad77b7b3f7b986edf7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000100)=0x100000b3, 0x4) (async, rerun: 32) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10) (rerun: 32) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x6c, 0x1, 0x40002}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x4, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9b, 0x0, @val=0x80}}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f6, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x21, 0x4, 0x0, 0x0, 0x84, 0x0, 0x8000, 0x0, 0x0, 0x0, @rand_addr, @rand_addr, {[@timestamp_prespec={0x44, 0x3c, 0x7d, 0x3, 0x5, [{@local, 0x6}, {@broadcast, 0x1}, {@broadcast, 0x7}, {@multicast1, 0x80000006}, {@remote, 0xfff}, {@private=0xa010100, 0x2}, {@loopback, 0xb}]}, @cipso={0x86, 0x33, 0x1, [{0x2, 0x9, "d769ed6245acb8"}, {0x6, 0x2}, {0x6, 0xb, "74d1be6fc152cd68b2"}, {0x0, 0x2}, {0x1, 0x5, "7a61af"}, {0x1, 0x10, "02587248ee3e83d106fe7ac53150"}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x17, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000097090100000002816500feff0000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000800)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): .921829][T19543] ip_tables: iptables: counters copy to user failed while replacing table [ 469.950913][T19558] __nla_validate_parse: 109 callbacks suppressed [ 469.950929][T19558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3589'. [ 470.198976][T19500] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 470.379050][T19566] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3593'. [ 470.382456][T19564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3592'. [ 470.407512][T19564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3592'. [ 470.707888][T19588] netlink: 'syz.1.3599': attribute type 1 has an invalid length. [ 470.707944][T19588] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3599'. [ 470.707983][T19588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3599'. [ 470.845589][T19595] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 471.162498][T19612] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3604'. [ 471.365966][T19614] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3605'. [ 471.645242][T19633] FAULT_INJECTION: forcing a failure. [ 471.645242][T19633] name failslab, interval 1, probability 0, space 0, times 0 [ 471.645278][T19633] CPU: 1 UID: 0 PID: 19633 Comm: syz.2.3612 Not tainted syzkaller #0 PREEMPT(full) [ 471.645315][T19633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 471.645330][T19633] Call Trace: [ 471.645338][T19633] [ 471.645347][T19633] dump_stack_lvl+0xe8/0x150 [ 471.645388][T19633] should_fail_ex+0x3eb/0x540 [ 471.645420][T19633] should_failslab+0xa8/0x100 [ 471.645452][T19633] ? skb_clone+0x212/0x3a0 [ 471.645476][T19633] kmem_cache_alloc_noprof+0x9c/0x600 [ 471.645504][T19633] ? skb_clone+0x212/0x3a0 [ 471.645536][T19633] skb_clone+0x212/0x3a0 [ 471.645564][T19633] __netlink_deliver_tap+0x355/0x6e0 [ 471.645607][T19633] ? netlink_deliver_tap+0x2e/0x1b0 [ 471.645645][T19633] netlink_deliver_tap+0x19c/0x1b0 [ 471.645675][T19633] netlink_dump+0x9a0/0xf20 [ 471.645720][T19633] ? __pfx_netlink_dump+0x10/0x10 [ 471.645778][T19633] netlink_recvmsg+0x692/0xa70 [ 471.645811][T19633] ? __lock_acquire+0x747/0x2de0 [ 471.645844][T19633] ? kasan_save_track+0x4f/0x80 [ 471.645874][T19633] ? __pfx_netlink_recvmsg+0x10/0x10 [ 471.645916][T19633] ? __lock_acquire+0x747/0x2de0 [ 471.645952][T19633] ? __pfx_netlink_recvmsg+0x10/0x10 [ 471.645986][T19633] sock_recvmsg_nosec+0x130/0x170 [ 471.646022][T19633] ____sys_recvmsg+0x466/0x530 [ 471.646059][T19633] ? __pfx_____sys_recvmsg+0x10/0x10 [ 471.646105][T19633] ? import_iovec+0x73/0xa0 [ 471.646139][T19633] ___sys_recvmsg+0x213/0x5a0 [ 471.646170][T19633] ? __pfx____sys_recvmsg+0x10/0x10 [ 471.646201][T19633] ? lock_acquire+0x115/0x350 [ 471.646266][T19633] do_recvmmsg+0x31a/0x800 [ 471.646302][T19633] ? __pfx_do_recvmmsg+0x10/0x10 [ 471.646341][T19633] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 471.646374][T19633] ? fdget+0x1ac/0x250 [ 471.646410][T19633] __x64_sys_recvmmsg+0x198/0x250 [ 471.646440][T19633] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 471.646479][T19633] do_syscall_64+0x166/0x520 [ 471.646503][T19633] ? trace_irq_disable+0x3b/0x140 [ 471.646531][T19633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.646553][T19633] ? clear_bhb_loop+0x70/0xc0 [ 471.646580][T19633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.646602][T19633] RIP: 0033:0x7f7c1979fb19 [ 471.646622][T19633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.646649][T19633] RSP: 002b:00007f7c1a747028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 471.646671][T19633] RAX: ffffffffffffffda RBX: 00007f7c19a25fa0 RCX: 00007f7c1979fb19 [ 471.646686][T19633] RDX: 0000000000000005 RSI: 0000200000004200 RDI: 0000000000000003 [ 471.646699][T19633] RBP: 00007f7c1a747090 R08: 0000000000000000 R09: 0000000000000000 [ 471.646712][T19633] R10: 0000000040000102 R11: 0000000000000246 R12: 0000000000000002 [ 471.646725][T19633] R13: 00007f7c19a26038 R14: 00007f7c19a25fa0 R15: 00007ffd014fb348 [ 471.646759][T19633] [ 471.647651][ T6890] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.986572][ T9906] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.986639][ T9906] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.996519][ T3333] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.102696][T19645] syz_tun: entered allmulticast mode [ 472.113602][T19644] syz_tun: left allmulticast mode [ 472.160314][T19646] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3615'. [ 472.221175][T19652] netlink: 'syz.1.3620': attribute type 1 has an invalid length. [ 472.224841][T19654] ip_tables: iptables: counters copy to user failed while replacing table [ 472.342967][T19661] netlink: 21 bytes leftover after parsing attributes in process `syz.1.3620'. [ 472.592194][T19655] syzkaller1: entered promiscuous mode [ 472.592216][T19655] syzkaller1: entered allmulticast mode [ 472.791626][T19672] netlink: Unknown conntrack attr (type=28, max=9) [ 472.805632][T19682] bridge0: port 3(syz_tun) entered blocking state [ 472.805762][T19682] bridge0: port 3(syz_tun) entered disabled state [ 472.805933][T19682] syz_tun: entered allmulticast mode [ 472.831220][T19682] syz_tun: entered promiscuous mode [ 472.831948][T19682] bridge0: port 3(syz_tun) entered blocking state [ 472.832069][T19682] bridge0: port 3(syz_tun) entered forwarding state [ 496.407584][ T12] pim6reg: left allmulticast mode [ 496.574356][ T12] team0: Port device xfrm0 removed [ 496.761871][ T12] bond0 (unregistering): Released all slaves [ 496.772301][ T12] bond1 (unregistering): Released all slaves [ 496.788118][ T12] bond2 (unregistering): Released all slaves [ 496.805874][ T12] bond3 (unregistering): Released all slaves [ 496.833175][ T12] bond4 (unregistering): Released all slaves [ 496.850037][ T12] bond5 (unregistering): Released all slaves [ 496.864830][ T12] bond6 (unregistering): Released all slaves [ 496.879864][ T12] bond7 (unregistering): Released all slaves [ 496.900490][ T12] bond8 (unregistering): Released all slaves [ 496.923219][ T12] bond9 (unregistering): Released all slaves [ 496.941824][ T12] bond10 (unregistering): Released all slaves [ 496.959909][ T12] bond11 (unregistering): Released all slaves [ 496.974724][ T12] bond12 (unregistering): Released all slaves [ 496.989207][ T12] bond13 (unregistering): Released all slaves [ 497.022691][ T12] bond14 (unregistering): Released all slaves [ 497.040436][ T12] bond15 (unregistering): Released all slaves [ 497.055785][ T12] bond16 (unregistering): Released all slaves [ 497.075631][ T12] bond17 (unregistering): Released all slaves [ 497.287957][ T12] tipc: Disabling bearer [ 497.296458][ T12] tipc: Left network mode [ 497.450407][ T12] IPVS: stopping backup sync thread 15123 ... [ 497.976521][ T12] veth1_macvtap: left promiscuous mode [ 497.976559][ T12] veth0_macvtap: left promiscuous mode [ 497.976683][ T12] veth1_vlan: left promiscuous mode [ 497.976844][ T12] veth0_vlan: left promiscuous mode [ 498.986735][ T12] IPVS: stop unused estimator thread 0... [ 501.486651][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 521.967744][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 524.047573][ T5639] Bluetooth: hci5: command 0x0406 tx timeout [ 528.113316][T19834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3637'. [ 528.436282][ T3333] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.436318][ T3333] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.625814][T19869] team0: Device ipvlan0 failed to register rx_handler [ 528.825469][T19875] sctp: [Deprecated]: syz.1.3646 (pid 19875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 528.825469][T19875] Use struct sctp_sack_info instead [ 528.968949][T19881] netlink: 'syz.1.3648': attribute type 15 has an invalid length. [ 528.991990][T19883] netlink: 'syz.3.3649': attribute type 29 has an invalid length. [ 528.992013][T19883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3649'. [ 528.992280][T19883] netlink: 'syz.3.3649': attribute type 29 has an invalid length. [ 528.992297][T19883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3649'. [ 529.033123][T19884] netlink: 'syz.3.3649': attribute type 29 has an invalid length. [ 529.033145][T19884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3649'. [ 529.033475][T19885] netlink: 'syz.3.3649': attribute type 29 has an invalid length. [ 529.033492][T19885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3649'. [ 529.193766][T19892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3650'. [ 529.422086][T19906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3656'. [ 531.218357][T20005] vcan0: tx address claim with different name [ 531.300331][T20008] netlink: 'syz.3.3682': attribute type 7 has an invalid length. [ 531.407267][T20018] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 531.428681][T20008] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3682'. [ 531.452239][T20018] xt_hashlimit: size too large, truncated to 1048576 [ 531.565612][T20021] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.615758][T20021] bridge_slave_0 (unregistering): left allmulticast mode [ 531.615789][T20021] bridge_slave_0 (unregistering): left promiscuous mode [ 531.615871][T20021] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.361672][T20038] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 532.888077][T20052] workqueue: name exceeds WQ_NAME_LEN. Truncating to: (€h\E3~‘§˜Àϱøoˆõ£R!Fo¹?£¥Ð< [ 533.063887][T20054] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 533.612056][T20088] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3707'. [ 533.700342][T20091] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3708'. [ 533.995187][T20117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 534.145737][T20126] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3714'. [ 534.146792][T20129] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3714'. [ 534.354569][T20138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3717'. [ 534.354601][T20138] netlink: 'syz.3.3717': attribute type 8 has an invalid length. [ 534.456003][T20150] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3719'. [ 534.612731][T20159] netlink: 'syz.0.3723': attribute type 4 has an invalid length. [ 534.647335][T20159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3723'. [ 534.647372][T20159] netlink: 'syz.0.3723': attribute type 10 has an invalid length. [ 534.647389][T20159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3723'. [ 534.795765][T20165] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3725'. [ 534.940884][T20178] Bluetooth: MGMT ver 1.23 [ 534.974717][T20178] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3730'. [ 535.237454][ T5650] Bluetooth: hci3: unexpected event 0x05 length: 3 < 4 [ 535.240371][T20190] tipc: Started in network mode [ 535.240433][T20190] tipc: Node identity ac14142f, cluster identity 4711 [ 535.240668][T20190] tipc: New replicast peer: 0.0.0.0 [ 535.240886][T20190] tipc: Enabled bearer , priority 10 [ 535.512413][T20184] netlink: 'syz.0.3732': attribute type 1 has an invalid length. [ 535.550050][T20184] bond4: entered promiscuous mode [ 535.550607][T20184] 8021q: adding VLAN 0 to HW filter on device bond4 [ 536.431786][T20238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 536.431806][T20238] IPv6: NLM_F_CREATE should be set when creating new route [ 536.431858][T20238] IPv6: NLM_F_CREATE should be set when creating new route [ 536.431885][T20238] IPv6: NLM_F_CREATE should be set when creating new route [ 536.505450][T20239] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 536.651924][ T5761] tipc: Node number set to 2886997039 [ 536.937080][T20253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.129966][T20251] gretap1: entered promiscuous mode [ 537.129993][T20251] gretap1: entered allmulticast mode [ 538.856513][T20292] __nla_validate_parse: 7 callbacks suppressed [ 538.856536][T20292] netlink: 5920 bytes leftover after parsing attributes in process `syz.1.3757'. [ 538.856552][T20292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3757'. [ 538.863259][T20293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3757'. [ 539.411001][ T5639] Bluetooth: hci1: command 0x0406 tx timeout [ 539.529976][T20320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3764'. [ 539.533121][T20319] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3765'. [ 539.550620][T20321] xt_l2tp: wrong L2TP version: 255 [ 539.700710][T20324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3765'. [ 543.408335][T20424] netlink: 29 bytes leftover after parsing attributes in process `syz.3.3788'. [ 544.294879][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.294909][T20447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.319295][T20447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.319322][T20447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.654752][T20456] tipc: Started in network mode [ 544.654785][T20456] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 544.655173][T20456] tipc: Enabled bearer , priority 0 [ 544.785327][T20463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3802'. [ 544.785350][T20463] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3802'. [ 544.907704][T20469] ip_tables: iptables: counters copy to user failed while replacing table [ 545.237712][T20479] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3804'. [ 545.541049][T20495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3810'. [ 545.542616][T20496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3810'. [ 545.619626][T20495] macvtap1: entered promiscuous mode [ 545.619653][T20495] vlan0: entered promiscuous mode [ 545.620270][T20495] macvtap1: entered allmulticast mode [ 545.620288][T20495] vlan0: entered allmulticast mode [ 545.620301][T20495] veth0_vlan: entered allmulticast mode [ 545.794016][T20499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3811'. [ 545.844940][T20496] macvtap2: entered promiscuous mode [ 545.845169][T20496] macvtap2: entered allmulticast mode [ 545.859273][ T6521] tipc: Node number set to 43690 [ 546.006196][T20503] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3812'. [ 546.361365][T20520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3817'. [ 546.680986][T20520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.733655][T20523] bond0: entered promiscuous mode [ 546.733684][T20523] bond0: entered allmulticast mode [ 546.829614][T20515] macvlan2: entered promiscuous mode [ 546.829641][T20515] macvlan2: entered allmulticast mode [ 546.834581][T20515] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 546.909852][T20538] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3819'. [ 547.021656][T20547] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3819'. [ 547.514232][T20548] syzkaller1: entered allmulticast mode [ 548.708540][T20595] syz_tun: entered allmulticast mode [ 548.765155][T20593] syz_tun: left allmulticast mode [ 549.652505][ T5639] Bluetooth: hci4: command 0x0406 tx timeout [ 549.805960][T20627] ip_tables: iptables: counters copy to user failed while replacing table [ 549.940766][T20644] netlink: ct family unspecified [ 550.169977][T20627] syzkaller1: entered promiscuous mode [ 550.170001][T20627] syzkaller1: entered allmulticast mode [ 550.403660][T20662] netlink: 'syz.2.3845': attribute type 1 has an invalid length. [ 550.522966][T20662] bond3: entered promiscuous mode [ 550.524069][T20662] 8021q: adding VLAN 0 to HW filter on device bond3 [ 552.757270][T20670] __nla_validate_parse: 4 callbacks suppressed [ 552.757323][T20670] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3846'. [ 553.453483][T20693] netlink: 'syz.1.3852': attribute type 1 has an invalid length. [ 553.688794][T20693] 8021q: adding VLAN 0 to HW filter on device bond3 [ 553.810615][T20695] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.831057][T20695] bond3: (slave team0): making interface the new active one [ 553.833159][T20695] bond3: (slave team0): Enslaving as an active interface with an up link [ 553.910232][ T9907] bond3: (slave team0): link status definitely down, disabling slave [ 553.912336][ T9907] bond3: now running without any active interface! [ 554.325103][T20708] syzkaller1: entered promiscuous mode [ 554.325126][T20708] syzkaller1: entered allmulticast mode [ 554.612144][T20724] netlink: 'syz.0.3857': attribute type 12 has an invalid length. [ 554.773955][ T5639] Bluetooth: hci3: command 0x0406 tx timeout [ 555.056292][T20742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3860'. [ 555.132580][T20743] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3860'. [ 555.133722][T20748] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3860'. [ 555.332873][T20754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3863'. [ 555.714980][T20754] hsr_slave_1 (unregistering): left promiscuous mode [ 556.094302][T20779] netlink: 'syz.4.3867': attribute type 11 has an invalid length. [ 556.459310][ T5650] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 556.508024][T20788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3869'. [ 557.489870][T20824] xt_ipcomp: unknown flags 1D [ 557.642834][T20824] xt_ipcomp: unknown flags 1D [ 557.969010][T20836] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3879'. [ 558.123599][T20836] syzkaller1: entered promiscuous mode [ 558.123623][T20836] syzkaller1: entered allmulticast mode [ 558.593764][T20851] netlink: 'syz.4.3884': attribute type 11 has an invalid length. [ 558.951792][T20863] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3888'. [ 559.094447][T20868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3885'. [ 559.200281][T20871] netlink: 'syz.2.3885': attribute type 1 has an invalid length. [ 559.437985][T20867] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3885'. [ 559.681366][T20875] team0: Device ipvlan0 failed to register rx_handler [ 559.925114][T20889] ip_tables: iptables: counters copy to user failed while replacing table [ 560.012198][T20891] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3895'. [ 560.325949][T20900] atomic_op ffff8880380819e0 conn xmit_atomic 0000000000000000 [ 560.340777][T20896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3896'. [ 560.363849][T20901] xt_nat: multiple ranges no longer supported [ 560.840255][T20915] netlink: 'syz.1.3900': attribute type 13 has an invalid length. [ 560.840278][T20915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3900'. [ 560.904579][T20915] netlink: 'syz.1.3900': attribute type 13 has an invalid length. [ 560.904603][T20915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3900'. [ 561.284354][T20925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3903'. [ 561.663838][T20938] tunl0: entered promiscuous mode [ 561.675591][T20938] netlink: 'syz.0.3909': attribute type 4 has an invalid length. [ 561.675612][T20938] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3909'. [ 562.300473][T20952] netlink: 'syz.2.3915': attribute type 1 has an invalid length. [ 562.923558][T20965] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 563.004122][T20971] ip6t_rt: address list match requested but addrnr is 0 [ 563.060496][T20968] __nla_validate_parse: 2 callbacks suppressed [ 563.060517][T20968] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3921'. [ 563.222855][T20977] FAULT_INJECTION: forcing a failure. [ 563.222855][T20977] name failslab, interval 1, probability 0, space 0, times 0 [ 563.222889][T20977] CPU: 1 UID: 0 PID: 20977 Comm: syz.1.3924 Not tainted syzkaller #0 PREEMPT(full) [ 563.222913][T20977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 563.222927][T20977] Call Trace: [ 563.222935][T20977] [ 563.222944][T20977] dump_stack_lvl+0xe8/0x150 [ 563.222986][T20977] should_fail_ex+0x3eb/0x540 [ 563.223019][T20977] should_failslab+0xa8/0x100 [ 563.223054][T20977] __kmalloc_noprof+0xf9/0x710 [ 563.223081][T20977] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 563.223107][T20977] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 563.223142][T20977] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 563.223178][T20977] genl_family_rcv_msg_doit+0xda/0x340 [ 563.223211][T20977] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 563.223246][T20977] ? apparmor_capable+0x126/0x170 [ 563.223276][T20977] ? bpf_lsm_capable+0x9/0x20 [ 563.223312][T20977] ? security_capable+0x7e/0x2c0 [ 563.223354][T20977] genl_rcv_msg+0x614/0x7a0 [ 563.223387][T20977] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.223413][T20977] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 563.223437][T20977] ? __pfx_nl80211_del_key+0x10/0x10 [ 563.223465][T20977] ? __pfx_nl80211_post_doit+0x10/0x10 [ 563.223507][T20977] netlink_rcv_skb+0x226/0x4a0 [ 563.223541][T20977] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.223568][T20977] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 563.223619][T20977] ? down_read+0x2b9/0x320 [ 563.223654][T20977] genl_rcv+0x28/0x40 [ 563.223676][T20977] netlink_unicast+0x8ef/0xa80 [ 563.223746][T20977] netlink_sendmsg+0x7f0/0xb20 [ 563.223787][T20977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.223825][T20977] ? aa_sock_msg_perm+0x144/0x210 [ 563.223853][T20977] ? apparmor_socket_sendmsg+0x98/0x360 [ 563.223887][T20977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.223919][T20977] sock_sendmsg_nosec+0x14e/0x190 [ 563.223953][T20977] ____sys_sendmsg+0x54e/0x850 [ 563.223985][T20977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 563.224020][T20977] ? import_iovec+0x73/0xa0 [ 563.224053][T20977] ___sys_sendmsg+0x2a5/0x360 [ 563.224075][T20977] ? __lock_acquire+0x747/0x2de0 [ 563.224110][T20977] ? __pfx____sys_sendmsg+0x10/0x10 [ 563.224179][T20977] ? __fget_files+0x3a2/0x420 [ 563.224208][T20977] ? __fget_files+0x2a/0x420 [ 563.224247][T20977] __x64_sys_sendmsg+0x1b1/0x290 [ 563.224277][T20977] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 563.224330][T20977] do_syscall_64+0x166/0x520 [ 563.224357][T20977] ? trace_irq_disable+0x3b/0x140 [ 563.224388][T20977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.224412][T20977] ? clear_bhb_loop+0x70/0xc0 [ 563.224441][T20977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.224464][T20977] RIP: 0033:0x7f1975d9fb19 [ 563.224486][T20977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.224505][T20977] RSP: 002b:00007f1976c95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.224530][T20977] RAX: ffffffffffffffda RBX: 00007f1976025fa0 RCX: 00007f1975d9fb19 [ 563.224547][T20977] RDX: 0000000000000004 RSI: 0000200000000740 RDI: 0000000000000004 [ 563.224562][T20977] RBP: 00007f1976c95090 R08: 0000000000000000 R09: 0000000000000000 [ 563.224577][T20977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.224591][T20977] R13: 00007f1976026038 R14: 00007f1976025fa0 R15: 00007fff7278cfa8 [ 563.224630][T20977] [ 563.837485][T20984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3926'. [ 563.934395][T20989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3929'. [ 564.083176][T20986] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 564.083263][T20986] gretap2: entered promiscuous mode [ 564.083280][T20986] gretap2: entered allmulticast mode [ 564.315003][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 564.331599][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 564.335225][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 564.358546][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 564.362757][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 565.049862][T21026] FAULT_INJECTION: forcing a failure. [ 565.049862][T21026] name failslab, interval 1, probability 0, space 0, times 0 [ 565.049907][T21026] CPU: 1 UID: 0 PID: 21026 Comm: syz.0.3937 Not tainted syzkaller #0 PREEMPT(full) [ 565.049931][T21026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 565.049944][T21026] Call Trace: [ 565.049952][T21026] [ 565.049979][T21026] dump_stack_lvl+0xe8/0x150 [ 565.050020][T21026] should_fail_ex+0x3eb/0x540 [ 565.050049][T21026] should_failslab+0xa8/0x100 [ 565.050080][T21026] __kmalloc_noprof+0xf9/0x710 [ 565.050105][T21026] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 565.050129][T21026] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 565.050164][T21026] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 565.050197][T21026] genl_family_rcv_msg_doit+0xda/0x340 [ 565.050226][T21026] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 565.050258][T21026] ? apparmor_capable+0x126/0x170 [ 565.050285][T21026] ? bpf_lsm_capable+0x9/0x20 [ 565.050314][T21026] ? security_capable+0x7e/0x2c0 [ 565.050349][T21026] genl_rcv_msg+0x614/0x7a0 [ 565.050377][T21026] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.050395][T21026] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 565.050415][T21026] ? __pfx_nl80211_del_key+0x10/0x10 [ 565.050437][T21026] ? __pfx_nl80211_post_doit+0x10/0x10 [ 565.050471][T21026] netlink_rcv_skb+0x226/0x4a0 [ 565.050501][T21026] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.050525][T21026] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 565.050578][T21026] ? down_read+0x2b9/0x320 [ 565.050609][T21026] genl_rcv+0x28/0x40 [ 565.050629][T21026] netlink_unicast+0x8ef/0xa80 [ 565.050673][T21026] netlink_sendmsg+0x7f0/0xb20 [ 565.050710][T21026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.050744][T21026] ? aa_sock_msg_perm+0x144/0x210 [ 565.050770][T21026] ? apparmor_socket_sendmsg+0x98/0x360 [ 565.050802][T21026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.050831][T21026] sock_sendmsg_nosec+0x14e/0x190 [ 565.050863][T21026] ____sys_sendmsg+0x54e/0x850 [ 565.050892][T21026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 565.050926][T21026] ? import_iovec+0x73/0xa0 [ 565.050958][T21026] ___sys_sendmsg+0x2a5/0x360 [ 565.050977][T21026] ? __lock_acquire+0x747/0x2de0 [ 565.051010][T21026] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.051074][T21026] ? __fget_files+0x3a2/0x420 [ 565.051100][T21026] ? __fget_files+0x2a/0x420 [ 565.051135][T21026] __x64_sys_sendmsg+0x1b1/0x290 [ 565.051162][T21026] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 565.051210][T21026] do_syscall_64+0x166/0x520 [ 565.051234][T21026] ? trace_irq_disable+0x3b/0x140 [ 565.051263][T21026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.051284][T21026] ? clear_bhb_loop+0x70/0xc0 [ 565.051311][T21026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.051332][T21026] RIP: 0033:0x7f2caa19fb19 [ 565.051352][T21026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.051370][T21026] RSP: 002b:00007f2cab0cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 565.051393][T21026] RAX: ffffffffffffffda RBX: 00007f2caa425fa0 RCX: 00007f2caa19fb19 [ 565.051408][T21026] RDX: 0000000000000004 RSI: 0000200000000740 RDI: 0000000000000004 [ 565.051421][T21026] RBP: 00007f2cab0cb090 R08: 0000000000000000 R09: 0000000000000000 [ 565.051452][T21026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.051466][T21026] R13: 00007f2caa426038 R14: 00007f2caa425fa0 R15: 00007ffc6b578d58 [ 565.051504][T21026] [ 565.923094][T21038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.960738][T21049] netlink: 'syz.4.3942': attribute type 1 has an invalid length. [ 565.977076][T21039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.031790][T21051] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3942'. [ 566.061443][T21038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.197016][T20994] rxe_eth0 speed is unknown, defaulting to 1000 [ 566.446677][ T5650] Bluetooth: hci0: command tx timeout [ 566.878359][T21073] FAULT_INJECTION: forcing a failure. [ 566.878359][T21073] name failslab, interval 1, probability 0, space 0, times 0 [ 566.878401][T21073] CPU: 0 UID: 0 PID: 21073 Comm: syz.0.3948 Not tainted syzkaller #0 PREEMPT(full) [ 566.878428][T21073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 566.878441][T21073] Call Trace: [ 566.878450][T21073] [ 566.878460][T21073] dump_stack_lvl+0xe8/0x150 [ 566.878501][T21073] should_fail_ex+0x3eb/0x540 [ 566.878533][T21073] ? __alloc_skb+0x1db/0x7a0 [ 566.878567][T21073] should_failslab+0xa8/0x100 [ 566.878603][T21073] ? __alloc_skb+0x1db/0x7a0 [ 566.878634][T21073] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 566.878661][T21073] ? __alloc_skb+0x18d/0x7a0 [ 566.878694][T21073] ? __alloc_skb+0x1db/0x7a0 [ 566.878735][T21073] __alloc_skb+0x1db/0x7a0 [ 566.878774][T21073] netlink_ack+0x136/0xb30 [ 566.878802][T21073] ? __pfx_genl_rcv_msg+0x10/0x10 [ 566.878826][T21073] ? __pfx_nl80211_post_doit+0x10/0x10 [ 566.878868][T21073] netlink_rcv_skb+0x2a4/0x4a0 [ 566.878907][T21073] ? __pfx_genl_rcv_msg+0x10/0x10 [ 566.878934][T21073] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 566.878986][T21073] ? down_read+0x2b9/0x320 [ 566.879021][T21073] genl_rcv+0x28/0x40 [ 566.879043][T21073] netlink_unicast+0x8ef/0xa80 [ 566.879095][T21073] netlink_sendmsg+0x7f0/0xb20 [ 566.879136][T21073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.879172][T21073] ? aa_sock_msg_perm+0x144/0x210 [ 566.879202][T21073] ? apparmor_socket_sendmsg+0x98/0x360 [ 566.879237][T21073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.879269][T21073] sock_sendmsg_nosec+0x14e/0x190 [ 566.879303][T21073] ____sys_sendmsg+0x54e/0x850 [ 566.879335][T21073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 566.879371][T21073] ? import_iovec+0x73/0xa0 [ 566.879412][T21073] ___sys_sendmsg+0x2a5/0x360 [ 566.879434][T21073] ? __lock_acquire+0x747/0x2de0 [ 566.879470][T21073] ? __pfx____sys_sendmsg+0x10/0x10 [ 566.879552][T21073] ? __fget_files+0x3a2/0x420 [ 566.879578][T21073] ? __fget_files+0x2a/0x420 [ 566.879615][T21073] __x64_sys_sendmsg+0x1b1/0x290 [ 566.879642][T21073] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 566.879692][T21073] do_syscall_64+0x166/0x520 [ 566.879718][T21073] ? trace_irq_disable+0x3b/0x140 [ 566.879748][T21073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.879770][T21073] ? clear_bhb_loop+0x70/0xc0 [ 566.879799][T21073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.879821][T21073] RIP: 0033:0x7f2caa19fb19 [ 566.879841][T21073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.879860][T21073] RSP: 002b:00007f2cab0cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.879884][T21073] RAX: ffffffffffffffda RBX: 00007f2caa425fa0 RCX: 00007f2caa19fb19 [ 566.879899][T21073] RDX: 0000000000000004 RSI: 0000200000000740 RDI: 0000000000000004 [ 566.879914][T21073] RBP: 00007f2cab0cb090 R08: 0000000000000000 R09: 0000000000000000 [ 566.879927][T21073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.879940][T21073] R13: 00007f2caa426038 R14: 00007f2caa425fa0 R15: 00007ffc6b578d58 [ 566.879977][T21073] [ 567.320272][T20994] lo speed is unknown, defaulting to 1000 [ 567.810081][T21092] netlink: 'syz.0.3953': attribute type 1 has an invalid length. [ 567.893521][T20994] lo speed is unknown, defaulting to 1000 [ 567.988355][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.988497][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.019709][T21099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3956'. [ 568.019738][T21099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3956'. [ 568.019817][T21099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3956'. [ 568.189884][T21104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3956'. [ 568.189916][T21104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3956'. [ 568.189987][T21104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3956'. [ 568.526287][ T5650] Bluetooth: hci0: command tx timeout [ 568.639713][T21119] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 568.645381][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3959'. [ 569.131246][T21134] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3964'. [ 569.150267][T21134] netlink: 'syz.1.3964': attribute type 83 has an invalid length. [ 569.160652][T21129] netlink: 'syz.2.3963': attribute type 11 has an invalid length. [ 569.220530][T21086] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 569.820408][T20994] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.820531][T20994] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.822605][T20994] bridge_slave_0: entered allmulticast mode [ 569.849106][T20994] bridge_slave_0: entered promiscuous mode [ 569.858995][T20994] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.859181][T20994] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.859329][T20994] bridge_slave_1: entered allmulticast mode [ 569.861068][T20994] bridge_slave_1: entered promiscuous mode [ 569.927892][T20994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.931139][T20994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.982211][T20994] team0: Port device team_slave_0 added [ 569.985244][T20994] team0: Port device team_slave_1 added [ 570.078481][T21151] vlan3: entered allmulticast mode [ 570.078522][T21151] veth0_vlan: entered allmulticast mode [ 570.102597][T20994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.102615][T20994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.102643][T20994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.314274][T20994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.314294][T20994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.314323][T20994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.606186][ T5650] Bluetooth: hci0: command tx timeout [ 570.777008][T20994] hsr_slave_0: entered promiscuous mode [ 570.781830][T20994] hsr_slave_1: entered promiscuous mode [ 570.782596][T20994] debugfs: 'hsr0' already exists in 'hsr' [ 570.782616][T20994] Cannot create hsr debugfs directory [ 570.830224][T21164] FAULT_INJECTION: forcing a failure. [ 570.830224][T21164] name failslab, interval 1, probability 0, space 0, times 0 [ 570.830257][T21164] CPU: 1 UID: 0 PID: 21164 Comm: syz.2.3972 Not tainted syzkaller #0 PREEMPT(full) [ 570.830281][T21164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 570.830295][T21164] Call Trace: [ 570.830304][T21164] [ 570.830313][T21164] dump_stack_lvl+0xe8/0x150 [ 570.830356][T21164] should_fail_ex+0x3eb/0x540 [ 570.830389][T21164] should_failslab+0xa8/0x100 [ 570.830426][T21164] ? skb_clone+0x212/0x3a0 [ 570.830452][T21164] kmem_cache_alloc_noprof+0x9c/0x600 [ 570.830482][T21164] ? skb_clone+0x212/0x3a0 [ 570.830516][T21164] skb_clone+0x212/0x3a0 [ 570.830553][T21164] __netlink_deliver_tap+0x355/0x6e0 [ 570.830599][T21164] ? netlink_deliver_tap+0x2e/0x1b0 [ 570.830633][T21164] netlink_deliver_tap+0x19c/0x1b0 [ 570.830666][T21164] netlink_sendskb+0x68/0x140 [ 570.830699][T21164] netlink_rcv_skb+0x2a4/0x4a0 [ 570.830733][T21164] ? __pfx_genl_rcv_msg+0x10/0x10 [ 570.830760][T21164] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 570.830811][T21164] ? down_read+0x2b9/0x320 [ 570.830847][T21164] genl_rcv+0x28/0x40 [ 570.830869][T21164] netlink_unicast+0x8ef/0xa80 [ 570.830920][T21164] netlink_sendmsg+0x7f0/0xb20 [ 570.830978][T21164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 570.831031][T21164] ? aa_sock_msg_perm+0x144/0x210 [ 570.831060][T21164] ? apparmor_socket_sendmsg+0x98/0x360 [ 570.831095][T21164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 570.831125][T21164] sock_sendmsg_nosec+0x14e/0x190 [ 570.831160][T21164] ____sys_sendmsg+0x54e/0x850 [ 570.831191][T21164] ? __pfx_____sys_sendmsg+0x10/0x10 [ 570.831227][T21164] ? import_iovec+0x73/0xa0 [ 570.831261][T21164] ___sys_sendmsg+0x2a5/0x360 [ 570.831282][T21164] ? __lock_acquire+0x747/0x2de0 [ 570.831335][T21164] ? __pfx____sys_sendmsg+0x10/0x10 [ 570.831407][T21164] ? __fget_files+0x3a2/0x420 [ 570.831434][T21164] ? __fget_files+0x2a/0x420 [ 570.831474][T21164] __x64_sys_sendmsg+0x1b1/0x290 [ 570.831503][T21164] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 570.831561][T21164] do_syscall_64+0x166/0x520 [ 570.831588][T21164] ? trace_irq_disable+0x3b/0x140 [ 570.831619][T21164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.831643][T21164] ? clear_bhb_loop+0x70/0xc0 [ 570.831672][T21164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.831707][T21164] RIP: 0033:0x7f7c1979fb19 [ 570.831727][T21164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.831745][T21164] RSP: 002b:00007f7c1a747028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 570.831768][T21164] RAX: ffffffffffffffda RBX: 00007f7c19a25fa0 RCX: 00007f7c1979fb19 [ 570.831784][T21164] RDX: 0000000000000004 RSI: 0000200000000740 RDI: 0000000000000004 [ 570.831799][T21164] RBP: 00007f7c1a747090 R08: 0000000000000000 R09: 0000000000000000 [ 570.831813][T21164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.831826][T21164] R13: 00007f7c19a26038 R14: 00007f7c19a25fa0 R15: 00007ffd014fb348 [ 570.831865][T21164] [ 571.826194][ T28] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 1033 jiffies old. [ 572.411752][T21199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3981'. [ 572.586652][T21210] FAULT_INJECTION: forcing a failure. [ 572.586652][T21210] name failslab, interval 1, probability 0, space 0, times 0 [ 572.586685][T21210] CPU: 1 UID: 0 PID: 21210 Comm: syz.1.3984 Not tainted syzkaller #0 PREEMPT(full) [ 572.586708][T21210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 572.586720][T21210] Call Trace: [ 572.586745][T21210] [ 572.586754][T21210] dump_stack_lvl+0xe8/0x150 [ 572.586794][T21210] should_fail_ex+0x3eb/0x540 [ 572.586829][T21210] should_failslab+0xa8/0x100 [ 572.586870][T21210] ? skb_clone+0x212/0x3a0 [ 572.586897][T21210] kmem_cache_alloc_noprof+0x9c/0x600 [ 572.586926][T21210] ? skb_clone+0x212/0x3a0 [ 572.586960][T21210] skb_clone+0x212/0x3a0 [ 572.586990][T21210] __netlink_deliver_tap+0x355/0x6e0 [ 572.587036][T21210] ? netlink_deliver_tap+0x2e/0x1b0 [ 572.587071][T21210] netlink_deliver_tap+0x19c/0x1b0 [ 572.587106][T21210] netlink_sendskb+0x68/0x140 [ 572.587149][T21210] netlink_rcv_skb+0x2a4/0x4a0 [ 572.587179][T21210] ? __pfx_genl_rcv_msg+0x10/0x10 [ 572.587205][T21210] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 572.587253][T21210] ? down_read+0x2b9/0x320 [ 572.587287][T21210] genl_rcv+0x28/0x40 [ 572.587308][T21210] netlink_unicast+0x8ef/0xa80 [ 572.587355][T21210] netlink_sendmsg+0x7f0/0xb20 [ 572.587393][T21210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.587428][T21210] ? aa_sock_msg_perm+0x144/0x210 [ 572.587456][T21210] ? apparmor_socket_sendmsg+0x98/0x360 [ 572.587489][T21210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.587519][T21210] sock_sendmsg_nosec+0x14e/0x190 [ 572.587550][T21210] ____sys_sendmsg+0x54e/0x850 [ 572.587579][T21210] ? __pfx_____sys_sendmsg+0x10/0x10 [ 572.587613][T21210] ? import_iovec+0x73/0xa0 [ 572.587644][T21210] ___sys_sendmsg+0x2a5/0x360 [ 572.587665][T21210] ? __lock_acquire+0x747/0x2de0 [ 572.587698][T21210] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.587764][T21210] ? __fget_files+0x3a2/0x420 [ 572.587788][T21210] ? __fget_files+0x2a/0x420 [ 572.587825][T21210] __x64_sys_sendmsg+0x1b1/0x290 [ 572.587857][T21210] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 572.587906][T21210] do_syscall_64+0x166/0x520 [ 572.587929][T21210] ? trace_irq_disable+0x3b/0x140 [ 572.587958][T21210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.587980][T21210] ? clear_bhb_loop+0x70/0xc0 [ 572.588006][T21210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.588028][T21210] RIP: 0033:0x7f1975d9fb19 [ 572.588047][T21210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.588066][T21210] RSP: 002b:00007f1976c95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.588089][T21210] RAX: ffffffffffffffda RBX: 00007f1976025fa0 RCX: 00007f1975d9fb19 [ 572.588105][T21210] RDX: 0000000000000004 RSI: 0000200000000740 RDI: 0000000000000004 [ 572.588118][T21210] RBP: 00007f1976c95090 R08: 0000000000000000 R09: 0000000000000000 [ 572.588132][T21210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 572.588144][T21210] R13: 00007f1976026038 R14: 00007f1976025fa0 R15: 00007fff7278cfa8 [ 572.588181][T21210] [ 572.592407][T21205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3981'. [ 572.592429][T21205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3981'. [ 572.693651][ T5650] Bluetooth: hci0: command tx timeout [ 573.534667][T21220] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20004 [ 573.601767][ T9907] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.960095][ T5650] Bluetooth: hci4: unexpected event for opcode 0x00ea [ 573.961497][ T9907] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.254499][ T9907] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.303337][T20994] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 574.334776][T20994] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 574.344996][T20994] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 574.381819][T20994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 574.465534][T20994] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 574.506035][T20994] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 574.621807][ T9907] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.703254][T20994] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 574.735226][T20994] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 574.770497][T21256] veth0: entered promiscuous mode [ 574.834146][T21258] FAULT_INJECTION: forcing a failure. [ 574.834146][T21258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.834180][T21258] CPU: 1 UID: 0 PID: 21258 Comm: syz.1.3994 Not tainted syzkaller #0 PREEMPT(full) [ 574.834207][T21258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 574.834221][T21258] Call Trace: [ 574.834230][T21258] [ 574.834239][T21258] dump_stack_lvl+0xe8/0x150 [ 574.834283][T21258] should_fail_ex+0x3eb/0x540 [ 574.834318][T21258] _copy_from_user+0x2d/0xb0 [ 574.834349][T21258] kstrtouint_from_user+0xd6/0x180 [ 574.834377][T21258] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 574.834414][T21258] ? lock_acquire+0x115/0x350 [ 574.834451][T21258] proc_fail_nth_write+0x8e/0x210 [ 574.834489][T21258] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 574.834538][T21258] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 574.834577][T21258] vfs_write+0x296/0xba0 [ 574.834619][T21258] ? __pfx_vfs_write+0x10/0x10 [ 574.834653][T21258] ? __fget_files+0x2a/0x420 [ 574.834680][T21258] ? __fget_files+0x3a2/0x420 [ 574.834707][T21258] ? __fget_files+0x2a/0x420 [ 574.834740][T21258] ? fdget+0x1ac/0x250 [ 574.834778][T21258] ksys_write+0x150/0x270 [ 574.834812][T21258] ? __pfx_ksys_write+0x10/0x10 [ 574.834858][T21258] do_syscall_64+0x166/0x520 [ 574.834887][T21258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.834911][T21258] ? clear_bhb_loop+0x70/0xc0 [ 574.834941][T21258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.834965][T21258] RIP: 0033:0x7f1975d6034e [ 574.834987][T21258] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 574.835008][T21258] RSP: 002b:00007f1976c94fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 574.835033][T21258] RAX: ffffffffffffffda RBX: 00007f1976c956c0 RCX: 00007f1975d6034e [ 574.835050][T21258] RDX: 0000000000000001 RSI: 00007f1976c950a0 RDI: 0000000000000005 [ 574.835065][T21258] RBP: 00007f1976c95090 R08: 0000000000000000 R09: 0000000000000000 [ 574.835079][T21258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 574.835119][T21258] R13: 00007f1976026038 R14: 00007f1976025fa0 R15: 00007fff7278cfa8 [ 574.835160][T21258] [ 575.381595][T21250] veth0: left promiscuous mode [ 576.122258][T21294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4000'. [ 576.139276][ T9907] bridge_slave_1: left allmulticast mode [ 576.139313][ T9907] bridge_slave_1: left promiscuous mode [ 576.141083][ T9907] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.200138][ T9907] bridge_slave_0: left allmulticast mode [ 576.200165][ T9907] bridge_slave_0: left promiscuous mode [ 576.200389][ T9907] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.328044][ T9907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.355839][ T9907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.376670][ T9907] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 577.385845][ T9907] bond0 (unregistering): Released all slaves [ 577.428160][ T9907] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 577.428189][ T9907] veth0_to_bond: left promiscuous mode [ 577.432197][ T9907] veth0_to_bond: left allmulticast mode [ 577.446804][ T9907] bond1 (unregistering): Released all slaves [ 577.862049][ T9907] tipc: Disabling bearer [ 577.862202][ T9907] tipc: Left network mode [ 577.967670][ T5650] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 577.967750][ T5650] Bluetooth: hci4: Injecting HCI hardware error event [ 577.969843][ T5639] Bluetooth: hci4: hardware error 0x00 [ 578.008404][T21344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4005'. [ 578.061209][T21344] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 578.240883][T21319] rxe_eth0 speed is unknown, defaulting to 1000 [ 578.395812][T20994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.548977][T21349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4006'. [ 578.549014][T21349] netlink: 'syz.2.4006': attribute type 5 has an invalid length. [ 578.549031][T21349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4006'. [ 578.707578][T21349] geneve3: entered promiscuous mode [ 578.707604][T21349] geneve3: entered allmulticast mode [ 579.187485][ T9906] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 579.225927][T20994] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.288551][ T162] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 579.289621][ T162] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 579.706397][ T162] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 579.933083][T21366] bond3: entered promiscuous mode [ 579.933537][T21366] bond3: entered allmulticast mode [ 579.934913][T21366] 8021q: adding VLAN 0 to HW filter on device bond3 [ 579.976480][T21319] lo speed is unknown, defaulting to 1000 [ 580.136864][ T5639] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 580.327475][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.327594][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.381961][ T9906] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.382063][ T9906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.875731][ T30] audit: type=1800 audit(1793833180.851:8): pid=21392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4014" name="memory.events" dev="tmpfs" ino=746 res=0 errno=-22 [ 580.911162][T21392] netlink: 'syz.4.4014': attribute type 4 has an invalid length. [ 581.113590][ T5297] 8021q: adding VLAN 0 to HW filter on device eth2 [ 581.141569][T21319] lo speed is unknown, defaulting to 1000 [ 582.691578][T21429] netlink: 'syz.2.4021': attribute type 1 has an invalid length. [ 582.711174][T21428] netlink: 'syz.2.4021': attribute type 1 has an invalid length. [ 582.763133][T21432] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4022'. [ 582.811505][T21431] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4022'. [ 582.917604][ T28] rcu_tasks_wait_gp: rcu_tasks grace period number 13 (since boot) is 1049 jiffies old. [ 583.203056][T21443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4025'. [ 584.412808][ T9907] hsr_slave_0: left promiscuous mode [ 584.422789][ T9907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.422812][ T9907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.461469][ T9907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.461492][ T9907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.509966][ T9907] veth0_macvtap: left promiscuous mode [ 584.510095][ T9907] veth1_vlan: left promiscuous mode [ 584.510165][ T9907] veth0_vlan: left promiscuous mode [ 584.553781][T21471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4029'. [ 585.041510][T21481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4031'. [ 585.297940][ T9907] team0 (unregistering): Port device team_slave_1 removed [ 585.333272][ T9907] team0 (unregistering): Port device team_slave_0 removed [ 585.673378][ T5297] 8021q: adding VLAN 0 to HW filter on device eth3 [ 585.690034][T20994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.942336][T21491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4033'. [ 585.942656][T21491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4033'. [ 586.061251][T21496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4035'. [ 586.061461][T21496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4035'. [ 586.075387][T21496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4035'. [ 586.282209][T21504] vcan0: tx address claim with dlc 0 [ 586.629379][T21516] batman_adv: batadv0: Adding interface: syzkaller0 [ 586.629401][T21516] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.629436][T21516] batman_adv: batadv0: Interface activated: syzkaller0 [ 586.650520][T21522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.672826][T21514] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 586.748642][T21514] batman_adv: batadv0: Removing interface: syzkaller0 [ 586.788528][T21531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.080679][ T5297] 8021q: adding VLAN 0 to HW filter on device eth4 [ 587.162043][T21545] netlink: 'syz.0.4045': attribute type 1 has an invalid length. [ 587.247916][T21545] bond6: entered promiscuous mode [ 587.250086][T21545] 8021q: adding VLAN 0 to HW filter on device bond6 [ 587.275712][T20994] veth0_vlan: entered promiscuous mode [ 587.330061][T21545] bond6: (slave bridge3): making interface the new active one [ 587.330085][T21545] bridge3: entered promiscuous mode [ 587.331399][T21545] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 587.335862][T20994] veth1_vlan: entered promiscuous mode [ 587.557754][T20994] veth0_macvtap: entered promiscuous mode [ 587.580438][T20994] veth1_macvtap: entered promiscuous mode [ 587.637606][T21566] ip6t_rt: address list match requested but addrnr is 0 [ 587.663668][T20994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.709245][T20994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.821652][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.822990][ T162] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.823285][ T9906] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.823326][ T9906] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.163406][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.163429][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.378996][ T9906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.379019][ T9906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.410447][ T5297] 8021q: adding VLAN 0 to HW filter on device eth5 [ 588.471709][T21604] __nla_validate_parse: 3 callbacks suppressed [ 588.471729][T21604] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4057'. [ 588.471758][T21604] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4057'. [ 588.587854][T21603] xt_CT: You must specify a L4 protocol and not use inversions on it [ 588.680561][T21602] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 588.814874][T21626] FAULT_INJECTION: forcing a failure. [ 588.814874][T21626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.814907][T21626] CPU: 1 UID: 0 PID: 21626 Comm: syz.2.4062 Not tainted syzkaller #0 PREEMPT(full) [ 588.814933][T21626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 588.814946][T21626] Call Trace: [ 588.814955][T21626] [ 588.814964][T21626] dump_stack_lvl+0xe8/0x150 [ 588.815006][T21626] should_fail_ex+0x3eb/0x540 [ 588.815039][T21626] _copy_from_user+0x2d/0xb0 [ 588.815069][T21626] ___sys_recvmsg+0x173/0x5a0 [ 588.815103][T21626] ? __pfx____sys_recvmsg+0x10/0x10 [ 588.815133][T21626] ? lock_acquire+0x115/0x350 [ 588.815179][T21626] ? __fget_files+0x2a/0x420 [ 588.815206][T21626] ? __fget_files+0x3a2/0x420 [ 588.815232][T21626] ? __fget_files+0x2a/0x420 [ 588.815270][T21626] __x64_sys_recvmsg+0x1ae/0x290 [ 588.815299][T21626] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 588.815350][T21626] do_syscall_64+0x166/0x520 [ 588.815377][T21626] ? trace_irq_disable+0x3b/0x140 [ 588.815407][T21626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.815431][T21626] ? clear_bhb_loop+0x70/0xc0 [ 588.815460][T21626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.815482][T21626] RIP: 0033:0x7f7c1979fb19 [ 588.815509][T21626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.815529][T21626] RSP: 002b:00007f7c1a747028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 588.815554][T21626] RAX: ffffffffffffffda RBX: 00007f7c19a25fa0 RCX: 00007f7c1979fb19 [ 588.815571][T21626] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 588.815585][T21626] RBP: 00007f7c1a747090 R08: 0000000000000000 R09: 0000000000000000 [ 588.815600][T21626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.815613][T21626] R13: 00007f7c19a26038 R14: 00007f7c19a25fa0 R15: 00007ffd014fb348 [ 588.815650][T21626] [ 589.329872][T21648] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3928'. [ 589.330909][T21648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3928'. [ 589.330929][T21648] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3928'. [ 589.387040][T21648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3928'. [ 589.387063][T21648] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3928'. [ 589.398025][ T9907] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.400405][ T9923] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.400603][ T9923] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.400786][ T9923] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.447257][T21653] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3928'. [ 589.448411][T21657] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3928'. [ 589.448430][T21657] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3928'. [ 589.731757][T21669] ip_tables: iptables: counters copy to user failed while replacing table [ 589.749368][T21669] syzkaller1: entered promiscuous mode [ 589.749390][T21669] syzkaller1: entered allmulticast mode [ 589.752039][T21669] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 22 [ 589.783541][T21669] netlink: 'syz.5.4068': attribute type 1 has an invalid length. [ 589.851586][T21671] xt_limit: Overflow, try lower: 536871034/127 [ 590.132275][T21680] veth0_to_bond: entered allmulticast mode [ 590.324415][T21687] veth1_vlan: left promiscuous mode [ 590.512272][T21708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 590.533008][T13273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.717419][T21715] block nbd3: Unsupported socket: should be TCP or UNIX. [ 590.862716][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880415cf800: rx timeout, send abort [ 590.928004][ T9909] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.929115][ T9909] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.929161][ T9909] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.937296][ T9906] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.183016][T21738] netlink: 'syz.4.4089': attribute type 7 has an invalid length. [ 591.362772][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880415cf800: abort rx timeout. Force session deactivation [ 591.364772][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880415cf400: rx timeout, send abort [ 591.382386][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880415cf400: connection exists (fe ff). last cmd: 20 [ 591.504454][T21744] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.566860][T13273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.571385][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.628715][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c2d3400: rx timeout, send abort [ 591.882467][T21756] openvswitch: netlink: IP tunnel dst address not specified [ 592.128977][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c2d3400: abort rx timeout. Force session deactivation [ 592.350045][T21774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.369017][ T9906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.407675][T21774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.505169][T21779] Bluetooth: MGMT ver 1.23 [ 592.505210][T21779] Bluetooth: hci0: Invalid link address type 18 for 00:40:00:00:00:00 [ 592.655347][T13273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.012780][ T6889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.592736][T21830] bond0: Error: CAN devices cannot be enslaved [ 593.606615][T21830] netlink: 'syz.4.4118': attribute type 10 has an invalid length. [ 593.635755][T21830] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.651247][T21830] team0: entered allmulticast mode [ 593.651268][T21830] team_slave_0: entered allmulticast mode [ 593.651286][T21830] team_slave_1: entered allmulticast mode [ 593.651947][T21830] bond0: (slave team0): Enslaving as an active interface with an up link [ 593.655933][T21825] __nla_validate_parse: 86 callbacks suppressed [ 593.655948][T21825] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4119'. [ 593.698253][T21832] netlink: 'syz.4.4118': attribute type 32 has an invalid length. [ 593.698317][T21832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4118'. [ 593.745622][ T5747] net_ratelimit: 3 callbacks suppressed [ 593.745645][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.837122][T21832] bond4: option coupled_control: invalid value (192) [ 593.841256][T21832] bond4 (unregistering): Released all slaves [ 594.091489][T21844] can: request_module (can-proto-5) failed. [ 594.507767][T21865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4126'. [ 594.770919][T13273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.828514][T21873] ip_vti0: entered promiscuous mode [ 595.063505][T21880] netlink: 'syz.4.4132': attribute type 1 has an invalid length. [ 595.063555][T21880] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4132'. [ 595.109921][T21886] netlink: 'syz.0.4134': attribute type 2 has an invalid length. [ 595.109940][T21886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4134'. [ 595.160495][T21890] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4133'. [ 595.160519][T21890] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4133'. [ 595.163563][ T5639] Bluetooth: hci0: unexpected event 0x0e length: 0 < 3 [ 595.808096][T13273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.954941][T21928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4145'. [ 596.606848][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.846369][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.374454][T21964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4158'. [ 597.374569][T21964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.491378][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.551506][T21964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.660177][T21979] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4160'. [ 597.888677][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.127760][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.226600][T21993] ip_tables: iptables: counters copy to user failed while replacing table [ 598.607370][ T6889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.683536][T22030] __nla_validate_parse: 4 callbacks suppressed [ 598.683558][T22030] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4178'. [ 598.784324][ T6889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.787498][T22030] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4178'. [ 598.926513][T13273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.994208][T22040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4179'. [ 599.049066][T22050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4179'. [ 599.313516][T22048] syzkaller0: entered promiscuous mode [ 599.313762][T22048] syzkaller0: entered allmulticast mode [ 599.588951][T22077] ip_tables: iptables: counters copy to user failed while replacing table [ 599.967391][T13273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.097690][T22092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 600.118129][T22092] bridge0: port 3(bond1) entered blocking state [ 600.118331][T22092] bridge0: port 3(bond1) entered disabled state [ 600.118485][T22092] bond1: entered allmulticast mode [ 600.120922][T22092] bond1: entered promiscuous mode [ 600.121574][T22092] bridge0: port 3(bond1) entered blocking state [ 600.121678][T22092] bridge0: port 3(bond1) entered forwarding state [ 600.221746][ T13] bridge0: port 3(bond1) entered disabled state [ 600.251846][T22102] pim6reg1: entered promiscuous mode [ 600.251881][T22102] pim6reg1: entered allmulticast mode [ 600.644807][T22123] syzkaller0: entered promiscuous mode [ 600.644835][T22123] syzkaller0: entered allmulticast mode [ 600.748897][T22143] netlink: 'syz.0.4200': attribute type 83 has an invalid length. [ 600.755456][T22144] netlink: 'syz.0.4200': attribute type 83 has an invalid length. [ 600.900639][T22151] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4199'. [ 600.900666][T22151] IPv6: NLM_F_CREATE should be specified when creating new route [ 601.016582][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.318556][T22174] bond4: entered promiscuous mode [ 601.323068][T22174] bond4: entered allmulticast mode [ 601.323550][T22174] 8021q: adding VLAN 0 to HW filter on device bond4 [ 601.473819][T22180] bond5: entered promiscuous mode [ 601.473848][T22180] bond5: entered allmulticast mode [ 601.474575][T22180] 8021q: adding VLAN 0 to HW filter on device bond5 [ 601.501514][T22189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4206'. [ 601.550113][T22167] netlink: 'syz.0.4204': attribute type 4 has an invalid length. [ 601.843503][T22202] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4208'. [ 601.843527][T22202] tc_dump_action: action bad kind [ 602.190779][T22209] netlink: 'syz.4.4209': attribute type 1 has an invalid length. [ 602.541236][T22232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4213'. [ 602.603425][T22230] erspan0: entered promiscuous mode [ 602.619806][T22230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4212'. [ 602.899792][T22245] netlink: 'syz.1.4215': attribute type 10 has an invalid length. [ 602.899827][T22245] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 603.049801][T22252] syzkaller0: entered promiscuous mode [ 603.049828][T22252] syzkaller0: entered allmulticast mode [ 603.121304][T22255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4218'. [ 603.265742][T22267] IPv6: NLM_F_CREATE should be specified when creating new route [ 603.977398][T22156] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 604.351322][T22293] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4221'. [ 604.351374][T22293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4221'. [ 604.351389][T22293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4221'. [ 606.442091][T22321] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4230'. [ 606.574107][T22330] ip_tables: iptables: counters copy to user failed while replacing table [ 606.960480][T22365] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 607.113182][T22367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4239'. [ 607.114571][T22367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4239'. [ 607.115448][T22367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4239'. [ 607.128597][T22367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4239'. [ 607.129696][T22367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4239'. [ 607.220946][T22374] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4243'. [ 607.410291][T22389] block nbd3: Unsupported socket: should be TCP or UNIX. [ 607.628734][T22396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.026268][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880414bc800: rx timeout, send abort [ 608.310089][T22436] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.359419][T22441] bond2: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 608.360795][T22441] bond2 (unregistering): Released all slaves [ 608.395891][T22443] netlink: 'syz.5.4268': attribute type 1 has an invalid length. [ 608.428818][T22436] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.495151][T22436] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.526324][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880414bc800: abort rx timeout. Force session deactivation [ 608.527102][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880414bcc00: rx timeout, send abort [ 608.638374][T22436] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.777601][ T6889] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.779359][ T9906] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.806620][T22454] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 608.829265][ T6889] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.856870][T22449] can: request_module (can-proto-5) failed. [ 608.906673][ T6889] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.006273][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 609.027151][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880414bcc00: abort rx timeout. Force session deactivation [ 609.421502][T22485] __nla_validate_parse: 8 callbacks suppressed [ 609.421524][T22485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4276'. [ 609.887178][ T5639] Bluetooth: hci0: command tx timeout [ 610.291171][T22515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4287'. [ 610.353905][T22517] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4288'. [ 610.475022][T22524] bridge0: port 1(gretap0) entered blocking state [ 610.475188][T22524] bridge0: port 1(gretap0) entered disabled state [ 610.475386][T22524] gretap0: entered allmulticast mode [ 610.487308][T22524] gretap0: entered promiscuous mode [ 610.491035][T22524] bridge0: port 1(gretap0) entered blocking state [ 610.491139][T22524] bridge0: port 1(gretap0) entered forwarding state [ 610.521907][T22524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4290'. [ 610.537622][T22529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4290'. [ 610.537852][T22529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4290'. [ 610.538067][T22529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4290'. [ 610.538274][T22529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4290'. [ 610.538489][T22529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4290'. [ 610.541019][T22529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4290'. [ 610.603581][T22502] ip6t_rt: too many addresses specified [ 610.645663][T22531] rxe_eth0 speed is unknown, defaulting to 1000 [ 611.443984][T22575] ip_tables: iptables: counters copy to user failed while replacing table [ 611.460044][T22579] netlink: 'syz.4.4304': attribute type 1 has an invalid length. [ 611.460899][T22578] dummy0: left promiscuous mode [ 611.464097][T22578] netlink: 'syz.4.4304': attribute type 10 has an invalid length. [ 611.464284][T22578] dummy0: entered promiscuous mode [ 611.597330][T22584] bond6: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 611.600851][T22584] bond6 (unregistering): Released all slaves [ 611.625799][T22583] netlink: 'syz.4.4305': attribute type 64 has an invalid length. [ 611.653065][T22583] bridge0: port 1(gretap0) entered disabled state [ 612.111713][ T5639] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 612.408894][T22623] openvswitch: netlink: IPv4 tunnel dst address is zero [ 612.494616][T22637] netlink: 'syz.0.4321': attribute type 4 has an invalid length. [ 612.494621][T22636] netlink: 'syz.0.4321': attribute type 4 has an invalid length. [ 612.544565][T22633] openvswitch: netlink: Message has -1 unknown bytes. [ 612.574921][T22637] netlink: 'syz.0.4321': attribute type 4 has an invalid length. [ 612.591744][T22636] netlink: 'syz.0.4321': attribute type 4 has an invalid length. [ 612.591884][T22636] netlink: 'syz.0.4321': attribute type 4 has an invalid length. [ 612.593234][T22636] netlink: 'syz.0.4321': attribute type 4 has an invalid length. [ 612.900784][T22654] syzkaller0: entered promiscuous mode [ 612.900809][T22654] syzkaller0: entered allmulticast mode [ 612.932222][T22654] tipc: Enabled bearer , priority 0 [ 612.933650][T22658] x_tables: duplicate entry at hook 1 [ 613.017919][T22653] tipc: Resetting bearer [ 613.078745][T22653] tipc: Disabling bearer [ 613.295707][ T9923] IPVS: starting estimator thread 0... [ 613.378472][T22685] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 613.386706][T22680] IPVS: using max 25 ests per chain, 60000 per kthread [ 613.456245][T22689] validate_nla: 61 callbacks suppressed [ 613.456277][T22689] netlink: 'syz.5.4334': attribute type 1 has an invalid length. [ 613.489565][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.495072][T22689] 8021q: adding VLAN 0 to HW filter on device bond2 [ 613.532253][T22689] bond2: (slave ip6erspan0): making interface the new active one [ 613.533702][T22689] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 613.595159][T22692] xt_hashlimit: max too large, truncated to 1048576 [ 613.608870][T22692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 613.665974][T22696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.666001][T22696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.852448][T22708] ip_tables: iptables: counters copy to user failed while replacing table [ 614.259611][T22723] netlink: 'syz.1.4346': attribute type 28 has an invalid length. [ 614.259634][T22723] netlink: 'syz.1.4346': attribute type 3 has an invalid length. [ 614.471603][T22731] __nla_validate_parse: 34 callbacks suppressed [ 614.471625][T22731] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4349'. [ 614.535971][T22730] geneve2: entered promiscuous mode [ 614.575602][T22734] netlink: 'syz.0.4348': attribute type 1 has an invalid length. [ 614.575623][T22734] netlink: 'syz.0.4348': attribute type 2 has an invalid length. [ 614.575636][T22734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4348'. [ 614.608185][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.614180][T22735] sctp: [Deprecated]: syz.4.4349 (pid 22735) Use of struct sctp_assoc_value in delayed_ack socket option. [ 614.614180][T22735] Use struct sctp_sack_info instead [ 614.770014][ T6889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.774217][T22747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4352'. [ 614.811873][T22749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4352'. [ 614.839410][T22747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4352'. [ 614.839663][T22747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4352'. [ 614.839896][T22747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4352'. [ 614.844442][T22747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4352'. [ 614.858963][ T5650] Bluetooth: hci0: command 0x0c1a tx timeout [ 614.859273][ T5639] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 614.935829][T22747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4352'. [ 614.939081][T22747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4352'. [ 615.012006][T22752] veth1_macvtap: left promiscuous mode [ 615.012038][T22752] macsec0: entered promiscuous mode [ 615.685314][T22757] bond0: (slave bond_slave_0): Releasing backup interface [ 615.704639][T22757] bond_slave_0: left allmulticast mode [ 615.764696][T22757] bond_slave_0: entered promiscuous mode [ 615.764718][T22757] bond_slave_0: entered allmulticast mode [ 615.883850][T22760] syzkaller1: entered promiscuous mode [ 615.883885][T22760] syzkaller1: entered allmulticast mode [ 616.047434][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.426803][ T9906] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.426862][ T9906] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.426900][ T9906] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.426935][ T9906] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.126099][ T6889] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.147524][ T162] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 617.147557][ T162] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.147582][ T162] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 617.399254][T22860] macvlan0: entered promiscuous mode [ 617.432700][T22859] tipc: Started in network mode [ 617.432742][T22859] tipc: Node identity 027f7b59b01f, cluster identity 4711 [ 617.432906][T22859] tipc: Enabled bearer , priority 0 [ 617.433520][T22847] syzkaller0: entered promiscuous mode [ 617.433539][T22847] syzkaller0: entered allmulticast mode [ 617.457485][T22847] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 617.522690][T22865] syzkaller0: entered promiscuous mode [ 617.522717][T22865] syzkaller0: entered allmulticast mode [ 617.554277][T22847] tipc: Resetting bearer [ 617.578942][T22873] IPv6: NLM_F_CREATE should be specified when creating new route [ 617.579472][T22845] tipc: Resetting bearer [ 617.652409][T22845] tipc: Disabling bearer [ 617.786844][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.961928][T22880] 8021q: adding VLAN 0 to HW filter on device bond4 [ 617.977231][ T6889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.978068][ T6889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.029272][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.083315][T22884] tipc: Started in network mode [ 618.083350][T22884] tipc: Node identity ee9c77819858, cluster identity 4711 [ 618.083501][T22884] tipc: Enabled bearer , priority 0 [ 618.217903][T22854] tipc: Resetting bearer [ 618.298898][T22854] tipc: Disabling bearer [ 619.070838][T22956] netlink: 'syz.1.4394': attribute type 1 has an invalid length. [ 619.175161][T22956] bond5: entered promiscuous mode [ 619.176740][T22956] 8021q: adding VLAN 0 to HW filter on device bond5 [ 619.244059][T22964] 8021q: adding VLAN 0 to HW filter on device bond5 [ 619.244511][T22964] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 619.244532][T22964] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 619.260125][ T9907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.305065][T22964] bond5: (slave wireguard0): making interface the new active one [ 619.305087][T22964] wireguard0: entered promiscuous mode [ 619.323725][T22964] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 619.735099][T22978] __nla_validate_parse: 54 callbacks suppressed [ 619.735122][T22978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4396'. [ 620.004715][T22999] openvswitch: netlink: Duplicate or invalid key (type 0). [ 620.004753][T22999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.358833][T23008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.495761][T23013] 8021q: adding VLAN 0 to HW filter on device bond3 [ 620.529660][ T3333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.530240][ T9906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.554794][T23036] veth0: entered promiscuous mode [ 620.560681][T23013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4401'. [ 620.560699][T23013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4401'. [ 620.602920][T23020] netlink: 'syz.4.4402': attribute type 1 has an invalid length. [ 620.602940][T23020] nbd: error processing sock list [ 620.631287][T23013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.649411][T23013] bond3: (slave bond0): making interface the new active one [ 620.671191][T23013] bond3: (slave bond0): Enslaving as an active interface with an up link [ 620.808103][T23013] bond3 (unregistering): (slave bond0): Releasing active interface [ 620.827924][T23013] bond3 (unregistering): Released all slaves [ 620.992068][T23033] veth0: left promiscuous mode [ 621.351046][T23058] 8021q: adding VLAN 0 to HW filter on device bond3 [ 621.521556][T23028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4404'. [ 621.546167][T23031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4404'. [ 622.132440][T23099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4411'. [ 622.132586][T23099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.205534][T23099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.819308][T23127] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4416'. [ 623.733084][ T9923] net_ratelimit: 1 callbacks suppressed [ 623.733105][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.733541][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.922933][ T5297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 625.008021][ T162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.647262][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.287290][ T162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.479549][T23166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4418'. [ 626.531982][T23176] tipc: Enabling of bearer rejected, no device for the media [ 626.633448][T23181] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4420'. [ 626.749422][T23186] netlink: 'syz.0.4425': attribute type 4 has an invalid length. [ 626.758326][T23187] netlink: 'syz.0.4425': attribute type 4 has an invalid length. [ 626.816424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.991210][T23195] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4428'. [ 627.048094][T23197] syz_tun: entered allmulticast mode [ 627.050055][T23197] syz_tun: left allmulticast mode [ 627.209411][T23199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.266367][T23208] ip_tables: iptables: counters copy to user failed while replacing table [ 627.365615][T23213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4433'. [ 627.539752][T23221] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.570263][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.623613][T23225] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4436'. [ 627.688657][T23228] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4437'. [ 627.715033][T23230] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4438'. [ 627.806242][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.914693][T23242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4440'. [ 627.914718][T23242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4440'. [ 628.363041][T23262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4445'. [ 628.655954][ T5639] Bluetooth: hci0: unexpected event for opcode 0x0403 [ 628.848101][ T6890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.849060][T23286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.991724][T23293] lo: entered promiscuous mode [ 629.015793][T23293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 629.381454][T23312] Bluetooth: hci0: unsupported parameter 5161 [ 629.381476][T23312] Bluetooth: hci0: unsupported parameter 8192 [ 629.381490][T23312] Bluetooth: hci0: unsupported parameter 5161 [ 629.381503][T23312] Bluetooth: hci0: unsupported parameter 8192 [ 629.528030][T23326] netlink: 'syz.0.4465': attribute type 2 has an invalid length. [ 629.789269][T23344] veth1_macvtap: left promiscuous mode [ 629.789322][T23344] macsec0: entered promiscuous mode [ 629.811600][T23344] veth1_macvtap: entered promiscuous mode [ 629.811872][T23344] macsec0: left promiscuous mode [ 630.048883][T23284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.187085][T23367] openvswitch: netlink: IP tunnel dst address not specified [ 630.322885][T23376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.374012][T23378] netlink: 'syz.2.4483': attribute type 4 has an invalid length. [ 630.374036][T23378] netlink: 'syz.2.4483': attribute type 10 has an invalid length. [ 630.374134][T23378] bond_slave_0: mtu greater than device maximum [ 630.538452][T23391] netlink: 'syz.5.4486': attribute type 30 has an invalid length. [ 630.777418][ T9906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.107648][T23423] bond0: left promiscuous mode [ 631.107689][T23423] bond0: left allmulticast mode [ 631.108274][T23423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.641517][T23425] TCP: TCP_TX_DELAY enabled [ 631.645546][T23425] netlink: 'syz.4.4494': attribute type 1 has an invalid length. [ 631.745612][T23433] netlink: 'syz.2.4496': attribute type 2 has an invalid length. [ 631.745890][T23433] netlink: 'syz.2.4496': attribute type 2 has an invalid length. [ 631.759504][T23430] netlink: 'syz.5.4493': attribute type 1 has an invalid length. [ 631.759555][T23430] netlink: 'syz.5.4493': attribute type 3 has an invalid length. [ 631.759594][T23430] __nla_validate_parse: 20 callbacks suppressed [ 631.759624][T23430] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4493'. [ 631.810999][T23425] bond6: (slave gretap1): making interface the new active one [ 631.825682][T23425] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 631.949426][ T5639] Bluetooth: hci5: unexpected cc 0x2040 length: 2 > 1 [ 631.949478][ T5639] Bluetooth: hci5: unexpected event for opcode 0x2040 [ 632.047686][ T9907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.089739][T23445] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4501'. [ 632.163191][T23449] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4502'. [ 632.268470][T23458] netlink: 'syz.1.4506': attribute type 1 has an invalid length. [ 632.272447][T23459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4505'. [ 632.395768][T23465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4507'. [ 632.517399][T23473] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4509'. [ 632.609158][ T9906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.323248][T23488] netlink: 'syz.0.4513': attribute type 9 has an invalid length. [ 633.324568][T23484] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4515'. [ 633.360709][T23487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4511'. [ 633.395197][T23487] macvlan0: left promiscuous mode [ 633.503670][T23487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4511'. [ 633.968599][ T9923] net_ratelimit: 1 callbacks suppressed [ 633.968620][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.032757][T23517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4518'. [ 634.253628][T23531] batman_adv: batadv0: Adding interface: syzkaller0 [ 634.253653][T23531] batman_adv: batadv0: Interface activated: syzkaller0 [ 634.277071][T23529] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 634.358152][T23529] batman_adv: batadv0: Removing interface: syzkaller0 [ 634.609141][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.163663][T23589] netlink: 'syz.4.4538': attribute type 1 has an invalid length. [ 635.249211][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.448790][T23605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.494090][T23597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.533224][T23605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.693118][T23608] bond5: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 635.695039][T23608] bond5 (unregistering): Released all slaves [ 635.836671][T23579] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 635.976864][T23633] netlink: 'syz.1.4545': attribute type 10 has an invalid length. [ 636.022341][T23633] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 636.246650][T23645] netlink: 'syz.1.4549': attribute type 1 has an invalid length. [ 636.291634][T23645] 8021q: adding VLAN 0 to HW filter on device bond12 [ 636.445517][T23645] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 636.474364][T23652] macvlan3: entered promiscuous mode [ 636.474388][T23652] macvlan3: entered allmulticast mode [ 636.475017][T23652] bond12: entered promiscuous mode [ 636.494148][T23652] bond12: entered allmulticast mode [ 636.495136][T23652] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 636.511739][T23652] bond12: left allmulticast mode [ 636.511786][T23652] bond12: left promiscuous mode [ 636.529797][T23285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.553656][T23637] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 636.945092][T23664] netlink: 'syz.2.4553': attribute type 2 has an invalid length. [ 636.945116][T23664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 637.113968][T23685] smc: removing ib device syz0 [ 637.293007][T23685] smbdirect: ib_dev[syz0] removed [ 637.480868][ T9924] IPVS: starting estimator thread 0... [ 637.528745][T23705] __nla_validate_parse: 14 callbacks suppressed [ 637.528767][T23705] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4565'. [ 637.568120][T23704] IPVS: using max 26 ests per chain, 62400 per kthread [ 637.612527][T23705] gretap0: entered promiscuous mode [ 637.704625][T23707] syzkaller0: entered promiscuous mode [ 637.704679][T23707] syzkaller0: entered allmulticast mode [ 637.783158][T23715] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4565'. [ 637.811139][ T9924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.814743][ T9924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.987535][T23715] 0ªî{X¹¦: renamed from gretap0 [ 637.995018][T23715] 0ªî{X¹¦: left promiscuous mode [ 637.995041][T23715] 0ªî{X¹¦: entered allmulticast mode [ 638.245248][T23722] netlink: 666 bytes leftover after parsing attributes in process `syz.1.4570'. [ 638.264369][T23726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4571'. [ 638.275610][T23726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4571'. [ 638.298932][T23726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4571'. [ 638.302693][T23730] netlink: 'syz.4.4571': attribute type 3 has an invalid length. [ 638.329177][T23726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4571'. [ 638.358469][T23726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4571'. [ 638.390931][T23726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4571'. [ 638.416611][T23726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4571'. [ 639.013915][T23755] dvmrp1: left allmulticast mode [ 639.088096][T23284] net_ratelimit: 2 callbacks suppressed [ 639.088120][T23284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.298677][T23761] xt_TPROXY: Can be used only with -p tcp or -p udp [ 639.727852][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.732272][T23284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.015834][T23782] netlink: 'syz.4.4587': attribute type 4 has an invalid length. [ 640.039913][T23782] netlink: 'syz.4.4587': attribute type 1 has an invalid length. [ 640.291166][T23284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.819874][T23801] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 641.263090][T23821] openvswitch: netlink: Multiple metadata blocks provided [ 641.326569][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout [ 641.500547][T23841] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 641.522403][T23841] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 641.522444][T23841] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 641.522488][T23841] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 641.650029][T23284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.909546][ T9923] smbdirect: ib_dev[syz2] removed [ 641.985633][T23862] bridge: RTM_NEWNEIGH with invalid ether address [ 642.081891][T23869] netlink: 'syz.1.4615': attribute type 21 has an invalid length. [ 642.081917][T23869] IPv6: NLM_F_CREATE should be specified when creating new route [ 642.151055][T23871] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 642.217686][T23876] ip_tables: iptables: counters copy to user failed while replacing table [ 642.585403][T23897] __nla_validate_parse: 37 callbacks suppressed [ 642.585434][T23897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4624'. [ 642.741657][T23904] tipc: Started in network mode [ 642.741682][T23904] tipc: Node identity 4, cluster identity 4711 [ 642.741695][T23904] tipc: Node number set to 4 [ 642.769009][T23904] nbd: couldn't find device at index 2 [ 642.854070][T23284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.936103][T23284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.994024][T23919] netlink: 'syz.0.4632': attribute type 8 has an invalid length. [ 642.994046][T23919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4632'. [ 642.994453][T23919] bridge0: port 3(syz_tun) entered disabled state [ 642.995157][T23919] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.995839][T23919] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.151671][T23921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4633'. [ 643.167830][T23921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4633'. [ 643.249577][T23930] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4637'. [ 644.413706][T23994] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4651'. [ 644.477740][T23997] netlink: 'syz.4.4650': attribute type 83 has an invalid length. [ 644.768927][T23284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.846261][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 644.849570][ T9907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.317872][T24037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4660'. [ 645.489308][ T9924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.586781][T24053] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 645.797207][T24065] vxcan0: tx address claim with different name [ 646.439236][T24110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4678'. [ 646.439272][T24110] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4678'. [ 646.457842][ T5650] Bluetooth: hci0: command 0x0c1a tx timeout [ 646.458123][ T5639] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 646.527270][T24116] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4680'. [ 646.687428][T23285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.819985][T24127] tipc: New replicast peer: 172.20.20.187 [ 646.820221][T24127] tipc: Enabled bearer , priority 10 [ 646.882542][T24129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.484922][T24164] x_tables: duplicate entry at hook 4 [ 647.515121][T24160] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 647.702084][T24176] __nla_validate_parse: 8 callbacks suppressed [ 647.702106][T24176] netlink: 228 bytes leftover after parsing attributes in process `syz.5.4701'. [ 647.854680][T24186] mac80211_hwsim hwsim29 ÿ: renamed from wlan1 [ 647.899606][T24191] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4702'. [ 647.931083][T24186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4702'. [ 648.048416][T23284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.197565][T24204] wireguard1: entered promiscuous mode [ 648.266138][T24212] IPv6: NLM_F_CREATE should be specified when creating new route [ 648.653633][T24229] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4712'. [ 648.692584][T23285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.755748][T24235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4713'. [ 648.825033][T24235] netlink: 'syz.1.4713': attribute type 11 has an invalid length. [ 648.825069][T24235] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4713'. [ 648.869050][T24240] netlink: 'syz.2.4716': attribute type 1 has an invalid length. [ 648.978454][T24241] 8021q: adding VLAN 0 to HW filter on device bond7 [ 648.980943][T24241] bond6: (slave bond7): making interface the new active one [ 648.981451][T24241] bond6: (slave bond7): Enslaving as an active interface with an up link [ 648.982496][T24246] team0: Device is already in use. [ 648.984052][T24248] team0: Device is already in use. [ 649.049617][T24253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4719'. [ 649.199440][T24263] netlink: 'syz.1.4724': attribute type 1 has an invalid length. [ 649.199463][T24263] netlink: 'syz.1.4724': attribute type 2 has an invalid length. [ 649.199477][T24263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4724'. [ 649.315421][T24272] tap0: tun_chr_ioctl cmd 1074025672 [ 649.315443][T24272] tap0: ignored: set checksum disabled [ 649.327970][T24272] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 649.552768][T24281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4732'. [ 649.565908][T24281] hsr_slave_0: left promiscuous mode [ 649.577735][T24281] hsr_slave_1: left promiscuous mode [ 649.948452][T24306] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 649.969920][T24306] bond5 (unregistering): Released all slaves [ 650.015341][T24315] xt_MASQUERADE: bad rangesize 2147483646 [ 650.311352][T24328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 650.345894][T24325] ip_tables: iptables: counters copy to user failed while replacing table [ 650.437662][T24325] syzkaller0: entered promiscuous mode [ 650.437687][T24325] syzkaller0: entered allmulticast mode [ 650.439055][T24333] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4743'. [ 650.475576][ T5639] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 650.608064][ T9924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.609713][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.610126][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.822911][T24344] bond7 (unregistering): Released all slaves [ 651.061185][T24368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.061229][T24368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.062461][T24368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.062483][T24368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.498362][T24389] bond13: Unable to set up delay as MII monitoring is disabled [ 651.516709][T24389] bond13 (unregistering): Released all slaves [ 651.886574][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.889036][T23284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.737631][T24425] vlan2: entered promiscuous mode [ 652.737658][T24425] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 652.737876][T24425] vlan2: entered allmulticast mode [ 652.737896][T24425] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 653.094885][T24445] veth3: entered allmulticast mode [ 653.387287][T24429] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 653.388472][T24429] __nla_validate_parse: 11 callbacks suppressed [ 653.388491][T24429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4768'. [ 653.665728][T24469] ip_tables: iptables: counters copy to user failed while replacing table [ 653.678193][T24467] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4780'. [ 653.678219][T24467] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4780'. [ 653.678237][T24467] netlink: 'syz.2.4780': attribute type 5 has an invalid length. [ 653.678253][T24467] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4780'. [ 653.679152][T24469] C: renamed from lo [ 653.701016][T24469] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 653.708265][T24467] netlink: 'syz.2.4780': attribute type 1 has an invalid length. [ 653.708326][T24467] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4780'. [ 653.846618][ T5639] Bluetooth: hci3: unexpected event 0x0e length: 0 < 3 [ 654.903026][T24507] netlink: 'syz.5.4789': attribute type 1 has an invalid length. [ 655.124447][T24525] ipvlan0: entered promiscuous mode [ 655.124513][T24525] ipvlan0: entered allmulticast mode [ 655.124527][T24525] veth0_vlan: entered allmulticast mode [ 655.286755][T24523] syzkaller1: entered promiscuous mode [ 655.286789][T24523] syzkaller1: entered allmulticast mode [ 655.405341][T24541] netlink: 29 bytes leftover after parsing attributes in process `syz.5.4800'. [ 655.637208][T24548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4804'. [ 655.645977][T24548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4804'. [ 655.729666][ T9923] net_ratelimit: 2 callbacks suppressed [ 655.729687][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.767355][T24549] tipc: Enabling of bearer rejected, failed to enable media [ 655.850426][T24566] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4803'. [ 656.277269][T24588] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 656.306348][T24588] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 656.366592][ T9907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.368495][ T9907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.804572][T24612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4815'. [ 657.658499][ T9907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.634063][T24551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 658.868460][T24638] ip_tables: iptables: counters copy to user failed while replacing table [ 658.872047][T24638] mac80211_hwsim hwsim27 syzkaller1: entered promiscuous mode [ 658.872070][T24638] mac80211_hwsim hwsim27 syzkaller1: entered allmulticast mode [ 658.932291][T24636] dummy0: entered promiscuous mode [ 658.955782][T24625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4823'. [ 659.110351][T24649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.129404][T24649] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4827'. [ 659.150648][T24650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4826'. [ 659.187425][T24645] netlink: 'syz.5.4825': attribute type 4 has an invalid length. [ 659.228051][T24655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4828'. [ 659.423756][ T9924] IPVS: starting estimator thread 0... [ 659.508898][T24665] IPVS: using max 27 ests per chain, 64800 per kthread [ 659.537066][T24668] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 659.567651][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.671853][T24675] netlink: 1020 bytes leftover after parsing attributes in process `syz.4.4830'. [ 659.760925][T24674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4831'. [ 659.790964][T24674] vlan2: entered promiscuous mode [ 659.790988][T24674] bond0: entered promiscuous mode [ 659.791002][T24674] bond_slave_0: entered promiscuous mode [ 659.791223][T24674] bond_slave_1: entered promiscuous mode [ 659.988864][T24685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4833'. [ 660.012329][T24685] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 660.215136][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.261484][T24691] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4835'. [ 660.712716][T24716] netlink: 1020 bytes leftover after parsing attributes in process `syz.2.4843'. [ 661.105448][T24733] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4848'. [ 661.162946][T24739] ipt_rpfilter: unknown options [ 661.178828][T24739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 661.215979][T24741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 661.220215][T24743] ipt_rpfilter: unknown options [ 661.408352][T24751] syzkaller0: entered promiscuous mode [ 661.408378][T24751] syzkaller0: entered allmulticast mode [ 661.428039][ T9907] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 661.428117][ T9907] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 661.428156][ T9907] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 661.535343][T24753] bond7: entered promiscuous mode [ 661.535840][T24753] 8021q: adding VLAN 0 to HW filter on device bond7 [ 661.560006][T24753] 8021q: adding VLAN 0 to HW filter on device bond7 [ 661.560508][T24753] bond7: (slave sit1): The slave device specified does not support setting the MAC address [ 661.564420][T24753] bond7: (slave sit1): Error -95 calling set_mac_address [ 661.613102][T24758] netlink: 'syz.1.4855': attribute type 1 has an invalid length. [ 661.613124][T24758] netlink: 'syz.1.4855': attribute type 2 has an invalid length. [ 661.659998][T24765] netlink: 'syz.0.4856': attribute type 1 has an invalid length. [ 661.779751][T24765] 8021q: adding VLAN 0 to HW filter on device bond8 [ 661.913225][T24765] bond8: (slave geneve3): making interface the new active one [ 661.914573][T24765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.934419][T24765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.934706][T24765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.934997][T24765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.935288][T24765] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 662.014104][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.067929][ T9906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.127508][ T9906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.128447][ T9906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.234787][T24790] netlink: 'syz.1.4864': attribute type 28 has an invalid length. [ 662.234810][T24790] netlink: 'syz.1.4864': attribute type 3 has an invalid length. [ 662.286373][T19814] Bluetooth: hci2: command 0x0406 tx timeout [ 662.332509][ T5650] block nbd3: Receive control failed (result -32) [ 662.447998][T24799] netlink: 'syz.2.4865': attribute type 142 has an invalid length. [ 662.959692][T24836] netlink: 'syz.5.4877': attribute type 1 has an invalid length. [ 663.130208][T24843] 8021q: adding VLAN 0 to HW filter on device bond8 [ 663.412324][T24862] netlink: 'syz.4.4884': attribute type 11 has an invalid length. [ 666.306506][ T9923] net_ratelimit: 16 callbacks suppressed [ 666.306528][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.306790][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.404197][T24863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 666.635178][T24892] syzkaller0: entered promiscuous mode [ 666.635200][T24892] syzkaller0: entered allmulticast mode [ 666.675548][T24898] __nla_validate_parse: 21 callbacks suppressed [ 666.675568][T24898] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.4897'. [ 666.719688][T24899] ipvlan0: entered promiscuous mode [ 666.721293][T24899] ipvlan0: entered allmulticast mode [ 666.721311][T24899] veth0_vlan: entered allmulticast mode [ 666.732891][T24900] mac80211_hwsim hwsim27 syzkaller1: left promiscuous mode [ 666.732954][T24900] mac80211_hwsim hwsim27 syzkaller1: left allmulticast mode [ 666.975349][T24914] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4901'. [ 667.002054][T24911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.096755][T24921] netlink: 'syz.1.4905': attribute type 1 has an invalid length. [ 667.163883][T24923] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 667.166146][T24923] netlink: 'syz.1.4907': attribute type 1 has an invalid length. [ 667.166166][T24923] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4907'. [ 667.214978][T24911] can: request_module (can-proto-0) failed. [ 667.240740][T24925] syzkaller1: entered promiscuous mode [ 667.240764][T24925] syzkaller1: entered allmulticast mode [ 667.406525][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.422576][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.423119][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.445689][T24930] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.4908'. [ 667.720025][T24950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 667.854709][T24954] nbd: must specify an index to disconnect [ 667.890075][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.904519][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.935439][T24957] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 667.963235][T24960] atomic_op ffff88807897f9e0 conn xmit_atomic 0000000000000000 [ 668.026000][T24962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4920'. [ 668.193571][T24974] netlink: 1028 bytes leftover after parsing attributes in process `syz.5.4921'. [ 668.337563][T24987] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4926'. [ 668.337587][T24987] tc_dump_action: action bad kind [ 668.337787][T24987] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4926'. [ 668.337802][T24987] tc_dump_action: action bad kind [ 668.337983][T24987] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4926'. [ 668.337998][T24987] tc_dump_action: action bad kind [ 668.338215][T24987] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4926'. [ 668.338231][T24987] tc_dump_action: action bad kind [ 668.338410][T24987] tc_dump_action: action bad kind [ 668.338591][T24987] tc_dump_action: action bad kind [ 668.338781][T24987] tc_dump_action: action bad kind [ 668.338960][T24987] tc_dump_action: action bad kind [ 668.342533][T24987] tc_dump_action: action bad kind [ 668.342725][T24987] tc_dump_action: action bad kind [ 668.342904][T24987] tc_dump_action: action bad kind [ 668.343121][T24987] tc_dump_action: action bad kind [ 668.343301][T24987] tc_dump_action: action bad kind [ 668.343511][T24987] tc_dump_action: action bad kind [ 668.343712][T24987] tc_dump_action: action bad kind [ 668.343909][T24987] tc_dump_action: action bad kind [ 668.427059][T24987] tc_dump_action: action bad kind [ 668.428609][T24987] tc_dump_action: action bad kind [ 668.428815][T24987] tc_dump_action: action bad kind [ 668.440240][T24987] tc_dump_action: action bad kind [ 668.440427][T24987] tc_dump_action: action bad kind [ 668.440612][T24987] tc_dump_action: action bad kind [ 668.440789][T24987] tc_dump_action: action bad kind [ 668.440981][T24987] tc_dump_action: action bad kind [ 668.509071][T24987] tc_dump_action: action bad kind [ 668.509609][T24987] tc_dump_action: action bad kind [ 668.520418][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.549125][T24987] tc_dump_action: action bad kind [ 668.549357][T24987] tc_dump_action: action bad kind [ 668.549591][T24987] tc_dump_action: action bad kind [ 668.549802][T24987] tc_dump_action: action bad kind [ 668.549983][T24987] tc_dump_action: action bad kind [ 668.550175][T24987] tc_dump_action: action bad kind [ 668.550388][T24987] tc_dump_action: action bad kind [ 669.160223][T25030] syzkaller0: entered promiscuous mode [ 669.160249][T25030] syzkaller0: entered allmulticast mode [ 669.952841][ T12] IPVS: starting estimator thread 0... [ 670.047571][T25076] IPVS: using max 24 ests per chain, 57600 per kthread [ 671.024787][T25137] 8021q: VLANs not supported on ip6_vti0 [ 671.158537][T25142] netlink: 'syz.5.4968': attribute type 1 has an invalid length. [ 671.158559][T25142] netlink: 'syz.5.4968': attribute type 2 has an invalid length. [ 671.222596][T25142] netlink: 'syz.5.4968': attribute type 1 has an invalid length. [ 671.222631][T25142] netlink: 'syz.5.4968': attribute type 2 has an invalid length. [ 671.270496][T25149] netlink: 'syz.4.4969': attribute type 2 has an invalid length. [ 671.270523][T25149] nbd: couldn't find a device at index -2147221500 [ 671.271363][T25149] netlink: 'syz.4.4969': attribute type 2 has an invalid length. [ 671.271384][T25149] nbd: couldn't find a device at index -2147221500 [ 671.401169][T25154] netlink: 'syz.1.4971': attribute type 2 has an invalid length. [ 671.623196][T25165] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 671.785227][T25177] __nla_validate_parse: 49 callbacks suppressed [ 671.785248][T25177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4982'. [ 671.858944][ T12] net_ratelimit: 12 callbacks suppressed [ 671.858964][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.859210][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.932741][T25184] netlink: 200 bytes leftover after parsing attributes in process `syz.4.4981'. [ 671.983195][T25187] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4985'. [ 672.128867][T25195] netlink: 956 bytes leftover after parsing attributes in process `syz.4.4988'. [ 672.348573][T25207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4992'. [ 672.353873][T25207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4992'. [ 672.569769][T25210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4994'. [ 672.722819][T25213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.821507][T25193] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 672.841074][T25220] ip_tables: iptables: counters copy to user failed while replacing table [ 672.957740][ T9924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.957983][ T9924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.020315][T25225] netlink: 956 bytes leftover after parsing attributes in process `syz.1.5000'. [ 673.360378][T25241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5007'. [ 673.647966][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.648973][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.802162][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805573f000: rx timeout, send abort [ 673.802555][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805573f000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 673.969926][T25270] netlink: 'syz.0.5020': attribute type 11 has an invalid length. [ 674.057331][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.062242][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.495965][T25303] netlink: 'syz.4.5027': attribute type 83 has an invalid length. [ 674.576864][T25305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5029'. [ 674.670477][T25309] netlink: 'syz.4.5032': attribute type 83 has an invalid length. [ 675.167031][ T9906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.917339][T25373] netlink: 'syz.4.5047': attribute type 1 has an invalid length. [ 676.322157][T25396] netlink: 'syz.4.5056': attribute type 1 has an invalid length. [ 676.362536][T25396] bond8: entered promiscuous mode [ 676.362992][T25396] 8021q: adding VLAN 0 to HW filter on device bond8 [ 676.419618][T25400] syzkaller1: entered promiscuous mode [ 676.419639][T25400] syzkaller1: entered allmulticast mode [ 676.671707][T25410] netlink: 'syz.5.5061': attribute type 10 has an invalid length. [ 676.729317][T25410] ipvlan2: entered allmulticast mode [ 676.729342][T25410] virt_wifi0: entered allmulticast mode [ 676.867266][T25410] netlink: 'syz.5.5061': attribute type 1 has an invalid length. [ 676.867291][T25410] __nla_validate_parse: 9 callbacks suppressed [ 676.867305][T25410] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5061'. [ 677.299816][T25427] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5064'. [ 677.354137][T25431] xt_CT: You must specify a L4 protocol and not use inversions on it [ 677.376839][T23284] net_ratelimit: 10 callbacks suppressed [ 677.376861][T23284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.377256][T23284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.432842][T25429] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5067'. [ 677.491965][T25437] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 677.678261][T25446] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5074'. [ 677.791677][T25453] sctp: [Deprecated]: syz.1.5077 (pid 25453) Use of int in max_burst socket option. [ 677.791677][T25453] Use struct sctp_assoc_value instead [ 678.290638][T25479] sctp: [Deprecated]: syz.1.5083 (pid 25479) Use of int in maxseg socket option. [ 678.290638][T25479] Use struct sctp_assoc_value instead [ 678.385623][T25476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5083'. [ 678.477001][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.477243][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.535654][T25492] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 678.552974][T25492] netlink: 'syz.4.5086': attribute type 24 has an invalid length. [ 678.590090][T25490] syzkaller1: left promiscuous mode [ 678.590112][T25490] syzkaller1: left allmulticast mode [ 678.646351][T25494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5087'. [ 678.768619][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.769174][T25503] netlink: 992 bytes leftover after parsing attributes in process `syz.2.5091'. [ 678.971647][T25514] x_tables: duplicate underflow at hook 2 [ 679.123975][T25519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5095'. [ 679.124005][T25519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5095'. [ 679.124087][T25519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5095'. [ 679.263035][T25536] nbd5: detected capacity change from 0 to 63 [ 679.269097][T25537] block nbd5: NBD_DISCONNECT [ 679.342219][T25537] block nbd5: Disconnected due to user request. [ 679.355681][T25537] block nbd5: shutting down sockets [ 679.409239][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.414297][ C1] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 679.414554][ C1] Buffer I/O error on dev nbd5, logical block 0, async page read [ 679.414597][ C1] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 679.414717][ C1] Buffer I/O error on dev nbd5, logical block 1, async page read [ 679.414803][ C1] Buffer I/O error on dev nbd5, logical block 2, async page read [ 679.414885][ C1] Buffer I/O error on dev nbd5, logical block 3, async page read [ 679.417324][ T1714] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 679.417411][ T1714] Buffer I/O error on dev nbd5, logical block 0, async page read [ 679.417906][ T1714] Buffer I/O error on dev nbd5, logical block 1, async page read [ 679.417957][ T1714] Buffer I/O error on dev nbd5, logical block 2, async page read [ 679.418000][ T1714] Buffer I/O error on dev nbd5, logical block 3, async page read [ 679.427678][ T1714] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 679.427748][ T1714] Buffer I/O error on dev nbd5, logical block 0, async page read [ 679.430940][ T1714] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 679.431013][ T1714] Buffer I/O error on dev nbd5, logical block 1, async page read [ 679.433838][ T1714] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 679.433996][ T1714] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 679.434902][ T1714] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 679.438598][ T1714] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 679.438911][ T1714] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 679.470637][T25488] ldm_validate_partition_table(): Disk read failed. [ 679.489102][T25488] Dev nbd5: unable to read RDB block 0 [ 679.496884][T25488] nbd5: unable to read partition table [ 679.577447][T23284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.578226][T23284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.672010][T25488] ldm_validate_partition_table(): Disk read failed. [ 679.672673][T25488] Dev nbd5: unable to read RDB block 0 [ 679.675196][T25488] nbd5: unable to read partition table [ 679.813553][T25488] [ 679.816019][T25488] ====================================================== [ 679.823081][T25488] WARNING: possible circular locking dependency detected [ 679.830134][T25488] syzkaller #0 Not tainted [ 679.834577][T25488] ------------------------------------------------------ [ 679.841614][T25488] udevd/25488 is trying to acquire lock: [ 679.847264][T25488] ffffffff90094cc0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x5f/0x600 [ 679.857178][T25488] [ 679.857178][T25488] but task is already holding lock: [ 679.864577][T25488] ffffffff9182dc80 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 679.875142][T25488] [ 679.875142][T25488] which lock already depends on the new lock. [ 679.875142][T25488] [ 679.885571][T25488] [ 679.885571][T25488] the existing dependency chain (in reverse order) is: [ 679.894608][T25488] [ 679.894608][T25488] -> #8 (uevent_sock_mutex){+.+.}-{4:4}: [ 679.902439][T25488] __mutex_lock+0x197/0x15a0 [ 679.907573][T25488] kobject_uevent_net_broadcast+0x27e/0x560 [ 679.914022][T25488] kobject_uevent_env+0x566/0x9e0 [ 679.919615][T25488] device_add+0x544/0xb80 [ 679.924480][T25488] device_create+0x269/0x300 [ 679.929601][T25488] msr_device_create+0x33/0x50 [ 679.934899][T25488] cpuhp_invoke_callback+0x434/0x810 [ 679.940732][T25488] cpuhp_thread_fun+0x362/0x780 [ 679.946124][T25488] smpboot_thread_fn+0x5f8/0xb30 [ 679.951687][T25488] kthread+0x38b/0x480 [ 679.956305][T25488] ret_from_fork+0x514/0xb70 [ 679.961430][T25488] ret_from_fork_asm+0x1a/0x30 [ 679.966739][T25488] [ 679.966739][T25488] -> #7 (cpuhp_state-up){+.+.}-{0:0}: [ 679.974330][T25488] cpuhp_thread_fun+0x127/0x780 [ 679.979740][T25488] smpboot_thread_fn+0x5f8/0xb30 [ 679.985213][T25488] kthread+0x38b/0x480 [ 679.989820][T25488] ret_from_fork+0x514/0xb70 [ 679.994941][T25488] ret_from_fork_asm+0x1a/0x30 [ 680.000235][T25488] [ 680.000235][T25488] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 680.008010][T25488] cpus_read_lock+0x3d/0x160 [ 680.013154][T25488] static_key_slow_inc+0x12/0x30 [ 680.018628][T25488] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 680.024885][T25488] nbd_genl_foreach_sock+0x265/0x450 [ 680.030700][T25488] nbd_genl_reconfigure+0xbbb/0x1040 [ 680.036527][T25488] genl_family_rcv_msg_doit+0x233/0x340 [ 680.042613][T25488] genl_rcv_msg+0x614/0x7a0 [ 680.047652][T25488] netlink_rcv_skb+0x226/0x4a0 [ 680.052952][T25488] genl_rcv+0x28/0x40 [ 680.057470][T25488] netlink_unicast+0x8ef/0xa80 [ 680.062789][T25488] netlink_sendmsg+0x7f0/0xb20 [ 680.068102][T25488] sock_sendmsg_nosec+0x14e/0x190 [ 680.073666][T25488] ____sys_sendmsg+0x54e/0x850 [ 680.078960][T25488] ___sys_sendmsg+0x2a5/0x360 [ 680.084182][T25488] __x64_sys_sendmsg+0x1b1/0x290 [ 680.089656][T25488] do_syscall_64+0x166/0x520 [ 680.094786][T25488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.101214][T25488] [ 680.101214][T25488] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 680.108874][T25488] __mutex_lock+0x197/0x15a0 [ 680.114004][T25488] nbd_queue_rq+0x373/0xff0 [ 680.119040][T25488] blk_mq_dispatch_rq_list+0x499/0x1990 [ 680.125130][T25488] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 680.131991][T25488] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 680.138524][T25488] blk_mq_run_work_fn+0x167/0x2f0 [ 680.144086][T25488] process_scheduled_works+0xc3d/0x1630 [ 680.150179][T25488] worker_thread+0xa47/0xfb0 [ 680.155309][T25488] kthread+0x38b/0x480 [ 680.159915][T25488] ret_from_fork+0x514/0xb70 [ 680.165039][T25488] ret_from_fork_asm+0x1a/0x30 [ 680.170354][T25488] [ 680.170354][T25488] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 680.177580][T25488] __mutex_lock+0x197/0x15a0 [ 680.182708][T25488] nbd_queue_rq+0xc1/0xff0 [ 680.187687][T25488] blk_mq_dispatch_rq_list+0x499/0x1990 [ 680.193781][T25488] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 680.200642][T25488] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 680.207158][T25488] blk_mq_run_work_fn+0x167/0x2f0 [ 680.212739][T25488] process_scheduled_works+0xc3d/0x1630 [ 680.218830][T25488] worker_thread+0xa47/0xfb0 [ 680.223964][T25488] kthread+0x38b/0x480 [ 680.228572][T25488] ret_from_fork+0x514/0xb70 [ 680.233721][T25488] ret_from_fork_asm+0x1a/0x30 [ 680.239021][T25488] [ 680.239021][T25488] -> #3 (set->srcu){.+.+}-{0:0}: [ 680.246155][T25488] __synchronize_srcu+0xca/0x2f0 [ 680.251628][T25488] elevator_switch+0x1e8/0x7b0 [ 680.256932][T25488] elevator_change+0x2fa/0x480 [ 680.262245][T25488] elevator_set_default+0x375/0x440 [ 680.268001][T25488] blk_register_queue+0x404/0x4f0 [ 680.273568][T25488] __add_disk+0x6b8/0xdb0 [ 680.278429][T25488] add_disk_fwnode+0x100/0x3a0 [ 680.283739][T25488] nbd_dev_add+0x733/0xb60 [ 680.288685][T25488] nbd_init+0x168/0x1f0 [ 680.293374][T25488] do_one_initcall+0x250/0x870 [ 680.298680][T25488] do_initcall_level+0x10a/0x1a0 [ 680.304151][T25488] do_initcalls+0x59/0xa0 [ 680.309018][T25488] kernel_init_freeable+0x29d/0x3e0 [ 680.314759][T25488] kernel_init+0x22/0x1d0 [ 680.319626][T25488] ret_from_fork+0x514/0xb70 [ 680.324752][T25488] ret_from_fork_asm+0x1a/0x30 [ 680.330067][T25488] [ 680.330067][T25488] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 680.337898][T25488] __mutex_lock+0x197/0x15a0 [ 680.343025][T25488] elevator_change+0x1af/0x480 [ 680.348329][T25488] elevator_set_none+0xb5/0x140 [ 680.353735][T25488] blk_mq_update_nr_hw_queues+0x5ef/0x19e0 [ 680.360075][T25488] nbd_start_device+0x189/0xb30 [ 680.365468][T25488] nbd_genl_connect+0x167d/0x1cd0 [ 680.371059][T25488] genl_family_rcv_msg_doit+0x233/0x340 [ 680.377137][T25488] genl_rcv_msg+0x614/0x7a0 [ 680.382175][T25488] netlink_rcv_skb+0x226/0x4a0 [ 680.387484][T25488] genl_rcv+0x28/0x40 [ 680.392005][T25488] netlink_unicast+0x8ef/0xa80 [ 680.397307][T25488] netlink_sendmsg+0x7f0/0xb20 [ 680.402613][T25488] sock_sendmsg_nosec+0x14e/0x190 [ 680.408197][T25488] ____sys_sendmsg+0x54e/0x850 [ 680.413501][T25488] ___sys_sendmsg+0x2a5/0x360 [ 680.418713][T25488] __x64_sys_sendmsg+0x1b1/0x290 [ 680.424202][T25488] do_syscall_64+0x166/0x520 [ 680.429328][T25488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.435755][T25488] [ 680.435755][T25488] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 680.444393][T25488] blk_alloc_queue+0x544/0x690 [ 680.449702][T25488] __blk_mq_alloc_disk+0x194/0x390 [ 680.455344][T25488] nbd_dev_add+0x494/0xb60 [ 680.460289][T25488] nbd_init+0x168/0x1f0 [ 680.464977][T25488] do_one_initcall+0x250/0x870 [ 680.470276][T25488] do_initcall_level+0x10a/0x1a0 [ 680.475751][T25488] do_initcalls+0x59/0xa0 [ 680.480615][T25488] kernel_init_freeable+0x29d/0x3e0 [ 680.486346][T25488] kernel_init+0x22/0x1d0 [ 680.491216][T25488] ret_from_fork+0x514/0xb70 [ 680.496360][T25488] ret_from_fork_asm+0x1a/0x30 [ 680.501672][T25488] [ 680.501672][T25488] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 680.508897][T25488] __lock_acquire+0x164c/0x2de0 [ 680.514283][T25488] lock_acquire+0x115/0x350 [ 680.519318][T25488] fs_reclaim_acquire+0x71/0x100 [ 680.524791][T25488] kmem_cache_alloc_node_noprof+0x5f/0x600 [ 680.531132][T25488] __alloc_skb+0x1db/0x7a0 [ 680.536091][T25488] alloc_uevent_skb+0x7d/0x230 [ 680.541391][T25488] kobject_uevent_net_broadcast+0x2fa/0x560 [ 680.547817][T25488] kobject_uevent_env+0x566/0x9e0 [ 680.553386][T25488] nbd_config_put+0x2c8/0x7e0 [ 680.558598][T25488] nbd_release+0xfe/0x140 [ 680.563486][T25488] bdev_release+0x571/0x690 [ 680.568540][T25488] blkdev_release+0x15/0x20 [ 680.573584][T25488] __fput+0x408/0xa40 [ 680.578104][T25488] fput_close_sync+0x11f/0x240 [ 680.583429][T25488] __se_sys_close+0xa2/0x160 [ 680.588562][T25488] do_syscall_64+0x166/0x520 [ 680.593693][T25488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.600130][T25488] [ 680.600130][T25488] other info that might help us debug this: [ 680.600130][T25488] [ 680.610376][T25488] Chain exists of: [ 680.610376][T25488] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 680.610376][T25488] [ 680.623087][T25488] Possible unsafe locking scenario: [ 680.623087][T25488] [ 680.630558][T25488] CPU0 CPU1 [ 680.635939][T25488] ---- ---- [ 680.641316][T25488] lock(uevent_sock_mutex); [ 680.645924][T25488] lock(cpuhp_state-up); [ 680.652791][T25488] lock(uevent_sock_mutex); [ 680.659920][T25488] lock(fs_reclaim); [ 680.663949][T25488] [ 680.663949][T25488] *** DEADLOCK *** [ 680.663949][T25488] [ 680.672105][T25488] locks held by udevd/25488: 3, last CPU#1: [ 680.678008][T25488] #0: ffff888028aa7350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1b8/0x690 [ 680.687614][T25488] #1: ffff888028a98218 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0 [ 680.698342][T25488] #2: ffffffff9182dc80 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 680.709322][T25488] [ 680.709322][T25488] stack backtrace: [ 680.715235][T25488] CPU: 1 UID: 0 PID: 25488 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 680.724180][T25488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 680.734242][T25488] Call Trace: [ 680.737531][T25488] [ 680.740495][T25488] dump_stack_lvl+0xe8/0x150 [ 680.745122][T25488] print_circular_bug+0x2e2/0x300 [ 680.750173][T25488] check_noncircular+0x12f/0x150 [ 680.755138][T25488] __lock_acquire+0x164c/0x2de0 [ 680.760011][T25488] ? __lock_acquire+0x1511/0x2de0 [ 680.765066][T25488] lock_acquire+0x115/0x350 [ 680.769592][T25488] ? kmem_cache_alloc_node_noprof+0x5f/0x600 [ 680.775593][T25488] ? lock_acquire+0x115/0x350 [ 680.780293][T25488] ? __alloc_skb+0x1db/0x7a0 [ 680.784930][T25488] fs_reclaim_acquire+0x71/0x100 [ 680.789893][T25488] ? kmem_cache_alloc_node_noprof+0x5f/0x600 [ 680.795894][T25488] kmem_cache_alloc_node_noprof+0x5f/0x600 [ 680.801713][T25488] ? __alloc_skb+0x18d/0x7a0 [ 680.806327][T25488] ? __alloc_skb+0x1db/0x7a0 [ 680.810961][T25488] __alloc_skb+0x1db/0x7a0 [ 680.815436][T25488] alloc_uevent_skb+0x7d/0x230 [ 680.820233][T25488] kobject_uevent_net_broadcast+0x2fa/0x560 [ 680.826142][T25488] kobject_uevent_env+0x566/0x9e0 [ 680.831191][T25488] nbd_config_put+0x2c8/0x7e0 [ 680.835910][T25488] ? __pfx_nbd_config_put+0x10/0x10 [ 680.841144][T25488] ? do_raw_spin_unlock+0xf5/0x200 [ 680.846304][T25488] nbd_release+0xfe/0x140 [ 680.850661][T25488] ? __pfx_nbd_release+0x10/0x10 [ 680.855608][T25488] bdev_release+0x571/0x690 [ 680.860150][T25488] ? __pfx_blkdev_release+0x10/0x10 [ 680.865366][T25488] blkdev_release+0x15/0x20 [ 680.869930][T25488] __fput+0x408/0xa40 [ 680.873932][T25488] fput_close_sync+0x11f/0x240 [ 680.878716][T25488] ? __pfx_fput_close_sync+0x10/0x10 [ 680.884030][T25488] ? do_raw_spin_unlock+0xf5/0x200 [ 680.889173][T25488] __se_sys_close+0xa2/0x160 [ 680.893797][T25488] do_syscall_64+0x166/0x520 [ 680.898412][T25488] ? trace_irq_disable+0x3b/0x140 [ 680.903477][T25488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.909556][T25488] ? clear_bhb_loop+0x70/0xc0 [ 680.914274][T25488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.920196][T25488] RIP: 0033:0x7f5bd5ca7407 [ 680.924629][T25488] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 680.944251][T25488] RSP: 002b:00007fffa6a981a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 680.952681][T25488] RAX: ffffffffffffffda RBX: 00007f5bd63d5880 RCX: 00007f5bd5ca7407 [ 680.960682][T25488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 680.968702][T25488] RBP: 00007f5bd63d56e8 R08: 0000000000000000 R09: 0000000000000000 [ 680.976693][T25488] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 680.984680][T25488] R13: 0000562dc2800190 R14: 0000000000000008 R15: 0000562dc2805e20 [ 680.992679][T25488] [ 682.886568][T23285] net_ratelimit: 6 callbacks suppressed [ 682.886590][T23285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.886749][T23285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.886840][T23285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.996530][ T9924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.996712][ T9924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.526831][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.096445][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.096612][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.196327][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.196494][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.397094][ T9924] net_ratelimit: 5 callbacks suppressed [ 688.397112][ T9924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.397293][ T9924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.006683][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.496652][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.497121][ T9923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog