last executing test programs: 8.900152934s ago: executing program 2 (id=2721): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x4, @remote, 0x40}, 0x1c) writev(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108f000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@rand_addr=' \x01\x00', @remote, 0xa, 0x13}}) 8.724636487s ago: executing program 2 (id=2725): socket$inet(0x2, 0x3, 0x30) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x88}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x5}]}}}]}, 0x3c}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x93e000, 0x1000}, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2ff49051d920611, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0}, 0x94) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0xe) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bind$xdp(r4, 0x0, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, 0x0, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000140)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) 5.468085747s ago: executing program 2 (id=2736): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x48}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c01", @ANYRES16=r1, @ANYRES32, @ANYRESDEC, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e00000000000000000014000200697036677265746170300000000000003000018008000100", @ANYRES8, @ANYBLOB="080003000300000008000100", @ANYRES32=r0, @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.104911677s ago: executing program 2 (id=2741): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@val, @void, @eth={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x32) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r6) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000840}, 0x4000004) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r7, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r10, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r3, @ANYRES16=r4, @ANYRES32=r10, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x2004c891}, 0x200040c5) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8, 0xc}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80000000, 0x0, 0x20, 0x80, 0xffffffff}, 0x0, 0x0, 0x4, 0x6, 0x2e, 0x14, 0x0, 0x0, 0x4, 0x0, {0x0, 0x3, 0x4000008, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 3.317803122s ago: executing program 3 (id=2753): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) r5 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r7, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) unshare(0x20000400) r9 = socket$kcm(0xa, 0x2, 0x0) r10 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'fo\x00', 0x3, 0xa7e, 0x100070}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, 0x0, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r12 = accept4(r8, 0x0, 0x0, 0x800) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000540)) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 3.00320858s ago: executing program 3 (id=2755): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) 2.741432049s ago: executing program 3 (id=2758): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYBLOB="0687925f5fe7e11da15fc3c7d72db8b01845260cd0289b5318bafc0fbc06cbb3f14171aa46bc5cb2d4ab8164a4ae4feaf6023579d4e39f22800111b0b0b4902d68db0872198d7633763d50dfdccd", @ANYBLOB='/\x00\x00\x00\b\x00\x00\x00', @ANYRES32, @ANYBLOB="ee84edb3871daffa93f1a7", @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/\x00'/12, @ANYRES32=r1], 0x20) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xa, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x9, 0xa, 0x1, 0x6, 0x6}}, {0x4}}]}]}, 0x64}}, 0x4000010) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x3503}]}, 0x78}, 0x1, 0x7}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037000000000008000200", @ANYRES32=r7, @ANYBLOB="0600060003000000060004"], 0x50}, 0x4, 0x700000000000000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) 2.007896293s ago: executing program 0 (id=2761): unshare(0x8040480) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r2, r1, 0x26, 0x0, @val=@netfilter={0x0, 0x1, 0xea}}, 0x20) 1.913133355s ago: executing program 0 (id=2762): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x19, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018480000feffffff000000000000000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000184b0000060000000000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x6, 0xd3, &(0x7f00000004c0)=""/211, 0x41100, 0x44, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000600)=[{0x3, 0x5, 0xf}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r0, 0x0, 0xab, 0xd2, &(0x7f0000000700)="58c911a9a74b4e40d3d8f27fa795ac5e9152542bc2edb67ec887eea2b131828f11e195cd9f720184de6bc2c32dae457117a3d2cbe87ffd35223c4473731859470e27011628c2d9fdb15863347f21c78261fc0e4a8a7408e48a3bb8289bf7f2f309605a296d88096f7a58d6bf459c43c243f624aa4ca1f2a40f9fdfcb360d6dedecd72ac690476feac8688d499ba49da9dbf606bba4722e815a608312a703d62792931eaa5259bdf7349e27", &(0x7f00000007c0)=""/210, 0x5, 0x0, 0x74, 0x3a, &(0x7f00000008c0)="f6ccf98cf873b040270c0d6014393815da1b652cba39da8fa20bd682638e44923f69880e7e6ec9313bc170d71255d2ee38f24af21a578e27d772a717710bded542311edb29153af1a569a63bd9f50c4832cf606a0eb1a1874f499bbdc06e7cd899a2875376051fcc010b4161cc86f8c2751e984f", &(0x7f0000000940)="9c86e9e69dae5f18aa95bc41a94309ae2a73a798c8961c0f7ab8a6e40abb50c3d899de3046e7cbdfb780418d37587e9118908b454a0cb2c47dca", 0x0, 0x0, 0x7}, 0x50) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000200000a0900010073797a310000000034000000030a010100000000000000000200000108000b400000000208000a40000000040900010073797a310000000004000c0014000000110001"], 0x7c}}, 0x0) recvmmsg(r4, &(0x7f0000002240)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}, {{&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002140)=[{&(0x7f0000000d80)=""/110, 0x6e}, {&(0x7f0000000e00)=""/214, 0xd6}, {&(0x7f0000000f00)=""/131, 0x83}, {&(0x7f0000001fc0)=""/75, 0x4b}, {&(0x7f0000002040)=""/81, 0x51}, {&(0x7f00000020c0)=""/108, 0x6c}], 0x6, &(0x7f00000021c0)=""/81, 0x51}, 0x7}], 0x2, 0x100, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r6) 1.712067771s ago: executing program 3 (id=2764): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000030000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000100000000000000000037000004d232000000fc020000000000000000000000000000050000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000030000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd70000535004002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1.699831492s ago: executing program 0 (id=2766): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000f80)={0xa, 0x4, 0x0, @loopback, 0xa7a}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0xfe, 0x53, 0x3, 0x58, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x8, 0x40, 0xe3e1, 0xcff}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000200001801400018008000100ac1e000108e20100e0000001060003400004000008000740000000002000068008000200e000000208000100ac1e00010c000380060002004e240000240002800c00028005000100000000001400018008000100000000000800000200000000"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b60901000000002066000000646c6c25180100002020702500000000002020207b9af8ff000000001d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.585912959s ago: executing program 3 (id=2767): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000e00)={{0xffffffffffffffff, &(0x7f00000006c0)='@^\\,&\x00', 0x10800, &(0x7f0000000700)={@align=0xc870, {0xfff, 0xc, 0xbb, 0x5}}, 0xb5b5, &(0x7f0000000740)={@_ha_fsid}, &(0x7f0000000780)=0x31}, 0x7, &(0x7f0000000d00)=[{0x1, 0x5, &(0x7f00000007c0)='!,\x93-%.:6\\\x00', &(0x7f0000000800)="ef92616ae2dfc46d422e1a9debc66cec10fef68aac4af2c10798018fd3505ea453642a4e0e", 0x25, 0x2a}, {0x2, 0x5, &(0x7f0000000840)='syz2\x00', &(0x7f0000000880)="af742ae8147be610cbcab61d4dc083a7a4570523eff1957f8758a7a72994f6ed849048f6782017ec00c0a10af31836c4f26d0ff2c48332b3c1fc6947e5deeb1babd901fb661ccbcd6889efb81c53fb4e365f6caca4d9663270b36ffb9e3035da9fde2ce4ae3797700f54b3933c9f3955301b86edfed6e6055a62c247b43746b20e67e86437b2e036a77e5cbd66f25463b6ebcdd78af529fcfccaa25915f9f8531da96b25bb32e4dc0dbb52b90508429e", 0xb0, 0x20}, {0x2, 0x6, &(0x7f0000000940)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000980)="62c4edf4e6ae5bc1e3571c8bf7b46737a7efcf4271302b45fb2e30d0cb22c429f872a10344a54c5fba5162a6a50f036c58f7fe28a232fae3754515f69d1479a5e8db99514a8112d496574963aadc0b8413c33df0e91d9aab9ace7bdabb0d1edd9630ba06b161505b0556658df5741731b4b5285d2819aef99f8d5dc506f7bda63cfe640a4edc8dcf78a42abbc2a3148c83635a94f7590af3f1baad1751dfdb51d76939b94bb0b77692945729f508d4dc06d761b95757f8782888ee593094e0437ebd2c12443ae3422e1749e2477c581ca014b12df4be432884929c86", 0xdc, 0x28}, {0x1, 0x9, &(0x7f0000000a80)='8/\x11\x00', &(0x7f0000000ac0)="a5853c1ce03a99081b5b7ecf6ec0265b666eeaf6601bb7176cd02d966e298f3dbcf37ca5cf36f2236b0d9a63192cb16a87338711c4c4468acb7bfe60f356b013024e5005a9d7bcc255474c3026b177", 0x4f, 0x12}, {0x3, 0x791, &(0x7f0000000b40)='C\x00', &(0x7f0000000b80)="19b27242c17ec9538e565f5494ee854b7fd4efe24da927398e87d046c33d0e757a22a6bab7e574d51992ab", 0x2b, 0x10}, {0x3, 0x10, &(0x7f0000000bc0)='^*\x00', &(0x7f0000000c00)="abcb1c1c6317c7a18a0a147a53c1405e07740a050a95dbaa9b89fa7ace2a9c5e81139818a7e804c1797be49da72e3ec7b5c7772593d3c78811fa075ce39d9a3c349752fd7939a0e1411f37a2c7ea97c55ba8135d0d6da054921acfaf9ab83b3560148a12513bc18055", 0x69, 0x32}, {0x2, 0x2, &(0x7f0000000c80)='\x80\n', &(0x7f0000000cc0)="6f4ffd813ff406bfcd58f839261b945fdf05bf0052df709310b8fd77d83de4a240", 0x21, 0x10}]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000f80)={'tunl0\x00', &(0x7f0000000f00)={'erspan0\x00', 0x0, 0x8, 0x8000, 0xca, 0x1, {{0x16, 0x4, 0x1, 0x7, 0x58, 0x67, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp_prespec={0x44, 0x1c, 0xe4, 0x3, 0xe, [{@dev={0xac, 0x14, 0x14, 0x2b}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010101, 0x8}]}, @noop, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0xf6, [@remote, @empty, @rand_addr=0x64010100, @multicast2]}, @generic={0x94, 0x10, "20b4b4d8a73e51ec5e80a45e0a93"}]}}}}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x6, 0x4, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x1000000}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x44, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0xd7}, @nested={0x28, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x16, 0x0, 0x0, @uid}, @typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}}]}, @nested={0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r6, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000530000000400000002"], 0x48) socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r7, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r9}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff010000ffdba4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r7, &(0x7f0000000140), &(0x7f0000000000)=@tcp6=r8, 0x1}, 0x20) write$tun(r4, &(0x7f0000000540)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @local, @val={@val={0x88a8, 0x6, 0x1, 0x2}, {0x8100, 0x5, 0x1, 0x2}}, {@mpls_uc={0x8847, {[{0xc97}, {0x6, 0x0, 0x1}, {0x2}, {0x1, 0x0, 0x1}, {0x7}], @ipv4=@dccp={{0x10, 0x4, 0x1, 0x7, 0x133, 0x65, 0x0, 0x1, 0x21, 0x0, @empty, @multicast2, {[@ssrr={0x89, 0x2b, 0xe2, [@multicast2, @empty, @private=0xa010100, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x26}]}]}}, {{0x4e21, 0x4e23, 0x4, 0x1, 0xc, 0x0, 0x0, 0x5, 0x0, "d318d6", 0x6f, "d71498"}, "706f09d252b8dbda4db21bfb786f5d7d9a54dab992b64fcd33111b5844a408a7603d3f85a674c21ed8ecf5f9a15a4d69acba3777f3ecd67d395308f3b1673cd45b937ccc7cfd7614ed7059c9a1cabadfd14be684e153392698cf3c4e73cb531f3cd9f696fe82c54268160def44e2f81f4d8fad321e7d0723c8d2ed63c931bdf385d664714709e039fca32634662d0e9f4dfe539d1253f2275246c5209a4d4e3941e599744f9b634b7274beaf24c4a5c263daf566ecfd354577e61bdb11cc3a03fded820f244588eb0e67c655de2c17b7b6bb90269a4081bf0ee61c043c73ab848a82b3"}}}}}}}, 0x161) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000440)={0x0, 0x4f, &(0x7f0000000000)={&(0x7f0000000480)={0x4, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x0, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0x7}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x0, 0x17, 0x1, 0x0, 0x3}, @IPSET_ATTR_IP={0x0, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}}}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP_TO={0x0, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}}, @IPSET_ATTR_SIZE={0x0, 0x17, 0x1, 0x0, 0x5}, @IPSET_ATTR_MAXELEM={0x0, 0x13, 0x1, 0x0, 0x1ce}, @IPSET_ATTR_MAXELEM={0x0, 0x13, 0x1, 0x0, 0xfffffff7}, @IPSET_ATTR_MAXELEM={0x0, 0x13, 0x1, 0x0, 0xa2b8}, @IPSET_ATTR_NETMASK={0x0, 0x14, 0x1}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_FAMILY={0x0, 0x5, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x885}, 0x0) socket(0x11, 0xe, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180602000000000000000000fdffffff181500001df6f3e32689cfee1e9706cff2bdc444d95c35c74915096c0a670a4dbd73bfa0e4f3312fd46b13ead486a341f130280f4c210fdec5959a75490deebc62121e2d1d9ee4113e2612c3aded8087536f3588d28baee6a8141a00901158fe30d067d6676aa4d16cfbaf0bb27eafd9357efa24f91538c735d6f4e17cd078fc583cbcd299ff2255c8373cfa557e7f50d9e1079b0d418938bc5e9b129977ec1a0dd6d1b3d27ea2070229a2f508fb6562f4697f1e7c", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000630000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x8, 0x81, 0x59, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x80, 0x40, 0x8}}) 1.504633856s ago: executing program 0 (id=2768): socket(0x1, 0x2, 0x0) (async) r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r4, 0x40047452, 0x0) (async) ioctl$PPPIOCGL2TPSTATS(r4, 0x40047452, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000005200010000000000df1c000000000d794f373e918dd7580789bc7ae5c2a7dcf19e348528717c084c9044c6a448aa76482bf002d9ec7fe4fa958db2f48cfa1524ff71c7a2593b48bf23dfbb54ebd78e9774a40168444225bbeee18e5658ef1493a9c35495df749c5015f3acdf33549652f312909b40556f4dc566879459e2471b8622a0c1ed"], 0x14}}, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f0000000240)={0x7, 'veth0_macvtap\x00', {0xffffff80}, 0x4}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f0000000240)={0x7, 'veth0_macvtap\x00', {0xffffff80}, 0x4}) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r6, &(0x7f0000000080)=0x4, 0xfffffe7d) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r6, 0x24, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0]}, 0x40) sendmmsg$unix(r0, &(0x7f00000008c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000801}}], 0x2, 0x0) 961.080237ms ago: executing program 4 (id=2773): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in6=@mcast1, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x200000001, 0x0, 0x0, 0x80000000000, 0x0, 0x200, 0x1d}, {0x0, 0xd42, 0x0, 0x2dd}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@empty}, {{@in=@rand_addr=0x64010101, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x3c}, 0x0, @in6=@loopback, 0x0, 0x4, 0x0, 0x0, 0x40, 0xb, 0xfffffffe}]}]}, 0x1bc}}, 0x0) 855.435086ms ago: executing program 4 (id=2774): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x74}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, r1, 0x8093, 0x8268}, [@IFLA_LINKINFO={0xfdb4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x26008884}, 0x2404c017) 854.8128ms ago: executing program 1 (id=2775): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000940)={{r2, &(0x7f0000000040)='cbc(des3_ede)\x00', 0x14000, &(0x7f0000000540)={@_ha_fsid={[0x3, 0xf3]}, {0x3, 0x1b, 0xfff, 0x400}}, 0x1ff, &(0x7f0000000580), &(0x7f0000000600)=0x800}, {[0x8001, 0x31, 0xfffffffd, 0x6]}, 0x7, 0xf5, &(0x7f0000000840)=""/245}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) unshare(0x400) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0xffffffffffffffec, &(0x7f00000001c0)=[{&(0x7f0000000b40)=""/89, 0x51}, {&(0x7f0000000700)=""/96, 0x60}], 0x2}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="f40000000301030000000000000000000a000002140005800e0001006674702d3230303030000000780002802c00018014000300"], 0xf4}, 0x1, 0x0, 0x0, 0x8084}, 0x400) 846.25835ms ago: executing program 4 (id=2776): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket(0x2, 0x80805, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x2, 0x3, &(0x7f0000000340)=ANY=[@ANYRES16=r1], &(0x7f0000000580)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x16}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r2, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, 0xfffffffffffffffd, &(0x7f0000000240)) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7d, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x5, 0x400}, 0x90) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000b40)=@security={'security\x00', 0xe, 0x4, 0x4a0, 0xffffffff, 0x398, 0x1c0, 0x1c0, 0xffffffff, 0xffffffff, 0x450, 0x450, 0x450, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:auditd_initrc_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0x178, 0x1d8, 0x0, {}, [@common=@inet=@recent1={{0x108}, {0xfffffff7, 0xfffffffe, 0x2, 0x1, 'syz0\x00', 0x7, [0xff000000, 0xff000000, 0xff000000, 0xffffffff]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x7, 0x2, 0x3, 0x0, 0x2], 0x1, 0x5}, {0x4, [0x4, 0x2, 0x2, 0x1, 0x3, 0x2], 0x3, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x8001, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x2, 0x300) r4 = socket(0x2a, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002480)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) r7 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, r12, 0xda409aa40cc3acf1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044081}, 0x20008000) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r9, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4841) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0x20000014}) 830.976721ms ago: executing program 1 (id=2777): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) 786.553282ms ago: executing program 1 (id=2778): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000200000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 720.525739ms ago: executing program 1 (id=2779): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r1, 0x900, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x48001) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xd8, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_SE_APDU={0xaa, 0x19, "530159a2dabb741c9d4030c7c31ef4fa98973dd945815082ed4492971926d355473fe6597173f0d397ef1c8f3976839333038d76e703f3c9b2d1e795fb329f9428ab60fbf18113ff85c69ea0854318675c93141585411d8af9bd95c233a1dfd9d5bfefb56497d5541327c718a6c6581178929cd0b9f3de62d32e70746107cdba2d6da1202b3139af5d726203b1532103785b36987007225b4a68def2dfe48f3f0756ccdafcd0"}, @NFC_ATTR_SE_APDU={0x10, 0x19, "8af51bcc65d902520603f942"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x4000061) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f00000006c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x32, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x50, r8, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0xe2ef6149e0820828}, 0x24000014) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x64, 0x4, 0x6, 0x1800, 0x0, 0x0, {0xb, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000bc0)={'wlan1\x00', {0x2, 0x4e20, @broadcast}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r9, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x70, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000d40), r10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r10, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r8, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4e}]}, 0x1c}}, 0x20000010) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000ec0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r11, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r12, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x48, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000001180)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x24, r8, 0xa, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008080) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r10, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80300000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x64, r12, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:unconfined_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0xc081) 649.874864ms ago: executing program 3 (id=2780): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x28, 0x5, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0x8a}, {&(0x7f0000000180)="892950e2405ee8629d9384793116d1706a3e61f305119f971eb41147cb1f86883d6910e68ac3996551800b345a2c8b178eeeba0cde7b19a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8000000000005000000", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef432f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9e53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a39798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c62524b5a0100389fc2685eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbdeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa31a7e6e8af5d99a624fe663873369bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e353b433042dea75ae7c0f15401907f588c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4ac1bde02c0bcf4a0bd0b3c15137eb70c01ee1de2503b25f44cea27b4aa728908fc1fb266211874ae4f72513fd3ac937eb9ee41fe67aed8c74fe52a4d2cdda5a415495bb736a3e02f617b1bcc5861faf9cbf424fc5bc8e52c25f493c3b4d473930f52a92717c97451e3de1bc76ae25e5b28c81c7140f610ed6135245c940644917625f7c80935b06eea09b1786d8d2381eea28d63a", 0xd57}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @local}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f00000058c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)="14", 0x1}], 0x1, &(0x7f0000000940)=ANY=[], 0x120}}], 0x1, 0x4008c51) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x4, 0x1, 0x1ff, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, 0x10) 630.847167ms ago: executing program 4 (id=2781): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$alg(0x26, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'geneve0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) unshare(0x22020400) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800180004ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x300000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8001}, [@generic={0x91, 0x1, 0x1, 0x8f}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, 0x0, 0x20000800) 586.006992ms ago: executing program 2 (id=2782): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f00000001c0)=0x9, 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000b80)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000280)={r2, &(0x7f0000000000)='}}#%&(,)(-]!}-:\xed\x00', 0x401, &(0x7f0000000140)={@align=0xffffffffffffff7f, {0x7d6f, 0x101, 0x1000, 0x4}}, 0x8c0, &(0x7f0000000180), &(0x7f0000000240)=0xfffffff9}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r6, 0x1, 0x70bd2a, 0x1, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfff}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0x8005) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) 516.821933ms ago: executing program 0 (id=2783): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="0080cb635d5cfb3f00000000000024001280090001005d80050001000400"/44], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="0080cb635d5cfb3f00000000000024001280090001005d80050001000400"/44], 0x44}}, 0x0) (async) 415.662029ms ago: executing program 4 (id=2784): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f00000003c0)={{0x2, @multicast2, 0xdffd, 0x800002, 'nq\x00', 0x8, 0x3, 0x3}, {@private=0xa010300, 0xfffd, 0x3, 0x8, 0x8, 0x2000050}}, 0x44) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000021401002cbd7000fddbdf2509201d"], 0x1c}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) r2 = epoll_create1(0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1004}}, &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) setsockopt$sock_int(r6, 0x1, 0x5, &(0x7f0000000080)=0x9, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xf96}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) 341.158295ms ago: executing program 0 (id=2785): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4cb89c140000001000009006000000000000000300000a38000000020a0102000000004e000000010000020c00044000000000fe000001090001004d4692f773797a31000000000c000440000000000000000114000000110001000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x8805}, 0x810) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x24040050}, 0x4004080) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x9ab7, @any, 0x7a, 0x2}, 0xe) r3 = socket(0x28, 0x5, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x4000000) close(0x3) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000040)=0xfffffffd, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000440)=@gcm_128={{0x304}, "c973faf542fa7795", "ea0c9d433507760baf15cf24b6659d43", "42194784", "c68ab248243661e1"}, 0x28) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x2, 0x2, 0x20000000, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x40, 0x400000f, 0x8, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000000480)}, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4090, 0xffa}], 0x1}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x80000000, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000011c0)={0x0, 0x2c}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000300)=0x15, 0x1) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x21, @none}, 0xe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtaction={0x7c, 0x30, 0xcac229faa96ee7df, 0x70bd2c, 0x25dfdbff, {}, [{0x68, 0x1, [@m_ife={0x64, 0x3ffd, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x850, 0x10000000}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1000, 0x9, 0x0, 0x4, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x500}, 0x34000811) 192.04809ms ago: executing program 1 (id=2786): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r1, 0x913e0000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x3000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r5, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r6, 0x0) 191.586872ms ago: executing program 2 (id=2787): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x3, 0x40, 0x1, 0x0, 0xa}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x509000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = socket(0x10, 0x3, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r8, &(0x7f00000003c0)={0x2c, 0x18, r9}, 0x10) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xe, 0x11, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x81020000}, {0x65, 0x0, 0x0, 0xfaffff7f}}, [@map_fd={0x18, 0x3, 0x1, 0x0, r10}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x41814) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r12, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r12, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303, 0x38}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xd8, &(0x7f00000001c0)=""/216, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 127.347642ms ago: executing program 1 (id=2788): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x2000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @broadcast}) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$phonet(0x23, 0x2, 0x1) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, 0x0, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x5, 0x513, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x0, 0x3, 0x0, 0x0, "29e9a5a6009eb2e6"}}, 0x48}}, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001000)=[{&(0x7f00000001c0)={0x14, 0x2e, 0x100, 0x70bd2c, 0x25dfdbff, "", [@nested={0x4, 0x109}]}, 0x14}, {&(0x7f0000000400)={0x340, 0x31, 0x2, 0x70bd25, 0x25dfdbff, "", [@generic="d2e527f7b2974393cb1115e7aa5d44ec2ae5db8d200167a480af92eddf86635c4ed45000b295e6d5e9ab481c979906b4935ce2b5aae2efbdcecb5004ee3b0ae82416411b0e743adcafe3cb849100d851b3b6138ca673a57183df99be8be17b8e01806b58496e0329e35a4852e88b7f96a94b25114d5c9678105922cbdb0e3532ec5e0e769e9421587362b627abaa416e3cd5ff42744f745e82173fa25480f76dc9b2396394c117f9fb16e204eecbca212d90061a28d325378500bf2339ed6c751e5321d5d881c8f0231126f19da582b29050aa63458bb9d493277db6fcb4e7a9f7bdc7888aae7b395000476df8", @nested={0x7c, 0xca, 0x0, 0x1, [@typed={0x14, 0xfd, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="57ff4f978c0362d06a802116e00e5ac08027442e4ac64af4b647ade7f39f538c3b0bc2a26a8d60c4c350e8c77a5c1fd4bf80fcedbee25705d7efb4670b571d82240990722fb67f8d4c9398651dea0cbe9b6af87354a52a6853f9bb05f16ed32a706f7bde"]}, @generic="5daf5ff101db9bf33dd7fb14964e0605ebf65c1613af5c9859af9005d71f143f930b36373e6a92574e1eba95c79f3cab463ee120", @generic="c1216fab0b1f9807f469e7b84e62a3b42573dc9116505457a95506e9381f5be4634af460c38a35d4c322e190b96d029187aa8667015401637511be05d9bda2b706d31b43561a48d1df97716590484b3ef05fab9d0bfd70414815de524ceec05465613125717ba43b4927ab92b572c255b01b318196b7d91f7f692c746e4d56391d9c9fbda519eec61b3161dbdf597d86", @nested={0xfd, 0x82, 0x0, 0x1, [@typed={0x8, 0x13f, 0x0, 0x0, @pid}, @typed={0x4, 0x46}, @nested={0x4, 0xfc}, @typed={0x8, 0x2b, 0x0, 0x0, @uid}, @generic="09e6154177cb56cf8f5e035ce63efce5c6206429679605f6862690b46e176b26812897df1871a1e7a319a8bfc7326a499d9be59e7c499aeacc256250e8596a5ac49a9167548705ca79a9315538719284d5649ec153a7cdcab86a394d029ddaf7a1d2964f7444cd78712549ba0570fc10a897aa71ca4b13f6317bb25128e7e9cd99bb64d87dfe4d5c8d1cfee8b7ad330a874e1d74e740edfba7054e8cd68cb8723763d344c898a2fdbfc6bfe5711039f95feb3f8a9aca0db0b1361dc1210f3bc5fd802988a5", @typed={0x8, 0x119, 0x0, 0x0, @u32=0x80000000}, @typed={0x4, 0xde}, @nested={0x4, 0x7f}, @typed={0x8, 0x12d, 0x0, 0x0, @fd}, @nested={0x4, 0x119}]}]}, 0x340}, {&(0x7f0000000740)={0x204, 0x1c, 0x200, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x8, 0x151, 0x0, 0x0, @pid}, @generic="2bc94aa4eda5f664ce94f247e21858ec69a38e74efc1232bd3f76317af2465dba499cddc794fa8dc1ee6635663a2cc9fe89c3be0900aff19ee0f821ae56005989c8d031cbe596067463509dec6a086ac2e3b66532fcd0e8921ba5b56e50be0e2767db6eb161b0f9d65987c6aa10d0cb42075235a19", @typed={0x8, 0x64, 0x0, 0x0, @fd}, @generic="00b33ed59845fcc03c8482aec7d7cc2a602957e7e23a7c97f79b9c3d8aadc864b96658b930ad68fd24ea7a5f64053a06d42e6dddcf8176d6a69ec23fbb17e26d03d780e7308683fdd63d447632ed44ab3b405f8fc5a1aa37fc69a6990b44eab18eb0e396756f10d3295e6c43182e6fe4dc16a2763eba6712c1a99da4031d68ccf2a34e7ce082b1ac26b4553400ba7ae364607a16b1dc6b4a3913bfb97dc1e5b254c3a25f7d1f750706f5cdb7dc22484c03f142e1ef581bfdc16e6559294a4c4f00fd40e204c0d1051cd073d04bb4e78a", @typed={0x14, 0x114, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x44, 0x0, 0x0, @u32=0x400}, @generic="36387750cd182ccb265c7f8c3c7936d53a46ca6ec2aad0c81a7322edbddb37d56c27dec483ff9c04669207ad8775acd27eee186f910ea426cf773a0aaebee4c313442890d5cee0ad2c110356a319b104ee7da1194045e5985185c8991d080ac8bfb712ef9f19227e94", @typed={0x12, 0x1e, 0x0, 0x0, @str='./cgroup/syz0\x00'}, @nested={0x4, 0x132}, @generic]}, 0x204}, {&(0x7f0000000c80)={0x198, 0x16, 0x4, 0x70bd29, 0x25dfdbfe, "", [@nested={0x132, 0x18, 0x0, 0x1, [@generic="f3e5169c0cae8af2bf66f03433a090ce42d003b78acefbe50ec5903cea86d76f463a4f652150ddb14af23bc77d903df09cfe", @nested={0x4, 0xa5}, @generic, @typed={0x4, 0x94}, @generic="c020291ba7ae5933b7709be1cf5f7c11a728c98cb170f954dd2bfbc0aca77f9d0bdff2585023ed90615cf3e2020729663fb5d186fe321d5e966d386011b9684798c1fbee70821e15e5ce8583b01e2af3de420edadfd13add37b30ae596cfb1e5e998799605cad4693dcd4714abb2c391ba177509dcb0d0ff3e7524affdad394bd92067ba2603658781d818de5e7ea93acf97589e632f142ebbd64fc4d9170ebd01c85d32372ac172b55aa6e5ca4df8919ca00c340f6c7e6057c08870bdd23c48fe7ed44e4698ff23030bd3134f03c5d705425e4c6a9a6f14db59b39093037187dc721df5de151998460acdb627713962f15403db"]}, @nested={0x4, 0xe7}, @generic="cb9f6a4056e5c6ac0d234a8cf3ac8749eb714af4e0851ab2782cd5ae555f528afbc347785bf9fbc5de6081936f4c93be7998efd999", @generic="b3414f7d0a4e132c2293a2a252c65f527861063bb5759fdf098c15"]}, 0x198}, {&(0x7f0000000f40)={0x88, 0x27, 0x400, 0x70bd28, 0x25dfdbff, "", [@typed={0x75, 0x139, 0x0, 0x0, @binary="82bbec5a3f2d4ef7a20cc9708fab33f64e9e88c68361a4b8e87581d0b5b15b6314181f1110037400f6c7c130316c015ae375e519c89f4547f9fcad4620b8b469ee3bd87f84da6dcb3a0882a20696e33293dc157ba221437668cd02b780fa5b418f1abfddbaca2413e925e3b10b5d27a49b"}]}, 0x88}], 0x5, &(0x7f00000014c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r1]}}, @rights={{0x18, 0x1, 0x1, [r2, r3]}}, @rights={{0x30, 0x1, 0x1, [r4, r5, r6, r7, r8, r9, r10, 0xffffffffffffffff]}}], 0x130, 0x8000}, 0x4000080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup(r11, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f0000000c40), 0x12) 0s ago: executing program 4 (id=2789): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0), 0x4) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x3, 0x2}, 0x10) recvmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/26, 0x1a}, 0x40) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) kernel console output (not intermixed with test programs): eed/duplex [ 201.934104][T10003] 8021q: adding VLAN 0 to HW filter on device bond5 [ 201.969997][T10003] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 202.001711][T10003] bond5: (slave ip6gre2): Error -95 calling set_mac_address [ 202.056427][ T1123] bond1: (slave erspan0): failed to get link speed/duplex [ 202.427334][ T1558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.521061][T10034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.536817][T10034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.545161][T10034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.553865][T10034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.562379][T10034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.000850][T10028] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 204.205408][T10041] __nla_validate_parse: 14 callbacks suppressed [ 204.205426][T10041] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1151'. [ 204.353092][T10050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1154'. [ 204.376453][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1155'. [ 205.067981][T10069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1158'. [ 205.348765][T10079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1161'. [ 205.369603][ T809] IPVS: starting estimator thread 0... [ 205.466738][T10080] IPVS: using max 35 ests per chain, 84000 per kthread [ 205.534609][T10088] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1164'. [ 205.630480][T10094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1165'. [ 205.680044][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1168'. [ 205.865795][T10115] veth0: entered promiscuous mode [ 205.889474][T10109] veth0: left promiscuous mode [ 205.894978][T10113] syz.2.1169 (10113) used obsolete PPPIOCDETACH ioctl [ 205.913171][T10113] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 205.934090][T10113] netlink: 'syz.2.1169': attribute type 1 has an invalid length. [ 205.962122][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1169'. [ 205.998482][T10125] net_ratelimit: 1846 callbacks suppressed [ 205.998498][T10125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.014337][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.031241][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.047186][ T60] bond1: (slave erspan0): failed to get link speed/duplex [ 206.156920][ T60] bond1: (slave erspan0): failed to get link speed/duplex [ 206.319474][T10129] netlink: 'syz.3.1174': attribute type 16 has an invalid length. [ 206.329854][T10129] netlink: 'syz.3.1174': attribute type 17 has an invalid length. [ 206.336520][ T60] bond1: (slave erspan0): failed to get link speed/duplex [ 206.451940][T10129] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 206.486454][ T1123] bond1: (slave erspan0): failed to get link speed/duplex [ 206.608737][ T1123] bond1: (slave erspan0): failed to get link speed/duplex [ 206.747710][ T1123] bond1: (slave erspan0): failed to get link speed/duplex [ 207.094716][T10158] veth0: entered promiscuous mode [ 207.101512][T10157] veth0: left promiscuous mode [ 207.114416][T10159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1182'. [ 207.785331][T10202] netlink: 'syz.4.1196': attribute type 2 has an invalid length. [ 208.318141][ T5792] IPVS: starting estimator thread 0... [ 208.419501][T10230] IPVS: using max 31 ests per chain, 74400 per kthread [ 209.524030][T10301] FAULT_INJECTION: forcing a failure. [ 209.524030][T10301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.546518][T10301] CPU: 1 UID: 0 PID: 10301 Comm: syz.4.1227 Not tainted syzkaller #0 PREEMPT(full) [ 209.546540][T10301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 209.546548][T10301] Call Trace: [ 209.546555][T10301] [ 209.546561][T10301] dump_stack_lvl+0xe8/0x150 [ 209.546585][T10301] should_fail_ex+0x412/0x560 [ 209.546608][T10301] _copy_from_iter+0x1d3/0x1670 [ 209.546631][T10301] ? rcu_is_watching+0x15/0xb0 [ 209.546655][T10301] ? __pfx__copy_from_iter+0x10/0x10 [ 209.546680][T10301] ? netlink_sendmsg+0x650/0xb40 [ 209.546695][T10301] ? skb_put+0x11b/0x210 [ 209.546717][T10301] netlink_sendmsg+0x6c0/0xb40 [ 209.546736][T10301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.546754][T10301] ? aa_sock_msg_perm+0xf1/0x1b0 [ 209.546776][T10301] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 209.546798][T10301] ____sys_sendmsg+0x972/0x9f0 [ 209.546814][T10301] ? __might_fault+0xaf/0x130 [ 209.546839][T10301] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.546863][T10301] ? import_iovec+0x73/0xa0 [ 209.546887][T10301] ___sys_sendmsg+0x2a5/0x360 [ 209.546902][T10301] ? __lock_acquire+0x6b5/0x2cf0 [ 209.546923][T10301] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.546970][T10301] ? __fget_files+0x2a/0x420 [ 209.546987][T10301] ? __fget_files+0x3a0/0x420 [ 209.547014][T10301] __x64_sys_sendmsg+0x1bd/0x2a0 [ 209.547032][T10301] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 209.547056][T10301] ? __pfx_ksys_write+0x10/0x10 [ 209.547085][T10301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.547101][T10301] do_syscall_64+0x15f/0xf80 [ 209.547122][T10301] ? trace_irq_disable+0x3b/0x140 [ 209.547144][T10301] ? clear_bhb_loop+0x40/0x90 [ 209.547162][T10301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.547176][T10301] RIP: 0033:0x7f6b4dd9ce59 [ 209.547190][T10301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.547202][T10301] RSP: 002b:00007f6b4ec44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.547227][T10301] RAX: ffffffffffffffda RBX: 00007f6b4e015fa0 RCX: 00007f6b4dd9ce59 [ 209.547238][T10301] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 209.547246][T10301] RBP: 00007f6b4ec44090 R08: 0000000000000000 R09: 0000000000000000 [ 209.547254][T10301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.547262][T10301] R13: 00007f6b4e016038 R14: 00007f6b4e015fa0 R15: 00007ffeabcdb478 [ 209.547288][T10301] [ 209.971415][T10313] __nla_validate_parse: 8 callbacks suppressed [ 209.971431][T10313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1232'. [ 210.060247][T10317] netlink: 'syz.2.1233': attribute type 1 has an invalid length. [ 210.068284][T10317] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1233'. [ 210.616966][T10333] FAULT_INJECTION: forcing a failure. [ 210.616966][T10333] name failslab, interval 1, probability 0, space 0, times 0 [ 210.637927][T10333] CPU: 0 UID: 0 PID: 10333 Comm: syz.0.1242 Not tainted syzkaller #0 PREEMPT(full) [ 210.637950][T10333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 210.637959][T10333] Call Trace: [ 210.637965][T10333] [ 210.637972][T10333] dump_stack_lvl+0xe8/0x150 [ 210.637996][T10333] should_fail_ex+0x412/0x560 [ 210.638029][T10333] should_failslab+0xa8/0x100 [ 210.638052][T10333] ? skb_clone+0x212/0x3a0 [ 210.638068][T10333] kmem_cache_alloc_noprof+0x87/0x650 [ 210.638088][T10333] ? __netlink_lookup+0xc6/0x8b0 [ 210.638110][T10333] skb_clone+0x212/0x3a0 [ 210.638129][T10333] __netlink_deliver_tap+0x404/0x850 [ 210.638157][T10333] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.638174][T10333] netlink_deliver_tap+0x19c/0x1b0 [ 210.638190][T10333] netlink_unicast+0x730/0x8e0 [ 210.638223][T10333] netlink_sendmsg+0x813/0xb40 [ 210.638248][T10333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.638267][T10333] ? aa_sock_msg_perm+0xf1/0x1b0 [ 210.638289][T10333] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 210.638313][T10333] ____sys_sendmsg+0x972/0x9f0 [ 210.638329][T10333] ? __might_fault+0xaf/0x130 [ 210.638354][T10333] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.638379][T10333] ? import_iovec+0x73/0xa0 [ 210.638404][T10333] ___sys_sendmsg+0x2a5/0x360 [ 210.638419][T10333] ? __lock_acquire+0x6b5/0x2cf0 [ 210.638438][T10333] ? __pfx____sys_sendmsg+0x10/0x10 [ 210.638483][T10333] ? __fget_files+0x2a/0x420 [ 210.638501][T10333] ? __fget_files+0x3a0/0x420 [ 210.638527][T10333] __x64_sys_sendmsg+0x1bd/0x2a0 [ 210.638546][T10333] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 210.638572][T10333] ? __pfx_ksys_write+0x10/0x10 [ 210.638601][T10333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.638618][T10333] do_syscall_64+0x15f/0xf80 [ 210.638639][T10333] ? trace_irq_disable+0x3b/0x140 [ 210.638661][T10333] ? clear_bhb_loop+0x40/0x90 [ 210.638680][T10333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.638695][T10333] RIP: 0033:0x7f76c919ce59 [ 210.638710][T10333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.638723][T10333] RSP: 002b:00007f76ca038028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.638740][T10333] RAX: ffffffffffffffda RBX: 00007f76c9415fa0 RCX: 00007f76c919ce59 [ 210.638751][T10333] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 210.638760][T10333] RBP: 00007f76ca038090 R08: 0000000000000000 R09: 0000000000000000 [ 210.638770][T10333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.638779][T10333] R13: 00007f76c9416038 R14: 00007f76c9415fa0 R15: 00007fffc65fa1d8 [ 210.638806][T10333] [ 211.094296][T10359] unsupported nlmsg_type 40 [ 211.226555][ T1558] net_ratelimit: 36 callbacks suppressed [ 211.226572][ T1558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.242902][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.565079][T10377] macsec1: entered promiscuous mode [ 211.576975][ T1123] bond1: (slave erspan0): failed to get link speed/duplex [ 211.686681][ T36] bond1: (slave erspan0): failed to get link speed/duplex [ 211.705188][T10392] netlink: 'syz.1.1258': attribute type 1 has an invalid length. [ 211.803805][T10392] bond5: entered promiscuous mode [ 211.832900][T10392] bond5: entered allmulticast mode [ 211.846439][T10392] 8021q: adding VLAN 0 to HW filter on device bond5 [ 211.882039][T10397] erspan1: entered allmulticast mode [ 211.916648][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1260'. [ 211.932816][T10392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.942091][T10392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.945753][ T36] bond1: (slave erspan0): failed to get link speed/duplex [ 211.950690][T10392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.007398][T10392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.017141][T10392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.081644][ T30] audit: type=1800 audit(1778943251.347:6): pid=10411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1264" name="memory.events" dev="tmpfs" ino=1286 res=0 errno=0 [ 212.278021][T10420] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1267'. [ 212.530424][T10428] block nbd1: Unsupported socket: should be TCP or UNIX. [ 212.614338][T10428] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1268'. [ 212.652028][T10428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1268'. [ 212.960173][T10438] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1272'. [ 213.019914][T10438] xt_CT: You must specify a L4 protocol and not use inversions on it [ 213.125342][T10447] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 213.474049][T10462] xfrm0: Caught tx_queue_len zero misconfig [ 213.486176][T10466] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1277'. [ 213.510562][T10466] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1277'. [ 213.520817][T10473] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1279'. [ 213.683147][T10466] bridge0: port 1(vlan2) entered disabled state [ 213.896862][T10476] syzkaller0: entered promiscuous mode [ 213.931475][T10476] syzkaller0: entered allmulticast mode [ 213.958911][ T57] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.977269][ T57] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.988953][ T57] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.009242][ T57] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.321397][T10511] xt_CT: You must specify a L4 protocol and not use inversions on it [ 214.827789][T10548] xt_recent: hitcount (33554435) is larger than allowed maximum (65535) [ 214.853180][T10552] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 214.883033][T10552] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 214.978002][T10561] __nla_validate_parse: 198 callbacks suppressed [ 214.978021][T10561] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1301'. [ 215.098294][T10566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1302'. [ 215.104662][T10564] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1303'. [ 215.147573][ T5641] Bluetooth: hci3: command 0x0406 tx timeout [ 215.165833][T10564] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.409181][T10580] bridge0: port 4(syz_tun) entered blocking state [ 215.437214][T10580] bridge0: port 4(syz_tun) entered disabled state [ 215.468728][T10580] syz_tun: entered allmulticast mode [ 215.502556][T10580] syz_tun: entered promiscuous mode [ 215.684422][T10602] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1312'. [ 215.688448][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1310'. [ 216.169294][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1319'. [ 216.408035][ T7588] net_ratelimit: 38 callbacks suppressed [ 216.408052][ T7588] bond1: (slave erspan0): failed to get link speed/duplex [ 216.430497][T10496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.567472][ T138] bond1: (slave erspan0): failed to get link speed/duplex [ 216.691151][T10656] can: request_module (can-proto-0) failed. [ 216.753534][T10664] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 216.760850][T10667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1329'. [ 216.763636][T10664] pim6reg0: linktype set to 780 [ 216.796371][ T12] bond1: (slave erspan0): failed to get link speed/duplex [ 216.888493][T10673] bridge2: entered promiscuous mode [ 216.917409][ T7588] bond1: (slave erspan0): failed to get link speed/duplex [ 217.026432][T10444] bond1: (slave erspan0): failed to get link speed/duplex [ 217.136381][T10444] bond1: (slave erspan0): failed to get link speed/duplex [ 217.267839][ T3276] bond1: (slave erspan0): failed to get link speed/duplex [ 217.308811][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.376582][ T7588] bond1: (slave erspan0): failed to get link speed/duplex [ 217.404023][T10680] : renamed from wg2 (while UP) [ 217.414471][T10680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1332'. [ 217.438204][T10680] bond8 (unregistering): Released all slaves [ 217.589900][T10687] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1333'. [ 217.704919][T10693] bond0: (slave team0): Releasing backup interface [ 217.713107][T10693] team0 (unregistering): left allmulticast mode [ 217.721127][T10693] team_slave_0: left allmulticast mode [ 217.727117][T10693] team_slave_1: left allmulticast mode [ 217.734254][T10693] team0 (unregistering): Failed to send options change via netlink (err -105) [ 217.743485][T10693] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 217.754702][T10693] team0 (unregistering): Port device team_slave_0 removed [ 217.762884][T10693] team0 (unregistering): Failed to send options change via netlink (err -105) [ 217.772120][T10693] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 217.783360][T10693] team0 (unregistering): Port device team_slave_1 removed [ 217.808737][T10695] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1336'. [ 219.511388][T10655] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 219.753006][T10711] netlink: 'syz.4.1341': attribute type 12 has an invalid length. [ 219.763899][T10714] netlink: 'syz.1.1342': attribute type 1 has an invalid length. [ 219.820416][T10718] netlink: 'syz.3.1343': attribute type 9 has an invalid length. [ 219.882336][T10714] 8021q: adding VLAN 0 to HW filter on device bond6 [ 219.895700][T10723] raw_sendmsg: syz.4.1341 forgot to set AF_INET. Fix it! [ 219.904053][T10719] netlink: 'syz.1.1342': attribute type 6 has an invalid length. [ 219.917021][T10722] lo: Caught tx_queue_len zero misconfig [ 219.934101][T10714] netlink: 'syz.1.1342': attribute type 8 has an invalid length. [ 219.962660][T10711] macsec0: entered promiscuous mode [ 219.990441][T10711] veth1_macvtap: left promiscuous mode [ 220.024004][T10711] macsec0 (unregistering): left promiscuous mode [ 220.239550][T10741] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 220.390555][T10749] __nla_validate_parse: 2 callbacks suppressed [ 220.390570][T10749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 220.393534][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 220.417205][T10752] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1355'. [ 220.431815][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'. [ 220.441053][T10752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1355'. [ 220.514477][T10756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1356'. [ 220.538855][T10756] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 220.561539][T10756] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 220.564490][T10752] netlink: 'syz.1.1355': attribute type 49 has an invalid length. [ 220.584680][T10756] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 220.646892][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1357'. [ 220.701931][T10760] netlink: 'syz.4.1357': attribute type 1 has an invalid length. [ 220.767681][T10752] ip6gretap0: entered promiscuous mode [ 220.784477][T10752] ip6gretap0: entered allmulticast mode [ 220.891644][T10760] netlink: 'syz.4.1357': attribute type 10 has an invalid length. [ 220.909026][T10760] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1357'. [ 220.980060][T10777] dummy0: left allmulticast mode [ 220.999230][T10777] dummy0: left promiscuous mode [ 221.009856][T10777] bridge0: port 5(dummy0) entered disabled state [ 221.044066][T10760] dummy0: entered promiscuous mode [ 221.643579][ T24] net_ratelimit: 36 callbacks suppressed [ 221.643596][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.772123][T10826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1371'. [ 221.826424][ T57] bond1: (slave erspan0): failed to get link speed/duplex [ 221.986997][ T12] bond1: (slave erspan0): failed to get link speed/duplex [ 222.045441][T10840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1375'. [ 222.416532][ T7588] bond1: (slave erspan0): failed to get link speed/duplex [ 222.609667][T10862] FAULT_INJECTION: forcing a failure. [ 222.609667][T10862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.626652][ T12] bond1: (slave erspan0): failed to get link speed/duplex [ 222.668261][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.694642][T10862] CPU: 0 UID: 0 PID: 10862 Comm: syz.3.1378 Not tainted syzkaller #0 PREEMPT(full) [ 222.694664][T10862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.694671][T10862] Call Trace: [ 222.694678][T10862] [ 222.694685][T10862] dump_stack_lvl+0xe8/0x150 [ 222.694708][T10862] should_fail_ex+0x412/0x560 [ 222.694735][T10862] _copy_from_user+0x2d/0xb0 [ 222.694756][T10862] kstrtouint_from_user+0xd6/0x180 [ 222.694779][T10862] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 222.694811][T10862] proc_fail_nth_write+0x8e/0x210 [ 222.694831][T10862] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 222.694854][T10862] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 222.694876][T10862] vfs_write+0x29a/0xb90 [ 222.694914][T10862] ? __pfx_vfs_write+0x10/0x10 [ 222.694935][T10862] ? __fget_files+0x2a/0x420 [ 222.694956][T10862] ? __fget_files+0x3a0/0x420 [ 222.694973][T10862] ? __fget_files+0x2a/0x420 [ 222.694999][T10862] ksys_write+0x150/0x270 [ 222.695022][T10862] ? __pfx_ksys_write+0x10/0x10 [ 222.695050][T10862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.695068][T10862] do_syscall_64+0x15f/0xf80 [ 222.695089][T10862] ? trace_irq_disable+0x3b/0x140 [ 222.695110][T10862] ? clear_bhb_loop+0x40/0x90 [ 222.695130][T10862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.695143][T10862] RIP: 0033:0x7eff79f5d68e [ 222.695159][T10862] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 222.695172][T10862] RSP: 002b:00007eff7addafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 222.695188][T10862] RAX: ffffffffffffffda RBX: 00007eff7addb6c0 RCX: 00007eff79f5d68e [ 222.695199][T10862] RDX: 0000000000000001 RSI: 00007eff7addb0a0 RDI: 0000000000000005 [ 222.695207][T10862] RBP: 00007eff7addb090 R08: 0000000000000000 R09: 0000000000000000 [ 222.695217][T10862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.695226][T10862] R13: 00007eff7a216128 R14: 00007eff7a216090 R15: 00007fffbd727d78 [ 222.695254][T10862] [ 223.166573][ T57] bond1: (slave erspan0): failed to get link speed/duplex [ 223.276424][ T57] bond1: (slave erspan0): failed to get link speed/duplex [ 223.304959][T10891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.350514][T10891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.581385][T10913] netlink: 'syz.4.1391': attribute type 25 has an invalid length. [ 223.633058][T10913] netlink: 'syz.4.1391': attribute type 3 has an invalid length. [ 224.297568][T10949] batadv_slave_1: entered promiscuous mode [ 224.354723][T10948] batadv_slave_1: left promiscuous mode [ 225.168613][T11013] validate_nla: 1 callbacks suppressed [ 225.168631][T11013] netlink: 'syz.1.1419': attribute type 3 has an invalid length. [ 225.554794][T11027] __nla_validate_parse: 9 callbacks suppressed [ 225.554815][T11027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1426'. [ 225.590148][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1426'. [ 225.629993][T11004] infiniband syz0: set active [ 225.641724][T11004] infiniband syz0: added bridge_slave_1 [ 225.672859][T11027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1426'. [ 225.695738][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1426'. [ 225.702070][T11004] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 225.725982][T11004] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 225.743897][T11004] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 225.795219][T11004] RDS/IB: syz0: added [ 225.807711][T11004] smc: adding ib device syz0 with port count 1 [ 225.815887][T11004] smc: ib device syz0 port 1 has no pnetid [ 225.927097][T11038] netlink: 'syz.2.1429': attribute type 11 has an invalid length. [ 226.091459][T11043] netlink: 'syz.3.1430': attribute type 10 has an invalid length. [ 226.124003][T11043] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1430'. [ 226.254080][T11052] tunl0: Caught tx_queue_len zero misconfig [ 226.464123][T11063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1434'. [ 226.660451][T11072] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1437'. [ 226.695060][T11072] net_ratelimit: 70 callbacks suppressed [ 226.695078][T11072] openvswitch: netlink: Message has 3 unknown bytes. [ 226.707810][ T138] bond1: (slave erspan0): failed to get link speed/duplex [ 226.770982][T11072] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.816476][ T36] bond1: (slave erspan0): failed to get link speed/duplex [ 226.831307][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.937170][ T3276] bond1: (slave erspan0): failed to get link speed/duplex [ 226.983917][T11082] netlink: 'syz.1.1440': attribute type 3 has an invalid length. [ 227.037338][T11082] x_tables: duplicate underflow at hook 1 [ 227.056439][ T3276] bond1: (slave erspan0): failed to get link speed/duplex [ 227.178836][ T7588] bond1: (slave erspan0): failed to get link speed/duplex [ 227.298195][ T7588] bond1: (slave erspan0): failed to get link speed/duplex [ 227.320685][T11093] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 227.426356][ T57] bond1: (slave erspan0): failed to get link speed/duplex [ 227.520135][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1446'. [ 227.568015][T11109] netlink: 'syz.1.1447': attribute type 1 has an invalid length. [ 227.631915][T11106] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1446'. [ 227.654461][T11109] 8021q: adding VLAN 0 to HW filter on device bond7 [ 227.752149][T11109] bond7: (slave ip6gretap0): making interface the new active one [ 227.764907][T11109] bond7: (slave ip6gretap0): Enslaving as an active interface with an up link [ 227.995121][T11121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1450'. [ 228.538549][T11141] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 228.743531][T11150] netlink: 'syz.3.1459': attribute type 3 has an invalid length. [ 228.753562][T11150] netlink: 'syz.3.1459': attribute type 2 has an invalid length. [ 228.773791][T11150] netlink: 'syz.3.1459': attribute type 2 has an invalid length. [ 228.986711][ T5641] Bluetooth: hci4: command 0x0405 tx timeout [ 230.090674][ T5761] IPVS: starting estimator thread 0... [ 230.189227][T11223] IPVS: using max 36 ests per chain, 86400 per kthread [ 230.682551][T11251] can: request_module (can-proto-3) failed. [ 230.692894][T11253] __nla_validate_parse: 12 callbacks suppressed [ 230.692911][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1481'. [ 230.735410][T11253] netlink: 'syz.2.1481': attribute type 16 has an invalid length. [ 230.744198][T11253] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1481'. [ 230.792344][T11253] ip6tnl1: entered allmulticast mode [ 230.942957][T11264] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1485'. [ 231.182991][T11268] xt_hashlimit: size too large, truncated to 1048576 [ 231.289423][T11273] netlink: 'syz.1.1488': attribute type 3 has an invalid length. [ 231.317510][T11273] netlink: 'syz.1.1488': attribute type 3 has an invalid length. [ 231.336804][T11273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1488'. [ 231.777617][ T3276] net_ratelimit: 50 callbacks suppressed [ 231.777635][ T3276] bond1: (slave erspan0): failed to get link speed/duplex [ 231.955024][ T3276] bond1: (slave erspan0): failed to get link speed/duplex [ 232.029966][T10496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.126382][ T36] bond1: (slave erspan0): failed to get link speed/duplex [ 232.203395][T11316] TCP: TCP_TX_DELAY enabled [ 232.236399][T10444] bond1: (slave erspan0): failed to get link speed/duplex [ 232.366464][ T3330] bond1: (slave erspan0): failed to get link speed/duplex [ 232.476440][ T3330] bond1: (slave erspan0): failed to get link speed/duplex [ 232.507908][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.596503][ T36] bond1: (slave erspan0): failed to get link speed/duplex [ 232.716603][T10444] bond1: (slave erspan0): failed to get link speed/duplex [ 232.793474][T11354] netlink: 'syz.4.1506': attribute type 13 has an invalid length. [ 232.825076][T11353] netlink: 'syz.4.1506': attribute type 13 has an invalid length. [ 233.043569][T11365] netlink: 'syz.0.1510': attribute type 1 has an invalid length. [ 233.289258][T11377] geneve2: entered promiscuous mode [ 233.422231][T11390] netlink: 'syz.0.1518': attribute type 1 has an invalid length. [ 233.620598][T11390] bond5: entered promiscuous mode [ 233.647876][T11390] bond5: entered allmulticast mode [ 233.668262][T11390] 8021q: adding VLAN 0 to HW filter on device bond5 [ 233.694559][T11396] kthread_run failed with err -4 [ 233.971987][T11398] netlink: 'syz.1.1519': attribute type 2 has an invalid length. [ 233.988614][T11398] netlink: 'syz.1.1519': attribute type 2 has an invalid length. [ 234.141729][T11440] netlink: 'syz.4.1531': attribute type 1 has an invalid length. [ 234.155958][T11440] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1531'. [ 234.248367][T11436] IPVS: persistence engine module ip_vs_pe_' not found [ 234.279649][T11438] IPVS: persistence engine module ip_vs_pe_' not found [ 234.441481][T11450] syzkaller0: entered promiscuous mode [ 234.467597][T11450] syzkaller0: entered allmulticast mode [ 234.863920][T11462] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1536'. [ 234.895077][T11463] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1536'. [ 234.986399][ T5632] Bluetooth: hci4: command 0x0405 tx timeout [ 235.235891][T11477] Bluetooth: MGMT ver 1.23 [ 236.011983][T11509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1546'. [ 236.661770][T11520] syzkaller0: entered promiscuous mode [ 236.682429][T11520] syzkaller0: entered allmulticast mode [ 236.848280][ T36] net_ratelimit: 33 callbacks suppressed [ 236.848298][ T36] bond1: (slave erspan0): failed to get link speed/duplex [ 236.865122][T11538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1555'. [ 236.888107][T11540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1553'. [ 237.028763][ T138] bond1: (slave erspan0): failed to get link speed/duplex [ 237.092563][ T5641] block nbd1: Receive control failed (result -1) [ 237.227419][T10496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.270636][ T57] bond1: (slave erspan0): failed to get link speed/duplex [ 237.307428][T11566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1558'. [ 237.417405][ T36] bond1: (slave erspan0): failed to get link speed/duplex [ 237.546644][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.549424][ T36] bond1: (slave erspan0): failed to get link speed/duplex [ 237.678193][ T7588] bond1: (slave erspan0): failed to get link speed/duplex [ 237.836475][ T7588] bond1: (slave erspan0): failed to get link speed/duplex [ 237.922187][T11595] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1562'. [ 237.971003][T11598] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1563'. [ 237.988241][ T138] bond1: (slave erspan0): failed to get link speed/duplex [ 238.012044][T11601] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1562'. [ 238.047137][T11598] xt_CT: You must specify a L4 protocol and not use inversions on it [ 238.295758][T11618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1565'. [ 238.640412][T11631] netlink: 'syz.4.1569': attribute type 11 has an invalid length. [ 238.649383][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1570'. [ 238.720550][T11636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1571'. [ 238.748409][T11636] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.757921][T11636] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.034997][T11650] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.251950][T11661] netlink: 'syz.3.1577': attribute type 5 has an invalid length. [ 240.893359][T11746] xt_hashlimit: overflow, rate too high: 0 [ 241.114014][T11756] __nla_validate_parse: 5 callbacks suppressed [ 241.114040][T11756] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1599'. [ 241.867006][ T12] net_ratelimit: 46 callbacks suppressed [ 241.867021][ T12] bond1: (slave erspan0): failed to get link speed/duplex [ 241.986412][ T12] bond1: (slave erspan0): failed to get link speed/duplex [ 242.106736][ T7588] bond1: (slave erspan0): failed to get link speed/duplex [ 242.216450][ T7588] bond1: (slave erspan0): failed to get link speed/duplex [ 242.326397][ T36] bond1: (slave erspan0): failed to get link speed/duplex [ 242.427796][T10496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.446641][ T7588] bond1: (slave erspan0): failed to get link speed/duplex [ 242.566971][ T7588] bond1: (slave erspan0): failed to get link speed/duplex [ 242.676573][ T7588] bond1: (slave erspan0): failed to get link speed/duplex [ 242.786422][ T12] bond1: (slave erspan0): failed to get link speed/duplex [ 243.212683][T11718] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.485355][T11783] FAULT_INJECTION: forcing a failure. [ 243.485355][T11783] name failslab, interval 1, probability 0, space 0, times 0 [ 243.516906][T11783] CPU: 1 UID: 0 PID: 11783 Comm: syz.1.1609 Not tainted syzkaller #0 PREEMPT(full) [ 243.516929][T11783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 243.516939][T11783] Call Trace: [ 243.516945][T11783] [ 243.516953][T11783] dump_stack_lvl+0xe8/0x150 [ 243.516978][T11783] should_fail_ex+0x412/0x560 [ 243.517004][T11783] should_failslab+0xa8/0x100 [ 243.517029][T11783] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 243.517052][T11783] ? __alloc_skb+0x1d0/0x7d0 [ 243.517071][T11783] ? __local_bh_enable_ip+0xd0/0x130 [ 243.517093][T11783] __alloc_skb+0x1d0/0x7d0 [ 243.517119][T11783] alloc_skb_with_frags+0xc8/0x760 [ 243.517144][T11783] ? ipv6_addr_label+0x2f/0x240 [ 243.517171][T11783] sock_alloc_send_pskb+0x878/0x990 [ 243.517203][T11783] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 243.517223][T11783] ? ipv6_dev_get_saddr+0x160/0xbb0 [ 243.517246][T11783] ? ipv6_dev_get_saddr+0x934/0xbb0 [ 243.517267][T11783] __ip6_append_data+0x2c6c/0x3f60 [ 243.517306][T11783] ? __pfx_ping_getfrag+0x10/0x10 [ 243.517338][T11783] ? ip6_mtu+0x7d/0x490 [ 243.517359][T11783] ? __pfx___ip6_append_data+0x10/0x10 [ 243.517378][T11783] ? ip6_setup_cork+0x544/0xf30 [ 243.517397][T11783] ? ip6_append_data+0x1b7/0x280 [ 243.517417][T11783] ip6_append_data+0x10f/0x280 [ 243.517437][T11783] ? __pfx_ping_getfrag+0x10/0x10 [ 243.517459][T11783] ping_v6_sendmsg+0xecd/0x12d0 [ 243.517486][T11783] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 243.517518][T11783] ? reacquire_held_locks+0x104/0x190 [ 243.517537][T11783] ? release_sock+0x2f/0x260 [ 243.517564][T11783] ? inet_sendmsg+0x14f/0x370 [ 243.517585][T11783] ? inet_sendmsg+0x14f/0x370 [ 243.517604][T11783] ? __local_bh_enable_ip+0xd0/0x130 [ 243.517620][T11783] ? lockdep_hardirqs_on+0x7a/0x110 [ 243.517641][T11783] ? inet_sendmsg+0x14f/0x370 [ 243.517658][T11783] ? __local_bh_enable_ip+0xd0/0x130 [ 243.517674][T11783] ? inet_sendmsg+0x2f4/0x370 [ 243.517704][T11783] ____sys_sendmsg+0x80a/0x9f0 [ 243.517728][T11783] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.517756][T11783] ? import_iovec+0x73/0xa0 [ 243.517780][T11783] ___sys_sendmsg+0x2a5/0x360 [ 243.517795][T11783] ? __lock_acquire+0x6b5/0x2cf0 [ 243.517816][T11783] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.517837][T11783] ? kstrtouint+0x6e/0xe0 [ 243.517881][T11783] ? __fget_files+0x2a/0x420 [ 243.517897][T11783] ? __fget_files+0x3a0/0x420 [ 243.517926][T11783] __sys_sendmmsg+0x27c/0x4e0 [ 243.517947][T11783] ? __pfx___sys_sendmmsg+0x10/0x10 [ 243.517961][T11783] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 243.518008][T11783] ? ksys_write+0x242/0x270 [ 243.518031][T11783] ? __pfx_ksys_write+0x10/0x10 [ 243.518058][T11783] __x64_sys_sendmmsg+0xa0/0xc0 [ 243.518073][T11783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.518089][T11783] do_syscall_64+0x15f/0xf80 [ 243.518108][T11783] ? trace_irq_disable+0x3b/0x140 [ 243.518130][T11783] ? clear_bhb_loop+0x40/0x90 [ 243.518149][T11783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.518164][T11783] RIP: 0033:0x7f298139ce59 [ 243.518180][T11783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.518193][T11783] RSP: 002b:00007f29821f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 243.518211][T11783] RAX: ffffffffffffffda RBX: 00007f2981615fa0 RCX: 00007f298139ce59 [ 243.518222][T11783] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000005 [ 243.518232][T11783] RBP: 00007f29821f7090 R08: 0000000000000000 R09: 0000000000000000 [ 243.518241][T11783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.518250][T11783] R13: 00007f2981616038 R14: 00007f2981615fa0 R15: 00007ffe16d8f388 [ 243.518276][T11783] [ 244.004299][T11796] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1610'. [ 244.023807][T11800] netlink: 'syz.1.1613': attribute type 12 has an invalid length. [ 244.073848][T11800] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.081276][T11800] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.099000][T11807] blkio.reset_stats is deprecated [ 244.420663][T11813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1615'. [ 244.638839][T11824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1617'. [ 244.714960][T11824] bond8: entered promiscuous mode [ 244.728358][T11824] 8021q: adding VLAN 0 to HW filter on device bond8 [ 244.789867][T11828] bridge3: entered promiscuous mode [ 244.795910][T11828] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 245.153148][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1623'. [ 245.431074][T11862] netlink: 'syz.0.1627': attribute type 9 has an invalid length. [ 245.551378][T11864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1628'. [ 245.574220][T11864] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1628'. [ 245.607551][T11866] vlan1: entered promiscuous mode [ 245.663419][T11866] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1629'. [ 245.677416][ T5641] Bluetooth: hci4: link tx timeout [ 245.681835][T11866] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 245.684165][ T5641] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 245.703300][ T5641] Bluetooth: hci4: link tx timeout [ 245.706490][T11866] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 245.709793][ T5641] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 245.723937][ T5641] Bluetooth: hci4: link tx timeout [ 245.729200][ T5641] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 245.789740][T11874] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1630'. [ 245.790670][T11865] vlan1: left promiscuous mode [ 245.902974][T11877] sctp: [Deprecated]: syz.1.1631 (pid 11877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.902974][T11877] Use struct sctp_sack_info instead [ 246.569136][T11892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1636'. [ 246.799042][T11895] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20002 [ 246.909867][T11896] net_ratelimit: 743 callbacks suppressed [ 246.909883][T11896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.913436][T11898] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1639'. [ 246.976801][ T12] bond1: (slave erspan0): failed to get link speed/duplex [ 247.009610][T11902] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1639'. [ 247.053544][T11902] ip6erspan0: entered allmulticast mode [ 247.100976][T11898] syzkaller1: entered promiscuous mode [ 247.116426][T11898] syzkaller1: entered allmulticast mode [ 247.127035][T11902] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1639'. [ 247.216427][ T12] bond1: (slave erspan0): failed to get link speed/duplex [ 247.336454][ T12] bond1: (slave erspan0): failed to get link speed/duplex [ 247.468124][ T138] bond1: (slave erspan0): failed to get link speed/duplex [ 247.606664][T10444] bond1: (slave erspan0): failed to get link speed/duplex [ 247.621618][T11918] lo: Caught tx_queue_len zero misconfig [ 247.633313][T10496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.671209][T11920] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1644'. [ 247.711643][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.720439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.767905][ T138] bond1: (slave erspan0): failed to get link speed/duplex [ 247.786915][ T5632] Bluetooth: hci4: command 0x0405 tx timeout [ 247.793734][T11926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1646'. [ 247.971619][T11928] bond1: (slave erspan0): Removing an active aggregator [ 248.009676][T11928] bond1: (slave erspan0): Releasing backup interface [ 248.083039][T11930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1648'. [ 248.093369][T11932] netlink: 'syz.0.1649': attribute type 1 has an invalid length. [ 248.097182][T11930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1648'. [ 248.135220][T11930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1648'. [ 248.156683][T11930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1648'. [ 248.309754][T11942] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 248.378124][T11944] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.385397][T11944] bridge0: port 2(bridge_slave_1) entered listening state [ 248.392809][T11944] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.400022][T11944] bridge0: port 1(bridge_slave_0) entered listening state [ 248.708867][T11958] ipt_REJECT: TCP_RESET invalid for non-tcp [ 249.553419][ T30] audit: type=1800 audit(1778943288.817:7): pid=12014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1676" name="memory.events" dev="tmpfs" ino=1760 res=0 errno=0 [ 249.964567][T12043] netlink: 'syz.0.1683': attribute type 16 has an invalid length. [ 250.413490][T12057] syzkaller1: entered promiscuous mode [ 250.424409][T12057] syzkaller1: entered allmulticast mode [ 250.888448][T12074] netlink: 'syz.1.1693': attribute type 10 has an invalid length. [ 251.530791][T12101] netlink: 'syz.4.1700': attribute type 21 has an invalid length. [ 251.553935][T12102] netlink: 'syz.1.1701': attribute type 1 has an invalid length. [ 251.655576][T12102] 8021q: adding VLAN 0 to HW filter on device bond9 [ 251.823430][T12102] veth9: entered allmulticast mode [ 251.857286][T12102] bond9: (slave veth9): Enslaving as an active interface with an up link [ 251.951154][T12105] bond9 (unregistering): (slave veth9): Releasing backup interface [ 251.991868][T12105] bond9 (unregistering): Released all slaves [ 252.448773][T12134] netlink: 'syz.0.1711': attribute type 1 has an invalid length. [ 252.540885][T12134] 8021q: adding VLAN 0 to HW filter on device bond6 [ 252.567075][T12135] __nla_validate_parse: 13 callbacks suppressed [ 252.567089][T12135] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1710'. [ 252.667242][T12134] bond6: (slave geneve2): making interface the new active one [ 252.709812][T12134] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 252.828198][ T5793] net_ratelimit: 11 callbacks suppressed [ 252.828215][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.902798][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1717'. [ 252.999735][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1720'. [ 253.048492][T12162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1717'. [ 253.170988][T12171] netlink: 'syz.0.1723': attribute type 1 has an invalid length. [ 253.242219][T12171] netlink: 'syz.0.1723': attribute type 1 has an invalid length. [ 253.265086][T12171] netlink: 'syz.0.1723': attribute type 1 has an invalid length. [ 253.568001][T12196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.591982][T12193] IPv6: sit1: Disabled Multicast RS [ 253.605102][T12199] netlink: 'syz.0.1729': attribute type 5 has an invalid length. [ 253.679574][T12184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.787396][T10493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.795853][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.867809][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.899310][T12205] syzkaller0: entered promiscuous mode [ 253.915770][T12205] syzkaller0: entered allmulticast mode [ 254.020250][T12223] xt_TCPMSS: Only works on TCP SYN packets [ 254.920515][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.689197][T12224] macsec0: entered promiscuous mode [ 255.713316][T12224] macsec0: left promiscuous mode [ 255.755775][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1740'. [ 255.947040][T10496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.072073][T12245] netlink: 'syz.3.1747': attribute type 10 has an invalid length. [ 256.173642][T12250] netlink: 'syz.0.1748': attribute type 1 has an invalid length. [ 256.422249][T12251] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 256.445193][T12251] bond7: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 256.470976][T12251] bond7: (slave vxcan5): making interface the new active one [ 256.480448][T12251] bond7: (slave vxcan5): Enslaving as an active interface with an up link [ 256.558339][T12271] netlink: 'syz.1.1754': attribute type 1 has an invalid length. [ 256.585130][T12271] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1754'. [ 256.636748][T12274] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1755'. [ 256.827855][T10489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.836232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.870869][T12291] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 256.931708][T12291] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 257.000655][T12291] netdevsim netdevsim0 netdevsim0: refused to change device tx_queue_len [ 257.073839][T12298] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 257.239752][T12311] syzkaller0: entered promiscuous mode [ 257.248925][T12311] syzkaller0: entered allmulticast mode [ 258.033532][ T24] net_ratelimit: 3 callbacks suppressed [ 258.033552][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.225099][T12339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1774'. [ 258.278280][T12339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1774'. [ 258.415616][T12350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1779'. [ 258.705006][T12369] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1784'. [ 258.719305][T12367] netlink: 'syz.0.1783': attribute type 3 has an invalid length. [ 258.735661][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1783'. [ 258.921140][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.951332][T12375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1785'. [ 258.968512][T12375] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1785'. [ 259.066519][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.195787][T12375] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1785'. [ 259.213499][T12383] IPVS: persistence engine module ip_vs_pe_ not found [ 259.274116][T12386] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 259.818802][T12400] netlink: 'syz.4.1793': attribute type 1 has an invalid length. [ 259.840400][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'. [ 259.853915][T12400] netlink: 1008 bytes leftover after parsing attributes in process `syz.4.1793'. [ 259.876208][T10491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.884650][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.000898][T12406] xt_l2tp: v2 doesn't support IP mode [ 260.110481][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.126692][T12412] syzkaller0: entered promiscuous mode [ 260.137338][T12412] syzkaller0: entered allmulticast mode [ 261.089897][T12454] netlink: 'syz.3.1808': attribute type 1 has an invalid length. [ 261.163527][T12454] 8021q: adding VLAN 0 to HW filter on device bond5 [ 261.174583][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.181612][T12462] sctp: [Deprecated]: syz.4.1809 (pid 12462) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.181612][T12462] Use struct sctp_sack_info instead [ 261.208136][T12461] vlan4: entered allmulticast mode [ 261.223768][T12461] bond5: entered allmulticast mode [ 261.278469][T12454] bond5: (slave gretap1): making interface the new active one [ 261.297381][T12454] gretap1: entered allmulticast mode [ 261.319609][T12454] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 262.106634][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.138778][T12482] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 262.161215][T12482] netlink: 'syz.4.1817': attribute type 13 has an invalid length. [ 262.189059][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.198095][T12484] FAULT_INJECTION: forcing a failure. [ 262.198095][T12484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.236458][T12484] CPU: 1 UID: 0 PID: 12484 Comm: syz.0.1818 Not tainted syzkaller #0 PREEMPT(full) [ 262.236482][T12484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.236491][T12484] Call Trace: [ 262.236498][T12484] [ 262.236505][T12484] dump_stack_lvl+0xe8/0x150 [ 262.236529][T12484] should_fail_ex+0x412/0x560 [ 262.236554][T12484] _copy_to_user+0x31/0xb0 [ 262.236579][T12484] simple_read_from_buffer+0xe1/0x170 [ 262.236602][T12484] proc_fail_nth_read+0x1bb/0x230 [ 262.236626][T12484] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 262.236648][T12484] ? rw_verify_area+0x2a6/0x4d0 [ 262.236668][T12484] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 262.236689][T12484] vfs_read+0x20c/0xa70 [ 262.236714][T12484] ? __pfx___mutex_lock+0x10/0x10 [ 262.236730][T12484] ? __pfx_vfs_read+0x10/0x10 [ 262.236752][T12484] ? __fget_files+0x2a/0x420 [ 262.236781][T12484] ? __fget_files+0x3a0/0x420 [ 262.236798][T12484] ? __fget_files+0x2a/0x420 [ 262.236823][T12484] ksys_read+0x150/0x270 [ 262.236846][T12484] ? __pfx_ksys_read+0x10/0x10 [ 262.236875][T12484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.236892][T12484] do_syscall_64+0x15f/0xf80 [ 262.236913][T12484] ? trace_irq_disable+0x3b/0x140 [ 262.236935][T12484] ? clear_bhb_loop+0x40/0x90 [ 262.236954][T12484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.236969][T12484] RIP: 0033:0x7f76c915d68e [ 262.236984][T12484] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 262.236997][T12484] RSP: 002b:00007f76ca037fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 262.237014][T12484] RAX: ffffffffffffffda RBX: 00007f76ca0386c0 RCX: 00007f76c915d68e [ 262.237025][T12484] RDX: 000000000000000f RSI: 00007f76ca0380a0 RDI: 0000000000000004 [ 262.237035][T12484] RBP: 00007f76ca038090 R08: 0000000000000000 R09: 0000000000000000 [ 262.237044][T12484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.237053][T12484] R13: 00007f76c9416038 R14: 00007f76c9415fa0 R15: 00007fffc65fa1d8 [ 262.237080][T12484] [ 262.613978][T12495] tipc: Started in network mode [ 262.657777][T12495] tipc: Node identity ac14140f, cluster identity 4711 [ 262.667064][ T3276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.677348][T12495] tipc: New replicast peer: 255.255.255.255 [ 262.703761][T12495] tipc: Enabled bearer , priority 10 [ 263.071385][T12510] net_ratelimit: 2 callbacks suppressed [ 263.071400][T12510] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 263.111833][T12510] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 263.211412][T12510] bridge4: entered allmulticast mode [ 263.226688][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.263898][T12512] netlink: 'syz.0.1829': attribute type 11 has an invalid length. [ 263.267282][T12518] __nla_validate_parse: 5 callbacks suppressed [ 263.267297][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1827'. [ 263.308677][T12512] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.1829'. [ 263.325775][T12518] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.333105][T12518] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.464583][T12526] geneve3: entered allmulticast mode [ 263.842928][T10491] tipc: Node number set to 2886997007 [ 264.027704][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.269977][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.403636][T12574] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1844'. [ 264.445549][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1846'. [ 264.819980][T12601] gre3: entered promiscuous mode [ 265.191693][T12610] netlink: 'syz.3.1856': attribute type 1 has an invalid length. [ 265.200145][T12610] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1856'. [ 265.258971][T12611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1857'. [ 265.306868][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.568339][T12631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1859'. [ 265.890762][T12653] veth0_to_team: entered promiscuous mode [ 265.953132][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.961556][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.347351][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.565327][T12686] xt_CT: You must specify a L4 protocol and not use inversions on it [ 266.566752][T12677] bond10: Unable to set down delay as MII monitoring is disabled [ 266.585578][T12677] bond10 (unregistering): Released all slaves [ 266.665070][T12691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1881'. [ 266.674657][T12691] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1881'. [ 266.699083][T12691] ip6tnl1: entered allmulticast mode [ 266.810244][T12693] tipc: Enabling of bearer rejected, failed to enable media [ 266.897360][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1884'. [ 267.040404][T12716] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 267.103346][T12716] pimreg: entered allmulticast mode [ 267.112931][T12713] pimreg: left allmulticast mode [ 267.216945][T12722] syzkaller1: entered promiscuous mode [ 267.228615][T10491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.242505][T12722] syzkaller1: entered allmulticast mode [ 267.639175][T12747] netlink: 'syz.2.1902': attribute type 2 has an invalid length. [ 267.855002][T12744] veth0_to_team: left promiscuous mode [ 267.921275][T12744] veth1_virt_wifi: left promiscuous mode [ 267.927215][T12744] veth1_virt_wifi: left allmulticast mode [ 267.951394][T12744] veth: left promiscuous mode [ 268.426649][ T24] net_ratelimit: 1 callbacks suppressed [ 268.426692][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.506821][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.657754][T12744] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 268.665140][T12744] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 268.710235][T12744] vlan2: left promiscuous mode [ 268.715078][T12744] geneve1: left promiscuous mode [ 268.720840][T12744] vlan2: left allmulticast mode [ 268.725747][T12744] geneve1: left allmulticast mode [ 268.740143][T12744] bond4: left allmulticast mode [ 268.746215][T12744] bond5: left promiscuous mode [ 268.751297][T12744] bond5: left allmulticast mode [ 268.764036][T12744] gre3: left promiscuous mode [ 268.788101][T12749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.828432][T12757] gretap1: entered allmulticast mode [ 268.986547][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.994900][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.997461][T12778] __nla_validate_parse: 12 callbacks suppressed [ 268.997476][T12778] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1908'. [ 269.130788][T12786] x_tables: duplicate underflow at hook 1 [ 269.466890][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.544747][ T7588] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.554758][ T7588] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.564465][ T7588] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.574739][ T7588] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.586127][ T7588] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.630178][ T7588] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.657972][ T7588] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.682124][ T7588] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.741442][T12793] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1909'. [ 269.787808][ T7588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.797813][T12793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1909'. [ 270.053560][T12813] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1914'. [ 270.237617][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1916'. [ 270.281673][T12813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.341868][T12813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.375607][T12813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.562631][T12839] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1919'. [ 270.899526][T12852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1925'. [ 271.144204][T12857] erspan1: entered promiscuous mode [ 271.167478][T12857] erspan1: entered allmulticast mode [ 271.569248][T12879] sctp: [Deprecated]: syz.4.1927 (pid 12879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.569248][T12879] Use struct sctp_sack_info instead [ 271.605398][T12882] netlink: 'syz.2.1929': attribute type 142 has an invalid length. [ 271.623637][T12879] sctp: [Deprecated]: syz.4.1927 (pid 12879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.623637][T12879] Use struct sctp_sack_info instead [ 271.887656][T12890] 8021q: VLANs not supported on vcan0 [ 272.106979][T12901] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1932'. [ 273.051445][T12930] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1941'. [ 273.073804][T12928] syzkaller1: entered promiscuous mode [ 273.084546][T12928] syzkaller1: entered allmulticast mode [ 273.308016][T12940] netlink: 'syz.0.1944': attribute type 11 has an invalid length. [ 273.352669][T12943] netlink: 'syz.2.1946': attribute type 16 has an invalid length. [ 273.374585][T12941] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.1945'. [ 273.377284][T12943] netlink: 'syz.2.1946': attribute type 3 has an invalid length. [ 273.401472][T12945] batadv_slave_0: entered allmulticast mode [ 273.425722][T12941] xt_CT: You must specify a L4 protocol and not use inversions on it [ 273.541709][T12952] netlink: 'syz.0.1951': attribute type 11 has an invalid length. [ 273.596695][T12953] xt_CT: You must specify a L4 protocol and not use inversions on it [ 273.633659][ T24] net_ratelimit: 7 callbacks suppressed [ 273.633675][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.708983][T12955] netlink: 'syz.2.1953': attribute type 12 has an invalid length. [ 273.793955][T12964] netlink: 'syz.4.1954': attribute type 2 has an invalid length. [ 274.003906][T12979] netlink: 'syz.2.1959': attribute type 1 has an invalid length. [ 274.144056][T12985] __nla_validate_parse: 5 callbacks suppressed [ 274.144071][T12985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1960'. [ 274.161873][T12985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1960'. [ 274.181769][T12979] bond4: entered promiscuous mode [ 274.188296][T12979] 8021q: adding VLAN 0 to HW filter on device bond4 [ 274.208964][T12985] geneve4: entered promiscuous mode [ 274.214308][T12985] geneve4: entered allmulticast mode [ 274.233602][T10444] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.246046][T10444] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.292829][T12990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1961'. [ 274.303191][T10444] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.322066][T10444] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.444562][T13002] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1965'. [ 274.462608][T13002] xt_CT: You must specify a L4 protocol and not use inversions on it [ 274.489083][T12997] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 274.535389][T12997] bond5: (slave lo): Enslaving as an active interface with an up link [ 274.564621][T12997] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 275.102451][T13042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1974'. [ 275.135665][T13041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1974'. [ 275.156582][T13044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1974'. [ 275.338043][T13042] team0: entered promiscuous mode [ 275.348616][T13042] team0: entered allmulticast mode [ 275.354513][T13042] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.504941][T13041] team1: entered promiscuous mode [ 275.514980][T13041] team1: entered allmulticast mode [ 275.521050][T13063] netlink: 'syz.3.1980': attribute type 2 has an invalid length. [ 275.521374][T13041] 8021q: adding VLAN 0 to HW filter on device team1 [ 275.536467][T13063] netlink: 'syz.3.1980': attribute type 8 has an invalid length. [ 275.544291][T13063] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1980'. [ 275.575829][T13065] netlink: 'syz.3.1980': attribute type 2 has an invalid length. [ 275.589234][T13044] team2: entered promiscuous mode [ 275.594382][T13044] team2: entered allmulticast mode [ 275.602127][T13065] netlink: 'syz.3.1980': attribute type 8 has an invalid length. [ 275.603524][T13044] 8021q: adding VLAN 0 to HW filter on device team2 [ 275.610227][T13065] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1980'. [ 275.784970][T13077] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1983'. [ 275.814138][T13080] netlink: 'syz.2.1984': attribute type 5 has an invalid length. [ 275.841377][T13080] geneve4: entered promiscuous mode [ 275.847014][T13080] geneve4: entered allmulticast mode [ 275.858405][ T36] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 275.884562][ T36] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 275.916746][ T3276] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 275.934147][ T3276] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 276.220726][T13096] dvmrp0: entered allmulticast mode [ 277.470436][T13142] veth8: entered allmulticast mode [ 277.784907][T13165] xt_TPROXY: Can be used only with -p tcp or -p udp [ 278.387241][T13195] bridge4: entered allmulticast mode [ 278.918348][T13214] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.925624][T13214] bridge0: port 2(bridge_slave_1) entered listening state [ 278.933063][T13214] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.940258][T13214] bridge0: port 1(bridge_slave_0) entered listening state [ 279.034550][T13214] bridge0: port 3(vlan2) entered blocking state [ 279.041010][T13214] bridge0: port 3(vlan2) entered listening state [ 279.073720][T13214] bond2: left promiscuous mode [ 279.081286][T13214] veth3: left promiscuous mode [ 279.086197][T13214] veth3: left allmulticast mode [ 279.102452][T13214] hsr1: left promiscuous mode [ 279.110947][T13214] bond3: left promiscuous mode [ 279.115750][T13214] bridge1: left promiscuous mode [ 279.124836][T13214] bond3: entered allmulticast mode [ 279.130706][T13214] bridge1: entered allmulticast mode [ 279.136579][T13214] macvtap0: left allmulticast mode [ 279.141734][T13214] bond3: left allmulticast mode [ 279.148293][T13214] bridge1: left allmulticast mode [ 279.153391][T13214] bridge1: entered promiscuous mode [ 279.160369][T13214] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 279.174769][T13214] bridge0: port 4(vlan3) entered blocking state [ 279.181219][T13214] bridge0: port 4(vlan3) entered listening state [ 279.194268][T13214] macsec1: left promiscuous mode [ 279.201113][T13214] bond5: left promiscuous mode [ 279.206053][T13214] bond5: left allmulticast mode [ 279.212999][T13214] erspan1: left allmulticast mode [ 279.220413][T13214] bridge2: left promiscuous mode [ 279.232845][T13214] geneve2: left promiscuous mode [ 279.241686][T13214] bond8: left promiscuous mode [ 279.247019][T13214] bridge3: left promiscuous mode [ 279.254521][T13214] veth9: left allmulticast mode [ 279.282176][T13223] erspan0: left promiscuous mode [ 279.348651][T13223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.373769][T13223] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.398633][T13233] validate_nla: 1 callbacks suppressed [ 279.398649][T13233] netlink: 'syz.1.2027': attribute type 32 has an invalid length. [ 279.429853][T13223] bridge0: port 3(vlan3) entered blocking state [ 279.437516][T13223] bridge0: port 3(vlan3) entered listening state [ 279.484401][T13223] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 279.507678][T13223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.521491][T13223] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 279.533965][T13223] veth1_vlan: left promiscuous mode [ 279.540468][T13223] veth: entered promiscuous mode [ 279.547451][T13223] veth1_vlan: entered promiscuous mode [ 279.557360][T13223] veth1_macvtap: left promiscuous mode [ 279.563761][T13223] veth0_macvtap: left promiscuous mode [ 279.577298][T13223] veth0_macvtap: entered promiscuous mode [ 279.588363][T13223] veth1_macvtap: entered promiscuous mode [ 279.631988][T13223] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 279.651757][T13223] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 279.669145][T13223] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 279.681197][T13223] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 279.719658][T13223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.739565][T13223] 8021q: adding VLAN 0 to HW filter on device bond2 [ 279.747350][T13223] 8021q: adding VLAN 0 to HW filter on device bond3 [ 279.755724][T13223] erspan0: entered promiscuous mode [ 279.765133][T13223] 8021q: adding VLAN 0 to HW filter on device bond4 [ 279.799769][T13223] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 279.811556][T13223] 8021q: adding VLAN 0 to HW filter on device bond5 [ 279.849940][T13223] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 279.860657][T13223] 8021q: adding VLAN 0 to HW filter on device bond6 [ 279.871922][T13223] 8021q: adding VLAN 0 to HW filter on device bond7 [ 279.884512][T13223] bridge4: left allmulticast mode [ 279.914282][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.921505][ T1123] bridge0: port 1(bridge_slave_0) entered listening state [ 279.931648][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.938859][ T1123] bridge0: port 2(bridge_slave_1) entered listening state [ 279.994168][ T24] bond_slave_0: entered promiscuous mode [ 280.001366][ T24] bond_slave_1: entered promiscuous mode [ 280.008581][T13227] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 280.059601][T13238] veth0_to_batadv: entered allmulticast mode [ 280.067674][T13238] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 280.093922][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.103127][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.112459][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.123766][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.173871][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.207559][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.232596][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.254952][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.377675][ T12] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 280.420034][ T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 280.477175][T13251] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 280.485972][ T12] bond2: active interface up! [ 280.684625][T13270] __nla_validate_parse: 10 callbacks suppressed [ 280.684644][T13270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2035'. [ 280.724015][T13272] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2036'. [ 280.792231][T13272] veth0: entered promiscuous mode [ 280.875230][T13272] netlink: 'syz.1.2036': attribute type 1 has an invalid length. [ 280.980624][T13277] sch_tbf: burst 0 is lower than device lo mtu (32783) ! [ 281.020165][T13271] veth0: left promiscuous mode [ 281.200254][T13280] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 281.284196][T13277] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 281.594445][T13309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2046'. [ 281.640129][T13309] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2046'. [ 281.651593][T13311] hm3): entered promiscuous mode [ 281.684763][T13314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2048'. [ 281.778617][T13309] vlan4: entered promiscuous mode [ 281.803018][T13309] gretap0: entered promiscuous mode [ 281.826685][T13309] vlan4: entered allmulticast mode [ 281.858661][T13309] gretap0: entered allmulticast mode [ 281.879058][T13319] netlink: 'syz.2.2050': attribute type 49 has an invalid length. [ 281.985797][T13324] ip6gretap2: entered promiscuous mode [ 282.653252][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2062'. [ 282.709937][T13360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2059'. [ 282.919602][T13373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2065'. [ 282.936982][T13360] bond8: entered promiscuous mode [ 282.962427][T13360] 8021q: adding VLAN 0 to HW filter on device bond8 [ 283.029484][T13370] 8021q: adding VLAN 0 to HW filter on device bond8 [ 283.053605][T13370] bond8: (slave vti0): The slave device specified does not support setting the MAC address [ 283.077908][T13370] bond8: (slave vti0): Error -95 calling set_mac_address [ 283.680336][T13391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2070'. [ 283.855512][T13398] netlink: 'syz.3.2073': attribute type 1 has an invalid length. [ 283.915607][T13402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2073'. [ 284.114269][T13398] bond6: entered promiscuous mode [ 284.121575][T13398] 8021q: adding VLAN 0 to HW filter on device bond6 [ 284.182191][T12294] udevd[12294]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 284.201382][ T8088] udevd[8088]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 284.229837][T13405] bond6: (slave bridge3): making interface the new active one [ 284.237557][T13405] bridge3: entered promiscuous mode [ 284.244614][T13405] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 284.986168][ T8088] udevd[8088]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 285.333333][T13449] netlink: 'syz.3.2083': attribute type 1 has an invalid length. [ 285.365841][T13449] 8021q: adding VLAN 0 to HW filter on device bond7 [ 285.458806][T13449] bond7: (slave veth5): Enslaving as an active interface with an up link [ 285.875536][T13472] __nla_validate_parse: 3 callbacks suppressed [ 285.875553][T13472] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2088'. [ 286.152607][T13495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2094'. [ 286.235710][T13496] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 286.414699][T13496] ip6gre1: entered allmulticast mode [ 286.464123][T13496] ip6gre1: entered promiscuous mode [ 286.476970][T13496] team0: Device ip6gre1 is of different type [ 286.565713][T13508] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2097'. [ 286.920467][ T30] audit: type=1804 audit(1778943326.187:8): pid=13525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2102" name="/newroot/442/memory.events" dev="tmpfs" ino=2275 res=1 errno=0 [ 287.006373][ T30] audit: type=1800 audit(1778943326.207:9): pid=13525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2102" name="memory.events" dev="tmpfs" ino=2275 res=0 errno=0 [ 287.110269][T13531] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2104'. [ 288.537955][T13572] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2112'. [ 288.571740][T13572] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2112'. [ 288.602384][T13572] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2112'. [ 288.732253][T13577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2114'. [ 288.880109][T13582] xt_hashlimit: size too large, truncated to 1048576 [ 289.027145][T13583] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.079045][T13589] netlink: 'syz.4.2116': attribute type 1 has an invalid length. [ 289.129258][T13589] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2116'. [ 289.155797][T13583] bridge_slave_0 (unregistering): left allmulticast mode [ 289.259152][T13583] bridge_slave_0 (unregistering): left promiscuous mode [ 289.315281][T13583] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.170827][T13629] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2123'. [ 290.301432][T13633] openvswitch: netlink: Actions may not be safe on all matching packets [ 290.388663][T13635] tipc: Enabled bearer , priority 0 [ 290.406207][T13635] syzkaller0: entered promiscuous mode [ 290.429175][T13635] syzkaller0: entered allmulticast mode [ 290.486167][T13635] tipc: Resetting bearer [ 290.724096][T13634] tipc: Resetting bearer [ 290.751290][T13634] tipc: Disabling bearer [ 292.011669][T13686] sock: sock_set_timeout: `syz.1.2140' (pid 13686) tries to set negative timeout [ 292.353848][T13705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2145'. [ 292.724015][T13710] syzkaller0: entered promiscuous mode [ 292.746884][T13710] syzkaller0: entered allmulticast mode [ 292.764775][T13717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2146'. [ 292.818541][T13717] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2146'. [ 293.406083][T13735] FAULT_INJECTION: forcing a failure. [ 293.406083][T13735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.428506][T13735] CPU: 0 UID: 0 PID: 13735 Comm: syz.1.2151 Not tainted syzkaller #0 PREEMPT(full) [ 293.428529][T13735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 293.428538][T13735] Call Trace: [ 293.428545][T13735] [ 293.428551][T13735] dump_stack_lvl+0xe8/0x150 [ 293.428576][T13735] should_fail_ex+0x412/0x560 [ 293.428601][T13735] _copy_from_user+0x2d/0xb0 [ 293.428622][T13735] ___sys_sendmsg+0x1c6/0x360 [ 293.428639][T13735] ? __lock_acquire+0x6b5/0x2cf0 [ 293.428661][T13735] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.428709][T13735] ? __fget_files+0x2a/0x420 [ 293.428726][T13735] ? __fget_files+0x3a0/0x420 [ 293.428753][T13735] __x64_sys_sendmsg+0x1bd/0x2a0 [ 293.428772][T13735] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 293.428795][T13735] ? __pfx_ksys_write+0x10/0x10 [ 293.428819][T13735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.428837][T13735] do_syscall_64+0x15f/0xf80 [ 293.428854][T13735] ? trace_irq_disable+0x3b/0x140 [ 293.428874][T13735] ? clear_bhb_loop+0x40/0x90 [ 293.428890][T13735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.428904][T13735] RIP: 0033:0x7f298139ce59 [ 293.428917][T13735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.428930][T13735] RSP: 002b:00007f29821f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.428945][T13735] RAX: ffffffffffffffda RBX: 00007f2981615fa0 RCX: 00007f298139ce59 [ 293.428954][T13735] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 293.428964][T13735] RBP: 00007f29821f7090 R08: 0000000000000000 R09: 0000000000000000 [ 293.428972][T13735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.428979][T13735] R13: 00007f2981616038 R14: 00007f2981615fa0 R15: 00007ffe16d8f388 [ 293.429003][T13735] [ 293.673384][T13738] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 293.723255][T13738] bond10 (unregistering): Released all slaves [ 294.095197][T13756] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 294.422336][T13773] : renamed from team_slave_1 (while UP) [ 294.564418][T13780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2161'. [ 294.579813][T13782] FAULT_INJECTION: forcing a failure. [ 294.579813][T13782] name failslab, interval 1, probability 0, space 0, times 0 [ 294.600599][T13782] CPU: 1 UID: 0 PID: 13782 Comm: syz.4.2165 Not tainted syzkaller #0 PREEMPT(full) [ 294.600625][T13782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 294.600635][T13782] Call Trace: [ 294.600641][T13782] [ 294.600648][T13782] dump_stack_lvl+0xe8/0x150 [ 294.600673][T13782] should_fail_ex+0x412/0x560 [ 294.600697][T13782] should_failslab+0xa8/0x100 [ 294.600721][T13782] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 294.600740][T13782] ? __alloc_skb+0x186/0x7d0 [ 294.600759][T13782] ? __alloc_skb+0x1d0/0x7d0 [ 294.600777][T13782] ? __local_bh_enable_ip+0xd0/0x130 [ 294.600798][T13782] __alloc_skb+0x1d0/0x7d0 [ 294.600823][T13782] netlink_sendmsg+0x5d4/0xb40 [ 294.600849][T13782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.600869][T13782] ? aa_sock_msg_perm+0xf1/0x1b0 [ 294.600890][T13782] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 294.600914][T13782] ____sys_sendmsg+0x972/0x9f0 [ 294.600930][T13782] ? __might_fault+0xaf/0x130 [ 294.600955][T13782] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.600980][T13782] ? import_iovec+0x73/0xa0 [ 294.601006][T13782] ___sys_sendmsg+0x2a5/0x360 [ 294.601021][T13782] ? __lock_acquire+0x6b5/0x2cf0 [ 294.601042][T13782] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.601090][T13782] ? __fget_files+0x2a/0x420 [ 294.601108][T13782] ? __fget_files+0x3a0/0x420 [ 294.601135][T13782] __x64_sys_sendmsg+0x1bd/0x2a0 [ 294.601154][T13782] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 294.601178][T13782] ? __pfx_ksys_write+0x10/0x10 [ 294.601208][T13782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.601225][T13782] do_syscall_64+0x15f/0xf80 [ 294.601247][T13782] ? trace_irq_disable+0x3b/0x140 [ 294.601269][T13782] ? clear_bhb_loop+0x40/0x90 [ 294.601288][T13782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.601304][T13782] RIP: 0033:0x7f6b4dd9ce59 [ 294.601349][T13782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.601375][T13782] RSP: 002b:00007f6b4ec44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.601392][T13782] RAX: ffffffffffffffda RBX: 00007f6b4e015fa0 RCX: 00007f6b4dd9ce59 [ 294.601404][T13782] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 294.601414][T13782] RBP: 00007f6b4ec44090 R08: 0000000000000000 R09: 0000000000000000 [ 294.601423][T13782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.601439][T13782] R13: 00007f6b4e016038 R14: 00007f6b4e015fa0 R15: 00007ffeabcdb478 [ 294.601467][T13782] [ 294.983670][T13784] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2166'. [ 295.292867][T13800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2172'. [ 295.400839][T13806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2175'. [ 295.457598][T13808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2176'. [ 295.481364][T13808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2176'. [ 295.490896][T13808] netlink: 'syz.2.2176': attribute type 4 has an invalid length. [ 295.506223][T13810] netlink: 'syz.4.2177': attribute type 3 has an invalid length. [ 295.513987][T13810] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2177'. [ 295.848308][T13829] tipc: Enabled bearer , priority 0 [ 295.855853][T13829] syzkaller0: entered promiscuous mode [ 295.862098][T13829] syzkaller0: entered allmulticast mode [ 295.931747][T13839] netlink: 'syz.2.2186': attribute type 1 has an invalid length. [ 296.050388][T13839] 8021q: adding VLAN 0 to HW filter on device bond6 [ 296.119695][T13842] bond6: (slave veth9): Enslaving as an active interface with a down link [ 296.344382][T13839] bond6: (slave veth11): Enslaving as an active interface with a down link [ 296.460753][T13844] macsec0: entered promiscuous mode [ 296.466039][T13844] macsec0: entered allmulticast mode [ 296.486586][T13845] 8021q: VLANs not supported on ip6tnl0 [ 296.509026][T13842] bond6: (slave bridge7): Enslaving as an active interface with a down link [ 296.524278][T13850] 8021q: VLANs not supported on ip6tnl0 [ 296.540681][T13827] tipc: Resetting bearer [ 296.659581][T13827] tipc: Disabling bearer [ 296.898366][T13871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.098185][T13881] bond10: option miimon: invalid value (18446744073709551607) [ 297.106087][T13881] bond10: option miimon: allowed values 0 - 2147483647 [ 297.124274][T13881] bond10 (unregistering): Released all slaves [ 297.641392][T13905] bond9: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 297.661440][T13905] bond9 (unregistering): Released all slaves [ 297.943619][T13932] __nla_validate_parse: 8 callbacks suppressed [ 297.943638][T13932] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2211'. [ 298.103876][T13936] netlink: 'syz.0.2213': attribute type 7 has an invalid length. [ 298.111650][T13936] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2213'. [ 298.114513][T13938] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2212'. [ 298.139014][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2212'. [ 298.280980][T13948] netlink: 'syz.3.2216': attribute type 1 has an invalid length. [ 298.303867][T13953] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2218'. [ 298.307625][T13952] netlink: 'syz.0.2217': attribute type 1 has an invalid length. [ 298.361608][T13949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2216'. [ 298.368504][T13948] 8021q: adding VLAN 0 to HW filter on device bond8 [ 298.378025][T13948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2216'. [ 298.431519][T13963] netlink: 'syz.3.2216': attribute type 1 has an invalid length. [ 298.478302][T13952] 8021q: adding VLAN 0 to HW filter on device bond10 [ 298.487336][T13952] bond9: (slave bond10): making interface the new active one [ 298.495381][T13952] bond9: (slave bond10): Enslaving as an active interface with an up link [ 298.497380][T13955] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2217'. [ 298.534463][T13949] bond8: (slave batadv4): Opening slave failed [ 298.558184][T13963] bond8: (slave batadv4): Opening slave failed [ 298.615207][T13976] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2223'. [ 299.113504][T13982] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2225'. [ 299.338547][T13991] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 299.675918][T14000] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 299.835496][T14012] can: request_module (can-proto-3) failed. [ 300.704970][T14056] netlink: 'syz.0.2245': attribute type 7 has an invalid length. [ 300.747773][T14056] netlink: 'syz.0.2245': attribute type 8 has an invalid length. [ 301.018883][T14045] bond10 (unregistering): Released all slaves [ 301.314899][T14062] bond9: entered promiscuous mode [ 301.321659][ T7588] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.330937][ T7588] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.340172][ T7588] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 301.349309][ T7588] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.358495][ T7588] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.368702][ T7588] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 301.380211][ T30] audit: type=1107 audit(1778943340.647:10): pid=14071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='F:?1T4Np/v8nsKa p/仕45qw#8!2knruw_]$WMNAaM%>17ma#2Lw[Ҡڸau0D' [ 301.418030][ T7588] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.439084][ T7588] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.462234][ T7588] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 301.480265][ T7588] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.502867][ T7588] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.532557][ T7588] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 301.534430][T14082] IPVS: set_ctl: invalid protocol: 103 10.1.1.0:20003 [ 301.874699][T14097] netlink: 'syz.0.2255': attribute type 13 has an invalid length. [ 301.909603][T14097] netlink: 'syz.0.2255': attribute type 17 has an invalid length. [ 302.276301][T14095] bridge0: port 3(vlan3) entered disabled state [ 302.282780][T14095] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.290051][T14095] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.319439][T14095] bond_slave_0: left promiscuous mode [ 302.329159][T14095] bond_slave_1: left promiscuous mode [ 302.704953][T14095] veth: left promiscuous mode [ 303.404387][T14097] erspan0: left promiscuous mode [ 303.451450][T14097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.463100][T14097] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.490359][T14097] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.497612][T14097] bridge0: port 1(bridge_slave_0) entered listening state [ 303.508861][T14097] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.516032][T14097] bridge0: port 2(bridge_slave_1) entered listening state [ 303.524832][T14097] bridge0: port 3(vlan3) entered blocking state [ 303.531261][T14097] bridge0: port 3(vlan3) entered listening state [ 303.600452][T14097] veth1_vlan: left promiscuous mode [ 303.608050][T14097] veth: entered promiscuous mode [ 303.617176][T14097] veth1_vlan: entered promiscuous mode [ 303.631131][T14097] veth1_macvtap: left promiscuous mode [ 303.638510][T14097] veth0_macvtap: left promiscuous mode [ 303.646011][T14097] veth0_macvtap: entered promiscuous mode [ 303.654206][T14097] veth1_macvtap: entered promiscuous mode [ 303.680703][T14097] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 303.697646][T14097] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 303.710555][T14097] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 303.726793][T14097] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 303.740185][T14097] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 303.769806][T14097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 303.782599][T14097] 8021q: adding VLAN 0 to HW filter on device bond2 [ 303.790923][T14097] 8021q: adding VLAN 0 to HW filter on device bond3 [ 303.803559][T14097] erspan0: entered promiscuous mode [ 303.822474][T14097] 8021q: adding VLAN 0 to HW filter on device bond4 [ 303.840138][T14097] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 303.852680][T14097] 8021q: adding VLAN 0 to HW filter on device bond5 [ 305.113173][T14097] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 305.124115][T14097] 8021q: adding VLAN 0 to HW filter on device bond6 [ 305.136205][T14097] 8021q: adding VLAN 0 to HW filter on device bond7 [ 305.161151][T14097] 8021q: adding VLAN 0 to HW filter on device bond8 [ 305.175218][T14097] 8021q: adding VLAN 0 to HW filter on device bond9 [ 305.184105][T14097] 8021q: adding VLAN 0 to HW filter on device bond10 [ 305.206575][T14106] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.224085][T14106] bridge0: port 3(vlan3) entered disabled state [ 305.236019][T10490] bond_slave_0: entered promiscuous mode [ 305.241798][T10490] bond_slave_1: entered promiscuous mode [ 309.469006][ C1] bridge0: port 4(vlan3) entered learning state [ 309.477535][ C1] bridge0: port 3(vlan2) entered learning state [ 309.483896][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 309.491002][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 325.663215][T14133] __nla_validate_parse: 5 callbacks suppressed [ 325.663243][T14133] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2262'. [ 325.663618][T14129] netlink: 5102 bytes leftover after parsing attributes in process `syz.3.2263'. [ 325.691011][T14129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.727340][T14128] netlink: 'syz.1.2261': attribute type 1 has an invalid length. [ 325.756310][T14128] netlink: 'syz.1.2261': attribute type 1 has an invalid length. [ 325.797897][T14128] 8021q: adding VLAN 0 to HW filter on device bond11 [ 325.839818][T14143] bond11: (slave geneve3): making interface the new active one [ 325.848786][T14143] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 326.008865][T14153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2269'. [ 326.107866][T14156] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2270'. [ 326.190847][T14160] netlink: 'syz.2.2272': attribute type 1 has an invalid length. [ 326.198616][T14160] netlink: 'syz.2.2272': attribute type 2 has an invalid length. [ 326.756121][T14176] tun0: tun_chr_ioctl cmd 1074025672 [ 326.761947][T14176] tun0: ignored: set checksum disabled [ 327.311657][T14212] sit1: entered allmulticast mode [ 327.573930][T14217] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.635924][T14222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2286'. [ 327.649110][T14222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2286'. [ 328.066816][T14229] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2291'. [ 328.316809][T14237] netlink: 'syz.2.2294': attribute type 29 has an invalid length. [ 328.340617][T14246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2296'. [ 328.453101][T14241] hm3): entered promiscuous mode [ 328.565599][T14258] netlink: 'syz.2.2298': attribute type 1 has an invalid length. [ 328.744473][T14258] gretap2: entered allmulticast mode [ 328.770823][T14258] bond7: (slave gretap2): making interface the new active one [ 328.787422][T14275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2303'. [ 328.798514][T14258] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 328.805741][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.823928][T14271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2302'. [ 328.925730][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.941720][T14275] bond10 (unregistering): Released all slaves [ 329.308668][ T3330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.316973][ T3276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.326018][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.704212][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.753977][T14305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.009703][T10497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.588939][ T3330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.894140][T14333] __nla_validate_parse: 8 callbacks suppressed [ 330.894157][T14333] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2320'. [ 330.923290][T14335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2322'. [ 331.117151][ T29] net_ratelimit: 1 callbacks suppressed [ 331.117177][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.137459][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.159870][T14337] veth0: entered promiscuous mode [ 331.166106][T14337] veth0: left promiscuous mode [ 332.005961][T14354] netlink: 'syz.4.2330': attribute type 7 has an invalid length. [ 332.007394][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.018973][T14354] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2330'. [ 332.235957][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.440426][ T3330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.453987][T10490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.463725][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.506891][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.674796][T14282] Set syz1 is full, maxelem 65536 reached [ 332.995817][T14372] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2334'. [ 333.316164][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.432700][T14409] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2347'. [ 333.445030][T14409] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.453408][T14407] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2348'. [ 333.457920][T14410] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 333.484228][T14409] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 333.567398][T14407] block nbd4: server does not support multiple connections per device. [ 333.580661][T14410] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 333.596300][T14407] block nbd4: shutting down sockets [ 333.667582][T14410] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 333.687840][T14410] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 333.797472][T14421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2351'. [ 333.911474][ T5632] Bluetooth: hci4: link tx timeout [ 333.917089][ T5632] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 333.947883][T14431] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2355'. [ 333.958367][T14431] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 334.184514][T14439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2357'. [ 334.253028][T14442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2358'. [ 334.419516][T14439] sctp: [Deprecated]: syz.4.2357 (pid 14439) Use of int in maxseg socket option. [ 334.419516][T14439] Use struct sctp_assoc_value instead [ 334.659134][T14465] netlink: 'syz.0.2362': attribute type 1 has an invalid length. [ 334.752878][T14470] netlink: 'syz.3.2363': attribute type 1 has an invalid length. [ 335.242486][ T5641] Bluetooth: hci4: link tx timeout [ 335.247928][ T5641] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 335.414302][T14495] xt_hashlimit: size too large, truncated to 1048576 [ 335.681876][T14513] netlink: 'syz.3.2374': attribute type 10 has an invalid length. [ 335.691337][T14513] team0: Device vxcan0 is of different type [ 335.946469][ T5641] Bluetooth: hci4: command 0x0405 tx timeout [ 336.289675][T14534] IPVS: stopping backup sync thread 9121 ... [ 336.347130][ T7588] net_ratelimit: 10 callbacks suppressed [ 336.347148][ T7588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.360912][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.372652][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.381020][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.416011][T14537] syzkaller0: entered promiscuous mode [ 336.421565][T14537] syzkaller0: entered allmulticast mode [ 336.592654][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.711448][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.195641][T14557] __nla_validate_parse: 6 callbacks suppressed [ 337.195658][T14557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2388'. [ 337.235405][T14560] netlink: 'syz.3.2389': attribute type 19 has an invalid length. [ 337.243272][T14560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2389'. [ 337.654001][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.820541][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.977766][T14577] x_tables: duplicate underflow at hook 1 [ 337.996867][T14577] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2393'. [ 338.112529][T10491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.121022][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.465548][T14560] netlink: 'syz.3.2389': attribute type 19 has an invalid length. [ 339.474866][T14560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2389'. [ 339.549941][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.558032][ C1] bridge0: topology change detected, propagating [ 339.567434][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.575401][ C1] bridge0: topology change detected, propagating [ 339.584168][ C1] bridge0: port 3(vlan2) entered forwarding state [ 339.591322][ C1] bridge0: topology change detected, propagating [ 339.600360][ C1] bridge0: port 4(vlan3) entered forwarding state [ 339.607567][ C1] bridge0: topology change detected, propagating [ 339.871913][T14595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2398'. [ 339.884206][T14596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2398'. [ 339.954994][T14602] netlink: 'syz.4.2399': attribute type 10 has an invalid length. [ 339.983896][T14602] dummy0: left promiscuous mode [ 340.014899][T14606] netlink: 'syz.4.2399': attribute type 10 has an invalid length. [ 340.033709][T14602] team0: Port device dummy0 added [ 340.039315][T14602] dummy0: entered promiscuous mode [ 340.075426][T14606] team0: Port device dummy0 removed [ 340.089338][T14606] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 340.098341][T14606] dummy0: left promiscuous mode [ 340.278932][T14617] bridge0: port 5(netdevsim1) entered blocking state [ 340.286515][T14617] bridge0: port 5(netdevsim1) entered disabled state [ 340.294575][T14617] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 340.297672][T14621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2406'. [ 340.314350][T14617] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 340.917268][T14640] netlink: 'syz.0.2411': attribute type 10 has an invalid length. [ 340.984228][T14640] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.992829][T14640] bond0: (slave team0): Enslaving as an active interface with an up link [ 341.001336][T14640] team_slave_0: entered promiscuous mode [ 341.007357][T14640] : entered promiscuous mode [ 341.073414][T14648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2412'. [ 341.107802][T14645] netlink: 'syz.1.2412': attribute type 1 has an invalid length. [ 341.139587][T14645] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2412'. [ 341.175695][T14657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2414'. [ 341.386821][ T3330] net_ratelimit: 10 callbacks suppressed [ 341.386838][ T3330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.490223][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.819566][ T7588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.934572][T10497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.632113][T14721] __nla_validate_parse: 1 callbacks suppressed [ 342.632130][T14721] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2429'. [ 342.956629][T14738] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2434'. [ 343.009615][T14719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.025563][T14742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2435'. [ 343.043374][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.054709][T14744] netlink: 'syz.2.2433': attribute type 1 has an invalid length. [ 343.089091][T14744] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2433'. [ 343.098078][T14744] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2433'. [ 343.165094][T10491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.173496][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.181641][ T3276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.109212][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.551363][T14788] netlink: 143820 bytes leftover after parsing attributes in process `syz.0.2443'. [ 344.664810][T14790] netlink: 'syz.1.2446': attribute type 1 has an invalid length. [ 345.497219][T14830] netlink: 'syz.1.2456': attribute type 39 has an invalid length. [ 345.641033][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2456'. [ 345.676410][T14834] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2456'. [ 345.690173][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2456'. [ 345.779388][T14836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2458'. [ 346.251028][T14853] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 346.273058][T14853] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 346.300242][T14853] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 346.597016][ C1] net_ratelimit: 8 callbacks suppressed [ 346.598112][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.632958][ T3276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.859317][ T138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.985135][T14889] openvswitch: netlink: Message has 3 unknown bytes. [ 347.018531][T14889] xt_CT: You must specify a L4 protocol and not use inversions on it [ 347.238325][ T138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.255066][T10497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.264631][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.868355][T10493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.876852][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.897857][T14936] veth11: entered allmulticast mode [ 348.069562][ T3276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.128054][T14943] 8021q: adding VLAN 0 to HW filter on device bond9 [ 348.140148][T14943] 8021q: adding VLAN 0 to HW filter on device bond10 [ 348.253465][T14955] __nla_validate_parse: 3 callbacks suppressed [ 348.253482][T14955] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2492'. [ 348.551815][T14976] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2496'. [ 348.592228][T14976] xt_CT: You must specify a L4 protocol and not use inversions on it [ 349.299675][T15004] bond9: option resend_igmp: invalid value (2878) [ 349.306145][T15004] bond9: option resend_igmp: allowed values 0 - 255 [ 349.315836][T15004] bond9 (unregistering): Released all slaves [ 349.417952][T15008] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2504'. [ 349.606420][T15014] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2506'. [ 350.078481][T15033] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2512'. [ 350.445317][T15038] netlink: 'syz.3.2513': attribute type 3 has an invalid length. [ 350.565129][T15038] syzkaller0: entered promiscuous mode [ 350.573195][T15038] syzkaller0: entered allmulticast mode [ 350.805961][T15050] netlink: 'syz.4.2517': attribute type 1 has an invalid length. [ 350.833758][T15056] netlink: 'syz.2.2519': attribute type 3 has an invalid length. [ 351.137143][T15075] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2524'. [ 351.475379][T15085] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 351.525713][T15085] netlink: 'syz.3.2527': attribute type 1 has an invalid length. [ 351.562612][T15085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2527'. [ 351.587929][T15085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2527'. [ 351.635154][T15080] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2526'. [ 351.687705][ T29] net_ratelimit: 31 callbacks suppressed [ 351.687723][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.701666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.104121][T15115] netlink: 'syz.2.2537': attribute type 1 has an invalid length. [ 352.158766][T15114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2538'. [ 352.343397][T15115] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 352.406610][ T182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.436422][ T3330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.448448][ T182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.534099][T15127] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 352.554511][T15127] block nbd4: not configured, cannot reconfigure [ 352.561847][T15132] block nbd4: not configured, cannot reconfigure [ 352.747744][T10497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.757288][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.767912][ T182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.961976][T15145] netlink: 'syz.4.2547': attribute type 1 has an invalid length. [ 352.991044][T10444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.996554][T15145] netlink: 'syz.4.2547': attribute type 3 has an invalid length. [ 353.178819][T15163] Unsupported ieee802154 address type: 0 [ 353.864663][T15186] bond9: entered allmulticast mode [ 353.872728][T10497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.881094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.921949][T15186] __nla_validate_parse: 2 callbacks suppressed [ 353.921965][T15186] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2558'. [ 354.022816][T15193] netlink: 'syz.1.2561': attribute type 1 has an invalid length. [ 354.038957][T15192] netlink: 'syz.1.2561': attribute type 1 has an invalid length. [ 354.109038][T15192] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 354.110500][T15193] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 354.144218][T15196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2562'. [ 354.218579][T15201] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2563'. [ 354.325061][T15204] sctp: [Deprecated]: syz.2.2563 (pid 15204) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.325061][T15204] Use struct sctp_sack_info instead [ 354.367267][T15203] policy can only be matched on NF_INET_PRE_ROUTING [ 354.367287][T15203] unable to load match [ 354.393705][T15209] policy can only be matched on NF_INET_PRE_ROUTING [ 354.393725][T15209] unable to load match [ 354.909733][ T3276] wlan1: Trigger new scan to find an IBSS to join [ 355.452424][T15237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2571'. [ 355.488611][T15237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2571'. [ 355.595968][T15244] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 355.806754][T15255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2573'. [ 356.671792][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 357.034987][T15283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2582'. [ 357.058912][T15283] block nbd4: Unsupported socket: should be TCP or UNIX. [ 357.913414][ T3330] net_ratelimit: 8 callbacks suppressed [ 357.913435][ T3330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.038215][T15313] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2583'. [ 358.110766][ T3276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.211882][ T3276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.220091][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.230489][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.238786][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.249626][T15321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2584'. [ 358.982425][T15348] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2595'. [ 359.040444][T15353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2596'. [ 359.118308][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.243472][T15366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2599'. [ 359.314905][T10497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.323794][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.785713][T15378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2601'. [ 359.867961][ T57] wlan1: Trigger new scan to find an IBSS to join [ 359.946756][T10493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.991565][T15384] netlink: 276 bytes leftover after parsing attributes in process `syz.3.2605'. [ 360.313295][T15392] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2607'. [ 360.424597][T15397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2608'. [ 360.477562][T15399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2608'. [ 360.516762][T15391] team_slave_0: left promiscuous mode [ 360.532285][T15391] : left promiscuous mode [ 360.568406][T15391] bond0: (slave team0): Releasing backup interface [ 360.583689][T15391] team0 (unregistering): Failed to send options change via netlink (err -105) [ 360.593374][T15391] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 360.626524][T15391] team0 (unregistering): Port device team_slave_0 removed [ 360.649219][T15391] team0 (unregistering): Failed to send options change via netlink (err -105) [ 360.659791][T15391] team0 (unregistering): Failed to send port change of device 76 via netlink (err -105) [ 360.673918][T15391] team0 (unregistering): Port device 76 removed [ 360.844879][T15402] bond10: option lacp_active: invalid value (8) [ 360.926454][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.951075][T15402] bond10 (unregistering): Released all slaves [ 361.225201][T15430] syzkaller0: entered promiscuous mode [ 361.231030][T15430] syzkaller0: entered allmulticast mode [ 361.636612][T15451] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) ! [ 361.682582][T15459] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2627'. [ 361.759618][T15463] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2629'. [ 361.761049][T15449] xt_CT: You must specify a L4 protocol and not use inversions on it [ 362.088311][T15480] sctp: [Deprecated]: syz.3.2633 (pid 15480) Use of struct sctp_assoc_value in delayed_ack socket option. [ 362.088311][T15480] Use struct sctp_sack_info instead [ 362.321167][T15491] x_tables: duplicate underflow at hook 2 [ 363.306787][ T3276] net_ratelimit: 14 callbacks suppressed [ 363.306806][ T3276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.548035][T10497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.557390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.867901][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.955758][ T3276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.587189][T10497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.596066][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.645805][T15454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.987204][T15532] macsec2: entered allmulticast mode [ 365.011350][T15532] batadv0: entered allmulticast mode [ 365.019493][T15532] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 365.053932][T15532] batadv0: left allmulticast mode [ 365.056937][ T3276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.109497][T10491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.117963][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.540262][T15554] nbd4: detected capacity change from 0 to 63 [ 365.563345][ T5641] block nbd4: Receive control failed (result -104) [ 365.574097][ T5632] block nbd4: Receive control failed (result -32) [ 365.730541][T15579] __nla_validate_parse: 2 callbacks suppressed [ 365.730578][T15579] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2657'. [ 366.000943][T15589] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2659'. [ 366.271004][T15605] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 366.285660][T15604] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 366.301037][T15605] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2665'. [ 366.312985][T15604] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2665'. [ 366.364346][T15607] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 366.383188][T15611] x_tables: duplicate underflow at hook 1 [ 366.647901][T15618] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2669'. [ 366.948241][T15625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2672'. [ 367.467055][T15644] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2679'. [ 368.586935][T15672] bond0: entered allmulticast mode [ 368.687815][T15682] netlink: 'syz.4.2687': attribute type 1 has an invalid length. [ 368.695914][T15680] netlink: 'syz.4.2687': attribute type 1 has an invalid length. [ 368.788712][ T3276] net_ratelimit: 10 callbacks suppressed [ 368.788730][ T3276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.867785][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.876111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.166069][T15690] bond10: option lacp_active: invalid value (8) [ 369.174501][T15690] bond10 (unregistering): Released all slaves [ 369.630916][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.718957][T15718] netlink: zone id is out of range [ 369.929636][T15727] syzkaller0: entered promiscuous mode [ 369.942718][T15727] syzkaller0: entered allmulticast mode [ 369.961487][T10497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.969793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.069140][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.200657][T10492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.209122][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.336472][T15739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2702'. [ 370.356826][T15740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2702'. [ 370.372178][T15743] x_tables: duplicate entry at hook 2 [ 370.744540][T15761] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2708'. [ 370.943327][T15766] syzkaller0: entered promiscuous mode [ 370.949324][T15766] syzkaller0: entered allmulticast mode [ 373.482464][T15750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 373.749367][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2717'. [ 373.790003][T15789] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20004 [ 374.125978][T15803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2719'. [ 374.188612][ T29] net_ratelimit: 11 callbacks suppressed [ 374.188634][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.203827][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.218590][T15779] bond11: option lacp_active: invalid value (8) [ 374.229173][T15779] bond11 (unregistering): Released all slaves [ 374.606879][T15812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2724'. [ 374.633479][T15812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2724'. [ 374.659895][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.901785][T15817] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 375.072039][T15817] bond8 (unregistering): Released all slaves [ 375.241671][T10497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.251104][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.399080][ T138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.874349][T10492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.882846][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.018177][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.344402][T10497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.242185][T15876] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2739'. [ 378.370712][T15884] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2741'. [ 379.427119][T15907] netlink: 'syz.4.2748': attribute type 4 has an invalid length. [ 379.469457][ T29] net_ratelimit: 10 callbacks suppressed [ 379.469489][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.478171][T15910] netlink: 'syz.4.2748': attribute type 4 has an invalid length. [ 379.484170][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.527781][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.144548][T15934] syzkaller0: entered promiscuous mode [ 380.158428][T15934] syzkaller0: entered allmulticast mode [ 380.172735][T15927] xt_cluster: node mask cannot exceed total number of nodes [ 380.516756][T10497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.526103][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.734463][T15942] netlink: 'syz.0.2757': attribute type 1 has an invalid length. [ 380.857800][ T3276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.980399][T10492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.988908][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.031102][T15953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.146787][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.199351][T15958] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 381.538784][T15975] nftables ruleset with unbound chain [ 381.683776][T15986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2766'. [ 381.808239][T15990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2767'. [ 382.253084][T16001] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2771'. [ 382.440541][T16012] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2775'. [ 382.449806][T16012] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2775'. [ 382.459326][T16012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2775'. [ 382.842586][T16037] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2783'. [ 382.859862][T16037] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2783'. [ 382.879812][T16035] tap0: tun_chr_ioctl cmd 1074025677 [ 382.885303][T16035] tap0: linktype set to 768 [ 383.331116][T16049] [ 383.333493][T16049] ====================================================== [ 383.340516][T16049] WARNING: possible circular locking dependency detected [ 383.347556][T16049] syzkaller #0 Not tainted [ 383.351997][T16049] ------------------------------------------------------ [ 383.358998][T16049] syz.2.2787/16049 is trying to acquire lock: [ 383.365047][T16049] ffffffff8f0ad188 (crypto_alg_sem){++++}-{4:4}, at: crypto_alg_mod_lookup+0x211/0x5f0 [ 383.374694][T16049] [ 383.374694][T16049] but task is already holding lock: [ 383.382040][T16049] ffff8880323445e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0 [ 383.391340][T16049] [ 383.391340][T16049] which lock already depends on the new lock. [ 383.391340][T16049] [ 383.401728][T16049] [ 383.401728][T16049] the existing dependency chain (in reverse order) is: [ 383.410728][T16049] [ 383.410728][T16049] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 383.418447][T16049] lock_sock_nested+0x41/0x100 [ 383.423720][T16049] inet_shutdown+0x6a/0x390 [ 383.428739][T16049] nbd_mark_nsock_dead+0x2e9/0x560 [ 383.434361][T16049] recv_work+0x1c2e/0x1d40 [ 383.439279][T16049] process_scheduled_works+0xb5d/0x1860 [ 383.445328][T16049] worker_thread+0xa53/0xfc0 [ 383.450421][T16049] kthread+0x389/0x470 [ 383.454995][T16049] ret_from_fork+0x514/0xb70 [ 383.460088][T16049] ret_from_fork_asm+0x1a/0x30 [ 383.465356][T16049] [ 383.465356][T16049] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 383.472984][T16049] __mutex_lock+0x1a3/0x1550 [ 383.478082][T16049] nbd_queue_rq+0x37b/0x1100 [ 383.483177][T16049] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 383.489229][T16049] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 383.496066][T16049] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 383.502555][T16049] blk_mq_run_hw_queue+0x348/0x4f0 [ 383.508171][T16049] blk_mq_dispatch_list+0xd16/0xe10 [ 383.513880][T16049] blk_mq_flush_plug_list+0x48d/0x570 [ 383.519760][T16049] __blk_flush_plug+0x3ed/0x4d0 [ 383.525121][T16049] __submit_bio+0x28d/0x580 [ 383.530128][T16049] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 383.536268][T16049] block_read_full_folio+0x599/0x830 [ 383.542059][T16049] filemap_read_folio+0x137/0x3b0 [ 383.547589][T16049] do_read_cache_folio+0x358/0x590 [ 383.553209][T16049] read_part_sector+0xb6/0x2b0 [ 383.558479][T16049] adfspart_check_ICS+0xb1/0x960 [ 383.563924][T16049] bdev_disk_changed+0x817/0x1770 [ 383.569452][T16049] blkdev_get_whole+0x380/0x510 [ 383.574814][T16049] bdev_open+0x31e/0xd30 [ 383.579561][T16049] blkdev_open+0x470/0x610 [ 383.584474][T16049] do_dentry_open+0x785/0x14e0 [ 383.589740][T16049] vfs_open+0x3b/0x340 [ 383.594312][T16049] path_openat+0x2e08/0x3860 [ 383.599412][T16049] do_file_open+0x23e/0x4a0 [ 383.604421][T16049] do_sys_openat2+0x113/0x200 [ 383.609598][T16049] __x64_sys_openat+0x138/0x170 [ 383.614951][T16049] do_syscall_64+0x15f/0xf80 [ 383.620048][T16049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.626442][T16049] [ 383.626442][T16049] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 383.633636][T16049] __mutex_lock+0x1a3/0x1550 [ 383.638729][T16049] nbd_queue_rq+0xc6/0x1100 [ 383.643748][T16049] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 383.649802][T16049] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 383.656639][T16049] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 383.663125][T16049] blk_mq_run_hw_queue+0x348/0x4f0 [ 383.668741][T16049] blk_mq_dispatch_list+0xd16/0xe10 [ 383.674443][T16049] blk_mq_flush_plug_list+0x48d/0x570 [ 383.680323][T16049] __blk_flush_plug+0x3ed/0x4d0 [ 383.685678][T16049] __submit_bio+0x28d/0x580 [ 383.690680][T16049] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 383.696820][T16049] block_read_full_folio+0x599/0x830 [ 383.702608][T16049] filemap_read_folio+0x137/0x3b0 [ 383.708139][T16049] do_read_cache_folio+0x358/0x590 [ 383.713763][T16049] read_part_sector+0xb6/0x2b0 [ 383.719042][T16049] adfspart_check_ICS+0xb1/0x960 [ 383.724496][T16049] bdev_disk_changed+0x817/0x1770 [ 383.730029][T16049] blkdev_get_whole+0x380/0x510 [ 383.735385][T16049] bdev_open+0x31e/0xd30 [ 383.740131][T16049] blkdev_open+0x470/0x610 [ 383.745050][T16049] do_dentry_open+0x785/0x14e0 [ 383.750318][T16049] vfs_open+0x3b/0x340 [ 383.754894][T16049] path_openat+0x2e08/0x3860 [ 383.759990][T16049] do_file_open+0x23e/0x4a0 [ 383.764998][T16049] do_sys_openat2+0x113/0x200 [ 383.770176][T16049] __x64_sys_openat+0x138/0x170 [ 383.775529][T16049] do_syscall_64+0x15f/0xf80 [ 383.780626][T16049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.787021][T16049] [ 383.787021][T16049] -> #5 (set->srcu){.+.+}-{0:0}: [ 383.794127][T16049] __synchronize_srcu+0xca/0x300 [ 383.799572][T16049] elevator_switch+0x1e8/0x7a0 [ 383.804849][T16049] elevator_change+0x2cc/0x450 [ 383.810119][T16049] elevator_set_default+0x36c/0x430 [ 383.815822][T16049] blk_register_queue+0x3e9/0x4e0 [ 383.821349][T16049] __add_disk+0x677/0xd50 [ 383.826184][T16049] add_disk_fwnode+0xfb/0x480 [ 383.831362][T16049] nbd_dev_add+0x72c/0xb50 [ 383.836282][T16049] nbd_init+0x168/0x1f0 [ 383.840936][T16049] do_one_initcall+0x250/0x870 [ 383.846204][T16049] do_initcall_level+0x104/0x190 [ 383.851648][T16049] do_initcalls+0x59/0xa0 [ 383.856480][T16049] kernel_init_freeable+0x2a6/0x3e0 [ 383.862184][T16049] kernel_init+0x1d/0x1d0 [ 383.867019][T16049] ret_from_fork+0x514/0xb70 [ 383.872114][T16049] ret_from_fork_asm+0x1a/0x30 [ 383.877385][T16049] [ 383.877385][T16049] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 383.885188][T16049] __mutex_lock+0x1a3/0x1550 [ 383.890281][T16049] elevator_change+0x1b3/0x450 [ 383.895555][T16049] elevator_set_none+0xb5/0x140 [ 383.900910][T16049] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 383.907221][T16049] nbd_start_device+0x17f/0xb10 [ 383.912575][T16049] nbd_genl_connect+0x165b/0x1cf0 [ 383.918103][T16049] genl_family_rcv_msg_doit+0x22a/0x330 [ 383.924155][T16049] genl_rcv_msg+0x61c/0x7a0 [ 383.929165][T16049] netlink_rcv_skb+0x232/0x4b0 [ 383.934429][T16049] genl_rcv+0x28/0x40 [ 383.938916][T16049] netlink_unicast+0x75c/0x8e0 [ 383.944185][T16049] netlink_sendmsg+0x813/0xb40 [ 383.949454][T16049] ____sys_sendmsg+0x972/0x9f0 [ 383.954723][T16049] ___sys_sendmsg+0x2a5/0x360 [ 383.959903][T16049] __x64_sys_sendmsg+0x1bd/0x2a0 [ 383.965341][T16049] do_syscall_64+0x15f/0xf80 [ 383.970439][T16049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.976838][T16049] [ 383.976838][T16049] -> #3 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 383.985422][T16049] blk_alloc_queue+0x546/0x680 [ 383.990690][T16049] __blk_mq_alloc_disk+0x197/0x390 [ 383.996304][T16049] nbd_dev_add+0x499/0xb50 [ 384.001222][T16049] nbd_init+0x168/0x1f0 [ 384.005877][T16049] do_one_initcall+0x250/0x870 [ 384.011145][T16049] do_initcall_level+0x104/0x190 [ 384.016585][T16049] do_initcalls+0x59/0xa0 [ 384.021423][T16049] kernel_init_freeable+0x2a6/0x3e0 [ 384.027125][T16049] kernel_init+0x1d/0x1d0 [ 384.031959][T16049] ret_from_fork+0x514/0xb70 [ 384.037053][T16049] ret_from_fork_asm+0x1a/0x30 [ 384.042319][T16049] [ 384.042319][T16049] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 384.049509][T16049] fs_reclaim_acquire+0x71/0x100 [ 384.054954][T16049] __kmalloc_cache_noprof+0x40/0x660 [ 384.060746][T16049] cryptomgr_notify+0x85/0x930 [ 384.066021][T16049] notifier_call_chain+0x1ad/0x3d0 [ 384.071639][T16049] blocking_notifier_call_chain+0x6a/0x90 [ 384.077863][T16049] crypto_alg_mod_lookup+0x3b1/0x5f0 [ 384.083652][T16049] crypto_alloc_tfm_node+0x13e/0x3f0 [ 384.089441][T16049] crypto_alloc_sync_skcipher+0x39/0xd0 [ 384.095491][T16049] rxkad_init+0x20/0xe0 [ 384.100150][T16049] rxrpc_init_security+0x72/0x120 [ 384.105678][T16049] af_rxrpc_init+0x13d/0x2e0 [ 384.110767][T16049] do_one_initcall+0x250/0x870 [ 384.116034][T16049] do_initcall_level+0x104/0x190 [ 384.121474][T16049] do_initcalls+0x59/0xa0 [ 384.126308][T16049] kernel_init_freeable+0x2a6/0x3e0 [ 384.132012][T16049] kernel_init+0x1d/0x1d0 [ 384.136846][T16049] ret_from_fork+0x514/0xb70 [ 384.141940][T16049] ret_from_fork_asm+0x1a/0x30 [ 384.147210][T16049] [ 384.147210][T16049] -> #1 ((crypto_chain).rwsem){++++}-{4:4}: [ 384.155282][T16049] down_read+0x47/0x2e0 [ 384.159958][T16049] blocking_notifier_call_chain+0x54/0x90 [ 384.166195][T16049] __crypto_register_alg+0x32b/0x3c0 [ 384.171990][T16049] crypto_register_alg+0x447/0x810 [ 384.177607][T16049] do_one_initcall+0x250/0x870 [ 384.182878][T16049] do_initcall_level+0x104/0x190 [ 384.188321][T16049] do_initcalls+0x59/0xa0 [ 384.193153][T16049] kernel_init_freeable+0x2a6/0x3e0 [ 384.198865][T16049] kernel_init+0x1d/0x1d0 [ 384.203714][T16049] ret_from_fork+0x514/0xb70 [ 384.208821][T16049] ret_from_fork_asm+0x1a/0x30 [ 384.214096][T16049] [ 384.214096][T16049] -> #0 (crypto_alg_sem){++++}-{4:4}: [ 384.221647][T16049] __lock_acquire+0x15a5/0x2cf0 [ 384.227024][T16049] lock_acquire+0x106/0x350 [ 384.232035][T16049] down_write+0x96/0x200 [ 384.236782][T16049] crypto_alg_mod_lookup+0x211/0x5f0 [ 384.242572][T16049] crypto_alloc_tfm_node+0x13e/0x3f0 [ 384.248359][T16049] tls_set_sw_offload+0xa33/0x1780 [ 384.253978][T16049] tls_setsockopt+0xef2/0x15c0 [ 384.259251][T16049] do_sock_setsockopt+0x17c/0x1b0 [ 384.264791][T16049] __x64_sys_setsockopt+0x13d/0x1b0 [ 384.270675][T16049] do_syscall_64+0x15f/0xf80 [ 384.275782][T16049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.282177][T16049] [ 384.282177][T16049] other info that might help us debug this: [ 384.282177][T16049] [ 384.292387][T16049] Chain exists of: [ 384.292387][T16049] crypto_alg_sem --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 384.292387][T16049] [ 384.305401][T16049] Possible unsafe locking scenario: [ 384.305401][T16049] [ 384.312833][T16049] CPU0 CPU1 [ 384.318181][T16049] ---- ---- [ 384.323526][T16049] lock(sk_lock-AF_INET6); [ 384.328009][T16049] lock(&nsock->tx_lock); [ 384.334927][T16049] lock(sk_lock-AF_INET6); [ 384.341934][T16049] lock(crypto_alg_sem); [ 384.346251][T16049] [ 384.346251][T16049] *** DEADLOCK *** [ 384.346251][T16049] [ 384.354383][T16049] 1 lock held by syz.2.2787/16049: [ 384.359476][T16049] #0: ffff8880323445e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0 [ 384.369207][T16049] [ 384.369207][T16049] stack backtrace: [ 384.375088][T16049] CPU: 1 UID: 0 PID: 16049 Comm: syz.2.2787 Not tainted syzkaller #0 PREEMPT(full) [ 384.375103][T16049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 384.375117][T16049] Call Trace: [ 384.375126][T16049] [ 384.375133][T16049] dump_stack_lvl+0xe8/0x150 [ 384.375149][T16049] print_circular_bug+0x2e1/0x300 [ 384.375166][T16049] check_noncircular+0x12e/0x150 [ 384.375184][T16049] __lock_acquire+0x15a5/0x2cf0 [ 384.375203][T16049] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 384.375217][T16049] lock_acquire+0x106/0x350 [ 384.375229][T16049] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 384.375245][T16049] down_write+0x96/0x200 [ 384.375257][T16049] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 384.375269][T16049] ? __pfx_down_write+0x10/0x10 [ 384.375281][T16049] ? crypto_larval_alloc+0x1bf/0x290 [ 384.375294][T16049] crypto_alg_mod_lookup+0x211/0x5f0 [ 384.375308][T16049] crypto_alloc_tfm_node+0x13e/0x3f0 [ 384.375322][T16049] ? timer_init_key+0x161/0x2c0 [ 384.375340][T16049] tls_set_sw_offload+0xa33/0x1780 [ 384.375362][T16049] tls_setsockopt+0xef2/0x15c0 [ 384.375377][T16049] ? __pfx_tls_setsockopt+0x10/0x10 [ 384.375393][T16049] ? __fget_files+0x2a/0x420 [ 384.375405][T16049] ? aa_sock_opt_perm+0xff/0x1a0 [ 384.375421][T16049] ? sock_common_setsockopt+0x36/0xc0 [ 384.375435][T16049] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 384.375450][T16049] do_sock_setsockopt+0x17c/0x1b0 [ 384.375468][T16049] __x64_sys_setsockopt+0x13d/0x1b0 [ 384.375485][T16049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.375497][T16049] do_syscall_64+0x15f/0xf80 [ 384.375513][T16049] ? trace_irq_disable+0x3b/0x140 [ 384.375529][T16049] ? clear_bhb_loop+0x40/0x90 [ 384.375542][T16049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.375554][T16049] RIP: 0033:0x7f0faf79ce59 [ 384.375566][T16049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.375576][T16049] RSP: 002b:00007f0fb05be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 384.375589][T16049] RAX: ffffffffffffffda RBX: 00007f0fafa15fa0 RCX: 00007f0faf79ce59 [ 384.375602][T16049] RDX: 0000000000000001 RSI: 000000000000011a RDI: 000000000000000b [ 384.375610][T16049] RBP: 00007f0faf832d6f R08: 0000000000000028 R09: 0000000000000000 [ 384.375617][T16049] R10: 0000200000000b00 R11: 0000000000000246 R12: 0000000000000000 [ 384.375625][T16049] R13: 00007f0fafa16038 R14: 00007f0fafa15fa0 R15: 00007ffe08069448 [ 384.375639][T16049] [ 384.677642][ T12] net_ratelimit: 7 callbacks suppressed [ 384.677668][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.691331][T10492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.699464][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.707550][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.715638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.729292][T10497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.737536][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.874784][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.796676][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.805150][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.717074][ T138] net_ratelimit: 13 callbacks suppressed [ 389.717093][ T138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.959167][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.967788][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.108894][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.117290][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.476620][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.990136][T10497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.998645][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.586506][ T138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.038289][T10497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog