last executing test programs: 9.636693014s ago: executing program 2 (id=3831): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="140000001300010000000000000aef5907"], 0x14}]}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x4000000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001004010000000000000000000a00000a68000000060a09040000000000000000020000023c000480380001800e000100696d6d656469617465000000240002801800028014000280080003400000000308000180ff00000900010073797a30000000000900020073797a320000000014000000110001e100000000000000000000000a1de0fa181edbb07c3674b5b46b71a14b262f277972d81c823f8660ce9d7b563376c6b04c09ffbd0245838e18d0f2e2f1aa92cd90f9f03964f27793e3561c997c336d74ec977dd7329ebcb71f0902299643e67d092e06bb80"], 0x90}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00000000010000", @ANYRES32=0x0, @ANYBLOB="03f000000000000014001280", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c000180090001006d617371000000001c0002800800014000000042080001400000002008000240040000020900010073797a30000000000900020073797a32"], 0x84}}, 0x0) 8.872313885s ago: executing program 2 (id=3838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendto$inet(r3, &(0x7f00000002c0)="ab", 0x1, 0x4000805, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="0000600502800100a30004000010000000000000000000000f0000000000000000004303020c00670000000690787f00000a010100890fa2ac14140dac1414aaac14142b8313aa640101"], 0x22e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x57) recvmmsg(r3, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000002040)=""/14, 0xe}], 0x1}, 0x8}], 0x1, 0x22, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000040)=0x100) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003900010327bdd421ade9f09cdb7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x48d3}, 0x800) 8.53925023s ago: executing program 1 (id=3841): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='yeah', 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000005c0)='%pI4 \x00'}, 0x20) socket$kcm(0x2, 0xa, 0x2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0xc0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r5 = epoll_create(0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000500)={0x90000000}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002f80)=@bpf_ext={0x1c, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="cd690c00fcffffff45862e04fc5d4869cf08cb676972de8f"], &(0x7f0000000180)='GPL\x00', 0x57, 0x1000, &(0x7f0000001e40)=""/4096, 0x40f00, 0x1, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000002e40)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000002e80)={0x3, 0x9, 0xffffffff, 0xf44c}, 0x10, 0x3503, 0xffffffffffffffff, 0x5, &(0x7f0000002ec0)=[r3], &(0x7f0000002f00)=[{0x4, 0x3, 0x0, 0x5}, {0x4, 0x4, 0xb, 0xb}, {0x2, 0x4, 0x2, 0x2}, {0x2, 0x4, 0x1, 0x2}, {0x2, 0x3, 0x10, 0xf}], 0x10, 0x7}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='nv', 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r1, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) 8.178294162s ago: executing program 2 (id=3843): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000000)='{^($$!\xb8]&,\x00', 0x408100, &(0x7f0000000040)={@align=0x7f800, {0x7, 0x1, 0x3, 0x6}}, 0x4, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x4, 0x1, 0xb, 0x6, 0x1, 0x20}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x66}, 0x94) 7.934804801s ago: executing program 2 (id=3846): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) poll(&(0x7f0000000200)=[{r1}], 0x1, 0xff) write$tun(0xffffffffffffffff, 0x0, 0xfdef) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002500)=@bpf_ext={0x1c, 0x7, &(0x7f0000001100)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0x1}, @tail_call], &(0x7f0000001140)='syzkaller\x00', 0x6, 0x30, &(0x7f0000001180)=""/48, 0x40f00, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000011c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0xc, 0x81, 0x6}, 0x10, 0x2a208, r3, 0x6, &(0x7f0000001240)=[0xffffffffffffffff, r3], &(0x7f0000001280)=[{0x1, 0x1, 0x0, 0xc}, {0x0, 0x2, 0x49, 0x6}, {0x3, 0x4, 0xa, 0xc}, {0x5, 0x1, 0xa, 0xa435747de4489a1}, {0x5, 0x3, 0x6, 0x3}, {0x4, 0x3, 0xb}], 0x10, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r5 = socket$netlink(0x10, 0x3, 0x9) r6 = socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCGSKNS(r7, 0x894c, 0x0) socket(0x10, 0x3, 0x0) unshare(0x8040480) write(r5, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) syz_emit_ethernet(0xf87, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2, @mcast2, {[@routing={0x84}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df74"}}}}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000001080)=0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000500)={r10, 0x6, 0x4279, 0x6, 0x2, 0x5}, 0x14) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x60080}, 0x24040084) r12 = socket(0xa, 0x2, 0x0) sendto$inet(r12, 0x0, 0xffe5, 0xe000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="60000000120001030000000000000000020d00000000000000000000000000000000000000000000000000000600"/56, @ANYRES32=0x0, @ANYBLOB="0000000000000000fffffff8055618f06a7d055e699392780cff0000000014000100071410000220000001400000002e743c"], 0x60}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) 6.754874709s ago: executing program 0 (id=3849): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xc, 0x4, 0x280, 0xffffffff, 0x148, 0x0, 0x4000000, 0x98, 0xffffffff, 0x1e8, 0x1e8, 0x1e8, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1000}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x6, {0x3ff}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000000000101060000000000000000020000003400018014000180080001007f000001080002007f0000011c0002800500010011000000060002004e2000000600030006b700003400028014000180080001007f000001080002007f0000011c00028005000100110000000600020006b70000060003004e20000008000700000003e80c00058008000100524153000c000d80080001007f000002"], 0x9c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000100)="280000010000007f00000106b7", 0xd, 0x0, &(0x7f0000000200)={0x2, 0x6b7, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r4, &(0x7f000000b400)=[{{0x0, 0x4c, &(0x7f0000001b80), 0x1}, 0x5dd7}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000000040)=""/188, 0xbc}, {&(0x7f0000000680)=""/175, 0xaf}, {&(0x7f0000002ec0)=""/212, 0xdc}, {&(0x7f0000002fc0)=""/189, 0xbd}, {&(0x7f0000003080)=""/4083, 0xc94}, {&(0x7f00000005c0)=""/46, 0x2e}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x3fffffffffffe5f, 0x40, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000140)={0xa, 0x4c62, 0x7, @loopback, 0x9}, 0x1c, 0x0}}], 0x1, 0x60000040) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r8, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071115300000000008510000002000000850000008800000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x3, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r5, 0x0, 0x2f, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'macvlan1\x00', {}, 0x3}) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0xdb30}], 0x1, 0x40002142, 0x0) 4.634679724s ago: executing program 2 (id=3850): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r1}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004700070128bd500000000000017c000007000480360a3b"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003f40)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="00000000021000"/16], 0x10}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES16=r4, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x24020000}, 0x200500d5) 4.49548168s ago: executing program 1 (id=3852): r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) write(r2, &(0x7f0000000100)="3c0000003b00050001000000000000000a01000025000100534d432d425046544553542d554549442020202020202020202020202020202000000000", 0x3c) write(r2, &(0x7f0000000140)="380000003b00050002000000000000000a01000024000100534d432d425046544553542d5545494420202020202020202020202020202020", 0x38) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x5000, @loopback}, 0x10) listen(r3, 0xa) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x5000, @loopback}, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) accept(r5, 0x0, 0x0) write(r2, &(0x7f0000000200)="140000003b000103030000000000000004010000", 0x14) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x28, 0x301, 0x2270bd24, 0x25dfdc02, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4808}, 0x2000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x20010, 0xffffffffffffffff, 0x77660000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x20000000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000410000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) r10 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000700)=[@in6={0xa, 0x4e22, 0xa50b, @mcast2, 0x3}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000000180)={r11, 0x2, 0x6, 0x80000000, 0xa18c, 0x8}, &(0x7f00000001c0)=0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff0600600100004199dec6aa4a", 0x0, 0x40d5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet6_udp(0xa, 0x2, 0x0) 2.782687197s ago: executing program 0 (id=3854): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000400000008000000c00b000001000000", @ANYRES32, @ANYBLOB='\x00\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x50) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @private1, [@hopopts={0x11}], "fafb17c103001c193eb46558f48ce6b9"}}}}}}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) ioctl$sock_bt_hci(r2, 0x800448d2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r1, 0x4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000400000008000000c00b000001000000", @ANYRES32, @ANYBLOB='\x00\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x50) (async) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @private1, [@hopopts={0x11}], "fafb17c103001c193eb46558f48ce6b9"}}}}}}}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) (async) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) (async) ioctl$sock_bt_hci(r2, 0x800448d2, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r1, 0x4}, 0x38) (async) 2.73420392s ago: executing program 2 (id=3855): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfffffffffffffd58, &(0x7f0000000000), &(0x7f00000001c0)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110", 0x0, 0x0, 0x4}, 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000100)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "c865fb4d12df25"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001100)={{0x0, 0xbf, 0x5, 0xffffffffffffffae, 0xb, 0x4, 0x28945aba, 0x40, 0x4000, 0x6, 0x6faf, 0x2, 0x6e, 0x7, 0x6}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002100)={r1, r2, "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", "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"}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r4, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0xd}, {0xf, 0x8}, {0xc, 0xfffe}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0xe7b}}}]}, 0x3c}}, 0x4048090) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003140100fedbdf0000000800418000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) unshare(0x40000200) 2.67558598s ago: executing program 4 (id=3856): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="94010000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf25010000001400020077673200000000000000000000000000240003000000000000000000000000000000000000000000000000000000000000000000480108805400008024000200935fcc0d76a5bcfce584052ea21b4b2622057154ff788c325f3b596e54307c08080003000300000024"], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-neonbs\x00'}, 0x58) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}, 0xe}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@can_delroute={0x24, 0x19, 0x200, 0x70bd28, 0x25dfdbfc, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={0x0}, 0x1, 0x0, 0x0, 0x20044800}, 0x8001) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) r5 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) r6 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x439}, 0x20}}, 0x0) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x453, 0x8, 0x70bd27, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x20004000}, 0x804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, &(0x7f0000000000), &(0x7f0000000480)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x10, 0xfffffffe}, 0x94) 2.641454465s ago: executing program 1 (id=3857): r0 = socket(0x29, 0x5, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x92258420943190a, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x40091}, 0x40) bind$vsock_stream(r0, &(0x7f00000003c0)={0x28, 0x0, 0xffffd8ee, @host}, 0x10) (async) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r0, 0x7697) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0x2d, &(0x7f00000000c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff229a}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}, @jmp={0x5, 0x0, 0xa, 0x2, 0x7, 0x30, 0x8}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffff02}}, @exit, @tail_call], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0xa, 0xfff, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f00000002c0)=[0x1, 0x1], &(0x7f0000000300)=[{0x1, 0x5, 0x9, 0xc}, {0x0, 0x3, 0x2, 0xc}, {0x1, 0x3, 0x3, 0x7}, {0x0, 0x1, 0x2, 0xc}, {0x0, 0x4, 0x9, 0x5}], 0x10, 0x3}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x1f, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x346}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x30}, @call={0x85, 0x0, 0x0, 0xa2}, @map_fd={0x18, 0x2}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x58}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0x20000, 0x29, &(0x7f0000000600)=""/41, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000680)=[{0x0, 0x4, 0x9, 0x4}, {0x5, 0x3, 0x7, 0x7}, {0x2, 0x4, 0xb, 0x7}, {0x2, 0x3, 0x2, 0x8}, {0x1, 0x5, 0xe, 0x5}, {0x4, 0x4, 0x7}, {0x3, 0x1, 0x5, 0x8}, {0x3, 0x2, 0x1, 0x1}], 0x10, 0x10001}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@map=0x1, 0x7, 0x1, 0xfffffff9, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15, 0x10310}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4028841}, 0x8000) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r7, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x3, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x21) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r8}, 0x4) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)={@fallback=r0, r2, 0x10, 0x20, r3, @void, @void, @void, @value=r8, r4}, 0x20) 2.554162254s ago: executing program 3 (id=3858): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x45, 0x4) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x800000, 0x1, 0x7, 0x41401, r1, 0x401, '\x00', 0x0, r2, 0x2, 0x3, 0x5}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r3], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x0, &(0x7f0000000000)="000000000000000002", 0x0}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) 2.553558646s ago: executing program 0 (id=3859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c00028005000100000000000600034000010000080007"], 0x6c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000850000005000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000340)="63ec33e9e586d4f0d1460a0d5cc3", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmmsg$inet6(r2, &(0x7f00000017c0)=[{{&(0x7f0000001a00)={0xa, 0x4e23, 0x7, @loopback, 0x8000000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000280)="03", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}], 0x2, 0x4008005) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x103}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 2.427330535s ago: executing program 3 (id=3860): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {0x3}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) 2.189252148s ago: executing program 3 (id=3861): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000040), &(0x7f00000007c0)}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00'}) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r5, 0x84, 0x3, &(0x7f0000002140)=""/4108, &(0x7f0000001040)=0x100c) 2.13785139s ago: executing program 4 (id=3862): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000007e40)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000480)={0x14, 0x0, 0x50a, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2004c810}, 0x4090) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {0x4, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @tfcpad={0x8, 0x16, 0x3}]}, 0x144}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x40d, 0x71bd2d, 0x1ffffffa, {0x0, 0x0, 0x0, r2, 0x741c3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c5}, 0x0) sendmsg$kcm(r1, &(0x7f0000002080)={&(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x5, @local, 0x7ff}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000140)="3c745cd949181a2e9af5c1b8f6ef75fed45a84659b22a204daf1f60a6979963026815bafbd8d73481982eae4690afbfebd43bfc1b2cf5f3a1576fb43e932b7fce935525a7a96ca41757e702f153f6fe93bb229f07ab512e1d5fd369231b22e715c2251b4a55dd7fd9e8d26f03e919cbe8b1e3ee88ee34f3b3ab8c2dd7488e4936c606271bf43606574c0ea6c3e8417", 0x8f}, {&(0x7f00000003c0)="8171ac3dea7d30aca22cac502c9750e76a206aa75a80d080c5607ff4fad72fa4607ef61294b66aa933c5a4f375d5ef59abb9f47c0f31117bf3ce1ad7b5a7420febe07b77f845dd03000fcad8c37e2cb65cdcf2b85a2968a3639b315f634de8818b071e86bec363bea733584fe46514ff9954043446fe6680de8922d591848242fd8c30939c830a962ba6a7de7168bfda", 0x90}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="4d0e107f40479bbd49c95d58c2ca96259342d0537c95148ae52b8066dba67fd6eed0da39e461e1f73a27fb77167d5e3957245fbd74fc6f9aef57c46c5274ff0eef02eb1bdd3e1878a5c9ab30836cb27cee908e993518f8bf0027620ef78c742858bc9ff9ace43d6b60b47c7608c5ab2e3494b72628c29cbda06b44614551f004f01e5176d64f970546623abf3924491e9c8aad47ecc73c8f35c65500044a46ace8e0051b9915f10102d4d7f738c623d28faa4a6da473e75497", 0xb9}, {&(0x7f0000001d40)="db8e61c42ff40a4763fa643ca28c7b562165156575aa539d5927d941ba4dc4b5030d051b2e15ae", 0x27}, {&(0x7f0000001d80)="870d71b896af9c2a26d3e4e20453f57b4504273efbdce2ec5badf1070ab2df329b25c9f3be10e34f1b336a5cc6c3f9b1c6798db61e68c4060765bd2555e1abe1f03015ea953e9a00190d9c5a8c1b1c44bb9798225ae2b471834b12711f658afb918c63403a33c4ab0469eb1d6866c52b6969fb4e856b3be3fdefb0b255bdc488d74be3c4851720ae8a91189cf4d586895cfd60", 0x93}, {&(0x7f0000001e40)}, {&(0x7f0000001e80)="12cdc0b72ae9b51ecd9642bbb7d0d61c203076", 0x13}], 0x8, &(0x7f0000001f40)=ANY=[@ANYBLOB="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"], 0x108}, 0x48c5) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2.134773541s ago: executing program 1 (id=3863): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f050000000100000005000000fbff000000000000000000002e"], 0x0, 0x3a}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @multicast2, 0x15, 0x3, 'sed\x00', 0x28, 0x5, 0x72}, 0x2c) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x73, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e24, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r7 = socket(0x2a, 0x3, 0x7) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x13fea3997e851172}, 0x8000) r9 = socket(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES64=r7, @ANYRES32, @ANYRESOCT=r8, @ANYBLOB="45b4a5fbbf7b9c937b3e0b6b41d22fb596cf6d29cb02b5f7829b166c5781bfac4c66074da80e9abddab31f9089", @ANYRESOCT=r3, @ANYRES16=r9, @ANYRES32=r3, @ANYRES32=r0, @ANYRESDEC=r7, @ANYRES8=r7, @ANYRESHEX=r7, @ANYRESOCT=r3, @ANYRES64=r8], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r10, &(0x7f0000000300)="715b675cbaae0f1298a90635aebb8f4b11708b274b4da1d80f758e611ce5bdbf7ef2109c12b167cf547b2d68bc1710e4c50ab9fd0603812fe97c44dfad2261f00c96e98da3c3675a3ea6b16026263fc07258b0a6768f6e05d34153b8727bbd12fa86db32229c3ef6b604d778e2a18400347fef1eba55715461b55ae2b6d123dfaa7a1d8860bd5657c224a731e47e5da51c00c787d240175248fee527bf8efeadcc7a60f1166567d3"}, 0x20) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xe, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000ff7f000000000016009aaa00009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r11, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000680)="fa61", 0x2}], 0x1}}], 0x1, 0x20040804) setsockopt$sock_int(r11, 0x1, 0x12, &(0x7f0000000140)=0xffff0022, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r12) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000000)) 1.847649191s ago: executing program 3 (id=3864): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, &(0x7f0000000080)=0xc) setsockopt$inet_buf(r0, 0x0, 0x9, &(0x7f00000000c0)="0dcad2c008d3375a6c7d4d1cc8b94f0863c5725021665552a3c62e4c402d3db9e3e56dc9cc86b0fefd7a8398bc0e8f00d9081c178f0358251691ec818b848e957207cdc72210a166a55519f26a37012972b2256c340e4dd1bbaf", 0x5a) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000001800)={0x84, @multicast2, 0x4e21, 0x1, 'nq\x00', 0x1a, 0x9, 0x3a}, 0x2c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000140)={0x8, 'veth0_to_bridge\x00', {'veth0_to_batadv\x00'}, 0x5}) 1.773000197s ago: executing program 3 (id=3865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c0005"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) 1.583916898s ago: executing program 3 (id=3866): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000600)={r2, r2, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f00000001c0)={@any, 0xff, 0x5, 0x3, 0x800, 0x5, "8f1dc444b2a813bcfd8e57d84dc7115eec5fbeda733e52756349fd8d2c4fda878f0e54599180e4543cba2ef65d539ad3cd097ab0f432e66f1466ba52b445f33927335186bbab00507d36e8b17e8b3af68ca2e0d945c90c64f86ad7be6544128410589a95916675cc8006a544210f380098271a4f83f018722836306112e8b25b"}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xffffffff}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)}, 0x811) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000080), &(0x7f00000001c0), 0x2000000}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r9, @ANYBLOB="f9ff2f80"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r10, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x840) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) recvmmsg(0xffffffffffffffff, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}, 0x60}], 0x1, 0x22, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.367213544s ago: executing program 0 (id=3867): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = gettid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gretap0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x700, 0x1, 0xfa2, 0x0, {{0x10, 0x4, 0x1, 0x2, 0x40, 0x66, 0x0, 0x68, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x39}, {[@lsrr={0x83, 0x2b, 0xa4, [@empty, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @remote, @multicast2, @broadcast]}]}}}}}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000380)={r0, 0x6, 0x9, 0x1}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc6}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x4018, r2}, 0x18) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="010000000300000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x14, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x8, 0xb0, &(0x7f0000000200)=""/176, 0x41100, 0x3, '\x00', r3, 0x0, r4, 0x8, &(0x7f00000003c0)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000500)=[r5, r6, 0x1, r8, r9], &(0x7f0000000540)=[{0x2, 0x1, 0x0, 0x9}, {0x3, 0x4, 0x1}, {0x0, 0x2, 0xd, 0xc}, {0x3, 0x1, 0x9, 0x6}, {0x4, 0x4, 0xf, 0xc}, {0x0, 0x2, 0xa, 0x6}, {0x2, 0x2, 0x1, 0x5}, {0x4, 0x3, 0x10, 0x5}], 0x10, 0xd16}, 0x94) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x6c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x3}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTO={0x0, 0x7, 0xc}, @IPSET_ATTR_NETMASK={0x0, 0x14, 0x3}, @IPSET_ATTR_SIZE={0x0, 0x17, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0xfffffffffffffe1d}}, 0x0) sendmsg$netlink(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000002940)=ANY=[@ANYBLOB="100300001b0000dbdf25000000000000"], 0x10}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x10}}], 0x30, 0x4000000}, 0x8000) 1.364586951s ago: executing program 4 (id=3868): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000c5fb041d8c3b0900000008000000", @ANYRES32=0x0, @ANYBLOB="6544050000000000140012800b0001006261746164760000040002800a0001000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x26000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000390428bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80000000800404004c0012800b000100697036746e6c00003c000280140002000000000000000000000000000000000108001400ff01000014000300", @ANYRES8=r5], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x2000c8c0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x868, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0)=r7, 0x4) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) 1.175744285s ago: executing program 0 (id=3869): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e00, 0x400, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x2}, 0x1c) connect$inet6(r1, 0x0, 0x0) unshare(0x2020600) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x9, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x500000000000000) r4 = syz_open_procfs$namespace(0x0, 0x0) ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) write(r1, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) recvmmsg(r0, &(0x7f0000005980), 0x0, 0x10001, 0x0) 1.092711778s ago: executing program 1 (id=3870): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x1, 0x8, 0x1400000, 0xb99, {{0x26, 0x4, 0x0, 0x7, 0x98, 0x65, 0x0, 0x4, 0x29, 0x0, @broadcast, @private=0xa010101, {[@rr={0x7, 0xb, 0x95, [@rand_addr=0x64010100, @multicast1]}, @ssrr={0x89, 0x17, 0xc0, [@rand_addr=0x64010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast2, @local]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x1f, 0xf7, [@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1, @multicast1, @private=0xa010102, @local]}, @timestamp={0x44, 0x14, 0x5d, 0x0, 0x6, [0xa66, 0xe618, 0x0, 0x11]}, @ssrr={0x89, 0x27, 0xf1, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast2, @rand_addr=0x64010100, @remote]}]}}}}}) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x14, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc0adcb}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) pipe(&(0x7f0000000340)) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x1a}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r8], 0x68}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast2, [0x0, 0x26a9e3a96bccb3de], [0x0, 0xffffffff, 0xff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0x0, 0xffff00, 0xff000000], [0xff, 0xffffff00, 0xff000000], 'syzkaller0\x00', 'wlan1\x00', {0xff}, {}, 0x73, 0x1, 0x5, 0x2}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x2, 0x6}, {0x4, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d0) r10 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x0, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00], [0x0, 0x0, 0xff], 'ipvlan0\x00', 'ip6gre0\x00', {0xff}, {}, 0x11, 0x6}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@loopback, @empty, [], [0xff, 0xff], 'netdevsim0\x00', 'lo\x00', {}, {}, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}, {}, 0x0, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) sendmsg(r10, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) unshare(0x22020400) socket$inet6_tcp(0xa, 0x1, 0x0) 746.099975ms ago: executing program 4 (id=3871): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b0000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x400000000010, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28031, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) recvfrom$inet(r0, &(0x7f0000000000)=""/39, 0x27, 0x14020, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) write$cgroup_subtree(r4, 0x0, 0xfffd) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x10}, 0x8) 713.138914ms ago: executing program 0 (id=3872): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') recvfrom$inet(r0, &(0x7f0000000080)=""/25, 0x19, 0x43, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001300)=[{&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f0000001180)=""/163, 0xa3}], 0x2) write$cgroup_int(r2, &(0x7f0000000140), 0xfffffdef) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(0x0, 0x0, 0x3, 0x30, r3, 0x80000000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4a46d2dd44aa181907fa9f4ac15385ca4c2dd5b2a86c50cb21d9a9a4f42754", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x404e815}, 0x4000000) listen(r4, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x10, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x400001}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000002c0)) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x1, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@remote, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x18) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x100}, 0x1c) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0xffffffffffffff24) writev(r8, 0x0, 0x0) r9 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000540)=""/131, 0x83}, {&(0x7f0000001240)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}, {{&(0x7f0000001340)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000013c0)=""/159, 0x9f}, {&(0x7f0000000600)=""/41, 0x29}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/127, 0x7f}, {&(0x7f0000002740)=""/27, 0x1b}, {&(0x7f0000000440)=""/79, 0x4f}], 0x6, &(0x7f0000002800)=""/236, 0xec}, 0x1}, {{&(0x7f00000001c0)=@qipcrtr, 0x80, 0x0, 0x0, &(0x7f0000002cc0)=""/120, 0x78}, 0x419}], 0x3, 0x2, 0x0) 176.524467ms ago: executing program 4 (id=3873): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x90000001}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x100000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000150a0102000000000000000002000008acfe010073795c3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x4000884) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) 1.256679ms ago: executing program 4 (id=3874): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000040)=""/204, &(0x7f0000000140)=0xcc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000006b030000000000001d400500000000004704000001ed00007203020000ffffffbf44000000000000730a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f1ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c107571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d1abf3cb17b40ac9b10968f38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d61f3b39c64307f9c82b2807c9ff4a269841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67a41b9e320146ee9f566a28"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000040)=""/204, &(0x7f0000000140)=0xcc) (async) 0s ago: executing program 1 (id=3875): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) close(0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x4, 0x4, 0x14, 0x15, 0x4, 0x6}}, @TCA_CHOKE_STAB={0x104, 0x2, "18040a0700200000000000b8d4ef60c9b3b201ad412d10413208ddeec3ca63150ca2e8e88d626d21967b5f9bd6b2ca299da7e933b9de68b10c358ceb836b1269874d68178d5ca2a60691b8b8e54035c75794ef929a921ba80fe335e76deda6606f266cad000e1e9f949c533252624fbdb25e28a005a01da7a07e844a72943d4959681afcb9a2b3b3c4b2b552ae3ab78abf8be2fc63130f4387fb8c00ce678ba03763da61a574abbc59b728aa3c02eedb176afb984194f31696e2b3357c57578ce6ac6e3d2a149abd76a0fe9a44165ad7ea8d792273206fc444294e3bae3fc553bc9bd6d0b67ea837b7a0b7f9ef000008000000000000001f00"}]}}]}, 0x14c}}, 0x0) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x44081) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x4, &(0x7f0000000280)=[{0x20, 0x4, 0x9, 0xfffff038}, {0x20, 0x0, 0x8, 0xfffff010}, {0x50, 0x0, 0x2}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc", 0x1e}, {&(0x7f0000000700)}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) writev(r1, &(0x7f0000003240), 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x40, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1f8, 0x0, 0x720d, 0x148, 0xd0, 0x148, 0x160, 0x240, 0x240, 0x160, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @rand_addr=0x64010100, 0xff, 0xff000000, 'veth1_to_hsr\x00', 'dvmrp1\x00', {0xff}, {}, 0xff, 0x3, 0x30}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x1e04, 0x2, 0x3, 0x7], 0x0, 0x2}, {0xffffffffffffffff, [0x7, 0xb2cc575b459b5b36, 0x4, 0x1, 0x3, 0x1], 0x6, 0x7}}}}, {{@ip={@broadcast, @multicast1, 0xff000000, 0xffffffff, 'sit0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x1, 0x3, 0x40}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000001000000000001000000080001000000000004000480080002000100000018000880140007800800050000000000080006003b000020"], 0x40}}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x6, [@enum={0x10, 0x8, 0x0, 0x6, 0x4, [{0x0, 0x5c4}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0xffff}, {0x10, 0x3ff}, {0x9, 0x5}, {0x4, 0x6}, {0x10, 0x2}]}]}, {0x0, [0x5f, 0x5f, 0x61, 0x5f]}}, &(0x7f0000000180)=""/89, 0x6a, 0x59, 0x1, 0xaa, 0x10000, @value=r5}, 0x28) kernel console output (not intermixed with test programs): sim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.850061][ T98] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 528.850088][ T98] netdevsim netdevsim4 netdevsim1: unset [1, 2] type 2 family 0 port 20004 - 0 [ 529.309000][T18599] set match dimension is over the limit! [ 529.898636][T15142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.903021][T18617] x_tables: duplicate underflow at hook 1 [ 530.099167][T18256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.364235][T18256] veth0_vlan: entered promiscuous mode [ 530.448403][T18256] veth1_vlan: entered promiscuous mode [ 530.619304][T18256] veth0_macvtap: entered promiscuous mode [ 530.676107][T18256] veth1_macvtap: entered promiscuous mode [ 530.857040][T18632] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 530.857082][T18632] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 530.857127][T18632] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 530.937064][T18634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3014'. [ 530.961595][T18256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.026020][T15136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.056016][T18256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.064700][T18636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3011'. [ 531.124641][T11678] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.157383][T15144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.206491][T11678] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.223612][T13741] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.463337][T18641] netlink: 'syz.2.3015': attribute type 1 has an invalid length. [ 531.724236][T11687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.724260][T11687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.963943][T13741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.963968][T13741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.070815][T18651] netlink: 'syz.0.3018': attribute type 1 has an invalid length. [ 532.156674][T11687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.343479][T18651] 8021q: adding VLAN 0 to HW filter on device bond8 [ 532.393329][T18651] netlink: 264 bytes leftover after parsing attributes in process `syz.0.3018'. [ 532.393370][T18651] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3018'. [ 532.845065][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.847196][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.098040][T18672] netlink: 404 bytes leftover after parsing attributes in process `syz.4.3024'. [ 533.162177][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.162203][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.270409][ T98] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.308871][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 533.341882][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 533.347727][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 533.368100][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 533.371684][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 533.483001][T18675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3024'. [ 533.564096][T18675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.256283][T18697] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 534.256441][T18697] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 534.256580][T18697] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 534.256716][T18697] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 534.256852][T18697] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 535.052367][T18711] ip_vti0 speed is unknown, defaulting to 1000 [ 535.085081][ T52] Bluetooth: hci5: command 0x0405 tx timeout [ 535.485422][ T5627] Bluetooth: hci3: command tx timeout [ 536.135225][T18677] ip_vti0 speed is unknown, defaulting to 1000 [ 536.486531][ T156] IPVS: starting estimator thread 0... [ 536.678033][ T156] net_ratelimit: 51 callbacks suppressed [ 536.678055][ T156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.800779][T18774] FAULT_INJECTION: forcing a failure. [ 536.800779][T18774] name failslab, interval 1, probability 0, space 0, times 0 [ 536.800836][T18774] CPU: 0 UID: 0 PID: 18774 Comm: syz.4.3041 Not tainted syzkaller #0 PREEMPT(full) [ 536.800862][T18774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 536.800880][T18774] Call Trace: [ 536.800890][T18774] [ 536.800899][T18774] dump_stack_lvl+0xe8/0x150 [ 536.801018][T18774] should_fail_ex+0x410/0x560 [ 536.801139][T18774] should_failslab+0xa8/0x100 [ 536.801215][T18774] __kvmalloc_node_noprof+0x176/0x820 [ 536.801246][T18774] ? bpf_compute_scc+0xb8/0xb10 [ 536.801293][T18774] ? bpf_compute_scc+0xb8/0xb10 [ 536.801322][T18774] bpf_compute_scc+0xb8/0xb10 [ 536.801367][T18774] bpf_check+0x2720/0x2ef0 [ 536.801413][T18774] ? __pfx_bpf_check+0x10/0x10 [ 536.801441][T18774] ? bpf_obj_name_cpy+0x194/0x1e0 [ 536.801477][T18774] bpf_prog_load+0x14d6/0x1c20 [ 536.801517][T18774] ? __pfx_bpf_prog_load+0x10/0x10 [ 536.801571][T18774] __sys_bpf+0xd0d/0xd90 [ 536.801605][T18774] ? __pfx___sys_bpf+0x10/0x10 [ 536.801643][T18774] ? __fget_files+0x2a/0x420 [ 536.801705][T18774] ? ksys_write+0x242/0x270 [ 536.801754][T18774] ? __pfx_ksys_write+0x10/0x10 [ 536.801792][T18774] __x64_sys_bpf+0xba/0xd0 [ 536.801822][T18774] do_syscall_64+0x166/0x520 [ 536.801944][T18774] ? trace_irq_disable+0x3b/0x140 [ 536.801979][T18774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.802022][T18774] ? clear_bhb_loop+0x70/0xc0 [ 536.802050][T18774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.802076][T18774] RIP: 0033:0x7f00c079e199 [ 536.802097][T18774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.802117][T18774] RSP: 002b:00007f00be9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 536.802142][T18774] RAX: ffffffffffffffda RBX: 00007f00c0a25fa0 RCX: 00007f00c079e199 [ 536.802159][T18774] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 536.802174][T18774] RBP: 00007f00be9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 536.802188][T18774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 536.802212][T18774] R13: 00007f00c0a26038 R14: 00007f00c0a25fa0 R15: 00007fff1e24fd08 [ 536.802249][T18774] [ 537.565251][ T5627] Bluetooth: hci3: command tx timeout [ 537.634184][T18760] IPVS: using max 26 ests per chain, 62400 per kthread [ 537.777663][ T98] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.876581][T15142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.177897][T18794] netlink: 'syz.3.3046': attribute type 16 has an invalid length. [ 539.177925][T18794] netlink: 'syz.3.3046': attribute type 17 has an invalid length. [ 539.418052][T18808] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3049'. [ 539.644956][ T5627] Bluetooth: hci3: command tx timeout [ 539.840845][T18794] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.841527][T18794] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.008751][T15136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.207211][T18794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.237598][T18794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.335390][T18816] FAULT_INJECTION: forcing a failure. [ 540.335390][T18816] name failslab, interval 1, probability 0, space 0, times 0 [ 540.335428][T18816] CPU: 0 UID: 0 PID: 18816 Comm: syz.0.3051 Not tainted syzkaller #0 PREEMPT(full) [ 540.335469][T18816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 540.335484][T18816] Call Trace: [ 540.335492][T18816] [ 540.335501][T18816] dump_stack_lvl+0xe8/0x150 [ 540.335538][T18816] should_fail_ex+0x410/0x560 [ 540.335570][T18816] should_failslab+0xa8/0x100 [ 540.335601][T18816] __kvmalloc_node_noprof+0x176/0x820 [ 540.335626][T18816] ? __kvmalloc_node_noprof+0x345/0x820 [ 540.335645][T18816] ? bpf_compute_scc+0xd2/0xb10 [ 540.335661][T18816] ? bpf_compute_scc+0xd2/0xb10 [ 540.335684][T18816] bpf_compute_scc+0xd2/0xb10 [ 540.335717][T18816] bpf_check+0x2720/0x2ef0 [ 540.335752][T18816] ? __pfx_bpf_check+0x10/0x10 [ 540.335774][T18816] ? bpf_obj_name_cpy+0x194/0x1e0 [ 540.335803][T18816] bpf_prog_load+0x14d6/0x1c20 [ 540.335872][T18816] ? __pfx_bpf_prog_load+0x10/0x10 [ 540.335915][T18816] __sys_bpf+0xd0d/0xd90 [ 540.335941][T18816] ? __pfx___sys_bpf+0x10/0x10 [ 540.335970][T18816] ? __fget_files+0x2a/0x420 [ 540.336010][T18816] ? ksys_write+0x242/0x270 [ 540.336039][T18816] ? __pfx_ksys_write+0x10/0x10 [ 540.336074][T18816] __x64_sys_bpf+0xba/0xd0 [ 540.336094][T18816] do_syscall_64+0x166/0x520 [ 540.336110][T18816] ? trace_irq_disable+0x3b/0x140 [ 540.336128][T18816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.336146][T18816] ? clear_bhb_loop+0x70/0xc0 [ 540.336168][T18816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.336185][T18816] RIP: 0033:0x7fd19a39e199 [ 540.336202][T18816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.336217][T18816] RSP: 002b:00007fd19b2fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 540.336237][T18816] RAX: ffffffffffffffda RBX: 00007fd19a625fa0 RCX: 00007fd19a39e199 [ 540.336250][T18816] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 540.336261][T18816] RBP: 00007fd19b2fd090 R08: 0000000000000000 R09: 0000000000000000 [ 540.336272][T18816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 540.336283][T18816] R13: 00007fd19a626038 R14: 00007fd19a625fa0 R15: 00007ffe77c006a8 [ 540.336311][T18816] [ 541.176063][T13741] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.176435][T11687] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.176550][T13741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.176793][T11678] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.394644][T18677] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.396088][T18677] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.396493][T18677] bridge_slave_0: entered allmulticast mode [ 541.401311][T18677] bridge_slave_0: entered promiscuous mode [ 541.410740][T18677] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.411199][T18677] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.411629][T18677] bridge_slave_1: entered allmulticast mode [ 541.416237][T18677] bridge_slave_1: entered promiscuous mode [ 541.535014][ T156] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.645434][T18830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3054'. [ 541.725299][ T5627] Bluetooth: hci3: command tx timeout [ 541.746488][T18677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.872186][T18830] bond14: option lacp_active: invalid value (5) [ 541.883950][T18830] bond14 (unregistering): Released all slaves [ 542.034227][T18677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.224052][T18857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3057'. [ 542.359044][T11678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.408790][T18677] team0: Port device team_slave_0 added [ 542.536452][T18677] team0: Port device team_slave_1 added [ 542.683859][T18677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.683877][T18677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.683906][T18677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.809971][T18677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.809991][T18677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.810021][T18677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.881396][T18868] FAULT_INJECTION: forcing a failure. [ 542.881396][T18868] name failslab, interval 1, probability 0, space 0, times 0 [ 542.881434][T18868] CPU: 1 UID: 0 PID: 18868 Comm: syz.4.3061 Not tainted syzkaller #0 PREEMPT(full) [ 542.881460][T18868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 542.881473][T18868] Call Trace: [ 542.881482][T18868] [ 542.881492][T18868] dump_stack_lvl+0xe8/0x150 [ 542.881528][T18868] should_fail_ex+0x410/0x560 [ 542.881561][T18868] should_failslab+0xa8/0x100 [ 542.881592][T18868] __kvmalloc_node_noprof+0x176/0x820 [ 542.881620][T18868] ? __kvmalloc_node_noprof+0x345/0x820 [ 542.881645][T18868] ? bpf_compute_scc+0xd2/0xb10 [ 542.881666][T18868] ? bpf_compute_scc+0xd2/0xb10 [ 542.881695][T18868] bpf_compute_scc+0xd2/0xb10 [ 542.881739][T18868] bpf_check+0x2720/0x2ef0 [ 542.881785][T18868] ? __pfx_bpf_check+0x10/0x10 [ 542.881814][T18868] ? bpf_obj_name_cpy+0x194/0x1e0 [ 542.881851][T18868] bpf_prog_load+0x14d6/0x1c20 [ 542.881891][T18868] ? __pfx_bpf_prog_load+0x10/0x10 [ 542.881947][T18868] __sys_bpf+0xd0d/0xd90 [ 542.881982][T18868] ? __pfx___sys_bpf+0x10/0x10 [ 542.882019][T18868] ? __fget_files+0x2a/0x420 [ 542.882071][T18868] ? ksys_write+0x242/0x270 [ 542.882111][T18868] ? __pfx_ksys_write+0x10/0x10 [ 542.882157][T18868] __x64_sys_bpf+0xba/0xd0 [ 542.882183][T18868] do_syscall_64+0x166/0x520 [ 542.882204][T18868] ? trace_irq_disable+0x3b/0x140 [ 542.882227][T18868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.882250][T18868] ? clear_bhb_loop+0x70/0xc0 [ 542.882278][T18868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.882301][T18868] RIP: 0033:0x7f00c079e199 [ 542.882322][T18868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.882343][T18868] RSP: 002b:00007f00be9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 542.882368][T18868] RAX: ffffffffffffffda RBX: 00007f00c0a25fa0 RCX: 00007f00c079e199 [ 542.882385][T18868] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 542.882400][T18868] RBP: 00007f00be9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 542.882415][T18868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 542.882428][T18868] R13: 00007f00c0a26038 R14: 00007f00c0a25fa0 R15: 00007fff1e24fd08 [ 542.882464][T18868] [ 543.290846][T18861] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 543.458038][T15138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.575092][T18877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3062'. [ 543.599926][T18880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3064'. [ 543.599952][T18880] nbd: must specify a size in bytes for the device [ 544.051146][T18877] 8021q: adding VLAN 0 to HW filter on device bond9 [ 544.125563][T18882] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 544.127932][T18882] bond9: (slave batadv2): Enslaving as an active interface with an up link [ 544.181952][T18896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3065'. [ 544.255949][T18888] bond9 (unregistering): (slave batadv2): Releasing backup interface [ 544.303081][T18888] bond9 (unregistering): Released all slaves [ 544.555690][T11684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.588965][T18891] veth0_to_batadv: entered promiscuous mode [ 544.594524][T18896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3065'. [ 544.773298][T18677] hsr_slave_0: entered promiscuous mode [ 544.774415][T18677] hsr_slave_1: entered promiscuous mode [ 544.782876][T18677] debugfs: 'hsr0' already exists in 'hsr' [ 544.782948][T18677] Cannot create hsr debugfs directory [ 545.157229][T18907] tipc: Started in network mode [ 545.157264][T18907] tipc: Node identity ac14140f, cluster identity 4711 [ 545.157601][T18907] tipc: New replicast peer: 255.255.255.255 [ 545.168821][T18907] tipc: Enabled bearer , priority 10 [ 545.544110][T18923] ip_tables: iptables: counters copy to user failed while replacing table [ 545.573694][T18911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3070'. [ 545.707157][ T6976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.757494][T18911] bond13: option lacp_active: invalid value (5) [ 545.764457][T18911] bond13 (unregistering): Released all slaves [ 545.990620][T18677] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.001797][T18677] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.277717][T10579] tipc: Node number set to 2886997007 [ 546.830326][T13741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.205693][T18677] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.205734][T18677] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.280309][T18945] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3074'. [ 547.506147][T18973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3078'. [ 547.528333][T18677] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.528372][T18677] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.757757][T18987] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3081'. [ 547.877012][T18677] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.877053][T18677] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.937092][T11678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.130572][T19000] ip6t_srh: unknown srh match flags 4000 [ 548.536213][T18677] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 548.564629][T18677] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 548.576112][T18677] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 548.597734][T18677] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 548.600966][T18677] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 548.630994][T18677] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 548.631964][T18677] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 548.651834][T18677] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 549.065648][T15138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.348000][T19042] netlink: 'syz.3.3089': attribute type 1 has an invalid length. [ 549.803267][T18677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.812583][T19049] netlink: 'syz.1.3091': attribute type 1 has an invalid length. [ 549.890036][T18677] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.919891][T13741] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.920006][T13741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.966672][T15139] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.966785][T15139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.972170][T19053] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 550.207002][ T98] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.540887][T19070] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 550.812857][T19070] bond9: (slave macvlan8): Enslaving as an active interface with a down link [ 550.857168][T19073] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 550.862525][T19074] syzkaller1: tun_chr_ioctl cmd 1074304019 [ 550.962644][ T5630] syzkaller1: tun_net_xmit 90 [ 551.131335][T19082] ip_tables: iptables: counters copy to user failed while replacing table [ 551.307930][T11678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.500118][T19099] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3101'. [ 552.148226][T18677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.197714][T19114] xfrm1: entered allmulticast mode [ 552.418761][T15138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.440821][T18677] veth0_vlan: entered promiscuous mode [ 552.493299][T18677] veth1_vlan: entered promiscuous mode [ 552.650299][T18677] veth0_macvtap: entered promiscuous mode [ 552.671127][T19133] ip_tables: iptables: counters copy to user failed while replacing table [ 552.674071][T18677] veth1_macvtap: entered promiscuous mode [ 552.678222][T19133] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3107'. [ 552.794423][T19133] hsr_slave_0 (unregistering): left promiscuous mode [ 553.001621][T19141] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3113'. [ 553.023999][T19135] bond1: Unable to set up delay as MII monitoring is disabled [ 553.027605][T19145] ip_tables: iptables: counters copy to user failed while replacing table [ 553.039324][T19152] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3107'. [ 553.060716][T19135] bond1 (unregistering): Released all slaves [ 553.407272][T19168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3115'. [ 553.483896][T19170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3115'. [ 553.484443][T18677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.536752][ T6976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.624763][T18677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.915457][T11688] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.915829][T11688] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.035266][T15139] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.035318][T15139] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.407732][T11684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.407757][T11684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.628034][ T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.628057][ T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.660761][ T6976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.722139][T19191] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3120'. [ 555.342699][T19194] syzkaller0: entered promiscuous mode [ 555.342725][T19194] syzkaller0: entered allmulticast mode [ 555.352921][T19197] tipc: Enabled bearer , priority 0 [ 555.394342][T19202] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 555.394376][T19202] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 555.394670][T19202] tipc: Resetting bearer [ 555.533698][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 555.547302][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 555.549538][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 555.551556][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 555.552605][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 555.568944][T19203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.756968][T15142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.946983][T11678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.749789][ T52] Bluetooth: hci4: command tx timeout [ 558.109249][ T6976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.275566][ T6975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.816524][ T52] Bluetooth: hci4: command tx timeout [ 560.455455][T13741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.778466][T19236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3126'. [ 560.807492][T19236] xfrm2: entered promiscuous mode [ 560.807516][T19236] xfrm2: entered allmulticast mode [ 561.520959][ T1514] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.521001][ T1514] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 561.521038][ T1514] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 561.521068][ T1514] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 46660 - 0 [ 561.605478][ T6975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.885571][ T52] Bluetooth: hci4: command tx timeout [ 561.926906][ T1514] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.926947][ T1514] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 561.926975][ T1514] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 561.927021][ T1514] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 46660 - 0 [ 562.139570][ T1514] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.139611][ T1514] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 562.140881][ T1514] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 562.140917][ T1514] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 46660 - 0 [ 562.504568][ T1514] bridge0: port 1(netdevsim0) entered disabled state [ 562.720044][ T1514] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 562.720081][ T1514] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 562.722216][ T1514] bridge0: port 1(netdevsim0) entered disabled state [ 562.747940][ T6976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.850058][ T1514] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.850099][ T1514] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 562.850129][ T1514] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 562.850159][ T1514] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 46660 - 0 [ 562.928993][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.151913][T19214] ip_vti0 speed is unknown, defaulting to 1000 [ 563.867714][T15139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.966368][ T52] Bluetooth: hci4: command tx timeout [ 564.455456][T19325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3144'. [ 564.977391][T15136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.022547][T19340] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3148'. [ 565.043477][T19343] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3148'. [ 566.037913][T19373] ip_tables: iptables: counters copy to user failed while replacing table [ 566.115862][T11687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.658257][ T1514] bond6 (unregistering): (slave geneve3): Releasing active interface [ 566.911181][ T1514] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.944412][ T1514] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.978600][ T1514] .` (unregistering): Released all slaves [ 567.019138][ T1514] bond1 (unregistering): Released all slaves [ 567.058542][ T1514] bond2 (unregistering): (slave veth5): Releasing backup interface [ 567.061222][ T1514] bond2 (unregistering): (slave veth7): Releasing backup interface [ 567.063155][ T1514] bond2 (unregistering): Released all slaves [ 567.098993][ T1514] bond3 (unregistering): Released all slaves [ 567.121800][ T1514] bond4 (unregistering): Released all slaves [ 567.164328][ T1514] bond5 (unregistering): Released all slaves [ 567.210410][ T1514] bond6 (unregistering): Released all slaves [ 567.228225][T11688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.270935][ T1514] bond7 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 567.289333][ T1514] bond7 (unregistering): Released all slaves [ 567.460156][ T1514] bond9 (unregistering): (slave macvlan8): Releasing active interface [ 567.474459][ T1514] bond0 (unregistering): Released all slaves [ 567.509031][ T1514] bond8 (unregistering): Released all slaves [ 567.594513][ T1514] bond9 (unregistering): Released all slaves [ 567.748520][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 568.001223][ T1514] tipc: Disabling bearer [ 568.005573][ T1514] tipc: Left network mode [ 568.045795][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.046189][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.356259][T11678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.619265][T19410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3156'. [ 568.649991][T19405] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 569.012243][T19410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3156'. [ 569.359730][T19424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3159'. [ 569.464672][T19429] netlink: 'syz.4.3160': attribute type 1 has an invalid length. [ 569.536633][T11688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.593522][T19431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3160'. [ 569.761248][T19429] 8021q: adding VLAN 0 to HW filter on device bond14 [ 569.962657][T19429] bond14: (slave bridge6): making interface the new active one [ 569.984405][T19429] bond14: (slave bridge6): Enslaving as an active interface with an up link [ 570.213676][T19427] syzkaller0: entered promiscuous mode [ 570.213707][T19427] syzkaller0: entered allmulticast mode [ 570.259079][T19453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3163'. [ 570.688419][T15136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.830363][T11678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.991974][T15139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.140829][T11684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.295950][T15139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.368866][ T1514] hsr_slave_0: left promiscuous mode [ 576.369813][ T1514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.369852][ T1514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.370933][ T1514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.370952][ T1514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.371733][ T1514] batman_adv: batadv0: Interface deactivated: dummy0 [ 576.371751][ T1514] batman_adv: batadv0: Removing interface: dummy0 [ 576.449039][T15139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.670359][ T1514] veth0_to_batadv: left promiscuous mode [ 576.670617][ T1514] veth0_to_team: left promiscuous mode [ 576.670871][ T1514] veth1_vlan: left promiscuous mode [ 576.670939][ T1514] veth0_vlan: left promiscuous mode [ 577.561915][T15144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.844247][ T1514] team0 (unregistering): Port device team_slave_1 removed [ 577.863276][ T1514] team0 (unregistering): Port device team_slave_0 removed [ 577.960780][T19482] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 577.960999][T19482] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 577.961200][T19482] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 577.961462][T19482] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 577.961662][T19482] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 577.961862][T19482] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 577.962060][T19482] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 578.293608][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 578.659511][T19214] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.659817][T19214] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.659984][T19214] bridge_slave_0: entered allmulticast mode [ 578.662441][T19214] bridge_slave_0: entered promiscuous mode [ 578.706319][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 578.921174][T19214] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.921288][T19214] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.921456][T19214] bridge_slave_1: entered allmulticast mode [ 578.937652][T19214] bridge_slave_1: entered promiscuous mode [ 579.123968][T19499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3172'. [ 579.150731][T19499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3172'. [ 579.328223][T19214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.368517][T19214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.369447][T19487] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 579.717889][T19214] team0: Port device team_slave_0 added [ 579.736996][T19214] team0: Port device team_slave_1 added [ 580.495918][T19515] syzkaller0: entered promiscuous mode [ 580.495946][T19515] syzkaller0: entered allmulticast mode [ 580.502765][T19214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.502785][T19214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.502815][T19214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.773377][ T1514] IPVS: stop unused estimator thread 0... [ 580.915756][T15144] net_ratelimit: 49 callbacks suppressed [ 580.915780][T15144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.049030][T11684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.166742][ T6975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.327155][T11678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.879303][T19214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.879325][T19214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.879355][T19214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.960690][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 585.024211][T19214] hsr_slave_0: entered promiscuous mode [ 585.031254][T19214] hsr_slave_1: entered promiscuous mode [ 585.032038][T19214] debugfs: 'hsr0' already exists in 'hsr' [ 585.032060][T19214] Cannot create hsr debugfs directory [ 585.236321][T19556] tipc: Resetting bearer [ 585.356111][T19573] netlink: 'syz.4.3182': attribute type 1 has an invalid length. [ 585.474474][T19579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3182'. [ 585.495935][T11684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.641795][T19574] bond15: (slave gretap2): making interface the new active one [ 585.642114][T19587] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3184'. [ 585.671370][T19574] bond15: (slave gretap2): Enslaving as an active interface with an up link [ 585.688287][T19579] 8021q: adding VLAN 0 to HW filter on device bond15 [ 585.715736][T19569] openvswitch: ovs-dp0: Dropping previously announced user features [ 586.100029][T19568] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 586.610410][ T156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.856385][T19627] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3192'. [ 586.931462][T19629] netlink: 'syz.1.3193': attribute type 9 has an invalid length. [ 586.935805][T19631] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3193'. [ 587.405307][ T52] Bluetooth: hci4: command 0x0401 tx timeout [ 587.589992][T19214] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 587.642157][T19214] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 587.659032][T19214] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 587.689122][T19214] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 587.690272][T19658] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 587.692148][T19214] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 587.722152][ T1514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.793610][T19214] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 587.845258][T19214] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 587.895561][T19214] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 587.955155][T19659] Bluetooth: MGMT ver 1.23 [ 587.977135][T19665] syzkaller0: entered promiscuous mode [ 587.977164][T19665] syzkaller0: entered allmulticast mode [ 588.038661][T19655] ip_tables: iptables: counters copy to user failed while replacing table [ 588.477892][T19684] netlink: 'syz.4.3206': attribute type 1 has an invalid length. [ 588.523945][T19684] bond16: entered promiscuous mode [ 588.524520][T19684] 8021q: adding VLAN 0 to HW filter on device bond16 [ 588.575862][T19684] bond16: (slave bridge7): making interface the new active one [ 588.575925][T19684] bridge7: entered promiscuous mode [ 588.577283][T19684] bond16: (slave bridge7): Enslaving as an active interface with an up link [ 588.628802][T19214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.715800][T19695] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3209'. [ 588.750162][T19214] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.812195][ T1514] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.812336][ T1514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.841722][T15139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.879079][ T1514] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.879192][ T1514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.154701][T19706] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3210'. [ 589.287884][ T1514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.287912][ T1514] syzkaller0: tun_net_xmit 76 [ 589.288528][T19712] Cannot find del_set index 2 as target [ 589.290780][ T1514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.290803][ T1514] syzkaller0: tun_net_xmit 48 [ 589.316323][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.319608][ T5630] syzkaller0: tun_net_xmit 76 [ 589.367207][T19706] syzkaller0: create flow: hash 1795215757 index 0 [ 589.388959][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.388988][ T5630] syzkaller0: tun_net_xmit 76 [ 589.413052][T19717] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3212'. [ 589.413079][T19717] netlink: 'syz.2.3212': attribute type 2 has an invalid length. [ 589.413126][T19717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3212'. [ 589.431642][T19717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3212'. [ 589.746066][T19707] syzkaller0 (unregistered): delete flow: hash 1795215757 index 0 [ 589.995794][T15136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.067329][T19735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'. [ 590.243050][T19751] lo speed is unknown, defaulting to 1000 [ 590.290055][T19751] lo speed is unknown, defaulting to 1000 [ 590.332152][T19751] lo speed is unknown, defaulting to 1000 [ 590.425116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.448700][T19754] lo: left promiscuous mode [ 590.623878][T19754] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3216'. [ 590.623905][T19754] nbd: must specify at least one socket [ 590.645423][T19754] block nbd1: NBD_DISCONNECT [ 590.645453][T19754] block nbd1: Send disconnect failed -32 [ 590.645474][T19754] block nbd1: shutting down sockets [ 591.248331][T19784] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3224'. [ 591.296724][T19784] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3224'. [ 591.437732][T19787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3224'. [ 591.504391][T19789] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3224'. [ 591.506494][T19790] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3224'. [ 591.529120][T19791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3224'. [ 591.557621][T19790] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3224'. [ 591.591625][T19214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.866312][T19214] veth0_vlan: entered promiscuous mode [ 591.926485][T19214] veth1_vlan: entered promiscuous mode [ 591.990052][T19751] infiniband syz0: set down [ 591.991352][T19751] infiniband syz0: added lo [ 592.011736][T19751] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 592.013821][T12277] lo speed is unknown, defaulting to 1000 [ 592.013847][T12277] syz0: Port: 1 Link DOWN [ 592.037316][T19751] infiniband syz0: Couldn't open port 1 [ 592.037585][T19751] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 592.037622][T19751] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 592.037667][T19751] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 592.248411][T19751] RDS/IB: syz0: added [ 592.248473][T19751] smc: adding ib device syz0 with port count 1 [ 592.248495][T19751] smc: ib device syz0 port 1 has no pnetid [ 592.289022][ T5630] lo speed is unknown, defaulting to 1000 [ 592.289227][T19751] lo speed is unknown, defaulting to 1000 [ 592.308970][T19214] veth0_macvtap: entered promiscuous mode [ 592.354294][T19214] veth1_macvtap: entered promiscuous mode [ 592.503205][T19214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.584072][T19214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.635812][T15142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.635863][T15142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.765391][ T1514] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.765698][T11687] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.228774][T11687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.228800][T11687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.374518][T19751] lo speed is unknown, defaulting to 1000 [ 593.520765][ T1514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.520790][ T1514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.924725][T19828] netlink: 'syz.3.3232': attribute type 10 has an invalid length. [ 594.039337][T19836] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 594.040772][T19836] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3123'. [ 594.179205][T19840] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 594.217676][T19846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3236'. [ 594.241488][T19846] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 594.252883][T19846] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 594.580584][T19850] netlink: 'syz.3.3237': attribute type 4 has an invalid length. [ 594.624093][T19851] netlink: 'syz.3.3237': attribute type 4 has an invalid length. [ 594.656191][T19751] lo speed is unknown, defaulting to 1000 [ 594.765324][T19858] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 594.768375][T19857] xt_ecn: cannot match TCP bits for non-tcp packets [ 594.808852][T19860] pim6reg: entered allmulticast mode [ 594.809111][T19857] pim6reg: left allmulticast mode [ 594.923895][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 594.943097][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 594.944092][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 594.963161][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 594.965247][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 595.381585][T19876] Bluetooth: MGMT ver 1.23 [ 595.404634][ T5619] bond8: (slave syz_tun): Removing an active aggregator [ 595.437243][ T5619] bond8: (slave syz_tun): Releasing backup interface [ 596.202233][T19751] lo speed is unknown, defaulting to 1000 [ 596.247260][T19903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3245'. [ 596.261068][T19905] netlink: 'syz.3.3245': attribute type 1 has an invalid length. [ 596.532635][T19905] bond1: entered promiscuous mode [ 596.533982][T19905] 8021q: adding VLAN 0 to HW filter on device bond1 [ 596.874514][T19863] ip_vti0 speed is unknown, defaulting to 1000 [ 597.100856][ T5627] Bluetooth: hci0: command tx timeout [ 597.278256][T19922] syzkaller0: entered promiscuous mode [ 597.278280][T19922] syzkaller0: entered allmulticast mode [ 597.594573][T19937] netlink: 'syz.2.3249': attribute type 4 has an invalid length. [ 597.594598][T19937] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3249'. [ 597.594759][T19937] netlink: 'syz.2.3249': attribute type 4 has an invalid length. [ 597.594857][T19937] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3249'. [ 597.595005][T19937] netlink: 'syz.2.3249': attribute type 4 has an invalid length. [ 597.595021][T19937] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3249'. [ 597.595326][T19937] netlink: 'syz.2.3249': attribute type 4 has an invalid length. [ 597.595368][T19937] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3249'. [ 597.595737][T19937] netlink: 'syz.2.3249': attribute type 4 has an invalid length. [ 597.595771][T19937] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3249'. [ 597.730654][T19934] ip_tables: iptables: counters copy to user failed while replacing table [ 597.731000][T19934] ip_tables: iptables: counters copy to user failed while replacing table [ 597.731330][T19934] ip_tables: iptables: counters copy to user failed while replacing table [ 597.788639][T19934] ip_tables: iptables: counters copy to user failed while replacing table [ 597.789108][T19934] ip_tables: iptables: counters copy to user failed while replacing table [ 597.789473][T19934] ip_tables: iptables: counters copy to user failed while replacing table [ 597.789807][T19934] ip_tables: iptables: counters copy to user failed while replacing table [ 598.282548][T19751] lo speed is unknown, defaulting to 1000 [ 599.071246][T19863] lo speed is unknown, defaulting to 1000 [ 599.164992][ T5627] Bluetooth: hci0: command tx timeout [ 599.380254][T19975] ip6gretap0: entered promiscuous mode [ 599.380397][T19975] macsec1: entered allmulticast mode [ 599.380413][T19975] ip6gretap0: entered allmulticast mode [ 599.666780][T19985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3256'. [ 599.728979][T19985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3256'. [ 599.729165][T19985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3256'. [ 599.729334][T19985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3256'. [ 600.040972][T20000] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 600.092023][T20000] 0ªX¹¦Dö»: entered allmulticast mode [ 600.108456][T19751] lo speed is unknown, defaulting to 1000 [ 601.051689][T19751] lo speed is unknown, defaulting to 1000 [ 601.248217][ T5627] Bluetooth: hci0: command tx timeout [ 601.265987][T20014] xt_CT: No such helper "netbios-ns" [ 601.918671][T19863] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.918789][T19863] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.918974][T19863] bridge_slave_0: entered allmulticast mode [ 601.952789][T19863] bridge_slave_0: entered promiscuous mode [ 601.968451][T19863] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.971835][T19863] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.972033][T19863] bridge_slave_1: entered allmulticast mode [ 601.999482][T19863] bridge_slave_1: entered promiscuous mode [ 602.007481][T20036] syzkaller0: entered promiscuous mode [ 602.007505][T20036] syzkaller0: entered allmulticast mode [ 602.055088][T19863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.058362][T19863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.110276][T19863] team0: Port device team_slave_0 added [ 602.113379][T19863] team0: Port device team_slave_1 added [ 602.220344][T20041] FAULT_INJECTION: forcing a failure. [ 602.220344][T20041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 602.220381][T20041] CPU: 0 UID: 0 PID: 20041 Comm: syz.0.3265 Not tainted syzkaller #0 PREEMPT(full) [ 602.220409][T20041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 602.220430][T20041] Call Trace: [ 602.220439][T20041] [ 602.220449][T20041] dump_stack_lvl+0xe8/0x150 [ 602.220488][T20041] should_fail_ex+0x410/0x560 [ 602.220522][T20041] _copy_from_iter+0x1d3/0x1660 [ 602.220752][T20041] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 602.220785][T20041] ? __pfx_policy_nodemask+0x10/0x10 [ 602.220815][T20041] ? lock_acquire+0x115/0x350 [ 602.220859][T20041] ? __pfx__copy_from_iter+0x10/0x10 [ 602.220888][T20041] ? alloc_pages_mpol+0x256/0x390 [ 602.220928][T20041] copy_page_from_iter+0x219/0x2d0 [ 602.220959][T20041] tun_get_user+0x1c16/0x44d0 [ 602.221048][T20041] ? tun_get_user+0x70a/0x44d0 [ 602.221092][T20041] ? aa_file_perm+0x4ed/0x15f0 [ 602.221186][T20041] ? __pfx_tun_get_user+0x10/0x10 [ 602.221213][T20041] ? __lock_acquire+0x747/0x2de0 [ 602.221251][T20041] ? ref_tracker_alloc+0x172/0x530 [ 602.221317][T20041] ? lock_acquire+0x115/0x350 [ 602.221341][T20041] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 602.221371][T20041] ? lock_acquire+0x115/0x350 [ 602.221394][T20041] ? tun_get+0x1c/0x2f0 [ 602.221431][T20041] ? tun_get+0x1c/0x2f0 [ 602.221454][T20041] ? tun_get+0x1c/0x2f0 [ 602.221483][T20041] tun_chr_write_iter+0x113/0x200 [ 602.221511][T20041] vfs_write+0x612/0xba0 [ 602.221556][T20041] ? __pfx_vfs_write+0x10/0x10 [ 602.221601][T20041] ? __fget_files+0x2a/0x420 [ 602.221643][T20041] ksys_write+0x150/0x270 [ 602.221679][T20041] ? __pfx_ksys_write+0x10/0x10 [ 602.221726][T20041] do_syscall_64+0x166/0x520 [ 602.221749][T20041] ? trace_irq_disable+0x3b/0x140 [ 602.221773][T20041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.221797][T20041] ? clear_bhb_loop+0x70/0xc0 [ 602.221825][T20041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.221847][T20041] RIP: 0033:0x7f0e8855e9ce [ 602.221868][T20041] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 602.221887][T20041] RSP: 002b:00007f0e893e3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 602.221912][T20041] RAX: ffffffffffffffda RBX: 00007f0e893e46c0 RCX: 00007f0e8855e9ce [ 602.221929][T20041] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 00000000000000c8 [ 602.221944][T20041] RBP: 00007f0e893e4090 R08: 0000000000000000 R09: 0000000000000000 [ 602.221958][T20041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.221972][T20041] R13: 00007f0e88826128 R14: 00007f0e88826090 R15: 00007ffe3da13cd8 [ 602.222008][T20041] [ 602.538412][T20043] __nla_validate_parse: 55 callbacks suppressed [ 602.538437][T20043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3266'. [ 602.538460][T20043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3266'. [ 602.579256][T19863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.579275][T19863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.579304][T19863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.665512][T19863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.665533][T19863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.665563][T19863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.668171][T20043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3266'. [ 603.023699][T20045] udevd[20045]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 603.068312][T19863] hsr_slave_0: entered promiscuous mode [ 603.069254][T19863] hsr_slave_1: entered promiscuous mode [ 603.069831][T19863] debugfs: 'hsr0' already exists in 'hsr' [ 603.069852][T19863] Cannot create hsr debugfs directory [ 603.075724][T20049] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3267'. [ 603.116030][T19999] udevd[19999]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 603.325522][ T5627] Bluetooth: hci0: command tx timeout [ 603.776675][T20073] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3274'. [ 603.779074][T20073] unsupported nlmsg_type 40 [ 604.140784][T20078] netlink: 'syz.3.3276': attribute type 1 has an invalid length. [ 604.394378][T20084] netlink: 'syz.3.3276': attribute type 1 has an invalid length. [ 604.394425][T20084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3276'. [ 606.494371][T20109] netlink: 'syz.3.3282': attribute type 1 has an invalid length. [ 606.751871][T20118] net_ratelimit: 26 callbacks suppressed [ 606.751893][T20118] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 607.065691][T20129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3286'. [ 607.613012][T19863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 607.648698][T19863] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 607.659285][T19863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 607.721678][T19863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 607.744520][T19863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 607.890436][T19863] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 607.910534][T19863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 607.944519][T19863] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 608.084109][T20180] netlink: 'syz.1.3293': attribute type 21 has an invalid length. [ 608.411876][T20186] netlink: 'syz.0.3295': attribute type 9 has an invalid length. [ 608.414538][T19863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.546620][T19863] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.659093][T15144] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.660950][T15144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.662902][T20196] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3298'. [ 608.662928][T20196] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3298'. [ 608.746885][T15138] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.747011][T15138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.342003][T20218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3304'. [ 609.411648][T20218] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 609.637587][T20220] ip_vti0 speed is unknown, defaulting to 1000 [ 609.673164][T20228] syzkaller0: entered promiscuous mode [ 609.673191][T20228] syzkaller0: entered allmulticast mode [ 610.082500][T20233] Bluetooth: hci0: unsupported parameter 5135 [ 610.082527][T20233] Bluetooth: hci0: unsupported parameter 8192 [ 610.082542][T20233] Bluetooth: hci0: unsupported parameter 5135 [ 610.082556][T20233] Bluetooth: hci0: unsupported parameter 8192 [ 610.392807][T20236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3310'. [ 610.466033][T20245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3310'. [ 610.509500][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3309'. [ 610.535963][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3309'. [ 610.536229][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3309'. [ 610.536470][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3309'. [ 610.536724][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3309'. [ 610.699299][T19863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.065423][T20220] lo speed is unknown, defaulting to 1000 [ 611.995319][T19863] veth0_vlan: entered promiscuous mode [ 612.033777][T19863] veth1_vlan: entered promiscuous mode [ 612.293291][T19863] veth0_macvtap: entered promiscuous mode [ 612.320080][T19863] veth1_macvtap: entered promiscuous mode [ 612.445652][T19863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.468861][T19863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.615997][T15136] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.616053][T15136] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.616093][T15136] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.616133][T15136] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.006205][T10579] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 613.264351][T20314] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 613.292578][T15138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.292605][T15138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.405633][T10582] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 613.775105][T10581] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 614.079519][T15144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.079543][T15144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.605218][ T1608] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 614.809460][T20338] ip_vti0 speed is unknown, defaulting to 1000 [ 615.019455][T20352] __nla_validate_parse: 57 callbacks suppressed [ 615.019479][T20352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3330'. [ 615.032820][T20352] ip_tables: iptables: counters copy to user failed while replacing table [ 615.120659][T20352] netlink: 'syz.4.3330': attribute type 27 has an invalid length. [ 615.181596][T20338] lo speed is unknown, defaulting to 1000 [ 615.324002][T20354] macsec2: entered promiscuous mode [ 615.591547][T20359] lo: entered promiscuous mode [ 615.602539][T20359] tunl0: entered promiscuous mode [ 615.622332][T20359] gre0: entered promiscuous mode [ 615.673110][T20359] gretap0: entered promiscuous mode [ 615.702500][T20359] erspan0: entered promiscuous mode [ 615.713043][T20369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3336'. [ 615.728272][T20359] ip_vti0: entered promiscuous mode [ 615.761651][T20359] ip6_vti0: entered promiscuous mode [ 615.796449][T20359] sit0: entered promiscuous mode [ 615.823788][T20359] ip6tnl0: entered promiscuous mode [ 615.854644][T20375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3335'. [ 615.870999][T20376] netlink: 'syz.2.3334': attribute type 39 has an invalid length. [ 615.884045][T20375] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3335'. [ 615.917363][T20359] ip6gre0: entered promiscuous mode [ 615.934569][T20359] syz_tun: entered promiscuous mode [ 615.980024][T20359] ip6gretap0: entered promiscuous mode [ 616.023448][T20359] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.024057][T20359] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.042670][T20359] bridge0: entered promiscuous mode [ 616.057112][T20359] vcan0: entered promiscuous mode [ 616.071322][T20359] bond0: entered promiscuous mode [ 616.071347][T20359] bond_slave_0: entered promiscuous mode [ 616.071563][T20359] bond_slave_1: entered promiscuous mode [ 616.098047][T20359] team0: entered promiscuous mode [ 616.098071][T20359] team_slave_0: entered promiscuous mode [ 616.098276][T20359] team_slave_1: entered promiscuous mode [ 616.101851][T20359] dummy0: entered promiscuous mode [ 616.109062][T20359] nlmon0: entered promiscuous mode [ 616.133835][T20359] batadv0: entered promiscuous mode [ 616.178453][T20359] vxcan0: entered promiscuous mode [ 616.179382][T20359] vxcan1: entered promiscuous mode [ 616.180321][T20359] veth0: entered promiscuous mode [ 616.182852][T20359] veth1: entered promiscuous mode [ 616.236361][T20359] wg0: entered promiscuous mode [ 616.238145][T20359] wg1: entered promiscuous mode [ 616.238821][T20359] wg2: entered promiscuous mode [ 616.240579][T20359] veth0_to_bridge: entered promiscuous mode [ 616.269471][T20359] veth1_to_bridge: entered promiscuous mode [ 616.274499][T20359] veth0_to_bond: entered promiscuous mode [ 616.291837][T20359] veth1_to_bond: entered promiscuous mode [ 616.303798][T20359] veth0_to_team: entered promiscuous mode [ 616.315305][T20359] veth1_to_team: entered promiscuous mode [ 616.322564][T20359] veth0_to_batadv: entered promiscuous mode [ 616.338884][T20359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.338949][T20359] batadv_slave_0: entered promiscuous mode [ 616.341980][T20359] veth1_to_batadv: entered promiscuous mode [ 616.370487][T20359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.370559][T20359] batadv_slave_1: entered promiscuous mode [ 616.390266][T20359] xfrm0: entered promiscuous mode [ 616.416669][T20359] veth0_to_hsr: entered promiscuous mode [ 616.421648][T20359] veth1_to_hsr: entered promiscuous mode [ 616.439346][T20359] hsr0: entered promiscuous mode [ 616.442191][T20359] veth1_virt_wifi: entered promiscuous mode [ 616.444739][T20359] veth0_virt_wifi: entered promiscuous mode [ 616.469110][T20359] virt_wifi0: entered promiscuous mode [ 616.481728][T20359] vlan0: entered promiscuous mode [ 616.484620][T20359] vlan1: entered promiscuous mode [ 616.503348][T20359] macvlan0: entered promiscuous mode [ 616.517963][T20359] macvlan1: entered promiscuous mode [ 616.520546][T20359] ipvlan0: entered promiscuous mode [ 616.520727][T20359] ipvlan1: entered promiscuous mode [ 616.553267][T20359] macvtap0: entered promiscuous mode [ 616.562089][T20359] macsec0: entered promiscuous mode [ 616.570233][T20359] geneve0: entered promiscuous mode [ 616.573283][T20359] geneve1: entered promiscuous mode [ 616.589540][T20359] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 616.611725][T20359] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 616.630260][T20359] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 616.646658][T20359] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 616.673396][T20359] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 616.708808][T20359] mac80211_hwsim hwsim20 wlan1: entered promiscuous mode [ 616.934475][T20381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3338'. [ 616.965241][ T156] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.967074][T15144] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.967120][T15144] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.967158][T15144] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.073057][T20383] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3337'. [ 617.123050][T20386] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3337'. [ 617.508814][T20393] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3340'. [ 617.547059][T20393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3340'. [ 617.547116][T20393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3340'. [ 617.754415][T20411] tipc: Started in network mode [ 617.754449][T20411] tipc: Node identity ac14140f, cluster identity 4711 [ 617.793058][T20411] tipc: Enabled bearer , priority 10 [ 617.831722][T20409] syzkaller0: entered promiscuous mode [ 617.831750][T20409] syzkaller0: entered allmulticast mode [ 618.050433][T20415] openvswitch: netlink: Multiple metadata blocks provided [ 618.433794][T20426] netlink: 'syz.4.3350': attribute type 1 has an invalid length. [ 618.628567][T20429] veth3: entered allmulticast mode [ 618.848920][T20437] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 618.851094][T20437] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 618.873638][T20437] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 618.912162][ T982] tipc: Node number set to 2886997007 [ 619.043520][T20439] bond1: left promiscuous mode [ 619.138287][ T156] IPVS: starting estimator thread 0... [ 619.138797][T20445] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 619.235006][T20446] IPVS: using max 27 ests per chain, 64800 per kthread [ 619.339975][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 619.353970][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 619.362239][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 619.376902][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 619.377596][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 620.067512][T20462] __nla_validate_parse: 7 callbacks suppressed [ 620.067537][T20462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3361'. [ 620.186305][T20462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.560786][T20485] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 620.561095][T15139] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.833323][T20492] sock: sock_timestamping_bind_phc: sock not bind to device [ 620.847109][T20447] ip_vti0 speed is unknown, defaulting to 1000 [ 621.188526][T15139] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.232988][T20447] lo speed is unknown, defaulting to 1000 [ 621.419542][T15139] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.485414][ T5627] Bluetooth: hci1: command tx timeout [ 621.518899][T20502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3371'. [ 621.699909][T15139] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.758279][ T156] IPVS: starting estimator thread 0... [ 621.844990][T20507] IPVS: using max 24 ests per chain, 57600 per kthread [ 622.069963][T20515] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3375'. [ 622.296515][T20519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3377'. [ 622.560197][T20528] netlink: 'syz.3.3378': attribute type 10 has an invalid length. [ 622.560221][T20528] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3378'. [ 622.655025][T20532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3378'. [ 622.776909][T15139] batadv1: left allmulticast mode [ 622.782791][T15139] bridge0: port 1(batadv1) entered disabled state [ 623.081742][T20541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3381'. [ 623.081785][T20541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3381'. [ 623.204084][T20538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3381'. [ 623.204111][T20538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3381'. [ 623.565053][ T5627] Bluetooth: hci1: command tx timeout [ 623.594030][T15144] smc: removing ib device syz2 [ 623.838360][T15144] smbdirect: ib_dev[syz2] removed [ 624.338736][T15139] bond8 (unregistering): (slave geneve5): Releasing active interface [ 624.384241][T15139] bond3 (unregistering): (slave geneve3): Releasing active interface [ 624.681337][T15139] team0: Port device bridge3 removed [ 624.754155][T15139] bond1 (unregistering): (slave veth3): Releasing active interface [ 624.781264][T15139] bond1 (unregistering): Released all slaves [ 624.883938][T15139] bond2 (unregistering): (slave veth5): Releasing backup interface [ 624.905136][T15139] bond2 (unregistering): Released all slaves [ 624.979378][T15139] bond3 (unregistering): Released all slaves [ 625.076542][T15139] bond0 (unregistering): Released all slaves [ 625.124069][T11688] smbdirect: ib_dev[syz1] removed [ 625.160545][T15139] bond4 (unregistering): Released all slaves [ 625.221219][T15139] bond5 (unregistering): Released all slaves [ 625.370453][T15139] bond6 (unregistering): Released all slaves [ 625.450045][T15139] bond7 (unregistering): Released all slaves [ 625.532491][T15139] bond8 (unregistering): Released all slaves [ 625.608545][T15139] bond9 (unregistering): Released all slaves [ 625.647542][ T5627] Bluetooth: hci1: command tx timeout [ 625.673552][T15139] bond10 (unregistering): Released all slaves [ 625.736778][T15139] bond11 (unregistering): Released all slaves [ 625.795192][T15139] bond12 (unregistering): Released all slaves [ 626.472710][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 626.680468][T20575] x_tables: duplicate underflow at hook 1 [ 626.680582][T20578] x_tables: duplicate underflow at hook 1 [ 627.143104][T20579] netlink: NAT attribute has 1 unknown bytes [ 627.143144][T20579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 627.165538][T20595] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 627.511956][T20447] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.512153][T20447] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.512312][T20447] bridge_slave_0: entered allmulticast mode [ 627.565624][T20447] bridge_slave_0: entered promiscuous mode [ 627.577904][T20447] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.578088][T20447] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.578234][T20447] bridge_slave_1: entered allmulticast mode [ 627.613293][T20447] bridge_slave_1: entered promiscuous mode [ 627.655144][T20601] netlink: 'syz.2.3393': attribute type 2 has an invalid length. [ 627.655167][T20601] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3393'. [ 627.725885][ T5627] Bluetooth: hci1: command tx timeout [ 627.803491][T20447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.860145][T20447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.935388][T20599] netlink: 'syz.0.3391': attribute type 27 has an invalid length. [ 627.935415][T20599] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3391'. [ 627.964582][T20599] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.140746][T20447] team0: Port device team_slave_0 added [ 628.164440][T20447] team0: Port device team_slave_1 added [ 628.675844][T20447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.675864][T20447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.675894][T20447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.738225][T20447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.738245][T20447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.738277][T20447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.049908][T20648] nbd: must specify at least one socket [ 629.562195][T20665] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3403'. [ 629.614217][T20447] hsr_slave_0: entered promiscuous mode [ 629.616621][T20447] hsr_slave_1: entered promiscuous mode [ 629.619040][T20447] debugfs: 'hsr0' already exists in 'hsr' [ 629.619094][T20447] Cannot create hsr debugfs directory [ 629.903902][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 629.940807][T15139] tipc: Disabling bearer [ 629.959593][T15139] tipc: Left network mode [ 630.088433][T20680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3407'. [ 630.224159][T20685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3407'. [ 630.878639][T20698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3409'. [ 631.199591][T20698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 631.397333][T20699] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 631.425823][T20699] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 631.809686][T20716] tipc: Enabled bearer , priority 0 [ 631.812696][T20714] syzkaller0: entered promiscuous mode [ 631.812721][T20714] syzkaller0: entered allmulticast mode [ 632.401876][T20714] tipc: Resetting bearer [ 632.507899][T20714] tipc: Disabling bearer [ 632.512860][T20749] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3417'. [ 633.012419][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 633.627912][T20777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3423'. [ 634.065533][T15139] batman_adv: batadv0: Interface deactivated: veth7 [ 634.065567][T15139] batman_adv: batadv0: Removing interface: veth7 [ 634.683225][T11687] smc: removing ib device syz0 [ 634.726528][T11687] smbdirect: ib_dev[syz0] removed [ 634.894741][T20804] netlink: 'syz.3.3425': attribute type 4 has an invalid length. [ 635.241754][T20815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3426'. [ 635.488905][T20820] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3428'. [ 636.093767][T20843] IPVS: length: 77 != 2777208 [ 636.157158][T20844] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3433'. [ 636.612751][T20849] syzkaller0: entered promiscuous mode [ 636.612793][T20849] syzkaller0: entered allmulticast mode [ 636.692806][ T5627] Bluetooth: hci5: command 0x0405 tx timeout [ 636.918980][T20844] bond1 (unregistering): Released all slaves [ 637.110578][T20447] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 637.181191][T20447] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 637.469134][T20873] FAULT_INJECTION: forcing a failure. [ 637.469134][T20873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.469170][T20873] CPU: 1 UID: 0 PID: 20873 Comm: syz.2.3439 Not tainted syzkaller #0 PREEMPT(full) [ 637.469195][T20873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 637.469209][T20873] Call Trace: [ 637.469218][T20873] [ 637.469227][T20873] dump_stack_lvl+0xe8/0x150 [ 637.469264][T20873] should_fail_ex+0x410/0x560 [ 637.469296][T20873] _copy_from_iter+0x1d3/0x1660 [ 637.469323][T20873] ? __alloc_skb+0x27a/0x7a0 [ 637.469503][T20873] ? __alloc_skb+0x27a/0x7a0 [ 637.469534][T20873] ? __alloc_skb+0x27a/0x7a0 [ 637.469563][T20873] ? __pfx__copy_from_iter+0x10/0x10 [ 637.469587][T20873] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 637.469629][T20873] ? __alloc_skb+0x27a/0x7a0 [ 637.469659][T20873] ? __alloc_skb+0x27a/0x7a0 [ 637.469693][T20873] ? netlink_sendmsg+0x650/0xb40 [ 637.469754][T20873] ? skb_put+0x112/0x210 [ 637.469786][T20873] netlink_sendmsg+0x6c0/0xb40 [ 637.469822][T20873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.469856][T20873] ? apparmor_socket_sendmsg+0x98/0x360 [ 637.469885][T20873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.469908][T20873] sock_sendmsg_nosec+0x14e/0x190 [ 637.469962][T20873] ____sys_sendmsg+0x54e/0x850 [ 637.470000][T20873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 637.470042][T20873] ? import_iovec+0x73/0xa0 [ 637.470074][T20873] ___sys_sendmsg+0x2a5/0x360 [ 637.470104][T20873] ? __lock_acquire+0x747/0x2de0 [ 637.470129][T20873] ? __pfx____sys_sendmsg+0x10/0x10 [ 637.470195][T20873] ? __fget_files+0x2a/0x420 [ 637.470224][T20873] ? __fget_files+0x3a2/0x420 [ 637.470265][T20873] __x64_sys_sendmsg+0x1b1/0x290 [ 637.470300][T20873] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 637.470355][T20873] do_syscall_64+0x166/0x520 [ 637.470376][T20873] ? trace_irq_disable+0x3b/0x140 [ 637.470398][T20873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.470420][T20873] ? clear_bhb_loop+0x70/0xc0 [ 637.470446][T20873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.470467][T20873] RIP: 0033:0x7fae2db9e199 [ 637.470487][T20873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.470505][T20873] RSP: 002b:00007fae2ea45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 637.470528][T20873] RAX: ffffffffffffffda RBX: 00007fae2de25fa0 RCX: 00007fae2db9e199 [ 637.470545][T20873] RDX: 0000000000008010 RSI: 0000200000000440 RDI: 0000000000000003 [ 637.470559][T20873] RBP: 00007fae2ea45090 R08: 0000000000000000 R09: 0000000000000000 [ 637.470573][T20873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.470587][T20873] R13: 00007fae2de26038 R14: 00007fae2de25fa0 R15: 00007fff0b968868 [ 637.470630][T20873] [ 641.935002][T20940] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3443'. [ 644.753459][T20447] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 644.761889][T20447] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 644.772306][T20447] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 644.783697][T20447] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 644.792417][T20447] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 644.812512][T20447] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 645.519533][T20447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.645385][T15139] IPVS: stop unused estimator thread 0... [ 645.648338][T20447] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.701078][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.701192][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.812885][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.812995][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.002645][T20972] syzkaller0: entered promiscuous mode [ 646.002671][T20972] syzkaller0: entered allmulticast mode [ 646.477629][T20989] FAULT_INJECTION: forcing a failure. [ 646.477629][T20989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.477665][T20989] CPU: 0 UID: 0 PID: 20989 Comm: syz.0.3450 Not tainted syzkaller #0 PREEMPT(full) [ 646.477690][T20989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 646.477704][T20989] Call Trace: [ 646.477712][T20989] [ 646.477722][T20989] dump_stack_lvl+0xe8/0x150 [ 646.477760][T20989] should_fail_ex+0x410/0x560 [ 646.477792][T20989] _copy_from_iter+0x1d3/0x1660 [ 646.477820][T20989] ? __alloc_skb+0x27a/0x7a0 [ 646.477850][T20989] ? __alloc_skb+0x27a/0x7a0 [ 646.477881][T20989] ? __alloc_skb+0x27a/0x7a0 [ 646.477910][T20989] ? __pfx__copy_from_iter+0x10/0x10 [ 646.477934][T20989] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 646.477968][T20989] ? __alloc_skb+0x27a/0x7a0 [ 646.477994][T20989] ? __alloc_skb+0x27a/0x7a0 [ 646.478029][T20989] ? netlink_sendmsg+0x650/0xb40 [ 646.478053][T20989] ? skb_put+0x112/0x210 [ 646.478086][T20989] netlink_sendmsg+0x6c0/0xb40 [ 646.478122][T20989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.478157][T20989] ? apparmor_socket_sendmsg+0x98/0x360 [ 646.478186][T20989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.478210][T20989] sock_sendmsg_nosec+0x14e/0x190 [ 646.478238][T20989] ____sys_sendmsg+0x54e/0x850 [ 646.478285][T20989] ? __pfx_____sys_sendmsg+0x10/0x10 [ 646.478327][T20989] ? import_iovec+0x73/0xa0 [ 646.478359][T20989] ___sys_sendmsg+0x2a5/0x360 [ 646.478389][T20989] ? __lock_acquire+0x747/0x2de0 [ 646.478417][T20989] ? __pfx____sys_sendmsg+0x10/0x10 [ 646.478489][T20989] ? __fget_files+0x2a/0x420 [ 646.478520][T20989] ? __fget_files+0x3a2/0x420 [ 646.478563][T20989] __x64_sys_sendmsg+0x1b1/0x290 [ 646.478599][T20989] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 646.478656][T20989] do_syscall_64+0x166/0x520 [ 646.478676][T20989] ? trace_irq_disable+0x3b/0x140 [ 646.478700][T20989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.478722][T20989] ? clear_bhb_loop+0x70/0xc0 [ 646.478750][T20989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.478773][T20989] RIP: 0033:0x7f0e8859e199 [ 646.478794][T20989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.478814][T20989] RSP: 002b:00007f0e89405028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 646.478839][T20989] RAX: ffffffffffffffda RBX: 00007f0e88825fa0 RCX: 00007f0e8859e199 [ 646.478856][T20989] RDX: 0000000000008010 RSI: 0000200000000440 RDI: 0000000000000003 [ 646.478870][T20989] RBP: 00007f0e89405090 R08: 0000000000000000 R09: 0000000000000000 [ 646.478885][T20989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.478899][T20989] R13: 00007f0e88826038 R14: 00007f0e88825fa0 R15: 00007ffe3da13cd8 [ 646.478935][T20989] [ 647.808004][T21030] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 647.808047][T21030] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 647.808093][T21030] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 648.173286][T20447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.427940][T20447] veth0_vlan: entered promiscuous mode [ 648.480875][T20447] veth1_vlan: entered promiscuous mode [ 648.833372][T20447] veth0_macvtap: entered promiscuous mode [ 648.880349][T20447] veth1_macvtap: entered promiscuous mode [ 648.936376][T21057] FAULT_INJECTION: forcing a failure. [ 648.936376][T21057] name failslab, interval 1, probability 0, space 0, times 0 [ 648.937942][T21057] CPU: 0 UID: 0 PID: 21057 Comm: syz.2.3461 Not tainted syzkaller #0 PREEMPT(full) [ 648.937969][T21057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 648.937982][T21057] Call Trace: [ 648.937992][T21057] [ 648.938001][T21057] dump_stack_lvl+0xe8/0x150 [ 648.938038][T21057] should_fail_ex+0x410/0x560 [ 648.938071][T21057] should_failslab+0xa8/0x100 [ 648.938106][T21057] ? skb_clone+0x212/0x3a0 [ 648.938141][T21057] kmem_cache_alloc_noprof+0xa1/0x600 [ 648.938179][T21057] ? skb_clone+0x212/0x3a0 [ 648.938220][T21057] skb_clone+0x212/0x3a0 [ 648.938257][T21057] __netlink_deliver_tap+0x355/0x6e0 [ 648.938295][T21057] ? netlink_deliver_tap+0x2e/0x1b0 [ 648.938322][T21057] netlink_deliver_tap+0x19c/0x1b0 [ 648.938349][T21057] netlink_unicast+0x781/0x940 [ 648.938384][T21057] netlink_sendmsg+0x813/0xb40 [ 648.938419][T21057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 648.938455][T21057] ? apparmor_socket_sendmsg+0x98/0x360 [ 648.938483][T21057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 648.938508][T21057] sock_sendmsg_nosec+0x14e/0x190 [ 648.938536][T21057] ____sys_sendmsg+0x54e/0x850 [ 648.938573][T21057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 648.938615][T21057] ? import_iovec+0x73/0xa0 [ 648.938664][T21057] ___sys_sendmsg+0x2a5/0x360 [ 648.938693][T21057] ? __lock_acquire+0x747/0x2de0 [ 648.938722][T21057] ? __pfx____sys_sendmsg+0x10/0x10 [ 648.938792][T21057] ? __fget_files+0x2a/0x420 [ 648.938820][T21057] ? __fget_files+0x3a2/0x420 [ 648.938863][T21057] __x64_sys_sendmsg+0x1b1/0x290 [ 648.938905][T21057] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 648.938961][T21057] do_syscall_64+0x166/0x520 [ 648.938982][T21057] ? trace_irq_disable+0x3b/0x140 [ 648.939005][T21057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.939027][T21057] ? clear_bhb_loop+0x70/0xc0 [ 648.939055][T21057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.939078][T21057] RIP: 0033:0x7fae2db9e199 [ 648.939106][T21057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.939125][T21057] RSP: 002b:00007fae2ea45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 648.939150][T21057] RAX: ffffffffffffffda RBX: 00007fae2de25fa0 RCX: 00007fae2db9e199 [ 648.939167][T21057] RDX: 0000000000008010 RSI: 0000200000000440 RDI: 0000000000000003 [ 648.939182][T21057] RBP: 00007fae2ea45090 R08: 0000000000000000 R09: 0000000000000000 [ 648.939195][T21057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.939209][T21057] R13: 00007fae2de26038 R14: 00007fae2de25fa0 R15: 00007fff0b968868 [ 648.939244][T21057] [ 648.939283][T21057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3461'. [ 649.354702][T20447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.419455][T20447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.657345][T15144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.696864][T15144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.696916][T15144] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.696952][T15144] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.940694][T21081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3466'. [ 650.521501][T21097] netlink: 'syz.0.3467': attribute type 1 has an invalid length. [ 650.587008][T21097] bond2: entered promiscuous mode [ 650.592488][T21097] bond2: entered allmulticast mode [ 650.593004][T21097] 8021q: adding VLAN 0 to HW filter on device bond2 [ 650.635812][T21100] erspan1: entered allmulticast mode [ 650.640311][T21100] bond2: (slave erspan1): making interface the new active one [ 650.640336][T21100] erspan1: entered promiscuous mode [ 650.641899][T21100] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 651.976995][T21061] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 652.179162][T15144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.179187][T15144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.340714][T21135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3470'. [ 652.380860][T15144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.380883][T15144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.475620][T21143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3473'. [ 652.475669][T21143] FAULT_INJECTION: forcing a failure. [ 652.475669][T21143] name failslab, interval 1, probability 0, space 0, times 0 [ 652.475698][T21143] CPU: 0 UID: 0 PID: 21143 Comm: syz.3.3473 Not tainted syzkaller #0 PREEMPT(full) [ 652.475723][T21143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 652.475736][T21143] Call Trace: [ 652.475745][T21143] [ 652.475754][T21143] dump_stack_lvl+0xe8/0x150 [ 652.475791][T21143] should_fail_ex+0x410/0x560 [ 652.475822][T21143] ? __alloc_skb+0x1db/0x7a0 [ 652.475850][T21143] should_failslab+0xa8/0x100 [ 652.475879][T21143] ? __alloc_skb+0x1db/0x7a0 [ 652.475905][T21143] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 652.475944][T21143] ? __alloc_skb+0x18d/0x7a0 [ 652.475973][T21143] ? __alloc_skb+0x1db/0x7a0 [ 652.476008][T21143] __alloc_skb+0x1db/0x7a0 [ 652.476042][T21143] netlink_ack+0x136/0xb30 [ 652.476064][T21143] ? __pfx_genl_rcv_msg+0x10/0x10 [ 652.476137][T21143] ? __pfx_nl80211_post_doit+0x10/0x10 [ 652.476262][T21143] netlink_rcv_skb+0x2a4/0x4a0 [ 652.476289][T21143] ? __pfx_genl_rcv_msg+0x10/0x10 [ 652.476321][T21143] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 652.476363][T21143] ? down_read+0x2be/0x330 [ 652.476424][T21143] genl_rcv+0x28/0x40 [ 652.476452][T21143] netlink_unicast+0x7bd/0x940 [ 652.476486][T21143] netlink_sendmsg+0x813/0xb40 [ 652.476523][T21143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 652.476558][T21143] ? apparmor_socket_sendmsg+0x98/0x360 [ 652.476588][T21143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 652.476612][T21143] sock_sendmsg_nosec+0x14e/0x190 [ 652.476641][T21143] ____sys_sendmsg+0x54e/0x850 [ 652.476681][T21143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 652.476724][T21143] ? import_iovec+0x73/0xa0 [ 652.476758][T21143] ___sys_sendmsg+0x2a5/0x360 [ 652.476788][T21143] ? __lock_acquire+0x747/0x2de0 [ 652.476816][T21143] ? __pfx____sys_sendmsg+0x10/0x10 [ 652.476873][T21143] ? __fget_files+0x2a/0x420 [ 652.476897][T21143] ? __fget_files+0x3a2/0x420 [ 652.476931][T21143] __x64_sys_sendmsg+0x1b1/0x290 [ 652.476959][T21143] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 652.477003][T21143] do_syscall_64+0x166/0x520 [ 652.477019][T21143] ? trace_irq_disable+0x3b/0x140 [ 652.477037][T21143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.477056][T21143] ? clear_bhb_loop+0x70/0xc0 [ 652.477077][T21143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.477094][T21143] RIP: 0033:0x7f7b8939e199 [ 652.477111][T21143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.477127][T21143] RSP: 002b:00007f7b8a18b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 652.477147][T21143] RAX: ffffffffffffffda RBX: 00007f7b89625fa0 RCX: 00007f7b8939e199 [ 652.477160][T21143] RDX: 0000000000008010 RSI: 0000200000000440 RDI: 0000000000000003 [ 652.477171][T21143] RBP: 00007f7b8a18b090 R08: 0000000000000000 R09: 0000000000000000 [ 652.477182][T21143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.477193][T21143] R13: 00007f7b89626038 R14: 00007f7b89625fa0 R15: 00007ffd4aadd108 [ 652.477228][T21143] [ 654.138262][T21173] 8021q: VLANs not supported on sit0 [ 654.138370][T21173] 8021q: VLANs not supported on sit0 [ 654.138488][T21173] 8021q: VLANs not supported on sit0 [ 654.138571][T21173] 8021q: VLANs not supported on sit0 [ 654.138778][T21173] 8021q: VLANs not supported on sit0 [ 654.138875][T21173] 8021q: VLANs not supported on sit0 [ 654.138993][T21173] 8021q: VLANs not supported on sit0 [ 654.139075][T21173] 8021q: VLANs not supported on sit0 [ 654.139157][T21173] 8021q: VLANs not supported on sit0 [ 654.139240][T21173] 8021q: VLANs not supported on sit0 [ 654.139350][T21173] 8021q: VLANs not supported on sit0 [ 654.139496][T21173] 8021q: VLANs not supported on sit0 [ 654.139585][T21173] 8021q: VLANs not supported on sit0 [ 654.139668][T21173] 8021q: VLANs not supported on sit0 [ 654.148088][T21173] 8021q: VLANs not supported on sit0 [ 654.148461][T21173] 8021q: VLANs not supported on sit0 [ 654.148707][T21173] 8021q: VLANs not supported on sit0 [ 654.160000][T21173] 8021q: VLANs not supported on sit0 [ 654.160680][T21173] 8021q: VLANs not supported on sit0 [ 654.162343][T21173] 8021q: VLANs not supported on sit0 [ 654.162565][T21173] 8021q: VLANs not supported on sit0 [ 654.162982][T21173] 8021q: VLANs not supported on sit0 [ 654.172267][T21173] 8021q: VLANs not supported on sit0 [ 654.172727][T21173] 8021q: VLANs not supported on sit0 [ 654.172948][T21173] 8021q: VLANs not supported on sit0 [ 654.173155][T21173] 8021q: VLANs not supported on sit0 [ 654.173398][T21173] 8021q: VLANs not supported on sit0 [ 654.191857][T21173] 8021q: VLANs not supported on sit0 [ 654.192133][T21173] 8021q: VLANs not supported on sit0 [ 654.192353][T21173] 8021q: VLANs not supported on sit0 [ 654.192683][T21173] 8021q: VLANs not supported on sit0 [ 654.192948][T21173] 8021q: VLANs not supported on sit0 [ 654.223777][T21173] 8021q: VLANs not supported on sit0 [ 654.663573][T21211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3484'. [ 654.722162][T21212] netlink: 6020 bytes leftover after parsing attributes in process `syz.2.3485'. [ 654.893031][T21212] ip6gretap0 (unregistering): left allmulticast mode [ 655.348808][T21237] macsec1: entered allmulticast mode [ 655.348837][T21237] veth0_to_bridge: entered allmulticast mode [ 655.354271][T21237] veth0_to_bridge: left allmulticast mode [ 655.991527][T21260] netlink: 'syz.2.3497': attribute type 15 has an invalid length. [ 655.999632][T21260] netlink: 'syz.2.3497': attribute type 15 has an invalid length. [ 656.033591][T21260] netlink: 'syz.2.3497': attribute type 15 has an invalid length. [ 656.283511][T21260] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 656.883659][T21292] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3503'. [ 656.883691][T21292] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3503'. [ 656.883709][T21292] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3503'. [ 656.980248][T21298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3504'. [ 656.981270][T21296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3502'. [ 657.004289][T21298] netlink: 59 bytes leftover after parsing attributes in process `syz.4.3504'. [ 657.223930][T21305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3505'. [ 657.294231][T21301] veth0_to_batadv: left promiscuous mode [ 657.892125][T21320] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3510'. [ 657.893466][T15136] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.893576][T15136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.959730][T21328] geneve2: entered allmulticast mode [ 658.825898][T21358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.826878][T21358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.125122][T21367] openvswitch: netlink: Flow key attr not present in new flow. [ 659.962509][T21397] syzkaller0: entered promiscuous mode [ 659.962533][T21397] syzkaller0: entered allmulticast mode [ 659.981220][T21397] FAULT_INJECTION: forcing a failure. [ 659.981220][T21397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.981250][T21397] CPU: 0 UID: 0 PID: 21397 Comm: syz.2.3528 Not tainted syzkaller #0 PREEMPT(full) [ 659.981272][T21397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 659.981283][T21397] Call Trace: [ 659.981290][T21397] [ 659.981297][T21397] dump_stack_lvl+0xe8/0x150 [ 659.981328][T21397] should_fail_ex+0x410/0x560 [ 659.981354][T21397] _copy_from_user+0x2d/0xb0 [ 659.981461][T21397] __sys_sendto+0x2a9/0x5a0 [ 659.981484][T21397] ? ksys_write+0x1e6/0x270 [ 659.981515][T21397] ? __pfx___sys_sendto+0x10/0x10 [ 659.981536][T21397] ? __mutex_unlock_slowpath+0x731/0x900 [ 659.981586][T21397] ? __pfx_ksys_write+0x10/0x10 [ 659.981617][T21397] __x64_sys_sendto+0xde/0x100 [ 659.981643][T21397] do_syscall_64+0x166/0x520 [ 659.981659][T21397] ? trace_irq_disable+0x3b/0x140 [ 659.981677][T21397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.981696][T21397] ? clear_bhb_loop+0x70/0xc0 [ 659.981718][T21397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.981736][T21397] RIP: 0033:0x7fae2db9e199 [ 659.981753][T21397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.981769][T21397] RSP: 002b:00007fae2ea45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 659.981788][T21397] RAX: ffffffffffffffda RBX: 00007fae2de25fa0 RCX: 00007fae2db9e199 [ 659.981802][T21397] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000007 [ 659.981814][T21397] RBP: 00007fae2ea45090 R08: 0000200000000140 R09: 0000000000000014 [ 659.981828][T21397] R10: 0000000020000005 R11: 0000000000000246 R12: 0000000000000001 [ 659.981840][T21397] R13: 00007fae2de26038 R14: 00007fae2de25fa0 R15: 00007fff0b968868 [ 659.981869][T21397] [ 660.423147][T21420] __nla_validate_parse: 5 callbacks suppressed [ 660.423168][T21420] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3533'. [ 662.092242][T21371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 662.230018][T21426] macvtap1: entered allmulticast mode [ 662.230043][T21426] veth0_to_bridge: entered allmulticast mode [ 662.253176][T21426] veth0_to_bridge: left allmulticast mode [ 662.491442][T21426] netlink: 3568 bytes leftover after parsing attributes in process `syz.3.3534'. [ 662.609336][T21441] bridge0: port 3(batadv1) entered blocking state [ 662.609526][T21441] bridge0: port 3(batadv1) entered disabled state [ 662.609682][T21441] batadv1: entered allmulticast mode [ 662.611701][T21441] batadv1: entered promiscuous mode [ 663.018927][T21451] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3537'. [ 663.106107][T11684] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 663.106150][T11684] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 663.113259][T21456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3540'. [ 663.190381][T21456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3540'. [ 663.559073][T21476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3544'. [ 663.632953][T21475] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3546'. [ 664.037577][T21488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3551'. [ 664.076899][T21495] netlink: 'syz.4.3553': attribute type 1 has an invalid length. [ 664.303713][T21495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 664.533903][T21502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 664.534339][T21502] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 664.558217][T21502] bond1: (slave gre1): Error -95 calling set_mac_address [ 664.705149][T21507] gretap1: entered promiscuous mode [ 664.799386][T21522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3556'. [ 665.198520][T21534] netlink: 'syz.3.3558': attribute type 21 has an invalid length. [ 665.648425][T21542] dvmrp0: entered allmulticast mode [ 665.648609][T21543] dvmrp0: left allmulticast mode [ 666.031241][T21554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3563'. [ 666.946285][T21576] ip6erspan0: entered allmulticast mode [ 667.405788][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 667.618483][T21600] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 667.618506][T21600] IPv6: NLM_F_CREATE should be set when creating new route [ 668.329259][T21628] syzkaller0: entered promiscuous mode [ 668.329283][T21628] syzkaller0: entered allmulticast mode [ 669.936885][T21685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3598'. [ 669.982523][T21689] SET target dimension over the limit! [ 670.110261][T21687] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3599'. [ 670.110288][T21687] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 671.851012][T21740] Bluetooth: hci0: too big key_count value 38657 [ 671.975268][T21718] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 672.302650][T21751] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3613'. [ 672.720346][T21769] syzkaller0: entered promiscuous mode [ 672.720371][T21769] syzkaller0: entered allmulticast mode [ 672.783031][T21772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3617'. [ 673.514358][T21788] netlink: 'syz.1.3626': attribute type 1 has an invalid length. [ 673.592691][T21786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3625'. [ 673.719895][T21793] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 673.857535][T21798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 673.890369][T21803] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3630'. [ 673.890398][T21803] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3630'. [ 673.944498][T21788] macvlan2: entered promiscuous mode [ 673.944525][T21788] macvlan2: entered allmulticast mode [ 673.946042][T21788] bond1: entered promiscuous mode [ 673.946097][T21788] bridge1: entered promiscuous mode [ 673.948962][T21788] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 673.977303][T21788] bond1: left promiscuous mode [ 673.977326][T21788] bridge1: left promiscuous mode [ 674.124916][T21812] ip_tables: iptables: counters copy to user failed while replacing table [ 674.772250][T21839] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3639'. [ 674.772278][T21839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.872817][T21835] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 675.213999][T21846] netlink: 'syz.2.3641': attribute type 1 has an invalid length. [ 675.305988][T21848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3641'. [ 675.309575][T21847] bond1: (slave geneve2): making interface the new active one [ 675.310497][T21847] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 675.332765][T15138] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 675.332997][T15138] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 675.333095][T15138] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 675.342541][T15138] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 675.404384][T21847] netlink: 'syz.2.3641': attribute type 1 has an invalid length. [ 675.620086][T21857] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3644'. [ 675.637403][T21858] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3644'. [ 675.788129][T21873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3647'. [ 675.843149][T21876] netlink: zone id is out of range [ 675.843166][T21876] netlink: zone id is out of range [ 675.843174][T21876] netlink: zone id is out of range [ 675.843182][T21876] netlink: zone id is out of range [ 675.843191][T21876] netlink: zone id is out of range [ 675.843199][T21876] netlink: zone id is out of range [ 675.843212][T21876] netlink: zone id is out of range [ 675.843221][T21876] netlink: zone id is out of range [ 675.843230][T21876] netlink: zone id is out of range [ 675.843239][T21876] netlink: zone id is out of range [ 676.724486][T21901] sctp: [Deprecated]: syz.2.3654 (pid 21901) Use of int in max_burst socket option. [ 676.724486][T21901] Use struct sctp_assoc_value instead [ 677.412176][T21915] __nla_validate_parse: 1 callbacks suppressed [ 677.412198][T21915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3657'. [ 677.437156][T21915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3657'. [ 677.566156][T21914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3658'. [ 678.012373][T21935] IPv6: Can't replace route, no match found [ 678.218802][T21945] IPVS: set_ctl: invalid protocol: 103 172.20.20.31:20004 [ 678.661008][T21959] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3670'. [ 679.067711][T21974] netlink: 'syz.0.3674': attribute type 1 has an invalid length. [ 679.105085][T21974] 8021q: adding VLAN 0 to HW filter on device bond3 [ 679.145426][T21974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3674'. [ 679.145475][T21974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3674'. [ 679.217433][T21974] veth3: entered allmulticast mode [ 679.233894][T21974] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 679.657635][T21993] veth1: entered promiscuous mode [ 679.657662][T21993] veth1: entered allmulticast mode [ 679.849764][T22000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3680'. [ 680.037713][T22011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3681'. [ 680.576898][T22024] syzkaller0: entered promiscuous mode [ 680.576925][T22024] syzkaller0: entered allmulticast mode [ 680.607333][T22024] tipc: Enabled bearer , priority 0 [ 680.767141][T22029] netlink: 'syz.2.3687': attribute type 4 has an invalid length. [ 680.767165][T22029] netlink: 3581 bytes leftover after parsing attributes in process `syz.2.3687'. [ 680.886092][T22030] FAULT_INJECTION: forcing a failure. [ 680.886092][T22030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.886128][T22030] CPU: 1 UID: 0 PID: 22030 Comm: syz.1.3688 Not tainted syzkaller #0 PREEMPT(full) [ 680.886154][T22030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 680.886168][T22030] Call Trace: [ 680.886177][T22030] [ 680.886186][T22030] dump_stack_lvl+0xe8/0x150 [ 680.886227][T22030] should_fail_ex+0x410/0x560 [ 680.886260][T22030] _copy_to_user+0x31/0xb0 [ 680.886293][T22030] simple_read_from_buffer+0xe1/0x170 [ 680.886333][T22030] proc_fail_nth_read+0x1bb/0x230 [ 680.886399][T22030] ? common_file_perm+0x20e/0x2b0 [ 680.886432][T22030] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 680.886458][T22030] ? rw_verify_area+0x24a/0x4c0 [ 680.886493][T22030] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 680.886515][T22030] vfs_read+0x213/0xa80 [ 680.886557][T22030] ? __pfx_vfs_read+0x10/0x10 [ 680.886595][T22030] ? __pfx_do_splice+0x10/0x10 [ 680.886649][T22030] ksys_read+0x150/0x270 [ 680.886685][T22030] ? __pfx_ksys_read+0x10/0x10 [ 680.886730][T22030] do_syscall_64+0x166/0x520 [ 680.886753][T22030] ? trace_irq_disable+0x3b/0x140 [ 680.886777][T22030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.886800][T22030] ? clear_bhb_loop+0x70/0xc0 [ 680.886831][T22030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.886853][T22030] RIP: 0033:0x7ff43e35e9ce [ 680.886874][T22030] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 680.886894][T22030] RSP: 002b:00007ff43f29cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 680.886918][T22030] RAX: ffffffffffffffda RBX: 00007ff43f29d6c0 RCX: 00007ff43e35e9ce [ 680.886935][T22030] RDX: 000000000000000f RSI: 00007ff43f29d0a0 RDI: 0000000000000009 [ 680.886949][T22030] RBP: 00007ff43f29d090 R08: 0000000000000000 R09: 0000000000000000 [ 680.886963][T22030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.886977][T22030] R13: 00007ff43e626038 R14: 00007ff43e625fa0 R15: 00007fffbdfc8418 [ 680.887019][T22030] [ 681.309511][T22015] net_ratelimit: 500 callbacks suppressed [ 681.309534][T22015] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 681.309775][T22015] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 681.309956][T22015] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 681.310133][T22015] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 681.310309][T22015] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 681.310519][T22015] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 681.310700][T22015] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 681.310876][T22015] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 681.311053][T22015] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 681.311226][T22015] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 681.447587][T22041] syzkaller0: entered promiscuous mode [ 681.447612][T22041] syzkaller0: entered allmulticast mode [ 681.472098][T22039] netlink: 'syz.4.3689': attribute type 1 has an invalid length. [ 681.547238][T22039] bond2: entered promiscuous mode [ 681.549219][T22039] 8021q: adding VLAN 0 to HW filter on device bond2 [ 681.893639][T22039] bond2: (slave bridge1): making interface the new active one [ 681.893678][T22039] bridge1: entered promiscuous mode [ 681.909527][T22039] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 682.124142][T22060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3695'. [ 682.465862][T22080] netlink: 'syz.1.3697': attribute type 3 has an invalid length. [ 682.466118][T22080] netlink: 'syz.1.3697': attribute type 3 has an invalid length. [ 682.523711][T22079] __nla_validate_parse: 1 callbacks suppressed [ 682.523731][T22079] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3697'. [ 682.775318][ T5627] Bluetooth: hci4: command 0x0401 tx timeout [ 684.042966][T22130] netlink: 4912 bytes leftover after parsing attributes in process `syz.4.3709'. [ 684.092698][T22132] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3708'. [ 684.914678][T22165] tipc: Started in network mode [ 684.914712][T22165] tipc: Node identity 765bcc3d706e, cluster identity 4711 [ 684.933520][T22165] tipc: Enabled bearer , priority 0 [ 684.979600][T22165] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3717'. [ 685.095961][T22166] syzkaller0: entered promiscuous mode [ 685.095989][T22166] syzkaller0: entered allmulticast mode [ 685.096686][T22166] tipc: Resetting bearer [ 685.460894][T15139] tipc: Resetting bearer [ 685.539433][T22163] tipc: Resetting bearer [ 685.982972][T22188] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3723'. [ 686.762645][T22216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3724'. [ 689.609573][T22163] tipc: Disabling bearer [ 689.614213][T22173] erspan0: entered promiscuous mode [ 689.614332][T22174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3718'. [ 689.614355][T22174] erspan0: left promiscuous mode [ 689.648287][T13606] tipc: Node number set to 104188989 [ 689.743340][T22195] syzkaller0: entered promiscuous mode [ 689.743368][T22195] syzkaller0: entered allmulticast mode [ 689.875632][T22218] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3725'. [ 689.875721][T22218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3725'. [ 690.140835][T22223] 8021q: adding VLAN 0 to HW filter on device bond2 [ 690.286468][T22234] ipvlan2: entered promiscuous mode [ 690.290172][T22236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3729'. [ 691.240861][T22267] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3735'. [ 691.240886][T22267] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3735'. [ 691.240900][T22267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3735'. [ 691.446026][T22271] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3736'. [ 691.452886][T22271] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.453729][T22271] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.413296][T22293] bond3: entered promiscuous mode [ 692.413325][T22293] bond3: entered allmulticast mode [ 693.559435][T22251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 693.820860][T22319] netlink: 'syz.3.3748': attribute type 10 has an invalid length. [ 693.822598][T22319] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 693.846258][T22319] team0: Port device netdevsim1 added [ 693.849621][T22319] netlink: 'syz.3.3748': attribute type 10 has an invalid length. [ 693.901462][T22319] team0: Port device netdevsim1 removed [ 693.903829][T22319] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 693.952554][T22319] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 694.054728][T22328] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3750'. [ 694.448892][T22347] netlink: 'syz.0.3754': attribute type 1 has an invalid length. [ 694.448917][T22347] netlink: 4288 bytes leftover after parsing attributes in process `syz.0.3754'. [ 694.617913][T22352] __nla_validate_parse: 2 callbacks suppressed [ 694.617934][T22352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3757'. [ 694.617955][T22352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3757'. [ 694.617973][T22352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3757'. [ 694.672995][T22358] netlink: 4912 bytes leftover after parsing attributes in process `syz.2.3755'. [ 694.738963][T22355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3756'. [ 695.176478][T22378] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3761'. [ 695.856981][T22381] gretap0: left promiscuous mode [ 696.084025][T22398] netlink: 'syz.4.3768': attribute type 2 has an invalid length. [ 696.666989][T22417] xt_HMARK: proto mask must be zero with L3 mode [ 696.701907][T22424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3775'. [ 696.704564][T22425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3775'. [ 696.724345][T22424] net_ratelimit: 46 callbacks suppressed [ 696.724588][T22424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.739762][T22453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3782'. [ 697.950702][T22460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3783'. [ 698.626640][T22482] ip_tables: iptables: counters copy to user failed while replacing table [ 698.738096][T22480] erspan0: entered promiscuous mode [ 698.740075][T22480] macvtap1: entered allmulticast mode [ 698.740098][T22480] erspan0: entered allmulticast mode [ 698.786718][T22483] ovs0: entered promiscuous mode [ 698.926896][T22480] syzkaller1: entered promiscuous mode [ 698.926921][T22480] syzkaller1: entered allmulticast mode [ 699.359355][T22496] netlink: 'syz.1.3792': attribute type 16 has an invalid length. [ 699.560177][T22505] netlink: 'syz.4.3796': attribute type 1 has an invalid length. [ 699.561997][T22507] netlink: 'syz.4.3796': attribute type 1 has an invalid length. [ 699.607496][T22505] bond3: entered promiscuous mode [ 699.609151][T22505] 8021q: adding VLAN 0 to HW filter on device bond3 [ 699.645772][T22507] 8021q: adding VLAN 0 to HW filter on device bond3 [ 699.646192][T22507] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 699.646213][T22507] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 699.693418][T22507] bond3: (slave xfrm1): making interface the new active one [ 699.693446][T22507] xfrm1: entered promiscuous mode [ 699.721001][T22507] xfrm1: left promiscuous mode [ 700.007017][T22505] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 700.036292][T22505] bond3: (slave xfrm1): making interface the new active one [ 700.232734][T11680] IPVS: starting estimator thread 0... [ 700.317352][T22528] IPVS: using max 30 ests per chain, 72000 per kthread [ 700.634587][T22530] syzkaller0: entered promiscuous mode [ 700.634613][T22530] syzkaller0: entered allmulticast mode [ 700.661909][T22540] __nla_validate_parse: 4 callbacks suppressed [ 700.661929][T22540] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3802'. [ 700.720470][T22540] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3802'. [ 700.798314][T22541] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 700.876911][T22545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3803'. [ 701.395249][T22562] netlink: 'syz.2.3808': attribute type 6 has an invalid length. [ 701.402639][T22562] netlink: 'syz.2.3808': attribute type 2 has an invalid length. [ 701.474634][T22562] þ: entered promiscuous mode [ 701.903031][T22575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3811'. [ 701.903919][T22576] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3810'. [ 702.052321][T22578] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 702.493060][T22594] netlink: 380 bytes leftover after parsing attributes in process `syz.3.3814'. [ 702.871076][T22614] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 702.925015][T22614] 8021q: adding VLAN 0 to HW filter on device bond2 [ 702.929922][T22614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3819'. [ 702.929949][T22614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3819'. [ 703.046180][T22614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.052502][T22614] bond2: (slave bond0): making interface the new active one [ 703.075577][T22614] bond2: (slave bond0): Enslaving as an active interface with an up link [ 703.472655][T22627] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 703.502309][T22627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3822'. [ 703.518694][T22628] netlink: Unknown NAT attribute (type=256, max=9) [ 703.518721][T22628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.083961][T22649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3830'. [ 704.368759][T11688] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.368894][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.368935][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.368972][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.482059][T22660] macsec1: entered promiscuous mode [ 704.482079][T22660] team0: entered promiscuous mode [ 704.482090][T22660] team_slave_0: entered promiscuous mode [ 704.482254][T22660] team_slave_1: entered promiscuous mode [ 704.494327][T22660] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 706.542938][T22683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.566811][T22683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.940498][T22709] nbd1: detected capacity change from 0 to 63 [ 706.953927][T22709] block nbd0: NBD_DISCONNECT [ 706.953958][T22709] block nbd0: Send disconnect failed -32 [ 706.953977][T22709] block nbd0: shutting down sockets [ 707.691999][ T52] block nbd1: Receive control failed (result -104) [ 708.984252][T15140] bridge_slave_1: left allmulticast mode [ 708.984497][T15140] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.023305][T15140] bridge_slave_0: left allmulticast mode [ 709.033568][T15140] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.160217][T22716] netlink: 'syz.2.3850': attribute type 2 has an invalid length. [ 710.059906][T15140] bond15 (unregistering): (slave gretap2): Releasing backup interface [ 710.139008][T15140] bond7 (unregistering): (slave geneve4): Releasing active interface [ 710.160028][T15140] bond1 (unregistering): (slave geneve2): Releasing active interface [ 710.269866][T15140] bond14 (unregistering): (slave bridge6): Releasing active interface [ 710.284308][T15140] bond16 (unregistering): (slave bridge7): Releasing backup interface [ 710.284338][T15140] bridge7 (unregistering): left promiscuous mode [ 710.311394][T15140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 710.313880][T15140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 710.320187][T15140] bond0 (unregistering): Released all slaves [ 710.342271][T15140] bond1 (unregistering): Released all slaves [ 710.358815][T15140] bond2 (unregistering): Released all slaves [ 710.379351][T15140] bond3 (unregistering): (slave veth7): Releasing active interface [ 710.380413][T15140] bond3 (unregistering): Released all slaves [ 710.418574][T15140] bond4 (unregistering): Released all slaves [ 710.442694][T15140] bond5 (unregistering): Released all slaves [ 710.462711][T15140] bond6 (unregistering): Released all slaves [ 710.484375][T15140] bond7 (unregistering): Released all slaves [ 710.507513][T15140] bond8 (unregistering): Released all slaves [ 710.523973][T15140] bond9 (unregistering): Released all slaves [ 710.560405][T15140] bond11 (unregistering): Released all slaves [ 710.577523][T15140] bond10 (unregistering): Released all slaves [ 710.603925][T15140] bond12 (unregistering): Released all slaves [ 710.623090][T15140] bond13 (unregistering): Released all slaves [ 710.654066][T15140] bond14 (unregistering): Released all slaves [ 710.671488][T15140] bond15 (unregistering): Released all slaves [ 710.689880][T15140] bond16 (unregistering): Released all slaves [ 710.736058][T22722] tipc: Resetting bearer [ 710.738108][T22722] syzkaller0: left promiscuous mode [ 710.738133][T22722] syzkaller0: left allmulticast mode [ 710.745832][T15138] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.747597][T11680] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.747640][T11680] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.747671][T11680] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.250821][T22742] syzkaller0: entered promiscuous mode [ 711.250845][T22742] syzkaller0: entered allmulticast mode [ 711.407228][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 711.475361][T22742] __nla_validate_parse: 6 callbacks suppressed [ 711.475382][T22742] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3855'. [ 711.538543][T22759] IPVS: set_ctl: invalid protocol: 115 10.1.1.2:20004 [ 711.539400][T22759] IPVS: sed: FWM 3 0x00000003 - no destination available [ 711.831752][T22761] bond4: entered promiscuous mode [ 711.852568][T22761] 8021q: adding VLAN 0 to HW filter on device bond4 [ 711.884269][T22769] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3865'. [ 711.927617][T22765] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 711.927938][T15140] IPVS: stopping backup sync thread 11595 ... [ 711.949290][T22765] 8021q: adding VLAN 0 to HW filter on device bond4 [ 712.030567][T22765] bond4: (slave lo): Enslaving as an active interface with an up link [ 712.034401][T22765] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 712.355597][T22771] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 712.444150][T22780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3866'. [ 712.510130][T22776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3868'. [ 712.902640][T22796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3870'. [ 712.933253][T11680] wlan0: Trigger new scan to find an IBSS to join [ 712.970518][T22797] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 713.236064][T22796] team0: Port device team_slave_0 removed [ 713.484522][T22804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3873'. [ 713.592793][T15140] [ 713.595220][T15140] ====================================================== [ 713.602280][T15140] WARNING: possible circular locking dependency detected [ 713.609345][T15140] syzkaller #0 Not tainted [ 713.613786][T15140] ------------------------------------------------------ [ 713.620815][T15140] kworker/u8:39/15140 is trying to acquire lock: [ 713.627155][T15140] ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x6d/0x170 [ 713.637707][T15140] [ 713.637707][T15140] but task is already holding lock: [ 713.645082][T15140] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x77/0x930 [ 713.654703][T15140] [ 713.654703][T15140] which lock already depends on the new lock. [ 713.654703][T15140] [ 713.665142][T15140] [ 713.665142][T15140] the existing dependency chain (in reverse order) is: [ 713.674194][T15140] [ 713.674194][T15140] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 713.682233][T15140] down_write+0x96/0x200 [ 713.687026][T15140] kernfs_add_one+0x41/0x6f0 [ 713.692160][T15140] kernfs_create_dir_ns+0x1a1/0x230 [ 713.697902][T15140] internal_create_group+0x440/0x1180 [ 713.703827][T15140] cpuhp_invoke_callback+0x434/0x810 [ 713.709705][T15140] cpuhp_issue_call+0x3f0/0x750 [ 713.715099][T15140] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 713.721728][T15140] __cpuhp_setup_state+0x3f/0x60 [ 713.727212][T15140] do_one_initcall+0x250/0x870 [ 713.732523][T15140] do_initcall_level+0x10a/0x1a0 [ 713.738197][T15140] do_initcalls+0x59/0xa0 [ 713.743067][T15140] kernel_init_freeable+0x29d/0x3e0 [ 713.748822][T15140] kernel_init+0x22/0x1d0 [ 713.753699][T15140] ret_from_fork+0x514/0xb70 [ 713.758873][T15140] ret_from_fork_asm+0x1a/0x30 [ 713.764185][T15140] [ 713.764185][T15140] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 713.772026][T15140] [ 713.772026][T15140] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 713.780318][T15140] cpus_read_lock+0x42/0x160 [ 713.785472][T15140] static_key_slow_inc+0x12/0x30 [ 713.791100][T15140] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 713.797467][T15140] nbd_genl_foreach_sock+0x265/0x450 [ 713.803307][T15140] nbd_genl_reconfigure+0xbbb/0x1040 [ 713.809182][T15140] genl_family_rcv_msg_doit+0x233/0x340 [ 713.815284][T15140] genl_rcv_msg+0x614/0x7a0 [ 713.820336][T15140] netlink_rcv_skb+0x226/0x4a0 [ 713.825637][T15140] genl_rcv+0x28/0x40 [ 713.830156][T15140] netlink_unicast+0x7bd/0x940 [ 713.835449][T15140] netlink_sendmsg+0x813/0xb40 [ 713.840755][T15140] sock_sendmsg_nosec+0x14e/0x190 [ 713.846328][T15140] ____sys_sendmsg+0x54e/0x850 [ 713.851654][T15140] ___sys_sendmsg+0x2a5/0x360 [ 713.856977][T15140] __x64_sys_sendmsg+0x1b1/0x290 [ 713.862456][T15140] do_syscall_64+0x166/0x520 [ 713.867588][T15140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.874013][T15140] [ 713.874013][T15140] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 713.881678][T15140] __mutex_lock+0x19d/0x1550 [ 713.886805][T15140] nbd_queue_rq+0x373/0xff0 [ 713.891850][T15140] blk_mq_dispatch_rq_list+0x499/0x1990 [ 713.898040][T15140] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 713.905145][T15140] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 713.911704][T15140] blk_mq_run_work_fn+0x16c/0x300 [ 713.917744][T15140] process_scheduled_works+0xc3d/0x1630 [ 713.924491][T15140] worker_thread+0xa47/0xfb0 [ 713.929801][T15140] kthread+0x38b/0x480 [ 713.934409][T15140] ret_from_fork+0x514/0xb70 [ 713.939544][T15140] ret_from_fork_asm+0x1a/0x30 [ 713.945115][T15140] [ 713.945115][T15140] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 713.952485][T15140] __mutex_lock+0x19d/0x1550 [ 713.957614][T15140] nbd_queue_rq+0xc1/0xff0 [ 713.962769][T15140] blk_mq_dispatch_rq_list+0x499/0x1990 [ 713.968877][T15140] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 713.975848][T15140] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 713.982393][T15140] blk_mq_run_work_fn+0x16c/0x300 [ 713.988093][T15140] process_scheduled_works+0xc3d/0x1630 [ 713.994208][T15140] worker_thread+0xa47/0xfb0 [ 713.999615][T15140] kthread+0x38b/0x480 [ 714.004240][T15140] ret_from_fork+0x514/0xb70 [ 714.009390][T15140] ret_from_fork_asm+0x1a/0x30 [ 714.014727][T15140] [ 714.014727][T15140] -> #4 (set->srcu){.+.+}-{0:0}: [ 714.021876][T15140] __synchronize_srcu+0xc9/0x2f0 [ 714.027475][T15140] elevator_switch+0x1e8/0x7b0 [ 714.032854][T15140] elevator_change+0x2fa/0x480 [ 714.038158][T15140] elevator_set_default+0x375/0x440 [ 714.043900][T15140] blk_register_queue+0x3f3/0x4e0 [ 714.049539][T15140] __add_disk+0x6b8/0xdb0 [ 714.054511][T15140] add_disk_fwnode+0x100/0x3a0 [ 714.059829][T15140] nbd_dev_add+0x733/0xb60 [ 714.064817][T15140] nbd_init+0x168/0x1f0 [ 714.069693][T15140] do_one_initcall+0x250/0x870 [ 714.075000][T15140] do_initcall_level+0x10a/0x1a0 [ 714.080474][T15140] do_initcalls+0x59/0xa0 [ 714.085334][T15140] kernel_init_freeable+0x29d/0x3e0 [ 714.091096][T15140] kernel_init+0x22/0x1d0 [ 714.095976][T15140] ret_from_fork+0x514/0xb70 [ 714.101124][T15140] ret_from_fork_asm+0x1a/0x30 [ 714.106447][T15140] [ 714.106447][T15140] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 714.114305][T15140] __mutex_lock+0x19d/0x1550 [ 714.119465][T15140] elevator_change+0x1af/0x480 [ 714.124785][T15140] elevator_set_none+0xb5/0x140 [ 714.130190][T15140] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 714.136637][T15140] nbd_start_device+0x189/0xb30 [ 714.142027][T15140] nbd_genl_connect+0x167d/0x1cd0 [ 714.147596][T15140] genl_family_rcv_msg_doit+0x233/0x340 [ 714.153714][T15140] genl_rcv_msg+0x614/0x7a0 [ 714.158761][T15140] netlink_rcv_skb+0x226/0x4a0 [ 714.164061][T15140] genl_rcv+0x28/0x40 [ 714.168583][T15140] netlink_unicast+0x7bd/0x940 [ 714.173883][T15140] netlink_sendmsg+0x813/0xb40 [ 714.179180][T15140] sock_sendmsg_nosec+0x14e/0x190 [ 714.184745][T15140] ____sys_sendmsg+0x54e/0x850 [ 714.190145][T15140] ___sys_sendmsg+0x2a5/0x360 [ 714.195367][T15140] __x64_sys_sendmsg+0x1b1/0x290 [ 714.200874][T15140] do_syscall_64+0x166/0x520 [ 714.206002][T15140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.212439][T15140] [ 714.212439][T15140] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 714.221069][T15140] blk_alloc_queue+0x544/0x690 [ 714.226378][T15140] __blk_mq_alloc_disk+0x194/0x390 [ 714.232042][T15140] nbd_dev_add+0x494/0xb60 [ 714.236994][T15140] nbd_init+0x168/0x1f0 [ 714.241702][T15140] do_one_initcall+0x250/0x870 [ 714.247093][T15140] do_initcall_level+0x10a/0x1a0 [ 714.252578][T15140] do_initcalls+0x59/0xa0 [ 714.257445][T15140] kernel_init_freeable+0x29d/0x3e0 [ 714.263205][T15140] kernel_init+0x22/0x1d0 [ 714.268119][T15140] ret_from_fork+0x514/0xb70 [ 714.273263][T15140] ret_from_fork_asm+0x1a/0x30 [ 714.278605][T15140] [ 714.278605][T15140] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 714.285849][T15140] fs_reclaim_acquire+0x71/0x100 [ 714.291353][T15140] kmem_cache_alloc_noprof+0x5f/0x600 [ 714.297278][T15140] __kernfs_iattrs+0xdd/0x380 [ 714.302535][T15140] kernfs_iop_setattr+0xe6/0x3f0 [ 714.308020][T15140] notify_change+0xbba/0xea0 [ 714.313146][T15140] do_truncate+0x1c2/0x250 [ 714.318123][T15140] path_openat+0x15b5/0x1d60 [ 714.323260][T15140] do_file_open+0x23e/0x4a0 [ 714.328476][T15140] do_sys_openat2+0x115/0x200 [ 714.333695][T15140] __x64_sys_openat+0x138/0x170 [ 714.339284][T15140] do_syscall_64+0x166/0x520 [ 714.344409][T15140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.350848][T15140] [ 714.350848][T15140] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 714.359394][T15140] __lock_acquire+0x164c/0x2de0 [ 714.364816][T15140] lock_acquire+0x115/0x350 [ 714.369968][T15140] down_write+0x96/0x200 [ 714.375010][T15140] kernfs_unlink_sibling+0x6d/0x170 [ 714.380784][T15140] kernfs_rename_ns+0x4a2/0x930 [ 714.386193][T15140] sysfs_rename_link_ns+0x16e/0x1b0 [ 714.391960][T15140] device_rename+0x110/0x210 [ 714.397205][T15140] __dev_change_net_namespace+0x1572/0x2060 [ 714.403743][T15140] cfg802154_switch_netns+0xbd/0x410 [ 714.409635][T15140] cfg802154_pernet_exit+0x75/0xc0 [ 714.415308][T15140] ops_undo_list+0x43d/0x8d0 [ 714.420511][T15140] cleanup_net+0x572/0x810 [ 714.425486][T15140] process_scheduled_works+0xc3d/0x1630 [ 714.431685][T15140] worker_thread+0xa47/0xfb0 [ 714.436832][T15140] kthread+0x38b/0x480 [ 714.441544][T15140] ret_from_fork+0x514/0xb70 [ 714.446700][T15140] ret_from_fork_asm+0x1a/0x30 [ 714.452029][T15140] [ 714.452029][T15140] other info that might help us debug this: [ 714.452029][T15140] [ 714.462276][T15140] Chain exists of: [ 714.462276][T15140] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 714.462276][T15140] [ 714.476733][T15140] Possible unsafe locking scenario: [ 714.476733][T15140] [ 714.484230][T15140] CPU0 CPU1 [ 714.489644][T15140] ---- ---- [ 714.495031][T15140] lock(&root->kernfs_rwsem); [ 714.499842][T15140] lock(cpuhp_state_mutex); [ 714.507001][T15140] lock(&root->kernfs_rwsem); [ 714.514311][T15140] lock(&root->kernfs_iattr_rwsem); [ 714.519636][T15140] [ 714.519636][T15140] *** DEADLOCK *** [ 714.519636][T15140] [ 714.527797][T15140] locks held by kworker/u8:39/15140: 5, last CPU#1: [ 714.534394][T15140] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 714.545302][T15140] #1: ffffc900063bfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 714.555913][T15140] #2: ffffffff90246468 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 714.565274][T15140] #3: ffffffff90254da0 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x18/0xc0 [ 714.574884][T15140] #4: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x77/0x930 [ 714.584923][T15140] [ 714.584923][T15140] stack backtrace: [ 714.590827][T15140] CPU: 1 UID: 0 PID: 15140 Comm: kworker/u8:39 Not tainted syzkaller #0 PREEMPT(full) [ 714.600483][T15140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 714.610553][T15140] Workqueue: netns cleanup_net [ 714.615344][T15140] Call Trace: [ 714.618643][T15140] [ 714.621594][T15140] dump_stack_lvl+0xe8/0x150 [ 714.626205][T15140] print_circular_bug+0x2e2/0x300 [ 714.631254][T15140] check_noncircular+0x12f/0x150 [ 714.636221][T15140] __lock_acquire+0x164c/0x2de0 [ 714.641089][T15140] ? __lock_acquire+0x747/0x2de0 [ 714.646880][T15140] ? __lock_acquire+0x747/0x2de0 [ 714.652114][T15140] lock_acquire+0x115/0x350 [ 714.657208][T15140] ? kernfs_unlink_sibling+0x6d/0x170 [ 714.662636][T15140] down_write+0x96/0x200 [ 714.666931][T15140] ? kernfs_unlink_sibling+0x6d/0x170 [ 714.672348][T15140] ? __pfx_down_write+0x10/0x10 [ 714.677319][T15140] ? kernfs_root+0x1c/0x230 [ 714.681858][T15140] ? kernfs_root+0x1c/0x230 [ 714.686383][T15140] ? kernfs_root+0x1ea/0x230 [ 714.691004][T15140] kernfs_unlink_sibling+0x6d/0x170 [ 714.696239][T15140] kernfs_rename_ns+0x4a2/0x930 [ 714.701142][T15140] sysfs_rename_link_ns+0x16e/0x1b0 [ 714.706482][T15140] device_rename+0x110/0x210 [ 714.711111][T15140] __dev_change_net_namespace+0x1572/0x2060 [ 714.717142][T15140] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 714.723679][T15140] ? __lock_acquire+0x747/0x2de0 [ 714.728671][T15140] ? __mutex_trylock_common+0x15f/0x270 [ 714.734253][T15140] ? __pfx___mutex_trylock_common+0x10/0x10 [ 714.740183][T15140] ? rcu_is_watching+0x16/0xb0 [ 714.745117][T15140] ? trace_contention_end+0x3d/0x140 [ 714.750452][T15140] ? __mutex_lock+0x30b/0x1550 [ 714.755253][T15140] ? do_raw_spin_unlock+0xf5/0x200 [ 714.760397][T15140] ? _raw_spin_unlock+0x28/0x50 [ 714.765528][T15140] ? cfg802154_pernet_exit+0x18/0xc0 [ 714.770843][T15140] ? xa_erase+0xc6/0xf0 [ 714.775027][T15140] ? __pfx___mutex_lock+0x10/0x10 [ 714.780079][T15140] cfg802154_switch_netns+0xbd/0x410 [ 714.785398][T15140] cfg802154_pernet_exit+0x75/0xc0 [ 714.790536][T15140] ops_undo_list+0x43d/0x8d0 [ 714.795354][T15140] ? __pfx_ops_undo_list+0x10/0x10 [ 714.800516][T15140] ? idr_destroy+0x227/0x290 [ 714.805363][T15140] cleanup_net+0x572/0x810 [ 714.809830][T15140] ? __pfx_cleanup_net+0x10/0x10 [ 714.814809][T15140] ? rcu_is_watching+0x16/0xb0 [ 714.819609][T15140] ? process_scheduled_works+0x97a/0x1630 [ 714.825390][T15140] process_scheduled_works+0xc3d/0x1630 [ 714.831018][T15140] ? __pfx_process_scheduled_works+0x10/0x10 [ 714.837047][T15140] ? assign_work+0x3cf/0x5d0 [ 714.841682][T15140] worker_thread+0xa47/0xfb0 [ 714.846322][T15140] kthread+0x38b/0x480 [ 714.850428][T15140] ? __pfx_worker_thread+0x10/0x10 [ 714.855666][T15140] ? __pfx_kthread+0x10/0x10 [ 714.860292][T15140] ret_from_fork+0x514/0xb70 [ 714.864932][T15140] ? __pfx_ret_from_fork+0x10/0x10 [ 714.870195][T15140] ? __switch_to+0xc89/0x1420 [ 714.874949][T15140] ? __pfx_kthread+0x10/0x10 [ 714.879557][T15140] ret_from_fork_asm+0x1a/0x30 [ 714.884357][T15140] [ 714.968413][T15140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.978628][T15140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.095699][T22811] SET target dimension over the limit! [ 715.710442][T15140] IPVS: stop unused estimator thread 0... [ 716.045032][ T1740] block nbd1: Possible stuck request ffff88802725e000: control (read@0,1024B). Runtime 9 seconds [ 716.045075][ T1740] block nbd1: Possible stuck request ffff88802725e1c0: control (read@1024,1024B). Runtime 9 seconds [ 716.045103][ T1740] block nbd1: Possible stuck request ffff88802725e380: control (read@2048,1024B). Runtime 9 seconds [ 716.045131][ T1740] block nbd1: Possible stuck request ffff88802725e540: control (read@3072,1024B). Runtime 9 seconds [ 717.884960][T11685] wlan0: Trigger new scan to find an IBSS to join [ 718.605513][ T5627] Bluetooth: hci0: command 0x0406 tx timeout [ 718.795277][T11681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50